bedbbfe4415a1212b2330be1715a2ec804f359e2fbdd0c82ea7b2ad57d7bedd2

Analysis

user interaction
yes
max time kernel
148s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 13:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ebe5eeee-ede1-4d7c-af68-4a648ac12e51.html
Size 85KB
Sample261023-qshx5sysfx
SHA256 bedbbfe4415a1212b2330be1715a2ec804f359e2fbdd0c82ea7b2ad57d7bedd2
MD5 20407028045a163c5cd70fbf6c3f4a94
SHA1 dacfea65a5c9e43591d63ced94b9e594da43fc7d
SHA512 da479e103c23793354cbe4aeaf7ecc7c2dc186fb782ea3619e755685cb18df0e1c4607574f98763fd4f3fa734dc888260d1838e9102b5bade651fb3a5cb86000
SSDEEP 1536:nWVTXihwlVih+ih2Rih6AM4erlojlDQkih1M7B8ih98JNg7dihPiih/FCXCXYR9l:n2l5TA9UmR8oBKNg7WMYfnfuhoQQC
TLSH
T17D83E930F013DD6F6C431CA935BCFE39548FD12ACA82E899A1DED564178B8B05B936D8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1068	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{414D6FBB-1E04-4C63-9811-22E6179D26C4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2520	msedge.exe
2520	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 4160	4936	msedge.exe	86
PID 4936 wrote to memory of 1068	4936	msedge.exe	87
PID 4936 wrote to memory of 1600	4936	msedge.exe	88
PID 4936 wrote to memory of 1600	4936	msedge.exe	88
PID 4936 wrote to memory of 1600	4936	msedge.exe	88
PID 4936 wrote to memory of 4960	4936	msedge.exe	90
PID 4936 wrote to memory of 4960	4936	msedge.exe	90
PID 4936 wrote to memory of 3992	4936	msedge.exe	91
PID 4936 wrote to memory of 3992	4936	msedge.exe	91
PID 4936 wrote to memory of 3992	4936	msedge.exe	91
PID 4936 wrote to memory of 1244	4936	msedge.exe	92
PID 4936 wrote to memory of 1244	4936	msedge.exe	92
PID 4936 wrote to memory of 1244	4936	msedge.exe	92
PID 4936 wrote to memory of 4476	4936	msedge.exe	93
PID 4936 wrote to memory of 4476	4936	msedge.exe	93
PID 4936 wrote to memory of 4476	4936	msedge.exe	93
PID 4936 wrote to memory of 5096	4936	msedge.exe	94
PID 4936 wrote to memory of 5096	4936	msedge.exe	94
PID 4936 wrote to memory of 5096	4936	msedge.exe	94
PID 4936 wrote to memory of 1940	4936	msedge.exe	99
PID 4936 wrote to memory of 1940	4936	msedge.exe	99
PID 4936 wrote to memory of 4884	4936	msedge.exe	98
PID 4936 wrote to memory of 4884	4936	msedge.exe	98
PID 4936 wrote to memory of 548	4936	msedge.exe	103
PID 4936 wrote to memory of 4628	4936	msedge.exe	110
PID 4936 wrote to memory of 3872	4936	msedge.exe	111
PID 4936 wrote to memory of 1808	4936	msedge.exe	112
PID 4936 wrote to memory of 4412	4936	msedge.exe	114
PID 4936 wrote to memory of 4412	4936	msedge.exe	114
PID 4936 wrote to memory of 2520	4936	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ebe5eeee-ede1-4d7c-af68-4a648ac12e51.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffc0dd6c188,0x7ffc0dd6c194,0x7ffc0dd6c1a0
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,12327279740689549243,17753008153929377567,524288 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,11756512352374648144,2447842089249370851,262144 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2396,i,10282535378874282555,6491506913681853680,524288 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,1920128058507629838,11017635872432725337,2097152 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,5843786007736657439,8995764051217970862,2097152 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,2695815981073809427,9951399798776511727,2097152 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,3550746815774662253,15987458988885408746,2097152 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,9367002342860227479,5903246686821606911,524288 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,3607125901979792281,8643026270525687424,524288 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,15389141043182374431,7576081950697867773,524288 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,15389141043182374431,7576081950697867773,524288 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,18185404185922275522,11683954089483603070,524288 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,1957010924603318312,10173519215502458955,524288 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:8
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,6147179658193278449,9021870871703419078,524288 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:8
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,13729451400086428759,15742404202128717575,524288 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=752,i,2975171899678071353,6952910173739917844,262144 --field-trial-handle=2344,i,16789184000687431254,11036362182566560963,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2520

