fa101115a75d193b4fc75e7315069fb731199bad0a337491861e34d2f2fcfc05

Analysis

max time kernel
148s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/10/2026, 14:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/app/index.html
Size 71KB
Sample261026-rhl3gset7t
SHA256 fa101115a75d193b4fc75e7315069fb731199bad0a337491861e34d2f2fcfc05
MD5 cfdabd620b778d130b40e9432d1a6898
SHA1 b69b6bcdb88c8532ac5f3887c87acfa5a44096f9
SHA512 83b66bd2b34b8ccc3c238a0ecce19a7729132868817696fce12273ff5886760c231c3281b6e6902aeb9d975a948eeb411b6498201d4cf2668fde648275027615
SSDEEP 768:m0Cy8Fkf9F8I/nq5/TRlluFdGou+KgopuduphrN28aBk+zBVLnIRYeqWcw4NRAW5:vCy86EI/ElluFdquduptNFXQRJ5L
TLSH
T10F63092561BB06375A3351B42F8BA105373990037245CE6C7E9C8B849F8E578C6EF7EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4836	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{5AD90FBA-3C18-4825-9FEC-0B0C26F98B62}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5108	msedge.exe
5108	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3508 wrote to memory of 1216	3508	msedge.exe	82
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4420	3508	msedge.exe	84
PID 3508 wrote to memory of 4420	3508	msedge.exe	84
PID 3508 wrote to memory of 4420	3508	msedge.exe	84
PID 3508 wrote to memory of 1612	3508	msedge.exe	85
PID 3508 wrote to memory of 1612	3508	msedge.exe	85
PID 3508 wrote to memory of 3944	3508	msedge.exe	86
PID 3508 wrote to memory of 3820	3508	msedge.exe	87
PID 3508 wrote to memory of 3944	3508	msedge.exe	86
PID 3508 wrote to memory of 3944	3508	msedge.exe	86
PID 3508 wrote to memory of 3820	3508	msedge.exe	87
PID 3508 wrote to memory of 3820	3508	msedge.exe	87
PID 3508 wrote to memory of 60	3508	msedge.exe	89
PID 3508 wrote to memory of 2160	3508	msedge.exe	90
PID 3508 wrote to memory of 60	3508	msedge.exe	89
PID 3508 wrote to memory of 60	3508	msedge.exe	89
PID 3508 wrote to memory of 2160	3508	msedge.exe	90
PID 3508 wrote to memory of 2160	3508	msedge.exe	90
PID 3508 wrote to memory of 1052	3508	msedge.exe	95
PID 3508 wrote to memory of 964	3508	msedge.exe	96
PID 3508 wrote to memory of 1052	3508	msedge.exe	95
PID 3508 wrote to memory of 964	3508	msedge.exe	96
PID 3508 wrote to memory of 5012	3508	msedge.exe	98
PID 3508 wrote to memory of 4292	3508	msedge.exe	107
PID 3508 wrote to memory of 3976	3508	msedge.exe	108
PID 3508 wrote to memory of 5104	3508	msedge.exe	109
PID 3508 wrote to memory of 4308	3508	msedge.exe	111
PID 3508 wrote to memory of 4308	3508	msedge.exe	111
PID 3508 wrote to memory of 5108	3508	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\resources\app\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff87062c188,0x7ff87062c194,0x7ff87062c1a0
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,11730446496337226788,17831635258283486324,524288 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,17572266868239786074,7094415933986386350,262144 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=2812 /prefetch:2
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2136,i,2399280902288959306,3274666336369328130,524288 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:8
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,14161568228129059325,12583012355923063558,2097152 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,17291745646233017067,14167374970936509260,2097152 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4028,i,2960858785083495607,9745255669841877170,2097152 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=4048 /prefetch:1
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4100,i,17375360192407832535,3335955617059146706,2097152 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=4084 /prefetch:2
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,15769402278306602973,14458745169009320116,524288 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,17494153202018947374,3402409940124362493,524288 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,3243729255760549758,9092459918692338835,524288 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,3243729255760549758,9092459918692338835,524288 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,14752090011331069480,197686947086171657,524288 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4104,i,8355403745139013858,15853094883332016839,524288 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4120,i,4254067437264653054,9701194159804401844,524288 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=4140 /prefetch:8
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,17293266413722349429,8458153208667181726,524288 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6060,i,15787532487053808088,16818779107770593234,262144 --field-trial-handle=2816,i,10570303453109247805,9762996166239924483,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5108

