12ca3893418a95db1dbc1e4579ffd559f8393ca5aa2b25fca4c994a4ee8647a3

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/10/2026, 12:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 11KB
Sample261026-pd4evsdx9t
SHA256 12ca3893418a95db1dbc1e4579ffd559f8393ca5aa2b25fca4c994a4ee8647a3
MD5 a35113d8b0c923f7f272d01eac2d108a
SHA1 89b7132ea59d8aa65143b2f2f0dce80ec88af8ef
SHA512 0df1276619530ada954c3f7213f5d0c28a75d2568e024373a7999b13bbe881e43baa32f13765fc5c220cdcaf70180fd6d2944fc89f6a49d79b9469444578f59b
SSDEEP 192:Uzou/5lanED0PRBdoy8U8jIrq660ONMO+X0jxxt9x5T9DJK9VJE3toLIpZ:Yk8j+7+7oI7
TLSH
T165326621EED01207B51B4590F293FFA92EA8810747020DB4B99D7A75DF8EEE256473AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2868	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{5C8EB7EF-014E-4B18-8564-D1CCB14FE18A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4604	msedge.exe
4604	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3520 wrote to memory of 4288	3520	msedge.exe	89
PID 3520 wrote to memory of 2868	3520	msedge.exe	90
PID 3520 wrote to memory of 3924	3520	msedge.exe	91
PID 3520 wrote to memory of 3924	3520	msedge.exe	91
PID 3520 wrote to memory of 3924	3520	msedge.exe	91
PID 3520 wrote to memory of 3916	3520	msedge.exe	92
PID 3520 wrote to memory of 3916	3520	msedge.exe	92
PID 3520 wrote to memory of 2784	3520	msedge.exe	94
PID 3520 wrote to memory of 2784	3520	msedge.exe	94
PID 3520 wrote to memory of 2784	3520	msedge.exe	94
PID 3520 wrote to memory of 5700	3520	msedge.exe	95
PID 3520 wrote to memory of 5700	3520	msedge.exe	95
PID 3520 wrote to memory of 5700	3520	msedge.exe	95
PID 3520 wrote to memory of 5968	3520	msedge.exe	96
PID 3520 wrote to memory of 5968	3520	msedge.exe	96
PID 3520 wrote to memory of 5968	3520	msedge.exe	96
PID 3520 wrote to memory of 1236	3520	msedge.exe	97
PID 3520 wrote to memory of 1236	3520	msedge.exe	97
PID 3520 wrote to memory of 1236	3520	msedge.exe	97
PID 3520 wrote to memory of 4372	3520	msedge.exe	99
PID 3520 wrote to memory of 4112	3520	msedge.exe	100
PID 3520 wrote to memory of 4372	3520	msedge.exe	99
PID 3520 wrote to memory of 4112	3520	msedge.exe	100
PID 3520 wrote to memory of 4716	3520	msedge.exe	102
PID 3520 wrote to memory of 2768	3520	msedge.exe	106
PID 3520 wrote to memory of 1888	3520	msedge.exe	107
PID 3520 wrote to memory of 1944	3520	msedge.exe	108
PID 3520 wrote to memory of 2044	3520	msedge.exe	109
PID 3520 wrote to memory of 2044	3520	msedge.exe	109
PID 3520 wrote to memory of 5352	3520	msedge.exe	110
PID 3520 wrote to memory of 5352	3520	msedge.exe	110
PID 3520 wrote to memory of 4604	3520	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffd12b9c188,0x7ffd12b9c194,0x7ffd12b9c1a0
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,3502640060913803241,4492169417832733655,524288 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,12304755658267927698,5946107780320821250,262144 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:2
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,14207439895751257953,3823208568182341695,524288 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:13
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3648,i,1422852041226131530,2266820809116880156,2097152 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:1
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,12131173827294323573,4454939965440533186,2097152 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:1
  2⤵
  PID:5700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4444,i,1244503746996380883,1309376581518362008,2097152 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:1
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4456,i,12576680885755125760,17527255444701508728,2097152 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:9
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,5915650218443400618,8386230096956249927,524288 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,2433677178732462160,15695194826075263883,524288 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=3940 /prefetch:14
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,895442184859306638,18377957814075397302,524288 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,895442184859306638,18377957814075397302,524288 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3752,i,3734778883483836244,14794757041584759261,524288 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:14
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,11114845847680706856,8514872256634780707,524288 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:14
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4692,i,13531559309985885383,6342318492355779561,524288 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,17936860329293864184,15512748360621733925,524288 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:14
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,1100747713417112681,13620462218782683618,524288 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:14
  2⤵
  PID:5352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6692,i,12482442411022294205,13795509651515031009,262144 --field-trial-handle=2376,i,15305170018618604770,14149991711533576915,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4604

