71ec935b56a3517ada0d9c2f324c33c5a4bb802ef275d6193a3c701f04567da3

Resubmissions

23/10/2026, 17:09

261023-vplbbafs5k3

23/10/2026, 16:41

261023-t7g6yacx4z5

Analysis

user interaction
yes
max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 17:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
voice_94834.html
Size 52KB
Sample261023-vplbbafs5k
SHA256 71ec935b56a3517ada0d9c2f324c33c5a4bb802ef275d6193a3c701f04567da3
MD5 4242ff8650e64fc23f79e870886abfea
SHA1 2c60422321f8599fc3feee4fa3bb5c8b63193b39
SHA512 c7a2ba9116c5a7b94165fde9377fa7f8aea6d75253a54d48ab18b7209a049935c541b740f378dccc95c7aefa7a73ada68be9ce4c5018e93e5709efafca97ce51
SSDEEP 1536:iZH1gjzXXiF3688VQfWqYsnPT6ieXPNNeqo:g+PXXC368+Q9LnPT6ieXPN8qo
TLSH
T15933D7EBE75788E58832F45FF40CA786C160EF23E96FC49136ED62697B84F52A16014C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4472	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{8F524064-0E38-4497-9916-B60D7EF83DD7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2476	msedge.exe
2476	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 1692 wrote to memory of 4172	1692	msedge.exe	86
PID 1692 wrote to memory of 1600	1692	msedge.exe	88
PID 1692 wrote to memory of 4472	1692	msedge.exe	89
PID 1692 wrote to memory of 1600	1692	msedge.exe	88
PID 1692 wrote to memory of 1600	1692	msedge.exe	88
PID 1692 wrote to memory of 4248	1692	msedge.exe	90
PID 1692 wrote to memory of 4248	1692	msedge.exe	90
PID 1692 wrote to memory of 4908	1692	msedge.exe	91
PID 1692 wrote to memory of 4908	1692	msedge.exe	91
PID 1692 wrote to memory of 4908	1692	msedge.exe	91
PID 1692 wrote to memory of 1172	1692	msedge.exe	92
PID 1692 wrote to memory of 1172	1692	msedge.exe	92
PID 1692 wrote to memory of 1172	1692	msedge.exe	92
PID 1692 wrote to memory of 4632	1692	msedge.exe	93
PID 1692 wrote to memory of 3224	1692	msedge.exe	94
PID 1692 wrote to memory of 4632	1692	msedge.exe	93
PID 1692 wrote to memory of 4632	1692	msedge.exe	93
PID 1692 wrote to memory of 3224	1692	msedge.exe	94
PID 1692 wrote to memory of 3224	1692	msedge.exe	94
PID 1692 wrote to memory of 4748	1692	msedge.exe	98
PID 1692 wrote to memory of 4824	1692	msedge.exe	99
PID 1692 wrote to memory of 4748	1692	msedge.exe	98
PID 1692 wrote to memory of 4824	1692	msedge.exe	99
PID 1692 wrote to memory of 4640	1692	msedge.exe	101
PID 1692 wrote to memory of 1604	1692	msedge.exe	109
PID 1692 wrote to memory of 1604	1692	msedge.exe	109
PID 1692 wrote to memory of 1604	1692	msedge.exe	109
PID 1692 wrote to memory of 2420	1692	msedge.exe	110
PID 1692 wrote to memory of 2420	1692	msedge.exe	110
PID 1692 wrote to memory of 2420	1692	msedge.exe	110
PID 1692 wrote to memory of 2120	1692	msedge.exe	111
PID 1692 wrote to memory of 2120	1692	msedge.exe	111
PID 1692 wrote to memory of 4404	1692	msedge.exe	113
PID 1692 wrote to memory of 2236	1692	msedge.exe	114
PID 1692 wrote to memory of 3224	1692	msedge.exe	115
PID 1692 wrote to memory of 4432	1692	msedge.exe	117
PID 1692 wrote to memory of 4432	1692	msedge.exe	117
PID 1692 wrote to memory of 2476	1692	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\voice_94834.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc0dd6c188,0x7ffc0dd6c194,0x7ffc0dd6c1a0
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,14162664942745185875,16624707570610846107,262144 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,12308912290695075605,1459845142967548419,524288 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2384,i,10987735793458989215,7156014104696475316,524288 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:8
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,2655167915602586078,8183722575971048802,2097152 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,1086457295663552377,14358727772083917296,2097152 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,16635567528038354178,13457582930948930753,2097152 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,14971337912180468327,8313014596975423623,2097152 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:2
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,14108221332793302144,3372887737709405691,524288 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,7260033635345994110,13480910052307572218,524288 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,4114179331562002001,14314596973738370853,524288 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,4114179331562002001,14314596973738370853,524288 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4588,i,8973901003464004413,1630951867683934207,2097152 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:1
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3652,i,17778245154014052997,17479538177482243625,2097152 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,5080916648178956145,5202489844677370441,524288 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:8
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,14438391354248258141,12902132523629850815,524288 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6592,i,16000595128392202983,13763443619942344513,524288 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:8
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6568,i,16614839901857875255,3826299978181999791,524288 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:8
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6644,i,12580811082911844955,10460739511859172550,524288 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=712,i,16972126244744590481,16226148643171689236,262144 --field-trial-handle=2468,i,17654710007594448537,15938502417008889933,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2476