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3952

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

54143b2b-4153-4144-99c6-737a0ff07b0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\54143b2b-4153-4144-99c6-737a0ff07b0d.tmp
Size 21KB
SHA256 4258dfa7d1a947fd46c158aa8432c4727ede4822f97d03b83f52b9acc270fe20
MD5 c846489cf6f3740135d02a828cf4f2e5
SHA1 455c0996c52cd6cd9fdd34a99d4decdf79f49380
SHA512 7fec89e1e33f5213b9edbbc4c468d2a9d9e6304a7bc9e38a8263e015cddf613aea75989959d6126362f04f84cae4737657b44237478961207fb7ab67e7701b50
SSDEEP 384:DiFzQkUSvRzsNN8TUNTUlIlJ7TePp5u8iI8AYo6N2IluhIIl0:uFdhswgmHkI5yN5luhLa
TLSH
T1BAA25C3758A8AC7BAEA7DA50F64E3603CEB08267D7D4AB94D6CD5A1C01DB1DC1307B12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56760872-5ed9-41a3-9799-eff5ec63fef8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\56760872-5ed9-41a3-9799-eff5ec63fef8.tmp
Size 8KB
SHA256 797e34472424eeb67ee9f43ccc8fcfa8ca175d405d32c217837d0bc5b14c086b
MD5 7345355e7cbd8073199a4713304b9879
SHA1 18514f042af37ec9a17837801f1467afeb2abeb0
SHA512 6856b2340874aa161193171b84c666da749eff30a4d608e9c2fd06bc7df3287b27f839ec727550f58a178e795bc7e7c4c6d8d8718d842d404fd6476a4ef4286d
SSDEEP 192:uON26iD7QmiUyVUNq5u88PINuAPwoJuZ7qeU6:uON2685Nq5u8iI8AYowNU6
TLSH
T1F3122B3568787C6B6DA3E855B58B36178EA4422BE7C97F80D8EC161C05EF2DC2307613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5efcf0e6-b2de-4c70-9283-150b8b300460.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5efcf0e6-b2de-4c70-9283-150b8b300460.tmp
Size 18KB
SHA256 29707c99f50301f602413d363527364fe9f2c78d095cc4647a10b8e2c4d75678
MD5 cbed7e43920433cdb0dea61a180949c3
SHA1 86b55d2d58724b4305fc4523bdeef547a9285522
SHA512 201ae557102cac22a48667aa51d260c0192f7aa880c41db23604b4ff1148badf4564edd35a97aeca9429ee69bc93f5868e157fdc89000e645c90df0d9e9c4f41
SSDEEP 384:IQkUSv0sNzc7TePp5u8iI8AYotN2IluhIIl0:A06HkI51N5luhLa
TLSH
T193826C3668B87C679DA3E560F64A3A038E64825BE7C86F94C9DD6B1C05DB2DC2307713
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

05241a00-3f12-450b-b1f6-81cadf99b152.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\05241a00-3f12-450b-b1f6-81cadf99b152.tmp
Size 27KB
SHA256 40325c05b4b3de8a39ded6d55a468e3439c1217dd42a9ef6f95397c7494327d0
MD5 7bac0fe20a56ad244ac6e14e5fdecaf2
SHA1 faef4bc4df72e762d587c0e2cd42f747ff40aead
SHA512 6df4f77c45c80b642285f84b12047f9f72a3fa913106e063c36f584d6c48d1bf27f01798b6f1f761d450e5c61d5ba716dad588f9509215d1f6952b038975ffdf
SSDEEP 768:wpyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3LrowZo5:wpyQRbrWvvlpZu1jaXKLf334wZo5
TLSH
T125C2F92B640CCB7E4FD01E9DDC6A6F976EA802C766588D4047FE984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