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3952

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0c49de99-f28d-4224-8559-f0bdd2a473d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0c49de99-f28d-4224-8559-f0bdd2a473d9.tmp
Size 34KB
SHA256 b1fc4a72a18c22c9e24bc04cd2f6b056a70e25dbeb47be0396d16dbda63ec1a3
MD5 65f98d0df8c1114c1458fba34ccdcb74
SHA1 4ee64adc052e9754b95b91695ed03297e25fc200
SHA512 8005a3abade5364c272a84fa6e75c3a2056856b0133cdd35f9419ed0ab02c00d8b4877a913e85254921e93adc42833ec3cba767e3c219b9f6675c9da3254cd7d
SSDEEP 768:IS30owOC1rqvS5fgGM1TnXMqOaW6XuyLx:IS3miofgt1TnxO1Mr9
TLSH
T175F2AF35AC959D638CE2D380F21A72926EE18167C6C81FA8D9DD7E1D06CB25F134BD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4850cf03-6433-4c0b-be30-cbe954a2c2d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4850cf03-6433-4c0b-be30-cbe954a2c2d4.tmp
Size 36KB
SHA256 974131b85e68e1042cb45926deb149b432ed289f0a182799296ea932f168ccd1
MD5 c57676bc22775b78ee43ba5964835c66
SHA1 f103195d7d2ba729cd3a2d92080b237fcf6b70e9
SHA512 65bca54e68e9ac189500b1f1fce5addc13ac05667cda0efe83c682dd1d1597305bfa2e029f56fa3ad73c7e0b35632642fefaf9f785c2331bf5a6fd7378e0414d
SSDEEP 768:KFdj3gwg7owOC1rq05fgGM1TnXMqOaW6XuyLx:qj3YJfgt1TnxO1Mr9
TLSH
T127F2AE32AC949D779DF2DB80F21E7292AEF14163C9C45EA4E6CD6D0D02CB19E034BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

99b4f575-df59-4b91-90ef-f7e82f0c9a06.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\99b4f575-df59-4b91-90ef-f7e82f0c9a06.tmp
Size 37KB
SHA256 59d856ea4da96414ccf489863e5e2d812f43c00215f6bf0a06080e729d0678bf
MD5 eda34d803c609038fcaae1f210d7761e
SHA1 ba25ce7c999b6e9af65e21543c078bdf9ed74a9d
SHA512 21ca3856ae8ea8828c4339969e3266d637a0e9b44de76c535aed273c9aebef096c86bbfbf521abcd5d26c089104f4f2dfcd062a4b2dc6e29c062042f389f634a
SSDEEP 768:5/UxvxjgC+933BwOC1rRu5fgGM1TnXMqOevAaP8:sZj3+93URcfgt1TnxOgAG8
TLSH
T10503BF36AC956C779CF2D384B20AA296AEF140A3C5C51EA889EC6D0E06DB35D530BC53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

040de12f-cec2-4cc0-ad80-05cfe0d37539.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\040de12f-cec2-4cc0-ad80-05cfe0d37539.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3b541d9e-26db-48e2-acc7-bb8f7b5314b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3b541d9e-26db-48e2-acc7-bb8f7b5314b5.tmp
Size 23KB
SHA256 eb989eb94ca7b207355c791bbbaedf0c7d84eeadd50413fc0df41705f30bb63e
MD5 d377cc7dbfd664df9b53cef77c1a1512
SHA1 e6581a94249cb03cc829160af388e5bfff18c6c7
SHA512 d7d26f4d44604f4c9ba43400a63e5eaec7709955ac39d47fb853cf489fc22cc24d7b0b519d1af1ccf3a3c6aa765b6d76e06d57e92aefe8f4025014cee61febcf
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRkxroqYr:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0V8
TLSH
T121B2DB2F644CCB7E5FC10AAD9C1A6F976D9802C79B548E4047FE994C02C77FA921A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

