8ea7a91d6acd99295cdfdb8d17f6184e040162ac48c9b46217e303a22e51c378

Resubmissions

26/10/2026, 19:54

261026-ympgqsv18r3

26/10/2026, 19:48

261026-yjg89ags5s3

26/10/2026, 19:43

261026-yfbbjaywhw3

Analysis

user interaction
yes
max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/10/2026, 19:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
KdVxwGZn6go.html
Size 1KB
Sample261026-yfbbjaywhw
SHA256 8ea7a91d6acd99295cdfdb8d17f6184e040162ac48c9b46217e303a22e51c378
MD5 ecc0637ea370cbe0be25c01bc37af807
SHA1 dc9ea787a38105834675e64a85002d5ca4117c7a
SHA512 52cdf8474ab159f5f5fb758f6efc08019b11b92709dbccae1dff5c9c2f83895fee8f899019496b09b451b2bf0286168977a38ad9421c831c23f3d02f543798f9
TLSH
T10931445392901249BE0B55F6B8B33AF53E44CD5161E28919786A339EC2C14E2C27734A
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1808	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{333BE3E6-61A3-458D-A197-559F12C5FD0C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1764	msedge.exe
1764	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe
4532	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4532 wrote to memory of 4032	4532	msedge.exe	85
PID 4532 wrote to memory of 1808	4532	msedge.exe	86
PID 4532 wrote to memory of 4116	4532	msedge.exe	87
PID 4532 wrote to memory of 4116	4532	msedge.exe	87
PID 4532 wrote to memory of 4116	4532	msedge.exe	87
PID 4532 wrote to memory of 4988	4532	msedge.exe	88
PID 4532 wrote to memory of 4988	4532	msedge.exe	88
PID 4532 wrote to memory of 4272	4532	msedge.exe	89
PID 4532 wrote to memory of 4272	4532	msedge.exe	89
PID 4532 wrote to memory of 4272	4532	msedge.exe	89
PID 4532 wrote to memory of 3076	4532	msedge.exe	90
PID 4532 wrote to memory of 3076	4532	msedge.exe	90
PID 4532 wrote to memory of 3076	4532	msedge.exe	90
PID 4532 wrote to memory of 3968	4532	msedge.exe	92
PID 4532 wrote to memory of 4848	4532	msedge.exe	93
PID 4532 wrote to memory of 3968	4532	msedge.exe	92
PID 4532 wrote to memory of 3968	4532	msedge.exe	92
PID 4532 wrote to memory of 4848	4532	msedge.exe	93
PID 4532 wrote to memory of 4848	4532	msedge.exe	93
PID 4532 wrote to memory of 4968	4532	msedge.exe	99
PID 4532 wrote to memory of 4968	4532	msedge.exe	99
PID 4532 wrote to memory of 872	4532	msedge.exe	100
PID 4532 wrote to memory of 872	4532	msedge.exe	100
PID 4532 wrote to memory of 2424	4532	msedge.exe	102
PID 4532 wrote to memory of 4452	4532	msedge.exe	112
PID 4532 wrote to memory of 1620	4532	msedge.exe	113
PID 4532 wrote to memory of 4960	4532	msedge.exe	114
PID 4532 wrote to memory of 756	4532	msedge.exe	118
PID 4532 wrote to memory of 756	4532	msedge.exe	118
PID 4532 wrote to memory of 4720	4532	msedge.exe	119
PID 4532 wrote to memory of 4720	4532	msedge.exe	119
PID 4532 wrote to memory of 4600	4532	msedge.exe	120
PID 4532 wrote to memory of 4600	4532	msedge.exe	120
PID 4532 wrote to memory of 1764	4532	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\KdVxwGZn6go.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffc0052c188,0x7ffc0052c194,0x7ffc0052c1a0
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,18323333751192480048,8173665460869146965,524288 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,7046537495004571521,4078115371919911246,262144 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,7802909651013664447,2010499742187615907,524288 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:8
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,12713365214547499578,1524158604802109510,2097152 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,16923104721204035835,8172995825850571056,2097152 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,433300724815265384,8452960678000840262,2097152 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,1292407948323937575,7077460257095765399,2097152 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,14554093216886681189,7595496200965996525,524288 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,3951183745229348409,15135378705459873626,524288 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,7081123002706350706,13942296004322057417,524288 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,7081123002706350706,13942296004322057417,524288 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,7038072537228044973,11713917894806256330,524288 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,387095516357415221,5628273502414447196,524288 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,2736342772056521622,12448741624685566771,524288 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,7243583244017854099,10722307006414542491,524288 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:8
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,17829240524914459845,1045596730430907911,524288 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6456,i,17285313161072156341,5204412463002730375,524288 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6192,i,158599129516422761,4468058504687566316,262144 --field-trial-handle=2256,i,11709012302902002075,7443492402727154913,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1764

