f18290d86a44edbfc33da273611188923517963a1aa28185510774ceb27eb4d9

Analysis

user interaction
yes
max time kernel
148s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 15:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
identifier.html
Size 1.3MB
Sample261023-sttr5ss18k
SHA256 f18290d86a44edbfc33da273611188923517963a1aa28185510774ceb27eb4d9
MD5 870d136b2a1aeb85dc666316be862408
SHA1 6a8944d5f395e81eccbeec790c0158e568168843
SHA512 8f3e30cd29deaa0b59947555df2e4ca26d3c25a23252538ea459d2724035fa7531062fde8f6befd3f524a0182f9e5bf4f0103f86b887cfc7743c0f208808841d
SSDEEP 6144:NC0q3j6/8+Oq3j6/8+Iq3j6/8+tq3j6/8+eq3j6/8+2I0QISNt1/Zvb0SRqo6/8E:NC2Izvb0SXjTFp2q+5l62MGb/j
TLSH
T1E055A5DF9231603FF933A8B6EAD4DD09F2984DD1E60A05B6BC71A91343EB6A61751330
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3736	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{B26DF72F-1B68-48D1-8DE2-AA13B92C634A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe
3080	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 3080 wrote to memory of 4952	3080	msedge.exe	86
PID 3080 wrote to memory of 3736	3080	msedge.exe	87
PID 3080 wrote to memory of 4532	3080	msedge.exe	88
PID 3080 wrote to memory of 4532	3080	msedge.exe	88
PID 3080 wrote to memory of 4532	3080	msedge.exe	88
PID 3080 wrote to memory of 1048	3080	msedge.exe	89
PID 3080 wrote to memory of 1048	3080	msedge.exe	89
PID 3080 wrote to memory of 2580	3080	msedge.exe	90
PID 3080 wrote to memory of 2580	3080	msedge.exe	90
PID 3080 wrote to memory of 2580	3080	msedge.exe	90
PID 3080 wrote to memory of 2936	3080	msedge.exe	91
PID 3080 wrote to memory of 2936	3080	msedge.exe	91
PID 3080 wrote to memory of 2936	3080	msedge.exe	91
PID 3080 wrote to memory of 2744	3080	msedge.exe	93
PID 3080 wrote to memory of 2744	3080	msedge.exe	93
PID 3080 wrote to memory of 2744	3080	msedge.exe	93
PID 3080 wrote to memory of 1388	3080	msedge.exe	94
PID 3080 wrote to memory of 1388	3080	msedge.exe	94
PID 3080 wrote to memory of 1388	3080	msedge.exe	94
PID 3080 wrote to memory of 3088	3080	msedge.exe	98
PID 3080 wrote to memory of 4300	3080	msedge.exe	99
PID 3080 wrote to memory of 3088	3080	msedge.exe	98
PID 3080 wrote to memory of 4300	3080	msedge.exe	99
PID 3080 wrote to memory of 2012	3080	msedge.exe	101
PID 3080 wrote to memory of 4376	3080	msedge.exe	111
PID 3080 wrote to memory of 548	3080	msedge.exe	112
PID 3080 wrote to memory of 1888	3080	msedge.exe	113
PID 3080 wrote to memory of 4972	3080	msedge.exe	115
PID 3080 wrote to memory of 4972	3080	msedge.exe	115
PID 3080 wrote to memory of 4352	3080	msedge.exe	116
PID 3080 wrote to memory of 4352	3080	msedge.exe	116
PID 3080 wrote to memory of 3032	3080	msedge.exe	117
PID 3080 wrote to memory of 3032	3080	msedge.exe	117
PID 3080 wrote to memory of 4412	3080	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\identifier.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x2f0,0x7ffe7284c188,0x7ffe7284c194,0x7ffe7284c1a0
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,16729604337986201163,1549425107824223959,524288 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,14329037205557431883,14904060410300834956,262144 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:2
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,6570527147797899723,5071026574322833749,524288 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=2988 /prefetch:8
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,13178894485289622625,9111425029502288621,2097152 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,13710987452017959032,18156888687833353828,2097152 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4108,i,15596863104576368659,2335200632343533159,2097152 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4144,i,15591582422749326057,14963510495931653080,2097152 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,1170522534233216307,639021051984135525,524288 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,7036411167993507209,8833207075080470284,524288 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,12398947302854377848,10550385822050123522,524288 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,12398947302854377848,10550385822050123522,524288 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,10720871822977448238,16277853631934522631,524288 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:8
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,7811489586151957666,4227365931408706942,524288 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,676359742199938991,16556722630878630421,524288 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,11919529810066728022,13778474477896559333,524288 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,13012184473470867984,13089141274605787953,524288 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,17235733082582066220,11496187017820620418,524288 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6252,i,10899166305730323012,7715899898644767573,262144 --field-trial-handle=2896,i,2675052339299269617,6379938803331397240,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4412