400ac78e-8fa3-4624-aeeb-800ed9ec2965.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\400ac78e-8fa3-4624-aeeb-800ed9ec2965.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 20c757178477fde89500ff7667efc34e4f78dda050f1ae536d0acf739378497b
MD5 ea5be696fb67e1ab137614f99a6312ac
SHA1 8403af8481b5c4ee225c9cb01016ee75e01782d5
SHA512 71d69d55e9fa236879b2dd62a71daf9951a73a13ae08a1c6786febc146eb6270b6ec65ec196139e40196fef230afb423445cd561c09058a6bf3320f77974b1b9
TLSH
T133E0268448CEC32EA259B44B42FC570C8B80679AB3C4694F2F00CA887005480EBC3A90
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6d728aff83a9c0c7be8adb91086b347e6c5e070eba7debfbaa37f4a5787e03da
MD5 29b77384553ffbacd428856101abcc40
SHA1 72c505f0e88ea21452452439c7e0c7e44ae844b7
SHA512 e0594e832c3903d8c1a6881a0cd8ff502053f441c954c6a5695e57a1b2604f189485ec504d74f4d4d59e1bfd91fa1a5b75658c43c1560db3956038c3ee97c910
TLSH
T1FC513DC4824BCA66FBD8607498E6CCCFFAB47BE1A143EF2929B4CD355CA2366405507C
MD5 SHA1 SHA512 TLSH

Submit Download

352e088d-2a0b-4f68-ac30-34606d73a482.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\352e088d-2a0b-4f68-ac30-34606d73a482.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

a4da6fad-886f-48b3-a99d-5bb7d359ae2f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a4da6fad-886f-48b3-a99d-5bb7d359ae2f.tmp
Size 1KB
SHA256 77c6356b7601aa9226a09f2217982095003b158584f6232942b8c29736351dc2
MD5 74181fcb7eaa0cb4784dfed9894b3cf4
SHA1 3096dda7a271f364c010a90034f5856d85cb1cdd
SHA512 979da3a3225c10a44a7eca11f76891cbff277d41052a3d5cf6eda66320dcfe9b20a73488b0036aecdb1dbfdc10be97727e978d8b3a1a54385c2b0d81dc6b0dce
TLSH
T1F631AEF783F585BE8A1196F0AA14AE2FCE2D0515431C7C6AC5E4AE2793F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

a94531e9-3cda-4f1e-87fe-10180a0130eb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a94531e9-3cda-4f1e-87fe-10180a0130eb.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

