7fc922520205f896776af4a2919ccdb7d824b640946acda3721d1fb4f5973725

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 02:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
NiceColorPalettes/reference/constant-values.html
Size 4KB
Sample261027-dbpcdaxy8j
SHA256 7fc922520205f896776af4a2919ccdb7d824b640946acda3721d1fb4f5973725
MD5 cf9f06320c16fd68eb6c0e6dd8484556
SHA1 e10ffc494d169531fa436bef635d1e2cfb0ec86a
SHA512 5657b2dccfaa1fcb5da861a9ce51478a03eea4979aa5abe30876335355dbb81bf8ef8ee5c22b28759ea9d7bc29ce67d1a3655193aba7b0e73a4ce978be455ec6
SSDEEP 96:OgHiKlgmPP0YoCFiEXiW+9KgUkxfJOPfgPn0YoYvZiEXiLox:FiKSmPICFiciW+MpgPgYvZiciLM
TLSH
T17EA1933B5ECE6422070217EA7DFD1364B6E34133C26C6880B2FCE2563284FC94E0A56E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4996	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{31C61EB9-8AA7-4CF3-85C7-A23827E3574B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
884	msedge.exe
884	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe
2708	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2708 wrote to memory of 4964	2708	msedge.exe	85
PID 2708 wrote to memory of 4996	2708	msedge.exe	87
PID 2708 wrote to memory of 4716	2708	msedge.exe	88
PID 2708 wrote to memory of 4952	2708	msedge.exe	89
PID 2708 wrote to memory of 4716	2708	msedge.exe	88
PID 2708 wrote to memory of 4716	2708	msedge.exe	88
PID 2708 wrote to memory of 4952	2708	msedge.exe	89
PID 2708 wrote to memory of 1864	2708	msedge.exe	90
PID 2708 wrote to memory of 1864	2708	msedge.exe	90
PID 2708 wrote to memory of 1864	2708	msedge.exe	90
PID 2708 wrote to memory of 5012	2708	msedge.exe	91
PID 2708 wrote to memory of 5012	2708	msedge.exe	91
PID 2708 wrote to memory of 5012	2708	msedge.exe	91
PID 2708 wrote to memory of 2640	2708	msedge.exe	92
PID 2708 wrote to memory of 2344	2708	msedge.exe	93
PID 2708 wrote to memory of 2640	2708	msedge.exe	92
PID 2708 wrote to memory of 2640	2708	msedge.exe	92
PID 2708 wrote to memory of 2344	2708	msedge.exe	93
PID 2708 wrote to memory of 2344	2708	msedge.exe	93
PID 2708 wrote to memory of 2244	2708	msedge.exe	97
PID 2708 wrote to memory of 2296	2708	msedge.exe	98
PID 2708 wrote to memory of 2244	2708	msedge.exe	97
PID 2708 wrote to memory of 2296	2708	msedge.exe	98
PID 2708 wrote to memory of 3104	2708	msedge.exe	102
PID 2708 wrote to memory of 4636	2708	msedge.exe	109
PID 2708 wrote to memory of 648	2708	msedge.exe	110
PID 2708 wrote to memory of 5084	2708	msedge.exe	111
PID 2708 wrote to memory of 4384	2708	msedge.exe	113
PID 2708 wrote to memory of 4384	2708	msedge.exe	113
PID 2708 wrote to memory of 4892	2708	msedge.exe	114
PID 2708 wrote to memory of 4892	2708	msedge.exe	114
PID 2708 wrote to memory of 884	2708	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\NiceColorPalettes\reference\constant-values.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff855f5c188,0x7ff855f5c194,0x7ff855f5c1a0
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,1382072623670254082,12324319140365012292,524288 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,1849429547266809508,3647089865319745294,262144 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:2
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,12940333958549093696,15328767103009955781,524288 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,7025242947349205120,7601709599254586655,2097152 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,4603845791060801836,5196854315029254863,2097152 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4132,i,2195742091413077996,651526444765413098,2097152 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4148,i,16692511585390189174,9882522015129446447,2097152 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:2
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,392186098144952954,8669779460090563191,524288 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,13365789371573834755,17955912163927303444,524288 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,7785135902460427690,2240939806304484091,524288 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,7785135902460427690,2240939806304484091,524288 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,15724397223957927266,4316919001808507052,524288 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,16505565392432549921,5022477250727207803,524288 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,7740741466423174384,5837053616195666720,524288 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,10355467611319551651,77213877104585268,524288 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,672154193565000542,16170326125599666262,524288 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5324,i,4147998761968404888,5643591163468739911,262144 --field-trial-handle=2596,i,11133354020040781099,13581870790075480810,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:884

