79a2d47d8ca9f5895bb1c7762181c223ca3070d72a089590a8c8e4ab07ab7d4d

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 03:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
79a2d47d8ca9f5895bb1c7762181c223ca3070d72a089590a8c8e4ab07ab7d4d.html
Size 7KB
Sample261027-d5m2eabs2p
SHA256 79a2d47d8ca9f5895bb1c7762181c223ca3070d72a089590a8c8e4ab07ab7d4d
MD5 327052bd8d3b6a0571b9996576f45229
SHA1 5fc60f26b90915d5dba818a6f9105e43b17eb4db
SHA512 e3349dcf00096eb926c64b7e1e2b9debfffddd45c14056e6161e37ad4bd7cc0654fef015eb0b9fa6a2c48642ee3b8263db143a9ff9b2f80fcd34762694976d7e
SSDEEP 192:lNH47glUAzqehICW4yOpAFvFaSli6vD6ICCYK9jxLS7:lNY7hAzqyzpAFvFplhb6ICCYK9jxL4
TLSH
T171E171E151C46225A337C9C3B4427BAF76508913F44B3E2CBFA031B6CEC79A5660B51B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
64	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{94EB7778-52B3-4793-887A-B68293D93D68}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1584	msedge.exe
1584	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe
4336	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4336 wrote to memory of 1140	4336	msedge.exe	87
PID 4336 wrote to memory of 64	4336	msedge.exe	89
PID 4336 wrote to memory of 2544	4336	msedge.exe	91
PID 4336 wrote to memory of 2544	4336	msedge.exe	91
PID 4336 wrote to memory of 948	4336	msedge.exe	90
PID 4336 wrote to memory of 948	4336	msedge.exe	90
PID 4336 wrote to memory of 948	4336	msedge.exe	90
PID 4336 wrote to memory of 4088	4336	msedge.exe	93
PID 4336 wrote to memory of 5072	4336	msedge.exe	92
PID 4336 wrote to memory of 4088	4336	msedge.exe	93
PID 4336 wrote to memory of 4088	4336	msedge.exe	93
PID 4336 wrote to memory of 5072	4336	msedge.exe	92
PID 4336 wrote to memory of 5072	4336	msedge.exe	92
PID 4336 wrote to memory of 4968	4336	msedge.exe	94
PID 4336 wrote to memory of 4968	4336	msedge.exe	94
PID 4336 wrote to memory of 4968	4336	msedge.exe	94
PID 4336 wrote to memory of 4236	4336	msedge.exe	95
PID 4336 wrote to memory of 4236	4336	msedge.exe	95
PID 4336 wrote to memory of 4236	4336	msedge.exe	95
PID 4336 wrote to memory of 1864	4336	msedge.exe	98
PID 4336 wrote to memory of 1864	4336	msedge.exe	98
PID 4336 wrote to memory of 4256	4336	msedge.exe	99
PID 4336 wrote to memory of 4256	4336	msedge.exe	99
PID 4336 wrote to memory of 3988	4336	msedge.exe	101
PID 4336 wrote to memory of 2496	4336	msedge.exe	110
PID 4336 wrote to memory of 1524	4336	msedge.exe	111
PID 4336 wrote to memory of 4808	4336	msedge.exe	112
PID 4336 wrote to memory of 668	4336	msedge.exe	114
PID 4336 wrote to memory of 668	4336	msedge.exe	114
PID 4336 wrote to memory of 1584	4336	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\79a2d47d8ca9f5895bb1c7762181c223ca3070d72a089590a8c8e4ab07ab7d4d.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffafe3fc188,0x7ffafe3fc194,0x7ffafe3fc1a0
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,17148889912008872935,159893621578359444,524288 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:3
  2⤵
  - System Time Discovery
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,12208855762209734144,13657155263100470147,262144 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2028,i,11569804969947803954,12637972424449505260,524288 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:8
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,12629734894756218416,15377418142923401423,2097152 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,13402342968060652142,9704200133251922094,2097152 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,10178318650810173555,2848543643990462926,2097152 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,8644148618133494327,14791123533258552085,2097152 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:2
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3708,i,1496253001168618901,5137939620328150110,524288 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,15563425776200663944,278671555004502431,524288 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,8816980359816100960,6909305483362608949,524288 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,8816980359816100960,6909305483362608949,524288 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,10504808575045252715,2675573834790983713,524288 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,7977010613318521007,1138665332952756862,524288 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:8
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,2820422746458966022,3796401468647029304,524288 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,1686518630810556767,15657912231021578820,524288 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:8
  2⤵
  PID:668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,18066986587190661224,9375797081043683226,262144 --field-trial-handle=2332,i,551685322766992492,16577068437876515626,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1584