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3544

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1c98c9ea-8017-4c41-9e7d-4da4a98927cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1c98c9ea-8017-4c41-9e7d-4da4a98927cb.tmp
Size 18KB
SHA256 9633fd36d7a453ec2f520b9aa425345254269d265f857812bcc52bac7897c102
MD5 01edb2e5ab72f0b7475e65785a474efa
SHA1 e92d62a2baabde8e1f6082103bf32debb1efa70e
SHA512 ed51aca131b7c8f1a5235bc2e397b1c4a62f0196d83f5d401a100aeba6357b2170ec2de489860e55ce6d4486a31d606a801931f53d41770cea00d3b173cceb32
SSDEEP 384:fQkUSv0sNTMKw4ETDX4OjTVi0OGCj7+20em2ISMtUqIIlJ:h0zXLnFOxj7lRm5HUqL/
TLSH
T19E826B36A8686C779DE7E240F54B3643CEB48167DA852F94E1CD6F2C02CA69C230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32bcde15-e6ab-4045-8a83-5fdd970d917d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\32bcde15-e6ab-4045-8a83-5fdd970d917d.tmp
Size 21KB
SHA256 8ab97ad12d718a948509584eff3db02e102e2b6adf7f48ea6c73ccbb465b5fd0
MD5 4308f4b488e62f30529d18adf7b113a1
SHA1 e3efbda2f82fef00a042419359d2864c947ae223
SHA512 0556045d39762ac284687ab649d00f81f08ce7606f04fec0cad9c81f67de6c2a24af3a46ac5c24f54621c9a9cac2d94212208e51bf8ce3061bcd28256170256a
SSDEEP 384:WiFzQkUSvgzsNTE8TUNTUlIl/w4ETyX4OjTVi0OGCj7+20Mm2ISMtUqIIlJ:9Fd8lwg/XLnFOxj7lBm5HUqL/
TLSH
T1EAA25B329CA89D7B9DE7D640F54E3243CEB441A7CA91ABA0E2CD6E2C01CB1DC234BD11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38966bae-21d9-4b1d-afcf-f5121455b87c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\38966bae-21d9-4b1d-afcf-f5121455b87c.tmp
Size 18KB
SHA256 bb7f67fc54fce0d1569bff25272d38bdfd5fb0c4eb5cc453dc81c85b797039d2
MD5 743438dbc088def6298732608a7c4b2c
SHA1 3e0a053b82443653a1c154d16b3da3855779abe4
SHA512 b5dec14f30029b133c6d9af87fe92eeeddf05632bbf27c8cd37d3d4c812647e9a5d84ff6775b78ad90cbe6eef6cb8b61c5d799850fcb11bd029866b131be823b
SSDEEP 384:EQkUSv0sNTM/w4ETyX4OjTVi0OGCj7+20em2ISMtUqIIlJ:00JXLnFOxj7lRm5HUqL/
TLSH
T14F826C36A8686C779DE7E240F54B3643CEB48157DAC52F94E1DD6F2C02CA69C330B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