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

27983503-3c83-4029-a0e8-66ae2b640e8e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\27983503-3c83-4029-a0e8-66ae2b640e8e.tmp
Size 8KB
SHA256 8686c594d77c6e071311e3ed5fc19ed5c201547655ce2f12ba2b803045f77aeb
MD5 9bf957d6a9f0f2cdfefd42ca3078b055
SHA1 e7194cb5fb8ae780bc523e7b95cb4b21e6872aef
SHA512 c52c3420c290b12e2c927d55daffe770efc33dc68030a0adb907c85463176ccbcd3e64c6ca4a69220d7a68c1475773486bfeece62221027c6305765652aac7dc
SSDEEP 192:7ONF6wlDmQmiUyzgW4X58gZAOK6Kve9qyU6:7ONF6kCJW4X58EAOrdTU6
TLSH
T1E8121A36B978BC2B5DF2A544F48731139FA85127EB4AAF90C6DC6A1D01DF2AC130B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c5953f8-95c7-4a0a-a596-11b60d393876.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2c5953f8-95c7-4a0a-a596-11b60d393876.tmp
Size 18KB
SHA256 495c2826c258dd505c7ffc1b570300d99194091ad3578473e97f6020cbfca117
MD5 8d9b8534158c7f13c356b38c66180547
SHA1 7caa0d0e41caa255e742527d8cc7aa69240a66fa
SHA512 149b25705f08f71c3ccd7c6ebe080b693c2de4b557388fff451e945b5b9edb1aa0503967967c905448a51c2f4ba90a6ca046e429492d289bcf247d663b41a3ad
SSDEEP 384:EQkUSv0sN8OWP5MZF/bKHX58EAOrLTvaTZcybtoyIIld:00pMvjMaDOrLTvaTZcIoyL/
TLSH
T12A827C31A8B97D374EF6A250F54A3203DFB49167DA851FA0D5DDAB2D01CE2AC234B906
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e703872-8a27-4407-a38c-6d8e34680895.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3e703872-8a27-4407-a38c-6d8e34680895.tmp
Size 8KB
SHA256 375dbe954ab7de43d099b4d3690e90c7b2b604238d2f0c571090e186a40ff7b6
MD5 3192a0be371f0951b28ed2fe0ad289f2
SHA1 958298c90684148510fd02a6fe06df6a4d1e81f3
SHA512 a6099bb5c0c19a282f9df98bb3792186b145d482bf677cfd39bbffcf2289471cfa16c022353cc47cad2d153f76dfc1d0cca0210ece075b58c0ea6d217892dc07
SSDEEP 192:1ONw6wlDgQmiUyigW4X58gZAOKmyDlzZUU6:1ONw6kgqW4X58EAOtyOU6
TLSH
T12102FA38BDB87C6B8EF2AD05F58727139FA4102BEA556F40CAE85A1D00D735C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75fbbb2f-b949-4f1f-b750-5571e84dc4bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\75fbbb2f-b949-4f1f-b750-5571e84dc4bf.tmp
Size 18KB
SHA256 e46413702b20f5f73550015230f9907e27d92c800dd5b100c55775ec8403c7b2
MD5 c0f9f7560868d3793a44fe7d178281ad
SHA1 e3683d553bae0075960c215259c6feff9e81854a
SHA512 327fcf4d12f1a0ce545b576783480ff00ee14d2e3338c0b31808b957aef063b2ab8fb360802fc313584348ca38220efc96499750bd2ef2d6c28965750ee4d502
SSDEEP 384:eQkUSv0sN8fWP5MZF/bKHX58EAOrLTvaTZcybtoyIIld:O0mMvjMaDOrLTvaTZcIoyL/
TLSH
T1E6827C31A8B97D274EF7A250F54A3203DFB49167DA851FA0D5DDEB2D01CE2AC234B906
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7c17f201-77d4-4280-9db3-2c17dc9caaad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7c17f201-77d4-4280-9db3-2c17dc9caaad.tmp
Size 21KB
SHA256 4206dbf4ef659e42d3d5df6310b78bd17d8923f076ae511fd7e80fafd890f712
MD5 afe4f513b2e105872414db4779f9ca5e
SHA1 d899185b0a054e1c379e0b3ae2eeaf8eb95d8cd4
SHA512 15c7ad88e7368276aae014006359bfc5cdbd1b3785add487ea4f1c3544cccb566c6cd7543bf4148ce1bd3cad7187b16a6864071c71c1a86674701c7af8e8bfdb
SSDEEP 384:jiFzQkUSvezsN08TUNTUlIlfWP5MZF/bKHX58EAOrwTvaTZcybtoyIIld:OFd+hwgkMvjMaDOrwTvaTZcIoyL/
TLSH
T15EA25D329C98AD3B9EF69740F54E3203DFB49167C9859EA0E6CDDA2D01DA19C234BD06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