058f74fc-0f2e-44c8-ac89-3ba4da703144.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\058f74fc-0f2e-44c8-ac89-3ba4da703144.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0933f780-48ef-4fa2-b1ea-5227752e56ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0933f780-48ef-4fa2-b1ea-5227752e56ba.tmp
Size 9KB
SHA256 e59ec1d99a7a1768ab0e155196ed6f4dc65c4b1a13fd3c6372da131bbfdd6546
MD5 f28b875695dc7a593c0a0dbc76666371
SHA1 84e197fa0055d03fd8c45a5d6d12adc417bcd3e0
SHA512 b668a8e30ac8276c0d485c44bb900910574c0e2aaf44f7cac8c17fff7b95628f0ee8efa5b448751a785e9e798b4c88143838056e0871d278d4bd1321ba62997b
SSDEEP 192:sxZ5R5Wz/f2sERyIdpd0HW6+WNGYaJyftIgrJ:sxZ5uz/f2sER7iHbG89
TLSH
T10A22D9516E28A57B8CCBD20DBB25BF53D6F95132A1D41E48EAFC861C05E7ADE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4410eb76-cf4a-4390-8809-87bcae391e97.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4410eb76-cf4a-4390-8809-87bcae391e97.tmp
Size 10KB
SHA256 1ab9bc255e2683cf913c1fc11575392ab8914d4fcfe6fecd120019d6a3527fb6
MD5 e8c2183a0ecaaa2e7d7698ce49692381
SHA1 c5939b6fb6b55ff8fad4f730561df187828b20d1
SHA512 0c1bc7456e2f26056144f9e69821d98d68432588caf41715c6fe861e4e084b97e57084dc8b9d4e0b5953d103af212205c07aa7a1e4a4306c239db76619d22de6
SSDEEP 192:sxZ5R5Wz/f2sdRyIdpd0HW6+WNGYa0mftIg5+J:sxZ5uz/f2sdR7iHbG7w
TLSH
T13522DA516E28A97B8CCBE20DBB55BF43E6F9513291D51E48E6FC861C05E7ACE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6bc9be56-5493-4986-b263-47bb07f4f850.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6bc9be56-5493-4986-b263-47bb07f4f850.tmp
Size 10KB
SHA256 8f4b0a617709b77181fa82a2ea3307e76637a22c4ca97c3d32b445ccbf11a029
MD5 743ce920a1b6a06d4b010d9196dde81b
SHA1 31ad40989ca6a645d8e913a12f07324a57a74136
SHA512 7e44e38417b434d860d0d21be908eae1abeed4435378ad28a94507c40dc73ffcb5b7906ac9f3b26fa0c62add4479577500d43031bcaccc1123fa124f20563261
SSDEEP 192:sxZ5R5Wz/f2sdRyIdpH0HW6+WNGYantftIg5+J:sxZ5uz/f2sdR7UHbGbw
TLSH
T1EE22DA566E28A97B8CCBD20DBB55BF53E6F9503291D11E48E6FC861C05E7ACE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 32de96863ee4b919a777cff597f83f4119e394341159cfffd79d64694a9cbe12
MD5 ae53fb8c1b76e4394cf8cb322dc52ddc
SHA1 0874b173ca450e4afea920b5bc013e82ae1db541
SHA512 c7db181b0f4f4e83be98de781dea60f3ed4d1e9eb0823fb02c4ff6fe9af0cd44595d4a4a45e1cd9a5d787acf91d74d32f8b1623b944c3e42847dbf74fd57e8aa
TLSH
T1FF6193A954A00071DB986132B2F4A0873676F0B55FA3EE7200DCC8FFBF4A7599387220
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 be15f9f08028327a53844b102b736406134ad1cca514d690554f05cdcd3b5644
MD5 3b09423e890335b7968bd20fcb6def8a
SHA1 ae424ae531848848c1fe61c231006ef8e0cbe70f
SHA512 fde110f145c44a29fc23a6f02f49934ad12211941827cbef8fa00691ab8f74444eeddae14f8b1520bcd78f7c44994e51a23b30b7d465314d7081e702c9448539
TLSH
T1A36193A954A00071DB986132B2F0A0873676F0B55FA3EE7200DCC8BFBF4A7599387220
MD5 SHA1 SHA512 TLSH

Submit Download

87db5be9-bb43-4d54-a806-5ecc9f4866e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\87db5be9-bb43-4d54-a806-5ecc9f4866e5.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

7474afd1-e4f3-48b0-ba9d-cdfe83764ded.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7474afd1-e4f3-48b0-ba9d-cdfe83764ded.tmp
Size 949B
SHA256 42ec262cfcf4b1878b1aaa6c5e63aea5e55875edbc98f9962203d76787c7ac49
MD5 d82e9dcb1edf9c58145d44c4937255bc
SHA1 c38b92c87728d7b5e3f3aa21118723556a1d7dbd
SHA512 44279e6ca9f8a3e8690658eb2bcb9a0c56e1576e12af75fe2c02eee95136dc91be9346c49bd4c2aedb396c988d46892de743124b8b27f58aba4ef2196c181102
TLSH
T18E117AB3C3D585AE890556F05A24EE2BCE2D0606431C7C5989D8EF6B93E3475E102A9F
MD5 SHA1 SHA512 TLSH