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

05f1529f-313c-4011-899b-d9429952a89b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\05f1529f-313c-4011-899b-d9429952a89b.tmp
Size 8KB
SHA256 70046b0289df82d586a57faa447f225ed170471a2b8216ebd25d1c41c1bb5848
MD5 99ca81b7fe50a2cc547276ba5f9aa000
SHA1 754b5c98ae6e88cac0554385b92a0c46a28b3f03
SHA512 3615e12f53a26c0d25540402d1ac5366e7ba128c1a56560510e41370312b8a4ed007a30c4f274db162be1cab72eceba9b20437f0cb5aca6bf3596d4aa78357b7
SSDEEP 192:fONv6wlDeQmiUyzW/4X58gZXjzorPJjWXm7R+2mqveTqeU6:fONv6ka3/4X58Ef8PJjWXi+2m9RU6
TLSH
T174120635F8A8EC2B5DE2A545B08B35039FE9511BDA8A6F90C6EC1B1C01DF66C530ED13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20a93d1e-6733-403e-9b51-e440066e810d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\20a93d1e-6733-403e-9b51-e440066e810d.tmp
Size 8KB
SHA256 4171be0c3e44e97ce36767cb48b42d40c00e6341040357a5d51d27ea522e72c9
MD5 d26296455b443b8fe05e20a49d109246
SHA1 012e40e1d8696ce8f51b9d6a7f02fa825f7fee37
SHA512 f3f95f1bb7b66450fb86c03dee64c510f63054807fb5ebc5551d756365e94808e22b14e4ee0160b2e0bbc6071fe06ce80c06097f7095441fff2f11874191c526
SSDEEP 192:1ONb6wlDgQmiUyfWW4X58gZXjzorPJjADlNRU6:1ONb6kgdW4X58Ef8PJj0fU6
TLSH
T1C502E935E9687C7B8EF3AE09B48A27139FE5112BE5552F44D6EC0B2D00D765C130AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 49ad6872da0e53fa2156de2ab29aae15d756e399214100166ee3b981776c9e71
MD5 ec47d7bcfb6fcae0bf0c2b01172a50ce
SHA1 20474467d868ddc238b4a6f05bd8c60a9a69235e
SHA512 38fc241b6dcada0c5d074fcd3a03d2786292deff2b4e86af77e745f823ab3f7a20920fec3c454838305c94f586355a5c360fd844cb107f4a9279878245548c61
TLSH
T19FD0807175273DFDD19D667C05515A405104CE53595115108A134D551E9C6C27CD3EDC
MD5 SHA1 SHA512 TLSH