157cbe8f-2db9-4bb9-aa87-040b867e834a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\157cbe8f-2db9-4bb9-aa87-040b867e834a.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

4f096af9-0629-4947-9951-87eff2fc62b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4f096af9-0629-4947-9951-87eff2fc62b9.tmp
Size 10KB
SHA256 4a2fed460296656483ea9e30d823178f976caf761fa09d48b14861cc6c58b785
MD5 dfec1fdf16bc5cdc0daa8cd55b273883
SHA1 a4dd97766a0ab09350fa9cb57f09c4cf79a776c4
SHA512 b8cc30b2cc3c10cd5773445e343cef56280a8a4bb7669b2b672248937f8c913822dddd1dc8580b8a4df4133691fbf86748be10a7d11482fbfe673462ae7f1550
SSDEEP 192:sxZYRZvWl/fLs4slfjIdpH8HW6+WNGYRPx0efl4Ig5IJ:sxZYml/fLsxlUcHbGm1SC
TLSH
T18D22DA15AE38693B8CCBE21DBA55BF53D6F9503295D01E88EAFC861C05E7ACE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e3815a3-1b1e-4804-964d-e4d429995919.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5e3815a3-1b1e-4804-964d-e4d429995919.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69427f1c-a53c-40ec-aca7-50cb2070771f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\69427f1c-a53c-40ec-aca7-50cb2070771f.tmp
Size 10KB
SHA256 c0c73ad0e742333fa85545c099b97c88c68452cd6107a6b72325d910ce74bbd2
MD5 d9079469c0e2f9bef8ad1f620f7ebed3
SHA1 ce93a9aae4e44037e01828c907e352038c0fb548
SHA512 dacfbd3b4ddc525862eae8e8b8f1870e26d6aec34ac682f5107015969df0dc1755f5787833a42a61ee1a44be1c529d0aa56a466820c3bc93ddfd0c3642322c3c
SSDEEP 192:sxZYRZvWl/fLs4xlfjIdpd8HW6+WNGYRPnpWfl4Ig5iJ:sxZYml/fLs4lUaHbGmYSY
TLSH
T1DA22C911AE38A57B8CCBD21DBB55BF53D6F9503295D41E88EAFC861C05E6ACE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7e3a26bb-f3ed-43cd-8625-cd0a53dc3f67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7e3a26bb-f3ed-43cd-8625-cd0a53dc3f67.tmp
Size 9KB
SHA256 160c10c9c90615d7f88cc92b93b02f119f905af89e49144d129ecf9b0fd246c3
MD5 c9becad1c7b9c68590fd01d151aa0b19
SHA1 c6cbbea37c2657c90938427f07b7a63738bf1a3d
SHA512 3c48ede0a34d1814711356496e753bfd7a40b49bf63e31d7e2d32a821b922a23e95b3b5336a5471c938771cac07bae2c32d7f36540b571ae6fb2ea1f6e912c3a
SSDEEP 192:sxZYRZvWl/fLs5xlfjIdpd8HW6+WNGYRPnpWfl4IgrJ:sxZYml/fLsTlUaHbGmYS9
TLSH
T12B22CA11AE38A53B8CCBE21DBA257F53D6F95032A5D41E88FAFC851C05E6ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 9ffcf54604c99b540d961188299e97ff39efb0f6161a279a6d76db044eefee83
MD5 1da4bd30c34b65b9792026718cc4b83a
SHA1 fce1f4681e4c21fc767ae7f033291367ebaae4df
SHA512 71db705f8ac0b542e385a8ab7455791ddc9a012ac024a2f74bcbf47d8b1aa16557169a53be36f89a108f94480f53fb04bb162a7c94c8e0bdf7996f6ab8bd9df1
TLSH
T1C0E0268414CCC62EA218749702FC730C83903E6BD2C0699E2701C9A57047460A6DE7D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 090746b0b2ab70117d5214b34d361335b447c69b6cd6c649b1ba3322c57bf26f
MD5 65052bbc96a347fd9ec84a3a874f2d04
SHA1 fef98f65ea2fad9841c1b9536a1163125fa0446d
SHA512 09eb051450324e7a51829ce80c2e96d5b7c41f6fbe41c4b7342eec48d67f068da75059adbeabcd8bc53dd522b0214c96142f1c46a885d09a6e82ddfc70ba47a2
TLSH
T149E07DC814DCC22EE22C688B027C675C8B80BB5FD7C06DCE1705C985B249064F3C67D0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 200d1e2b2598643b2b8a4e8094b1bbcc492f1f9d4329331a22af932b2c497e9e
MD5 f1b91490271ea17163cbdd7161b4884f
SHA1 3e253311131fa0b204d1fcc9482cfbe10b22b400
SHA512 122933455e4aade198e0df29824b4d85fc84b62495956d2a520f12d953d95703536cdd29f2db7206de90126f1cd1f5980724fb1a690ae49f94ad0f88c43a2e55
TLSH
T1EC51A88585918065F7E8817BA2FA1ACBBA3C678055835F1126EAFDFA9C7671AC108040
MD5 SHA1 SHA512 TLSH