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2120

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3e78157b-3254-4a31-9400-73f7ee1330d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3e78157b-3254-4a31-9400-73f7ee1330d1.tmp
Size 8KB
SHA256 9e0e70d1efaf8998fc9d2db0d5710b864a710b10aefcb3f75df6ca1ba3befa84
MD5 5b3613ad7a847bfa4b99673108639bf1
SHA1 e09e909740d760a63f4389a71006132f3b0caf6e
SHA512 e9dfb9951811bd47b6759a68540da1df65963d7e6af996a87e39d570c2ab6fb560b75bcea353880f4aa5ada6b0eb3146e67b8e48b4e28de79a3eb6a9b395476b
SSDEEP 192:EONO6nnHGQmiUymeQYcX5hQDP1Ajzor181mI7Mc0cU6:EONO6nCkQNX5+DtI81KHhU6
TLSH
T17702CA34AC787C7B9AF3AE45B0872713AFA52167A5952FC0DAE81A1C01D779C2306933
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4e437c64-9b0e-4787-b8f9-6577f143202b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4e437c64-9b0e-4787-b8f9-6577f143202b.tmp
Size 8KB
SHA256 a234d8200cab7ec7c61295ca1f51680683a9402910f068ebd3d3e197345a4517
MD5 21e291e0b349770b7576603e621e812e
SHA1 f37d5b6eb24959f4f4d257210dbc97152f993ee5
SHA512 e3ad446fdec7c175d80d521b56c7c1775168a4a87c5c56a040d409c064bf6ba99f1daa4d802e381a259e2bda8b120d31ea2761e0de984e24fef574be4d44758b
SSDEEP 192:nONH6nnHnQmiUyfeHYcX5hQDP1Ajzor181mIwXXSJr8Qg3Xq52U6:nONH6np3HNX5+DtI81KwXiJr8LU2U6
TLSH
T159120C31A9A8AC6B5ED3A5D5B0873113AEB55127EA857FC0D6EC1E1C01DE79C630AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ce9b7ab-6188-4c08-b7a2-f49a0ecb2aeb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9ce9b7ab-6188-4c08-b7a2-f49a0ecb2aeb.tmp
Size 21KB
SHA256 1a38d5cbb30d45bd11f139d2303f99362237d87c18a21fe5d25702289f817663
MD5 7198773607f0c3071266a26710acd040
SHA1 f2aa2294e08a56155e0bc6c5a168b7af919264c8
SHA512 3d3960288183608c1d836cd6776f7d721daf717a11f7876f3b6b7d7307a35628716b8dd1650043537229d63933bfe14db76629df56cad55ea62caa57a298855e
SSDEEP 384:UiFzQkUSvDzsN+8TUNTUlIlwvjHisuU8uQX5+DtI81KwXiJr8sU2vaTZcgbtzoIS:vFdHjwgOb0USkDVDih8sU2vaTZc6zoL1
TLSH
T1CDA26E3298A89C3B9EF79B85F54A3203DEF15167C9C56B80E7DD992C01DE2DC234AC61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