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4472

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

18b8c640-ce28-4cfa-b657-7084b80617c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\18b8c640-ce28-4cfa-b657-7084b80617c4.tmp
Size 8KB
SHA256 4561da0854881e3f867801d1c823678d23ec941e26257c80fef9e20b32c00cd7
MD5 fe6f1eae77fc41b175c1dce1760492da
SHA1 b2f3db6355b2bb087b7e77e4cd46b202b3de2669
SHA512 cb67322fc8775811468b6b4e5b3e26f83cc054acb03f8b80f58000db7721036742fadc8a63bfb70ec5e739893905ff84c772b91de73d312aaac872c1a7870338
SSDEEP 192:oONc6wlDVQmiUyzEW4X58gZXjzorPJjWXm7R+2mpve1qamHU6:oONc6kzhW4X58Ef8PJjWXi+2moIHU6
TLSH
T1A8121735E4B8AC2BADE2E545B08735039FE94117EA897F90D6EC1B1C01DF2AC534AC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1b4ebaaf-e8fe-477d-a7c2-c125f64da376.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1b4ebaaf-e8fe-477d-a7c2-c125f64da376.tmp
Size 21KB
SHA256 b9620dae6bd3ff036d8fa0a83923224e544b610183b16fcc6afed0ce663ad8a9
MD5 adaac9c74af75654586f1a908e169966
SHA1 c7aa383249f7be5705f6e09ef964f4ea628770f3
SHA512 9297b245cc74f7193430c0183a8a6a4d64748df5b3fe08ef5392c3be0bf2b87db478674dcef916c49ff1558e1968e7ccf574bf2838157a2c9394e911cebcaa49
SSDEEP 384:liFzQkUSv9zsNj8TUNTUlIlmesZC5KHX58Ef8PJjWXi+2mkIH2I7uiIIla:sFdFSwgOMMaAildIH57uiLQ
TLSH
T15DA26B3298A8AD3B9EB7AA51F54A3243DFB44157C6D5ABA0D7DC9E1C00CB1DC134BE12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2dd0d5af-d187-449f-9992-ed4e8ad7f370.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2dd0d5af-d187-449f-9992-ed4e8ad7f370.tmp
Size 8KB
SHA256 bee74aeb23fadf2168bbf379d72e52a90557c7a836b5b00a91e31cf2a98f634d
MD5 2017fd4906f31ffb1249e5698472db4b
SHA1 51983221bd5505bbbc9fd272aadec78e79b2b76a
SHA512 7a9db07e47bf919224b0af02fa970cfe0d628575269525ec9b65972f6860ec3bdec4d55070b7e3aca6b464748cfe2c0e4f301c9ff82ae37e710ceb5652271b68
SSDEEP 192:1ONb6wlDgQmiUy8EW4X58gZXjzorPJjADlbRU6:1ONb6kgoW4X58Ef8PJj0NU6
TLSH
T1B3020935E9787C7B9EF3AE09B48627139FE4112BE6952F44C6E80B2D00D729C1306D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3efd7f07-40c0-4f59-a09b-97f3492d88bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3efd7f07-40c0-4f59-a09b-97f3492d88bc.tmp
Size 18KB
SHA256 c1a786dbdc49c0b8a127cf7c1aed9c17b2e35000a250773052c9d2191c006585
MD5 6f130c66b45b5779ec672ca988705070
SHA1 8bb26738c30dad5b8ca725cad489d696fdb19d2f
SHA512 83ea1d0c3b61a9598df7eb86c371dda69cd9f37bc542947f678f61f06eebc2de6a0a4fbe76bcdbda589020ef102b76476224340dd2b6a3d521bbd5e04ba2c2c4
SSDEEP 384:oQkUSv0sNRnesZC5KHX58Ef8PJjWXi+2mHIH2I7uiIIla:g00MMaAilQIH57uiLQ
TLSH
T112826D35A8B8AD3B9AA3E551F14A36439FB48117D6D86F90C6DC6F1C01CE2D8134BA17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