0a27e060-498d-42e4-983a-484823ba420d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a27e060-498d-42e4-983a-484823ba420d.tmp
Size 10KB
SHA256 670e8a6a3ca8283ea42020a4f67939d854bfcbedc56f7b667ed420bb9e5ebc1b
MD5 d4b531a8d317ceb9e907c523c1dead8e
SHA1 0b313041ffe896e2287f26843ff96fd32e0b39d7
SHA512 a3500874841760f4aee11097dae4ae36f04e1ad49217074e5acbeae7f8d013247a0bf9681f8e2140c1ade7add56c7b07978af1fa598cba9f7683f08832f88556
SSDEEP 192:sxZnR3Wy/fHslCIdpdHYHW6+WNGYrCi5jIg51J:sxZn0y/fHslryHbGgR
TLSH
T1B622B7526E28A97B8CCBE30DBB59BF13D6F9503251951E54AAFCC61C04E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f71431a-bb70-410e-89bb-3950f4f3fb29.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2f71431a-bb70-410e-89bb-3950f4f3fb29.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5928332e-18ca-444f-a8af-6556ab6bd20e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5928332e-18ca-444f-a8af-6556ab6bd20e.tmp
Size 27KB
SHA256 e3d9d86b14ffc3a21b89542086f69db315111c07164594c769b4fc8f5806ea62
MD5 bf40154fa6482a518339db2c1c832a4e
SHA1 89f705d2ef8ef25e0daa1a68375912ede5750df5
SHA512 2c420db947a57ed5d6974c757e9f0c172d50a977a20500ba4098af5f2d887162a188b58dcbcda962e5b91b8c8605668d4d5daa8ac89bcd5927dc6e5662b10f2e
SSDEEP 768:S7y4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbhroR1b:S7y4J/DWvbtBhu1jajiLm0bafb
TLSH
T120C20B3B684CCA7E4FC00B9DDD5E6F973E9802C79A948D4047FA994C02C77EA91264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5ecabe17-4821-452e-b725-29127f5ca45b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5ecabe17-4821-452e-b725-29127f5ca45b.tmp
Size 10KB
SHA256 2f03b771ad44f8fa356db01a4005ba16b0f3323d8d843149d9492f06406b12a0
MD5 f82ff61466be83afd4056da445401e0c
SHA1 3ab5955c17b043d922ab8d16dd1f1822c619a7a2
SHA512 bc51b99c8a74de261bf6e9f41783c7be4a592009e67dd53f9937ec824747091dc258a6a28731942ca4afd160926982b44f71e94e7b774ae53853fad763334173
SSDEEP 192:sxZnR3Wy/fHslCIdpHHYHW6+WNGYrKp5jIg51J:sxZn0y/fHslrYHbG1R