Submit Download

2dd2fd92-cc82-47d1-9c9d-88d53ab62915.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\2dd2fd92-cc82-47d1-9c9d-88d53ab62915.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2a971e14-e77d-4ed3-8831-e6aa5a6a6bee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2a971e14-e77d-4ed3-8831-e6aa5a6a6bee.tmp
Size 949B
SHA256 71f1d9abdbd467a2899a2021ee620ab55df223179d6b5dc6f4d7ca269e5181cd
MD5 10f4149412fc058d5136ae50ab88e2a2
SHA1 ab2c4a663b14092c46371e214ed1818365b85e35
SHA512 9e00349ec2d1461871572c2c9efb50b913ca188968067d657baa0327c9800ee7fbbc30ce4e6364cf4b307270843fbf90c7a7521d12b709a98102383d15ca2583
TLSH
T1BC11BAB3C3E5856E890156F05A28AE2BCE2D0A06832C3C19CAD4EF2B97E3175E10255B
MD5 SHA1 SHA512 TLSH

Submit Download

68248bfa-1366-4fc1-8e29-9f1d779df237.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\68248bfa-1366-4fc1-8e29-9f1d779df237.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

795b4e72-28fe-43e4-b870-83071b0d6691.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\795b4e72-28fe-43e4-b870-83071b0d6691.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3b6aab496c0cd480f7ee8de2cecbe63d9e6d75044c4ff5ac694a468ac7f03c7f
MD5 3507124cfece82e1a66f2d03fead8f1f
SHA1 72d13a2dc220087bb08942372c8140f2f1647ba8
SHA512 8e49ea4caabe29c38463ff12d32ff9ca9b4fd6e5ca4c970471e8ac934a329021f4c9b8107d83c0093c6a50da605db77a1047da7b829bdd96ebc8bab3bce6910f
SSDEEP 96:K0mgeNiOw8YEI83viWEK6hi4EmuOXwuZPJoPTBDvjI/OSibjK66i9jm5xmHdURYW:zlXKY
TLSH
T148910C45707B02443DBD695886F5966B028232B33059F92F7FBC44B59EAAE040EFF9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f03ddcd8-aa43-4d52-92cc-024331526405.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f03ddcd8-aa43-4d52-92cc-024331526405.tmp
Size 10KB
SHA256 2fddf00df516eb888aaf9febb925648c2f9dcf778b0b98a9d5a4b840ad335fe8
MD5 0bb32c74e2b4d82299602e2daa784799
SHA1 6ea21976cb9e1a4988ba7edf1857f1fd7a65ece1
SHA512 70bc9cc9da6a2b46386bddcab282a7df3dc3d672b98a585e92f490499e0a86dbb767837a6ea0098f495c90551c6cf4ca14a0c4a3cbae3b2d56c754110661e853
SSDEEP 192:sxZYRZvWl/fLs4slfjIdpd8HW6+WNGYRPQfWfl4Ig5IJ:sxZYml/fLsxlUaHbGmzSC
TLSH
T16122B811AE38697B8CCBE21DBA557F53E6F9503295D41E88EAFC861C05E6ACE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1475ac7-b8cc-4e6a-96a6-6cb1782d39d0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f1475ac7-b8cc-4e6a-96a6-6cb1782d39d0.tmp