07d5e999-00b0-47e7-9796-0998b14f544d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\07d5e999-00b0-47e7-9796-0998b14f544d.tmp
Size 10KB
SHA256 604a534d35adc5f7660948697332651bd00adbd10d5796e1615e130d3271c90b
MD5 77e839461739b9d89079e6383f647b87
SHA1 8701cd2bf9678cfd5b8fdb36adc30dedb8afbd02
SHA512 11af06f43b57b5aa4cc50b37c0dfd6104c2788374b9d25d542650d34ffb818878a79c1f2f0b60ed86a9796f1fa8a6cffcec948ea36ce5d279bcb67ac0bea4bea
SSDEEP 192:sxZXROWX/fbs+UdcIdpHMHW6+WNGYrk2n38Ig5rOJ:sxZXHX/fbshFsHbGVfs
TLSH
T1A522B6526E78A97B8CC7E21AFB15BF53E6F9503251D01E48AAFCC61C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

380b3bd9-c721-4adf-b51c-82f6099f0736.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\380b3bd9-c721-4adf-b51c-82f6099f0736.tmp
Size 27KB
SHA256 c3044ed0452d370a3084791cbcce83b8b9a155704b19796e6cca71760cf823a3
MD5 848cc978ea55350774c68792360db222
SHA1 6692c7d7a6070780db8b8a6ed801d62c7cc81d69
SHA512 2a23663ed7d1a267e1a6f9eb023dc39c99c0f5b182e5bc1a3fbaceba439659f1121ea40fbc159ce71f8d9172a3acb6f1b48471677cb39f185657162b16265aa5
SSDEEP 768:bwy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb7roR2P:bwy4J/DWvbtBhu1jajiLm0bIAP
TLSH
T13AC20B3B644CCA7E4FC00A9DED5E6FD73E9802C79A948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6d98f113-6157-4392-b3b4-f543fbfdf570.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6d98f113-6157-4392-b3b4-f543fbfdf570.tmp
Size 10KB
SHA256 1ed5490d24ca2899f6d9a53dcbd2824c6061da8cdf013ad0465b78587b613c8b
MD5 cb6395b1082a6910cae53e7e8a7f146e
SHA1 b7c8967a4d8ef4e12be1302000012be1202bc852
SHA512 54300586a1ed3638681689fe07781717226ce8106571396eacfa6d542580831a5691c794df1b6c3fe1f6f22173949b829d6950cec96f902346e5d5c12b779aac
SSDEEP 192:sxZXROWX/fbs+UdcIdpdMHW6+WNGYrV4u8Ig5rOJ:sxZXHX/fbshFqHbG3s
TLSH
T13E22A5526E38A97B8CC7D61AFB15BF43E6F9503251D41E48AAFCC61C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b8125cc-f10e-428d-b0b2-2d25e3addee1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7b8125cc-f10e-428d-b0b2-2d25e3addee1.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 6771e86bce8cab4807057a5394b684e07f829d0b6ad2f9a65b0a21e0685b4b7c
MD5 d8f797cece9dae3c37fefb33cc2585b8
SHA1 504406e3f48283aee2a77917c0b8aeaed2ba2c6b
SHA512 cf6eccbfba6ccaf5455e280537cf1ac1c9676bfbf9acba95f2e5b5ce93633dbfe471aa9163792bd2a6f708fac3706b95cbfa23dc8def232498a45c3786e56fac
TLSH
T15A5188B07FA883A5D7A7FD70B1E1138B36F7697151436EA60694C5BB4B073344128C74
MD5 SHA1 SHA512 TLSH

Submit Download

56209fec-652a-4148-8b55-a901f7f5ab80.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\56209fec-652a-4148-8b55-a901f7f5ab80.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0ea1e2e2-1303-43cb-9885-9db65eeab1e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0ea1e2e2-1303-43cb-9885-9db65eeab1e9.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