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0f412d75-63bc-43a9-bebb-cdf73479f892.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0f412d75-63bc-43a9-bebb-cdf73479f892.tmp
Size 8KB
SHA256 abe4e0da73a633c2801b2e65f742e32584b5859efe02ef113dee014fac138005
MD5 1d1db846a29f67e3b3e644122fe4685c
SHA1 8733d5fb0a1897c7a31397471c103d17c8dac4e8
SHA512 4da99b443d1fcc88e19a634b28ca1061fe847f920c2fd44de4de1ed767ce1d8453980b69e6e0b9d6561d35a281d42b406897d224d937dbdeb4dbc7dc0ec5d5fc
SSDEEP 192:aON86IE7QmiUykpTPuIGm5Njzor3EmNC7sydU6:aON86DtrPuIGm5B83gsuU6
TLSH
T13702EB35AC78BC7B9FF3AD49F4872B23AEA5112BD5952F84D9E81B1D00D725C1306923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15bd904f-44d1-4e27-9471-ca90cc224f8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\15bd904f-44d1-4e27-9471-ca90cc224f8c.tmp
Size 18KB
SHA256 b6d4f19f98b9075051c3fe3963063e9872182324b69296a3e0df0cfe3c6bbd27
MD5 3be06a946a9557fe36087b85dc58af37
SHA1 4c84d1ff7259492e9e3abb36956a015afd089951
SHA512 316cb207ba625365800a7ba90f872513c42ed282fa42f1e04e6ea60238bd4bba0b17507230a6b2a4fd36406c4f8b5a45d1ca6fb08c404354589499dca47ab462
SSDEEP 384:LQkUSv0sNYrz+1qUvzIGm5B838RcX5iM2IuIIl5:F0+X7GLR05iM5uLr
TLSH
T134828D369CB87C2B9FA3A551F1493A13DEB48127D6D81F94D6DD2B2C01CE29C234BA17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

386d10c5-8323-4dbb-afed-bd0494df822f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\386d10c5-8323-4dbb-afed-bd0494df822f.tmp
Size 21KB
SHA256 c2f07356c38848f7ee4776a2cdad7481659eb3c64ad72cdf26a2eaa0fb0c9d00
MD5 954e352ccf1ed837e31530baffe0df55
SHA1 93b9890920c5fe79c679b689c75f80d406ebb461
SHA512 7a196f27ed5f118cd0744cb0e37d6e7e8e7684246bb29a9d17fcdf32e4fb0a99557e610a49d54bd6e1cc1d14ad32711f595610f543480954916bc821c9b9ac38
SSDEEP 384:UiFzQkUSvNzsNI8TUNTUlIlOz+1qUvzIGm5B838RcX6BiM2IuIIl5:vFd1hwgjX7GLR06BiM5uLr
TLSH
T162A26C339CE8AC3B9EA3AA41F5493613DEB48167C5D59B94E7CC6A1C00CB1DC234BE16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