TLSH
T1B722C7526E28A97B8CCBE30DFB59BF13D6F9503251951E54AAFCC61C04E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8ea908e0-fbe7-4318-a0a7-2840b476c3af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8ea908e0-fbe7-4318-a0a7-2840b476c3af.tmp
Size 9KB
SHA256 27fb7e016c92a98ef7902cc100807c54928a5365c688662fd11dc9de23c60720
MD5 171a8a0e1d65e5da9629be6ed1a4df7a
SHA1 8dbde76e695e24246a7e32fecc7c442e4af18212
SHA512 0b6b81c36ac8bd580d9291ac7e05772c197e4add1d794ce1c388632d5c442b7ecb9a68e0b98c9fc9f80a6f8a140ff84b93fc706fef3298cfd97363f675ccde6d
SSDEEP 192:sxZnR3Wy/fHstCIdpdHYHW6+WNGYrvy5jIgrJ:sxZn0y/fHstryHbGx9
TLSH
T1492296526E28B97B8CCBD30DBB59BF13D6F9503251951E58AAFCC61C04E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 860a74d81fa72eb9b8dff8a1326a337e443e9957c30b2b62d2e15d43e88db352
MD5 dfac859f606e2f57bbd29f53369d18f7
SHA1 c023b9c045aa561735630f03e64a9fdeceae45c2
SHA512 b788fbcfacb32fc5610e943b2045ceb990ed10229d28f9fa1dc1a598ddcfe4d832dfb4e3543e401e451f42a67f24f47fa594b3da4b2ff891b19dd3d2095f641f
TLSH
T1F2E0208908C5C31F7304A4971274535CC78567EFD2C0FD0D270CC589B00E040EAB9550
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 ca5479039954aba6f2c1389d1938f8315214e5830f5005c17603c17e7b7a7de4
MD5 cc579d1ed97379d13120917d7e6ac3e8
SHA1 2b790726d4d3659d9efd31f28108a7916b3b0a25
SHA512 3943cbed467a9750417d0128f45e11d8eaf7e45c305bcb9cdfb5ce12325b1f61268590081689e7fde95eced122d965fdd208e85ae075485450646d02425b60de
TLSH
T16351D78D92702354D7AD7133B6E11183FA7BBAB167935F523196C9B88B4A374B10903F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 0ddac7c00f4d3855da26dab41a233896ee3c1d56f156a40b1697975930db1db2
MD5 3803b4f7adab41f6fa5766ce7c66dcd1
SHA1 3fb36f621c7c4331ecf0211bfacad5c25399cbc0
SHA512 5e4fc7948c28865124a22d47d7ef21a62ee6d3d85043a6f8c1d615df3666ef6edf44699e4d882fb08a5540fdeaa374a5c30fd45d27d90c0d85566b0f12efd763
TLSH
T1DA51D78D96702354D7ADB073B6E11283FA7BB9B167935F523095C9B88B4A374B10903F
MD5 SHA1 SHA512 TLSH