0f768a67-6914-4faa-b1ab-47952de256ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0f768a67-6914-4faa-b1ab-47952de256ec.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c22a15ec-1714-4e1d-921d-8bed492bc073.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c22a15ec-1714-4e1d-921d-8bed492bc073.tmp
Size 733B
SHA256 42e296417ec2673f2f1a23a2629475d57912f6e50c626bb8822f8f03e76b4183
MD5 2317dde5b941343a69b065f9463b0928
SHA1 170d85e3876c4f101e4e6b4cda60d26ffab22d26
SHA512 fa5a640aafdf388e276f77f0e3cfc3c247a59e5217795f3f3f590e92cc5711c2a82e9de590faed85397ab76bbc9074b417cc93392fad48bc23f5873849bebe27
TLSH
T1640190B3C3D4996E8A0096F0AA189F17CE2D0516431C7C1AC9D4EE2B93E3475D00199B
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 5ade8248d87c5e58e6966156d6eafd64b18381bf743dcbb05848ceaffedadf40
MD5 c30796109d3d81e57bcfd63549907379
SHA1 60cdb53cc8cf65fec7ddb083bf0aae166f9d9b88
SHA512 0ca2c55bedd238ba9acd2901179deed07ff5ca5b04b5acbaed66920898b445afe4b679c00fd589a82fefc269bc7cda8d584e168fb317dccb7ddeacbaa446aa38
SSDEEP 96:KIDCKs0+KsgKtu+i+VNqKGk6iS8KDKeHmjX9T:E5LXw9vnHmjX9T
TLSH
T1FDD1065570BB061538BD264C81B5CB2F524231737119EA3B7F7D84928E6BE085DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba76e4f5-763c-48bf-aa66-ede67a0b23a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ba76e4f5-763c-48bf-aa66-ede67a0b23a5.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d38c74d4-9f33-4ec3-8731-1c6756402c35.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d38c74d4-9f33-4ec3-8731-1c6756402c35.tmp
Size 9KB
SHA256 65ae4d8d9d391568bf69ec14747401549dfd1b190c63cf08ec4c6dee5ef03568
MD5 ad0556c473ef7c0ff31606125a955e40
SHA1 81ca9b37ab63cd8d934cbbf32bd9930a643ec7f8
SHA512 41668bdd0c98e1bdcf094e07ab4fdcc1b06f16b55d794532cde6caf7f2c8618d8077346d70f3e1dff5412cc346f11f4188ce4d59449409b79451596cb9745520
SSDEEP 192:sxZXROWX/fbsSUdcIdpdMHW6+WNGYrv0u8Ig5rcJ:sxZXHX/fbs9FqHbGT+
TLSH
T1D622A6526E38A97B8CC7D21AFB19BF53D6F9503291D41E48AAFC861C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

daafabb1-48f5-435e-9903-89f927fcf41a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\daafabb1-48f5-435e-9903-89f927fcf41a.tmp
Size 9KB
SHA256 acb30621a2021c0e89444bdc7b6983d3841a3b9de06cb20cc29406057fcad5a7
MD5 2474d46d5c0b96fe61a08258756ac772
SHA1 a24c5927f475defdd4fdb4e3c1a5f1c281cd2b9e
SHA512 747d86c15a1e4962f2a166525884f6cedfce2956a906308d258835228d28390090a67b115bd30ed1a5c592978fbed04a807f756ead99de11b549936378cb0092
SSDEEP 192:sxZXROWX/fbsfUdcIdpdMHW6+WNGYrv0u8IgrJ:sxZXHX/fbscFqHbGT9
TLSH
T10822A5526E38A97B8CC7D21AFB19BF53D6F9503261D41E58AAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4b70863a-5dd1-4c4f-ac8d-b585d1a68513.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4b70863a-5dd1-4c4f-ac8d-b585d1a68513.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a2a3ea3a-c86d-40b9-a815-50ff3b447fde.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a2a3ea3a-c86d-40b9-a815-50ff3b447fde.tmp
Size 18KB
SHA256 1a3f0908ce00f072618df01c3ccab19499daa6ee7c18c0496f37446f5f16c2bb
MD5 8a6a6bc83ccd11ce4800abb069cc5c17
SHA1 2dbe7f61603ed97af0e1a8636a0a62511e384fad
SHA512 d2a49f158028992c7cd526f53021742879c2d7377d2f779db67fe1c7d03d6f7a18f853771f4aafa0b830b061c67702373d3c2fba847fd986e31d75d5a50b3f7e
SSDEEP 384:SQkUSv0sNRmesZC5KHX58Ef8PJjWXi+2mHIH2I7uiIIla:K0PMMaAilQIH57uiLQ
TLSH
T15D826D35A8B8AD3B9AA3E551F14A36439FB48117D6D86F90C6DC6F1C01CE2DC234BA17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a831175-5d4f-4b9c-8d72-7a7e1f3665de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6a831175-5d4f-4b9c-8d72-7a7e1f3665de.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4c9b7b030f7198619569bacce3ffdbdf1d738be20e8c2ca92ab3a0148b7c088a
MD5 e595077dce92af911cd7bbaabc169f24
SHA1 20bf82207b94ca7070a6aecb27833de3872fb84c
SHA512 2e335d188d9b918aa150add74de82b2ab0b8bf2a58a9acb92eca6cee349893446c879f7358730650dc1a83443bc652d353f0c4e5209f562f7df27fd90c67ef4d
TLSH
T1F3410B58B7E91148B3B76E1AAFF2A86D44BFBD372E06D55E10110E4E0A76B40D861733
MD5 SHA1 SHA512 TLSH

Submit Download