Submit Download

170797b6-9282-4690-82e8-6d4b7001673e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\170797b6-9282-4690-82e8-6d4b7001673e.tmp
Size 10KB
SHA256 74d05078fea09bbbdc4545fd6cbd20f773f217d8bc339568c0e083951198177e
MD5 6c237beb998488d2e4d4364825f29c55
SHA1 d0331b93eae1c52649a336623cda22acb79af2b1
SHA512 4288ccc90c1604e5f437193fe40365cdf53105a7e352ee6a59e0c60e6320f00ea4a4a4d419b01fb806187d72b2a6ad965e3be68b4c2c7ae5795b2e08831ecde2
SSDEEP 192:sxZlRgS3b/f4s7+IdpBShDSeHW6+WNGYrkSuUVIg5yJ:sxZlf3b/f4s7vwHbGeA
TLSH
T19C32B852AE74A97B8CC7D21ABA19BF13E6F9503291911E44BAFCC61C05E7BDD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2912ce16-b44b-4d8a-a52e-1a050edfaf89.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2912ce16-b44b-4d8a-a52e-1a050edfaf89.tmp
Size 27KB
SHA256 c6309934845c2ec8bc089fc27d2dc8c287ac5cb9b0f5eead933a555bf4be1a69
MD5 e7d5d232fa50e7f17eeb9f377c2aecd5
SHA1 5c53b1ba41b1143f10ff5d3a3bd6eabcefe022c7
SHA512 23bd513a01659e123036d79233c9531f260c4101c796efb8075fa2cad696b41aa512d938ba74b30bd4e72e85caebd9bfb7862d080b1e4238fad301adfec4eae6
SSDEEP 768:8Ny4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbProR57:8Ny4J/DWvbtBhu1jajiLm0bcf7
TLSH
T1F1C2FA3B684CCA7E4FC00A9DED5E6FD73E9802C79A948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a6b1ece-0bf1-42aa-8681-22b54dc04266.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2a6b1ece-0bf1-42aa-8681-22b54dc04266.tmp
Size 9KB
SHA256 7a1a19be1e2512f6bf5e82897a393bed436ed6b8ef134cdda90a9c572b16a9ce
MD5 1a589ae76da224791032b2a1d9c0bd14
SHA1 3fa20a06e8464f04ad2fd8481c02c6f019e932b4
SHA512 abdf347b2f6f023a8640c9e968ab02e35c25849146af168e78a54ffe934ab7f706b8a8ddb6db76c2a1988d5a7a5e5f52dfa9a66e2c394fba98478e244d5c2b4d
SSDEEP 192:sxZlRgW3b/f4sOJIdpdjHW6+WNGYrvOhVIgrJ:sxZlJ3b/f4sOCNHbGP9
TLSH
T15F22B6526E68A97B8CC7D20DBA19BF13E6F9503295951E48FAFCC61C04E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92729c60-32c0-4850-9a42-2f3a5aa485b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\92729c60-32c0-4850-9a42-2f3a5aa485b2.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000043

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000043
Size 59KB
SHA256 93def5ee5895aa59b3e00a4f828e2536b62ec8f817c6fb8890ccd3eb03d3fcc7
MD5 eb5c570961442f25bd7a3719e0b39c40
SHA1 fc676fc01d844d3a0eeacc2e6e97715f67741fdf
SHA512 1b7ed2d15f9bdd565b1ce5b42bf81cf776143d07e5cbeacbaa9a128942ee7b03f08a04e601bc2fc7a8b91cbbd4dbc5b559e608894204d0ab8820b3a68f66a150
SSDEEP 1536:hqMKKMas8MISM1K849wTPQ2wa7Gl1UJ6XhME:oP3ISk4K7QvaSnUJ6Xhv
TLSH
T1C853018C4AE156F547A65F382337A19D8A0E87837398F547E7E318D3784CB68245DBC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 a60e37f0892867c483aad4510825002b28b5cdd00eb3adad3b009f327a36e93b
MD5 acd2bc65c883789e9b2fdce65b87f6da
SHA1 42ea46a8b6947290a9103a79cf767e3d489e239f
SHA512 083754bd0e0f6107c3e30b1705eb07e2838928c0832abc7b5948f787bde375ec4ca8f9df4b277f31000d30fdea963177c78e6169eef1306f6ebfaaa05c912791
TLSH
T15E51A6B0BFA883A5D7ABFC70B1E1138B36F7697151432EA60694C9BB8B073344128C74
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 19772eedca75cca7eb9afe495e650ae3bbb9fdf2f0ddb78b52a05876271f0e3d
MD5 a1a21a175ebba461c8a0626a38c4743e
SHA1 14c525d378a44fc70ef09463b71dd70581fbb4a8
SHA512 aa468e8b9530c679f8d232c83a021279b4db17bfcf8ea3df0db55b2a605491c3aa3855c41544961c81a09dfd2d955629014c9fbe54746fadadde3dc55476e03b
TLSH
T14D5198B07F988365DBA7FD30B1D2039B36F7A97145875EA50694C9BB8B073344528C34
MD5 SHA1 SHA512 TLSH