c880e007-6515-4622-918c-650a6ae52731.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c880e007-6515-4622-918c-650a6ae52731.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d9187ec1c59a977a378736469f70ccaab80f518a0305b6307d2a6417d01cca71
MD5 de00cf141cf49ef1bffbbd15b47401fb
SHA1 b53e4e92b2475849cdb5eec9fa1ce6d697e4ce71
SHA512 bc838d6d29b3dde855f393db04bc212908b1609a3aac916287e6eae6060a74dd0b7206c1587938e18b5324c1f854ccbedb23b602f3a018a68a6ee2d739a8965b
SSDEEP 192:sxRaRIbu/fgsttqqzoA8p4H/g6+WNIYRLFLbjYGoIgIJ:sxRa8u/fgsttg2/5IUws
TLSH
T1CB32D8059E68AD3B8CCBD20DBB56BF53D6F9103265D11E08E6FC8A1C15E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e46fd6ad6305fcc62a9772aca46680f50ca3509bd3b8febdb3768c019bae0536
MD5 e7897714e766a092e9d592e2e811bde2
SHA1 fc437ac9b67877468bd40fad335c0c0537904b94
SHA512 61ed537bcca2ab42aa25f1dc745fd59c0de782275ac08614c8b6f53d226b1a27152a8ee7845a808047ec0fc225ebccedbdcb47f46dc6641ac3b4ca96da46d1a9
SSDEEP 48:KIZIpKyM87yt/IR+gKW1+QgKOwXFw0ovMYeqGkWqNPINgkKEBsmkQ40/te45yi:KIZGKyMKW/mKKYlZ2KSsal
TLSH
T159913C22703B8701397E3A0C95E8A66A465271F33068E52F7BF954B14E2FE150DBC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b4e9e128-e32f-4660-80cc-a9f707031aee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b4e9e128-e32f-4660-80cc-a9f707031aee.tmp
Size 11KB
SHA256 9a288349a495e889ff588f197fd7e2909d690d899b43c08dec9eb7327ae78744
MD5 41eab659182a06bf3419e51bdfc3ae23
SHA1 3e143b08df84591038fc38ae5b0a2b4bad619034
SHA512 0fac23f6ae4b4ed58fb206213dd6239e471504da2118a309d5ba8b87e4f2bca4cd21ca2d8f8b074d167bd321e918a667ba6f6f648524a1b02776041f1291e8dd
SSDEEP 192:sxRVRIbu/fgsdnSqqzoA8p4H/g6+WNIYRL5RbjYGoIgDcJ:sxRV8u/fgsdSg2/5Igwc
TLSH
T1C942E9159E68AD3B8CCBD20DBB56BF53E6F9503260D11E08B6FC8A1C15E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f9058640-7b80-45fe-9035-ae809d20d4b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f9058640-7b80-45fe-9035-ae809d20d4b3.tmp
Size 11KB
SHA256 507c0cbed42405fc61173e3570e9882e903e5d85bcbcc02ef8277233a4ba87ec
MD5 eff1338bfb9d28e72082aa48d637faee
SHA1 adf9cf11c7841b7d597461cb642a1dfd616dee4d
SHA512 f19ad978ab6d69899086f70619cad8f44dbaa0f98e2a9cf84ea34dc73aa46ae060ab06c5b2a27c8710b0dfed0b8a5864e6a65fe78805c3973d9d945eee8ef280
SSDEEP 192:sxRVRIbu/fgsdtqqzoA8p4H/g6+WNIYRLFLbjYGoIgDGJ:sxRV8u/fgsdtg2/5IUwe
TLSH
T1B932E905AE68AD3B8CCBD21DBB55BF53D6F9503261D11E08B6FC8A1C15E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e8f4ba3-790e-4f3b-bd45-cdcf62a90d0e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2e8f4ba3-790e-4f3b-bd45-cdcf62a90d0e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a3a7b2fa-838d-416c-b904-42d7a36bb01b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a3a7b2fa-838d-416c-b904-42d7a36bb01b.tmp
Size 34KB
SHA256 a31345a79209d03692be5987b4558c08498cad5ebc19e965e8193347c2ef22fb
MD5 de17e7fea3d36decaaa218ab8b63f96a
SHA1 2db5f453e2c2e59b2eeb6ba882da3e00863c47d6
SHA512 651dbfb3a1daadf6ace506ffa45825414ca3315b88f4cb03939b5896d7fc03ddd09e8503fe0c65e828c98db6b4632432cf503e67568d2570ea436e277901b79a
SSDEEP 768:CS3NowOC1rqvS5fgGM1TnXMqOaW6XuyLx:CS3niofgt1TnxO1Mr9
TLSH
T13EF2AF36AC959D638CE2D380F21A72926EE18163C6C41EA8D9DD7E0D06CB25F134BD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

baf8c78d-4f2b-4a85-a761-4cde62b7ce20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\baf8c78d-4f2b-4a85-a761-4cde62b7ce20.tmp
Size 40KB
SHA256 12eb6c67e6216d523fc60bf524a4416bebc17de67734cf4635efc8e20afea67e
MD5 7822967dfba1dd55567d543c71426528
SHA1 192b435477f58d4150705e5efaf19919fbbef74c
SHA512 4e0a092f9c98dd3086828439045fa08ba6de62d7cd83647b431a4305e058394be42f9bf9bc4634a1cfb0b03918d0d3595e600b657ca4dff95baf4752180f53ef
SSDEEP 768:V/UxvxjgC+m3dowOC1rqvS5fgGM1TnXMqOaW6XuCy:4Zj3+m3Xiofgt1TnxO1MBy
TLSH
T1E703C036AC956C239CF2E384B21E6397AEF14163C5C51EA899ED7E0D06CB25E434BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d38a55e6-61bd-48b5-b8a5-3eb43724bdd0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d38a55e6-61bd-48b5-b8a5-3eb43724bdd0.tmp
Size 38KB
SHA256 ae51e7225c415f6ac65134319c235fb6c714a4720d26f9037a364e20b2e811ba
MD5 dd2065ef5aa54a98c82c0fe551641f14
SHA1 465e235b96ef18971d5fe83527212514dedda59b
SHA512 797fa1324d2b5792c6578e5c9341c24f6b8f3760f865b8f10bd28d18163429060484f51bcbe12dd87b74514ec20b006f7651adcf6504db3e859b7960496cea54
SSDEEP 768:q/UxvxjgC+936qwOC1rqvu5fgGM1TnXMqO/WAaP8:vZj3+93micfgt1TnxOuAG8
TLSH
T17103B036AD556C639CF2D384B21EA396AEF141A3C5C51EA499ED7D0E06CB35E430BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b28da98-b677-41c8-aa83-588805ae185b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6b28da98-b677-41c8-aa83-588805ae185b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download