Submit Download

8a9764ad-c92c-4b59-b84b-f57774f067f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8a9764ad-c92c-4b59-b84b-f57774f067f6.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

fccea20a-ff5d-49ad-9ed9-6cf4d171017f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fccea20a-ff5d-49ad-9ed9-6cf4d171017f.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

e3434444-9be4-4221-992f-c83a5bc48e76.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e3434444-9be4-4221-992f-c83a5bc48e76.tmp
Size 9KB
SHA256 1f6a6e0c8d3adb339f6c430253d9a6dab8364a555b17ba85fe69fb99d016aa98
MD5 1d2952ce9c55fb6c6523ae346076110e
SHA1 c9a22a068c6a9c51e8f8cdbccdc8cbf75320c5d8
SHA512 a5bd8e41873fb4678c2fb6737ab6680a6644ab4baf43680d0feed604c35224b11fa3142cff8398350925fafb3f7e5a7866652d4d8baaf5af1d8d1e7659318919
SSDEEP 192:sxZ5R5Wz/f2scRyIdpd0HW6+WNGYaJyftIg5MJ:sxZ5uz/f2scR7iHbG8y
TLSH
T16222D9516E28A57B8CCBD20DBB55BF43D6F95132A1D41E88E6FC861C05E7ACE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

83b022d9-24af-432a-ba9b-6cdaf6527009.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\83b022d9-24af-432a-ba9b-6cdaf6527009.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a2f42a9d-63df-466b-94f5-ef76126f7be6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a2f42a9d-63df-466b-94f5-ef76126f7be6.tmp
Size 18KB
SHA256 29b2e3265a007f181db6a8aa7f1c0be701eaf47967d74bc08391b781c5c2c71d
MD5 79b462680478de25e5707d861e8e3d08
SHA1 ae4075f21433f2a2439a47b68583b8fe1fef1f89
SHA512 f4c485881bea296d7d47dc4eb16a8dc42bb0bd743c190f388876a8278eae8f668088e990cb21566e15d9a95f1e7e5db6ce1be091317890935989f9d46329e44a
SSDEEP 384:RQkUSv0sNzJ7TePp5u8iI8AYotN2IluhIIl0:D0ZHkI51N5luhLa
TLSH
T13E827C3668B87C679DA3E560F64A3A038E64821BE7C86F94C9DD6B1C05CB2DC2307713
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b3c529c9-14e0-40a3-8e71-3c1db6bd3e1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b3c529c9-14e0-40a3-8e71-3c1db6bd3e1d.tmp
Size 8KB
SHA256 8428247b51042b65dd76d0c181597d582bf286e3b2e2efb9542b35f8387bbb2a
MD5 b409a26c1a2e406006e379092a9f6ab0
SHA1 7579fffacd55d75e932561307e48170fb5b4576c
SHA512 862cb5aedff0b27caa21e8d5bf2e1888e9f86df32b1e593c4f5b3e4c1aa8ae3dfafc0429a8bf5a0e9439142b7445fe233339a0c1c24871f97551073e8395b1d2
SSDEEP 96:PqONk/QsjpfwDISp5ih/cIPURHl8h4otop5FmDQBfPGxvw45RxmJm78lFDxv+Njz:SONX6iDCQmiUyuUHq5u88PINhSqH1bU6
TLSH
T126020939AC783CABAEF3AD15B5473B179FA4012FE6952B84C9E80A1C01D728C1303623
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

307737ef-fc83-406c-a656-fdaa438ed22b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\307737ef-fc83-406c-a656-fdaa438ed22b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 21589cb8eb85310c2657161f827472581af0030e849daf1b6155b442f69893a0
MD5 51d271bb9aaf3b2d25ce674807ae3041
SHA1 446a7934b36ba3ec35e1823f3d6d3084220f1cdc
SHA512 68152492b80700ec33473f5f0084d0897d4aa97035cdbe7ff66c398993519b7c75416d951dfb173dca008f68e27baa681b7a259cb8963f2af62ef454977adabe
TLSH
T1BE412958B6E91108B3B76E1A9FF6A86D887F7D272F46D45D00110E4F4A22B40D862737
MD5 SHA1 SHA512 TLSH

Submit Download