Submit Download

59c1c001-4b77-4bd4-8bc8-8f0d8e69748c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\59c1c001-4b77-4bd4-8bc8-8f0d8e69748c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

32469b41-ce0f-4a21-be66-31f2d4692efe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\32469b41-ce0f-4a21-be66-31f2d4692efe.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

5efddc46-30e2-4618-a800-3ae76c4fcbd2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5efddc46-30e2-4618-a800-3ae76c4fcbd2.tmp
Size 1KB
SHA256 941db51f514eccfecf3dfec443835cad25b4995016c2ee9e44adda1046ceec93
MD5 8cd0703b880eeb50f0041c650ffac5c1
SHA1 e91bd2273a155a89fe33a1cf01ebeb19abc31dfd
SHA512 330e7dc562770d0b3255235369a8eb5d7a8cac8abb660632a708229486ec07bd6ba47c36c5962f2d26126806a685266bcaa5cf896367d66facd3e0efd040f980
TLSH
T11A418AF787B1456ECE21A6F4AA14DE2BCE1C0511036C785985D8BE27D3F34B0E01275B
MD5 SHA1 SHA512 TLSH

Submit Download

76bcc334-a997-4a02-8e19-4c4da3f65318.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\76bcc334-a997-4a02-8e19-4c4da3f65318.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 447575f1340ef38c7e1a2a2dae0d5d236b67be4b7cdc5651986a83e335b3d009
MD5 b2090bd65c95e2a5e9eb05ef8c50e7fe
SHA1 4a848e4d842f53852f62041fa6a2566b708b886f
SHA512 1063e06eb2ef177f1f042e53fdca9bfc577f0424933553309393098b7d22d49205ba787fa140063f1978c8c8ba36c984ca4654eb3dec41d4199335faeb1bf44c
SSDEEP 48:KIDI1Ks04jyLbef7F99ebtAFISbeK9r1pexzOYo5L/yL98xN/rvQbjWDISFydgMX:KIDCKs0+KsgKtu+i+VNqKGk6iS8KDKIz
TLSH
T171D1F44170BB060538BD264C81B5C72B565272B37119EA3B7FBD84A28E6FE045DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df2fe5b6-3426-440b-9edd-2ddcf6ab8850.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\df2fe5b6-3426-440b-9edd-2ddcf6ab8850.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