05d6d484-867a-4e6f-89d6-6d0aea4cdb6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\05d6d484-867a-4e6f-89d6-6d0aea4cdb6e.tmp
Size 10KB
SHA256 832755b7a7333a2b11e410546acf3833d1321db291943f9528d18a6e2421accd
MD5 e1f4695200f85bc1ab6a6c96fe7fe672
SHA1 d1c6c6759947dc9271953f7f56831a42cd475764
SHA512 e8571050a68a6b64fd2fe0f56a748b8106ae670d6afa276c46730ffe5a018495bf80eab52a73796ab5f49e6ab144e26877381c03ba0bff6969afe40a999e36c8
SSDEEP 192:sxZBRWWt/fFsYSea5IdpHpHW6+WNGYapSY/lmIg5XJ:sxZB7t/fFsK3JHbG8n
TLSH
T11A22C9526E68A97B8CC7D20DBB55BF53E6FA503291E11E48BAFC861C05E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29feae0f-ec4a-4d1f-8454-ed00f43f2e84.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\29feae0f-ec4a-4d1f-8454-ed00f43f2e84.tmp
Size 10KB
SHA256 39bd71e50cd92d3e59fcf969657ba66255bbe2c720cfa39b760080066349c048
MD5 98e977a75c7e0174d52f5355af89c586
SHA1 892b340373e15cd04df4e76073c21fa43e27f5ac
SHA512 bf1b592abcb1d14b08178c80f6567880e45acc9d9610d93d9c515317d2859602bcb0a02f41d26676192edc92c7f4d6212d21bb2896b93a4631fb6be7a3e8bd9f
SSDEEP 192:sxZBRWWt/fFsYSea5IdpdpHW6+WNGYapwH/lmIg5XJ:sxZB7t/fFsK3zHbGzn
TLSH
T1F422B9526E68A97B8CC7D20DBB557F53E6FA503251E11E48B6FC861C05E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 2d3e361d30dac7469647b65c5f6591087236043aec3134f521da79fb4acfc239
MD5 5e858ce05e9b85c60d3924c94d3f3351
SHA1 a90a7fd270199f5efb3344c94fd1445d7986310d
SHA512 ed596c27759c5210e928c26a4d0f9a0475a1bcd519373890fad041202ad3ebd59b76f65980bc133e9089690f9859333bb8f49e151232cef362a98792f0f90b3f
TLSH
T142E026C524CBC22EA25C68CF036C534CC3C0261F92C16D9E6708C5857046281EA86F90
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 65d55e54b5c74db75acc6d74bf7a34387bd358ac02c716c11bb6e1cee81d470a
MD5 e3aa483bce2ade1446a9d646e1319eed
SHA1 066c1ffe98aa0e7310e1381a8b9000a6d5b7a143
SHA512 a7d2b6d0014f6b80c307909fd464c976a4f359d99db3f075a42d2bb276ad2f4c3db2a26a1f27c0f042adaa6615b995d62449465dad2e405994ee3042963dba4d
TLSH
T1EFE026E814CAC22FF24C64CF477C638CC3C0661E92C56DBE7F48CA847146444A6A2AA1
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 8b60c5a78fb43283950f251e7976d3d3291ccc689858286a63a3db0105b83179
MD5 dc6d7794c05bb910ae053dc7082a6ddf
SHA1 2a20838fb3e6ae880dd074545ac349cc74c22e9a
SHA512 ebf1e17443a72ecae0bf0958abc88e55e3d730381ca2e81e8db6e60a13150847f1562c3c97918a1d0ab850b7417a9df019bff860d8eb2f176cbaa9df7ac08c19
TLSH
T19C612E915A2B6B63F79876F1CAE984FB353F649F09933E5315A8EC3B5806353F200064
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 738cee920a66c4ced1adcbc4e5a4c5eaaa0feeb413ddfaf015126d88f725b7ba
MD5 5691c283c765d3bb765957a110eca07d
SHA1 9f583109fe9979d1305b9bcf2390fa8c3eb03894
SHA512 e3cfd120ade67d21d55abee0ed5e270b9c4f88e7e856e20cb8c7ccadfab34794c79635df470fcccd18bed52979ffbc145b7a72d03ad77d5e4e8aca9ec21fc385
TLSH
T1416140905A2B6753F79836F1C9E580FB353F648F09933E131598EC375806353F200054
MD5 SHA1 SHA512 TLSH