Size 27KB
SHA256 2be53a7faf6f97de7389129de7d79515618d5b666abf6f5028161cec62cf0d35
MD5 40b104c83442b051c1503ef863fcb0c3
SHA1 3d821e8fe9e17889cd3023507e80a626ffaa4486
SHA512 79501736f8c36b329d0d1625513219e467517a584c5e1cbd8018f29cbe1e95c36973b18e384bd0e434054996ecf34f25dcf3388262fa9394769d6135b0fed3bc
SSDEEP 768:0KK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3HroQ+wO:0KK9uzYWvcQWsu1ja0HL7Q3UQ+wO
TLSH
T1E3C2FA3F640CCB7E5FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bfdb2320-43cb-4301-850a-72da61f7e948.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bfdb2320-43cb-4301-850a-72da61f7e948.tmp
Size 8KB
SHA256 47e9d50c0e8a4b61856f293a3cf36855cfbac710fe5b162db83b6c9f93ee0e2d
MD5 8b0c9f4ad55e4a9b09192b53decd5f16
SHA1 c505cc190484b3c41668710a6eddff73b546d2a6
SHA512 9b785c5f2ecc0bc8d26cff309fcf79d80b6a4c4f1bf58bf89cc46f91b560d6395df51354fba6049c5245c424554c8dc807ba6d45d773b0c32a2fa01039f6224c
SSDEEP 192:SONY6ygpQmiUy2BtOCTVg10OQm4zPP0VU6:SONY6lHttOCTVi0O8sU6
TLSH
T16502D834BC783CB78DB3AE45F58B27139FA4116BDA562B84D9E81E1C01D765C2307936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ebb44e4a-c3b2-4d4b-8bc9-59f5830b8098.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ebb44e4a-c3b2-4d4b-8bc9-59f5830b8098.tmp
Size 8KB
SHA256 755b873c0b34b1fc36e6c5ccaf95e59e2f5c84f129063f7234e4a72be697af0d
MD5 c318160cc7fb297b4cacdaac0306a9e2
SHA1 f687febb6fb1a335ab1ad0f42d21f1adcb90993d
SHA512 3ef29863a3f4dc5dc800d11de0ad8fe7487570c72e20eb4f189110b2e04f7b7fb4fcf83789f7aa6f578762da27e90ea9727d1460fd2cf98a6b5298bc5ed91c3b
SSDEEP 192:IONPfB6yTQmiUy+BYOCTVg10OQmMCj7+2063UiqGU6:IONPp62nYOCTVi0OGCj7+20TmU6
TLSH
T1FA120935B8686C775DE3A584F48B3653CEA84167DA867BD0D1DC1E1C01DFAAC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

08072468-59f1-4aa6-a12b-4b07413cc99b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\08072468-59f1-4aa6-a12b-4b07413cc99b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1c02638c9261b0a254028d29c52232c8c48b0b846fc489eb3bad568f3ac443fe
MD5 c7aaeae693b36e1a86b39a05e83d0788
SHA1 479f81314a12431e97e5414b1274471b2f997d0f
SHA512 4fafb8f3647cd1dc2725c652900d736df1b41111d6f7d8080668671f27edd5b8b70a93fe23318e5b4ac62a2d8796dda08e92bf766a5c8c111e375d7be4e7e1b9
TLSH
T1C4412998A6EA1148B3B36E5AAFF7B55E487EB9772E06D49D00110D4F0663A40C8B1B33
MD5 SHA1 SHA512 TLSH

Submit Download