Submit Download

e7364127-57a1-45e8-80de-e7e43be9f3bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e7364127-57a1-45e8-80de-e7e43be9f3bc.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

08d12523-2931-4402-9898-4b7962dce69d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\08d12523-2931-4402-9898-4b7962dce69d.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

1906e594-1fd4-410d-91dd-ac638bdd6a82.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1906e594-1fd4-410d-91dd-ac638bdd6a82.tmp
Size 949B
SHA256 f1d9b8cb0ce82084ac00bce69712f2de3ecf922bbbbf164fad54570eff282193
MD5 0d844c631e39d140554b0e59e03b6dae
SHA1 2e8de2a9c8dd41cd5ccc3d9881d6f58a153858ef
SHA512 31ed8d6cb2a6ffaaea9072e65b33e3e13accb7adf65032c0e6ed4a3af160fcb1a4be0d1a37e56ce3feaffbd9cfbca8ee29b393e21ded9bd7d14cd9867033c55c
TLSH
T16B117DF3C7D5856E8A1157F05B24AE2BCE2D0905421C7D1589D4EF2B93E3079E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

754f0ac9-41eb-48cf-a8ae-88a45fbcaacc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\754f0ac9-41eb-48cf-a8ae-88a45fbcaacc.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 a4a326778d85df8d6de0e1c9dcc1a3e7613c7691c1a567d88e6036920faac811
MD5 afd7d074f1f770f36e18656cc351878d
SHA1 2b812ebe5ffee90f55f5da6f12af312a456c30b0
SHA512 7ea8a8317205b652ce63fd632865e08a5ca2f68f8d4467c33ca3d1cbc96a1f704036f9534c283082e77fdcde960d735253e653f6d3a7e7f9ea84a72e16e5c2fd
SSDEEP 96:KIDCKs0+u/+KEUqed2Ku8BycK7yCe7aHbJhh+bxwl57+KBL5F+NT7Y16:E5xdhxfji
TLSH
T181E1E55231B7060038BD258C8175875E524232737059FE6FBFBD44A59E2BE489EFE8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b25c89f8-4c13-4a5c-84bd-d1e1071c76fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b25c89f8-4c13-4a5c-84bd-d1e1071c76fb.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

d310739b-5b3e-4b2c-8f03-c0cdad7fdc3d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d310739b-5b3e-4b2c-8f03-c0cdad7fdc3d.tmp
Size 9KB
SHA256 3bad5bd485ecc093905956df19dd933d2434ecb87957a9bc04a0d833a4f526cc
MD5 9b8154fcf2cef6093caaa31020beed92
SHA1 ff47e354303f60def743892037be80f7f816d5a6
SHA512 8a49d4f410fc25cde83451c83693c26883fd7435aaba1f3e5d0ba0893724b7b785a7c16f79148364ffdd68edf887374554c43ee852f1e4eef6e790d15a2116b1
SSDEEP 192:sxZnR3Wy/fHs3CIdpdHYHW6+WNGYrvy5jIg5nJ:sxZn0y/fHs3ryHbGxP
TLSH
T14822A6126E28B97B8CCBD30DBB59BF13D6F9507251951E58AAFCC61C04E6ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97ec3bd3-3c19-4115-8691-86cf7321655a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\97ec3bd3-3c19-4115-8691-86cf7321655a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c5cb06bb-df8e-422f-95f9-6e039f5adbf8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c5cb06bb-df8e-422f-95f9-6e039f5adbf8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 dd096fbd87009bdf2ed2e2c2c3934bc50173391d2808d55e234e2fe54879862f
MD5 2eca9f2ad579ed7d745eab00390f2d61
SHA1 ae7a95acb3dc8cdad207c3d32f16fd3b286c291a
SHA512 9b3c3955d21727ba9a18caee537f4bf58876da69c5efbe0aad4fa97ec27cd22b1173ed018f4aab0e17b83f3ad0e2d081eb4f9c57ba603698005bda2b68b7367f
TLSH
T1CC41EC9CA6FA1108B7B67F5AAFF6A46E587ABC372E06D45D10110E4F0662B00CD71737
MD5 SHA1 SHA512 TLSH

Submit Download