Submit Download

c6aa7b99-1c2c-48f6-81f9-18793609e107.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c6aa7b99-1c2c-48f6-81f9-18793609e107.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0243f9b4-7d12-4714-bb4e-6ea392bdba3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0243f9b4-7d12-4714-bb4e-6ea392bdba3c.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

77ed0685-073f-47c7-8d80-a5a2ad48865a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\77ed0685-073f-47c7-8d80-a5a2ad48865a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

ca2518ac-cd42-4b72-b26a-bb4383c5570d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ca2518ac-cd42-4b72-b26a-bb4383c5570d.tmp
Size 1KB
SHA256 8223984ebe6825bfad37d7de622948359fb5b4a72a2619609d94cdedcf6d29c6
MD5 aaf0bf8586f9790356c8e533a15eb37c
SHA1 f5e6fdd6db23df9e11614bb65d92ef385b454d39
SHA512 9c83c57edbddad38faefc2775c09c691908c79145e1cf1520d9dcfe7899e8431ae91af9fe92cafd5981088a43cb4aa0f7668607e4b1fb6ae2346afb7bd7c795c
TLSH
T16531AFB7C7D496AE890116F09E24AE2BDE1D191A42383C16C9E4EF5B93E2075D10155F
MD5 SHA1 SHA512 TLSH

Submit Download

bb3d1d41-edb3-42ff-a7e4-736b9d130da2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bb3d1d41-edb3-42ff-a7e4-736b9d130da2.tmp
Size 9KB
SHA256 0f2b764fa8bc37bca5276c4f2292082a9b5373a5af10edb92a2a9eef248f7feb
MD5 bd86d143369d4ba57e39a2e8faaae265
SHA1 528629ddfb3e857acdc194118ce2dfe8b3c8e6ae
SHA512 e3c016dbd1b5778026ab9dbcc470d7575b4e5b8fd83d69c6efb570263261031997a8979ca31134c2ab9baf5d6151ee29243cb602879b8ff7cf3ac190c8a2a56f
SSDEEP 192:sxZBRWWt/fFsYIea5IdpdpHW6+WNGYaplB/lmIg59J:sxZB7t/fFs83zHbGKB
TLSH
T19122B7126E68A57B8CC7D20EBB55BF53D6FA503291E11E48EAFC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d8c20da0-751f-46ea-883a-2de006a7d8c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d8c20da0-751f-46ea-883a-2de006a7d8c1.tmp
Size 9KB
SHA256 96e81f68da93df97fda4b07fcb836e3e8eabd84ec83cc2c31d1190903981918d
MD5 f0468687f0b66694988ff4c7de316a8b
SHA1 c4ddcf816d8128642112fa9cd7c7a3bdbf112190
SHA512 5770f13219b94faccfee25e4860e3a59602bf2c6a67fe5a0bcf349f3236d4117a310730f15306e588385090bc19c8d8f79f47a4616b67f83a9ab237cda070bdb
SSDEEP 192:sxZBRWWt/fFshIea5IdpdpHW6+WNGYaplB/lmIgrJ:sxZB7t/fFsz3zHbGK9
TLSH
T16222A7126E68A57B8CC7D20EBB65BF13D6FA503291E51E48EAFC961C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e06e168c-ed37-4bef-9dd5-b745dc2806d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e06e168c-ed37-4bef-9dd5-b745dc2806d8.tmp
Size 27KB
SHA256 f61bc466c5b9acd0a5d9f59d820aa564ea3f25596e137b3fc07cfa5f3f89093e
MD5 aa8ec8097e1f61526631c81fb9a5cfe1
SHA1 5470dbf25437939382d739a6fb7ed3acd76d8731
SHA512 21e5d5e9e7a48f5972d7746bedbeb6fec4c765a687070817741cddb27ebf53ba00733beaab708d6b4e6b0f95f66973d2f6a21e77b494c7ea55611d840d5fcc2c
SSDEEP 768:7lWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Yro4kfesmRt:7lWPcLKWvKeEeu1jaClLiF7j4kWsmRt
TLSH
T1EBC2EB3B644CCB7E4FC01E9DDC5A6FA76E9802C796648D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f7bbeac0-744e-4161-899d-2d90715b2f57.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f7bbeac0-744e-4161-899d-2d90715b2f57.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 9f9d8d09a56ee486ec735ee28e5b515316e83a15cb1548653fcdcdcbf8147ab1
MD5 b1271f2d2104318fd4e72900b953d670
SHA1 c2cf5571bda8a3021540ecd8c9d0d21f756ba007
SHA512 b6124c2098be9e437e7f13cfa50ba9191615f96c7df6ee449ca4f23374eb9c79050c27ae37852669e278941eebbdabc94d9bb9112a850c3af8b3b4067390aa36
TLSH
T1372153C0E3A99054AE89AE41870E6407A0B12E7A2A4D6DF5331E81F55F4CC271E6FFA5
MD5 SHA1 SHA512 TLSH