ecae4f43-9133-463a-841c-a9afaa84ce26.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ecae4f43-9133-463a-841c-a9afaa84ce26.tmp
Size 10KB
SHA256 5726a5f1e924ac5c92a4824c433f7db77db1047fc56f2e3dc2062eec478302f2
MD5 7f7d97f94ef140ac71a77e7534d2eed5
SHA1 aaa7a88781d408c06d7341df02dae391a11a2b1d
SHA512 5367c5bc506158dec4dde829abcd92a0eeb5a6e57f05eaa1d0d4921d65255e6ffc78a3ee91d38f12bce08c36629805e030ce2f6371c1807e66dd9a5e451738f8
SSDEEP 192:sxZlRgS3b/f4s7+IdpvShDSeHW6+WNGYrwS5hVIg5yJ:sxZlf3b/f4s7vCHbG2A
TLSH
T1A822A7526E74A97B8CC7D209BA19BF13E6F9503251D51E44B6FCC61C05E7BDD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fb0811b9-fca5-40f5-a67b-3fc3cd7a570e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fb0811b9-fca5-40f5-a67b-3fc3cd7a570e.tmp
Size 9KB
SHA256 340c4bc62192c90a430905c82f4d08d5ca72ff97717e21a632b4142df6ca0112
MD5 b367fae999d4082b96271e8844143dd9
SHA1 d8f23c112b0d0fc53399d4cf5b95fca078c12b70
SHA512 3d0e93df64e458984ae8a8d85f4a164dcbda204c153a8b5098824607151e3ee0dea0014c3111db56adac42c5012b077e855fea1ac71184e26cacc4243880eff7
SSDEEP 192:sxZlRgW3b/f4sTJIdpdjHW6+WNGYrvWhVIg5AJ:sxZlJ3b/f4sTCNHbG9C
TLSH
T1EC22B7526E78A97B8CC7D209BB19BF13E6F9503291D51E48BAFC861C05E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7585d2e-6575-4629-bc88-79668a3fae4e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e7585d2e-6575-4629-bc88-79668a3fae4e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a4401f3d-1245-4bbc-807b-9d2bde9b14ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a4401f3d-1245-4bbc-807b-9d2bde9b14ec.tmp
Size 18KB
SHA256 dbf7bdd786e3e52480f8459e2952c768e04c25c60ce12925a1d48f6a309c61cb
MD5 acb21e4aeed0981b13736e18e5fba727
SHA1 4044f62721ab45b04ffde09f9b600011aa3e5c0c
SHA512 058894d19edf5f3dd674df167667f6f0e0010238b76213e1bc87f80679008ad42b67b0f28caf0d5ec74f359f9322288541c5bbbf2a9085f8a0da6bb3dce8bb6e
SSDEEP 384:UQkUSvAsNOOMWZBpLHX58Ef8PJjWXi+2mqR2IGucIIl8:EAnWBTaAilFR5GucLG
TLSH
T130827C35A8B8AD278DE2F611F14E36039FB88017D6D96F94D6DC5B1D01CA298234BE13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee7cb754-16dc-4d6e-9520-5289fd3c2163.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ee7cb754-16dc-4d6e-9520-5289fd3c2163.tmp
Size 26KB
SHA256 4e1f0c0dc6c9d557d373dd4456f4e687c675f89a301204ee6d06cdf2e32db899
MD5 8f6f1174a82019738d637c44050560ab
SHA1 36d3ebf04cadf95d2db024c24787554c0b83f66c
SHA512 7ceda617e6d789cd756ca8fa2c48d706dc27ea6741ec4ffe9f37303e221f15bec8efa5f0879ae8a115700a833b33caa3cbdd8885c29fc3f07426f7596f8fc7ee
SSDEEP 384:9iFzQkUSvhjHsNe8TUNTUlIlOMWZB0LHX58Ef8PJjWXi+2mvR2IGucIIl8:0FdhrDwgTWMTaAilCR5GucLG
TLSH
T1A0C219F698D79936D9AE9703A37D2D038EBCC057F5955B50B3885A1CCC861BFD30A902
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00ddbefd-eeb6-4823-80e5-471e85959d0c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\00ddbefd-eeb6-4823-80e5-471e85959d0c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f11719df-c181-4ab1-8fa5-6167b614bf51.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f11719df-c181-4ab1-8fa5-6167b614bf51.tmp
Size 18KB
SHA256 be5ec4d74bca1da02f58650d1dea98df26124e23954c9bf16af57875b8cf448f
MD5 b22fc2ad4d83e96777c24cc7042a3ae2
SHA1 90f58fc05c97fd52549d4a8989a96ad429a8c3ee
SHA512 f6cad5fbcff979dcdb618f3dae8521438f9dcddfb7bdbd91e096ddff2f6600e3345926b1fddf7b5cb220aadb221eb8af11462316867dc9d9727b4a80ef534572
SSDEEP 384:NQkUSv0sNOuWMWZYNdHX58Ef8PJjWXi+2mqR2IGucIIl8:30s5WapaAilFR5GucLG
TLSH
T1D3827D35A8B8AD278DE3E651F14E36039FB88017D6996F94D6DC5B1C01CF298234BE17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9ba81e22afb49ed3dbdd653722104ece0b0606c55a144b455cd0518b8d556a30
MD5 be2bd9fd301802d9eeb8003266b5eece
SHA1 3e0e34f2987ec4300480882fc96888b25d1095be
SHA512 6909cb399c9c1ece1114c06991b5bc1e49781d45b27f600bcfc3304e25bf91a7be10a91ac8103f4e47591de1432863357c197878ce034c672f86856b1427a17f
TLSH
T1BF41F858B6E91148B3B76E56ABF3656D487B79372F0BD45D10010E8F0A62B40C972B37
MD5 SHA1 SHA512 TLSH

Submit Download