3fe095f2-f785-4c68-9deb-195571350750.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3fe095f2-f785-4c68-9deb-195571350750.tmp
Size 10KB
SHA256 513700364e022361207da34272d8dc2b40f2d6592f88dbed12fcf0534feb9eaf
MD5 4ef6417f25faeeb71350d666357797cc
SHA1 a4710b228bd578a8c382dfea813140893aef0273
SHA512 cac0e45d4eea5d38de249773e1d0390648c58eee58b7885c51e165feff63db6270c6bb1f7a5387237eeb6406653fe46b09a23f97d45dfe10eb5d64ebac640690
SSDEEP 192:sxZ8R+WGZ/fFsmeqIdpdxHW6+WNGYYBS82BIg55J:sxZ8HGZ/fFsmejzHbGf4x
TLSH
T1AA22A6516E28797B8CCBE60DBB55BF53E6FA5032A1911E48A6FCC61C05EB6CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5de45cc7-810e-4f06-adaf-7e9812d046ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5de45cc7-810e-4f06-adaf-7e9812d046ce.tmp
Size 10KB
SHA256 438e314185b4ceea2c0abd4a8920b4e42fd992cbce7f3a1ae25179bb4125078f
MD5 d163c7eb663d9ce619d87e0ca74d1981
SHA1 0c14c90a41b5f50ebb5ec1f9598e8b9b2903aeae
SHA512 881d1325524c261780476345139c1f5e53e9612d80a4edb831b37c5df4f5374b17f424e88f607207d6016718187fb58a2103f9190cee19e7bb60ad0e01a87eb1
SSDEEP 192:sxZ8R+WGZ/fFsmeqIdpHxHW6+WNGYYBQD2BIg55J:sxZ8HGZ/fFsmejRHbGfHx
TLSH
T15022B7516E38797B8CCBE61DBA15BF53E6FA5032A1911E48A6FCC61C05EB6CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67c31b92-b471-4bbc-8f17-612ce189f3ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\67c31b92-b471-4bbc-8f17-612ce189f3ef.tmp
Size 9KB
SHA256 64e47e31a8068d0e3c8f1facafd00cb8b24ddc2680e510588cb8dca8c789d6f5
MD5 c2a1e180c0146ca28cef282d9fda381d
SHA1 67006b9a832e637766340183022dece2bc7de168
SHA512 bf6e444d175fbf343fe2f8eb2b941b95611cb1444d0cc7fb4661c45eb746ee17f72162b5390a76cabacc5c8696c9d7f2a41f3f729b9257bc172f00f60ec11bc1
SSDEEP 192:sxZ8R+WGZ/fFsneqIdpdxHW6+WNGYYB122BIgrJ:sxZ8HGZ/fFsnejzHbGf/9
TLSH
T1A722A6116E38B57B8CCBE719BA15BF13D6FA5032A1911E48AAFC861C04EA6CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

741093dc-d945-4425-86c5-fac28067283b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\741093dc-d945-4425-86c5-fac28067283b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 102f3a434e0ac185472b17733854d070902fc690b1cd2e3b52328d3971d06391
MD5 1d0b704fe5f33c8399b480456f744f65
SHA1 d7caf89c74d8a6cba620d17088546fa6e1b7bb69
SHA512 0693cc9a426c39e6054e43dd364b1ca46ac92160cba70ce6e33a32b16094c1eaf6c58eb0d56257353876ad530fb364515122f7973de05b06d9227b41024dcc1a
TLSH
T14151434C56F64177F7D84132D0F642C736309B71A5833E4222A7F7B9FA86359CB46092
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 6273ee6f90ea4a10b7f9c4e5f53886e4a90fd79bfdc039051b66423c4b72d74a
MD5 2403a33691289e413183ce88ecda5fba
SHA1 ee659fcc23a7b065b3e12d8762f71f340fea2997
SHA512 3cc05a64502744e7eef949c0198311a700e98b1b0d13b4c7c5efce34c6a1784e7bbae7a8972526cb8ae8da0cd77cccf427e4ae1c42a2da6cb31845b90841ab49
TLSH
T12751434C46F64177F7D84132D4F642C736309B7165832E4222A7F7B9FA86359CB46092
MD5 SHA1 SHA512 TLSH

Submit Download

a80051bb-d373-4591-ab0d-6107df5b1a46.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\a80051bb-d373-4591-ab0d-6107df5b1a46.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1926861c-f24c-4057-8f6f-dfe40f6612da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1926861c-f24c-4057-8f6f-dfe40f6612da.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

6a9100c6-78ae-4b6f-93bf-f244eeec9ec7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6a9100c6-78ae-4b6f-93bf-f244eeec9ec7.tmp
Size 949B
SHA256 0879f91354060da15fecc2188184c1a588d806c902ef6e5b63594f789f85a055
MD5 b7954cd0e7d59e0605e9286c78e30b8f
SHA1 89fef472edb6727d3e2544cae3e73bf2a1a8b0d7
SHA512 4b62f3e20ffdd0583db696adc1b51ade3d3fa718e6605debd169cc1f43f1391e2a57b3f51d091e05c091a118efe5afdc352a5579dd4ce10ba96c35eed3adcf14
TLSH
T1C9117DF3C7E5856E890156F05A24AE2BCE2D0606421C7C19C9D4EF2B93E3075E10195B
MD5 SHA1 SHA512 TLSH