Submit Download

86f8b7c4-ebd8-4ea0-8391-c490aaaf8cec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\86f8b7c4-ebd8-4ea0-8391-c490aaaf8cec.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c94adb4f-930a-4923-a372-db483b3e88bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c94adb4f-930a-4923-a372-db483b3e88bb.tmp
Size 18KB
SHA256 0c1235420c0c653026b67384a33335741c5dd167b4135065381405231ee8c4fd
MD5 454c85f4412006379838c011b16330e2
SHA1 a549d5146c5721d45516cce7ae5a34af93325863
SHA512 77cb3614e5c1751a40903e80a25a51295725ce59ce9104665f72d7929416ea15d5396ba76e3fe343865e4105c649e663df2c0fafb33dae1e8a8687b765f2eee8
SSDEEP 384:2QkUSv0sNYOz+1qUvzIGm5B838RcX5iM2IuIIl5:W0xX7GLR05iM5uLr
TLSH
T147828D369CB87C2B8EA3A551F1493A13DEB48127D6D81F94D6DD2B2C01CE29C234BA17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbc10beb-773a-42db-849a-860600a090d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dbc10beb-773a-42db-849a-860600a090d3.tmp
Size 8KB
SHA256 c7bb725faa26a29db9f15dd78e0f7b9e8528fb451f01f97a5577ce6748b149c4
MD5 ab73514d87410ae63a7bb649bef1de60
SHA1 383f697c0d557304fcfd51e8a07f95075b141904
SHA512 5f87af4c45f03f3a69cf9272a167fd8fb8eb47ea59e5922824bc3e3f22e9040f047c5aa5f8a62f43b325d807106cfbcd3ca15199d9770c1db2fa26470f83d50a
SSDEEP 192:qONvB6IE/QmiUyXpTtuIGm5Njzor3EmORcXu27HCqMU6:qON56DBWtuIGm5B838RcXXHMU6
TLSH
T143122B36ACB8FC6B5EE3A545F0463A23AD754227E6896F84D5EC2F1C00DF25C134A917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

259b2230-a807-4f48-8ff2-c42e54b985a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\259b2230-a807-4f48-8ff2-c42e54b985a2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5c6ab8611b375a32e4c2035a5b89202bccb8a7f6a9d734d2b290c01b8f05bd1f
MD5 bc3378eb0a429a48e716f97f277d8ccd
SHA1 38df2d9e04d3399093a6e8546fb5c8124a66ea68
SHA512 548cd6524db7e8e600940260ca9e1ee3b4a431132d1eebff2f651810f326bb5f37e81e5f43233bf966beeee48e14b0855fd3b2684e1817784555b75d46841a1b
TLSH
T1B5412759A6E91108B3B36F469BF2B86E487FB9772F0BD45E10110D4E0622B40C9A1733
MD5 SHA1 SHA512 TLSH

Submit Download