Submit Download

d67753bc-82d9-490d-8ccd-fa058ba01082.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d67753bc-82d9-490d-8ccd-fa058ba01082.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a523a1ae-a5d0-4209-b33f-266058dcac41.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a523a1ae-a5d0-4209-b33f-266058dcac41.tmp
Size 9KB
SHA256 d5d5d9e15377ce4de8f7d7b6365dc2b99124d4efa30342025ee0099203574c9f
MD5 dbd4f003b9edfa76e74b23dba3d6632d
SHA1 6c734459abb5c9e15454b3026cf89eee01dc387c
SHA512 1f5dd5e77a2fb596a1014bf9791ff7b0f724dff4f3c9c7d659e2fb616299019b6b151afe2b4953b80b19aabc974e13b7ce6d3dc57f3fd524fcd370bc0e653205
SSDEEP 192:sxZ8R+WGZ/fFsMeqIdpdxHW6+WNGYYB122BIg5bJ:sxZ8HGZ/fFsMejzHbGf/v
TLSH
T16622A6116E38B97B8CCBE719BB55BF53D6FA5032A1911E48A6FC861C05EA6CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5671134-6d28-4bb6-871e-d6bcedddf2d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b5671134-6d28-4bb6-871e-d6bcedddf2d3.tmp
Size 27KB
SHA256 3c4645ccb59f091779da183b12df950e8a99ff344f70eee1211d13c58aed8f13
MD5 dbba1e49dc5e98213ead99887b3b8e2d
SHA1 dba59604da7985ccd4a7c31aeb16a79eb3809e8d
SHA512 0669cb9b17eb066e38df7f67f47a952c66144c28452433a30c9f07c6ae91b1f2de71626022229d2e957a2fc70a51b146bc1e003d7659bcfd4466d17701556efb
SSDEEP 768:+DyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXFropVc6s:+DyYR7jWv3NpBu1ja/CL8OX+sr
TLSH
T10AC2E92B640DCB7E4FC01E9DDC5A6FDB6E9802C7A6548D4047FA944C02C77EE912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ee16fb8-ddeb-4913-b4cf-e0eb58eea0b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6ee16fb8-ddeb-4913-b4cf-e0eb58eea0b9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

ca077310-7d82-42cc-97a4-f20921e8005c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ca077310-7d82-42cc-97a4-f20921e8005c.tmp
Size 18KB
SHA256 116ce26936f83224733cce61dfd450d603059c204a91cc76c2cd501465df69d4
MD5 7cd917b1729d8bbe76566e8c4a5b70c4
SHA1 4a0353a74c6ec2a9906c65950a56f3de43bed6d0
SHA512 8e89096914bcb067b0ac1edbcf65926b1e48d790c842637e19a87680345e001bba310c80adbd66f1ebae6844cfdaec5d4bb5c797361f50a88cf612ccf20af75d
SSDEEP 384:KQkUSv0sNuwvjHisuU8uQX5+DtI81KwXiJr8qU2vaTZcgbtzoIIl/:y0qb0USkDVDih8qU2vaTZc6zoL1
TLSH
T19B828F31A8786C3B4AE7E695B14A3203DEF19117DAC41F80D6EDAB2C01CD7DC235AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92cfb0fd-c8b6-498d-9f5d-54e2cc019d6d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\92cfb0fd-c8b6-498d-9f5d-54e2cc019d6d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f50da2c5-df73-4c5b-9761-a9c56bf39929.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f50da2c5-df73-4c5b-9761-a9c56bf39929.tmp
Size 18KB
SHA256 0ff6f17bf81281888e9a8c698353078e340972313859ec9117548a5de8efc1a0
MD5 78c12d58c3bcabd7d72b8d8f09f33069
SHA1 2f113bf8b110aaa825fea0d9e289ce546348a911
SHA512 4f2cdffae0f01a2e84dd79383b0c39840541e873ebe649423a5f25c62d05604f43352786104790479d98c7e02a8e68392722f632cb8e9a1382c82158e9490b70
SSDEEP 384:tQkUSv0sNu1vjHisuU8uQX5+DtI81KwXiJr8qU2vaTZcgbtzoIIl/:X07b0USkDVDih8qU2vaTZc6zoL1
TLSH
T133828F31A8786C3B4AE7E691B14A3203DEF19117DAC41F80DAED6B2C01CD7DC235AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a5c80aeeb5612cf0fb7eae6ec225eef476c2470442295641a690ee0bcff79a1a
MD5 07756856beaab4ef3adebcc0517ed6eb
SHA1 bfc173b0103597bc7976a7f7e9e8a4e8611adc80
SHA512 e5f804cf8c467eb8bbd698a2027087967dcd3aea237aa1e8a38fa355bc567999ab595ce487cf2078364ea889486f89bec1fcd91cc3a3248bcefd8e6b31596602
TLSH
T1D0412759AAE91108B3B77F5AABF6A86D487BBC772E06D55E00110D4E0A26B00D871B37
MD5 SHA1 SHA512 TLSH

Submit Download