ab2ef439a17eaa747c0781d6df30558774614f9b59aaed929d5e888dc447e7ae

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 02:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
NiceColorPalettes/reference/deprecated-list.html
Size 3KB
Sample261027-dbpcdaxy8j
SHA256 ab2ef439a17eaa747c0781d6df30558774614f9b59aaed929d5e888dc447e7ae
MD5 6edcf057f473ba977695108ded7ca3a9
SHA1 95126afcc34c5698a5ddb42701852744d4ddd007
SHA512 963d7b1550e812a3a5a7b5f87cee1db46dd3d2022ea3700101157d99f2b35e3cd3bcb812ce5923e852508a9932b8b515dfac97bd6780210167dacf41bc1167dc
TLSH
T19171743A1C4EA4220B4213EA6CF54365B5F38137C6BCA915A2FDD3867685FC84F0A96D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5024	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{2E7E94F6-8CAE-45BC-A682-C8663370B991}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1744	msedge.exe
1744	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4984 wrote to memory of 3652	4984	msedge.exe	85
PID 4984 wrote to memory of 5024	4984	msedge.exe	86
PID 4984 wrote to memory of 3100	4984	msedge.exe	87
PID 4984 wrote to memory of 3100	4984	msedge.exe	87
PID 4984 wrote to memory of 3100	4984	msedge.exe	87
PID 4984 wrote to memory of 4692	4984	msedge.exe	89
PID 4984 wrote to memory of 4692	4984	msedge.exe	89
PID 4984 wrote to memory of 2200	4984	msedge.exe	90
PID 4984 wrote to memory of 1044	4984	msedge.exe	91
PID 4984 wrote to memory of 2200	4984	msedge.exe	90
PID 4984 wrote to memory of 2200	4984	msedge.exe	90
PID 4984 wrote to memory of 1044	4984	msedge.exe	91
PID 4984 wrote to memory of 1044	4984	msedge.exe	91
PID 4984 wrote to memory of 1056	4984	msedge.exe	92
PID 4984 wrote to memory of 3016	4984	msedge.exe	93
PID 4984 wrote to memory of 1056	4984	msedge.exe	92
PID 4984 wrote to memory of 1056	4984	msedge.exe	92
PID 4984 wrote to memory of 3016	4984	msedge.exe	93
PID 4984 wrote to memory of 3016	4984	msedge.exe	93
PID 4984 wrote to memory of 1740	4984	msedge.exe	98
PID 4984 wrote to memory of 1740	4984	msedge.exe	98
PID 4984 wrote to memory of 2736	4984	msedge.exe	97
PID 4984 wrote to memory of 2736	4984	msedge.exe	97
PID 4984 wrote to memory of 1936	4984	msedge.exe	100
PID 4984 wrote to memory of 4960	4984	msedge.exe	109
PID 4984 wrote to memory of 864	4984	msedge.exe	110
PID 4984 wrote to memory of 2644	4984	msedge.exe	111
PID 4984 wrote to memory of 3184	4984	msedge.exe	113
PID 4984 wrote to memory of 3184	4984	msedge.exe	113
PID 4984 wrote to memory of 1744	4984	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\NiceColorPalettes\reference\deprecated-list.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffc8a49c188,0x7ffc8a49c194,0x7ffc8a49c1a0
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,17400627751036226609,10252335505937131128,524288 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,17410636344501165740,7001871208124899143,262144 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,2910845424935865545,15968612505193708380,524288 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,2227634681539766327,8233322285398843036,2097152 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,14021578983913134032,10497127964657339268,2097152 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,8718586248584876822,11204199367909767822,2097152 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4160,i,8045262068832585902,9481552584156368847,2097152 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,9292315915466795865,13182699551091910479,524288 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,4464553288370121343,8750212197157109259,524288 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,1226368944781968131,18297313501983193352,524288 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,1226368944781968131,18297313501983193352,524288 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,4686895652535464755,7146483754109033598,524288 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:8
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,15149142629543929943,516016185881705817,524288 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:8
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4880,i,7941172669478749838,6138993473913482717,524288 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:8
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,12062045631383606925,6425000208976026657,524288 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:8
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5296,i,4906538106447305262,5038719028595359345,262144 --field-trial-handle=2276,i,2526820215358272128,1968217171854102198,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1744

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2532

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

66ef05fb-1297-4e60-8119-577037632610.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\66ef05fb-1297-4e60-8119-577037632610.tmp
Size 8KB
SHA256 bbe9086eecc9f21dfeaf34e15e1f2caee0ca0757a1a256fa1d34e789e726ce27
MD5 1a6d2dda8c7d404f441f68d6c17f0e09
SHA1 b7d8bac0b7b3db98ec70d3a216158f890dd230db
SHA512 b80d23bafd85f36177e6a1cc08402b6d51e80db332592ee009b126afe538f8cdd1f44fd932697b191dd5b7684341f770b646219e427f69d4c4f9d84e8853cdb0
SSDEEP 96:KqONknQsjpfbUmjH5ih/cIPURHl8h4otop50aDaBKP4v+Y1xf//ojdOx5YEqso0f:BONr6JUm0QmiUy1Kso//aOBClaU6
TLSH
T14902E839BC68BCBB9EE3AE45F04777239FA4106BA6915F44DAD96F1C01D715C2303822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6895becc-4efe-471a-aa76-12d4caafd18e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6895becc-4efe-471a-aa76-12d4caafd18e.tmp
Size 8KB
SHA256 296f82028dea57c55d7f8233cefb134040f3ed08470bd4e18d008216ebb2231d
MD5 452c337f15f6de0c09d98215818a85ab
SHA1 ac9dee3a0dd1853c32f7447034be326762cc28f9
SHA512 a6f494c24a8f3a36e3c1b9e4fb52eee365703ec012e0902707d6ab78289fd7cb2149defcddc790932decd892ce4df36834da66698c68648fdac2e058c1e3be34
SSDEEP 96:pIqONkaQsjpfbUcxH5ih/cIPURHl8h4otop50sDaBxP4v+Y1xf//ojdOx5YEqsop:xONy6JUrQmiUyzKJo//afVJNxtq8LU6
TLSH
T1321209357874BC779DD3A584F08736239E74417BEB855F94D6DC2B1C05DA1AC5307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7c742a54-2315-4274-add5-9c712ae3e8f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7c742a54-2315-4274-add5-9c712ae3e8f8.tmp
Size 18KB
SHA256 1f26bda55668e1c9087df4cb34a70cc40981de1287186a0a4f06ce7b28d1721e
MD5 3945f04520e76ddac3f836ae0c382fea
SHA1 b57885a2b9819019abb4bdb1b87a538d4aba6a09
SHA512 32c0e602470d0ea324d9618526d2087b7fbf74e1fbe0ea453aefe278308aef80521b62b5e5acda499ba9e146dce5412c61b878366c3a6c5bffb5abfcb1673ca7
SSDEEP 384:jQkUSv0sNH8uVLZP1bqcLh//afVA/vaTZcSIIld:N0Av9/CNA/vaTZcSL/
TLSH
T128827D356C69BC778EE7A650F14B3613DEB0C1ABDAC85F64D6DDAB2C01C91A82307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

03eef369-c8a4-42e0-ab20-800fe206c3f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\03eef369-c8a4-42e0-ab20-800fe206c3f2.tmp
Size 10KB
SHA256 585bd0e73147b6ef4f1e20b81702ba4aa61dfacd6767024afe3c80abd0b4a575
MD5 ff331015eb7e05747601317c001c680f
SHA1 5e9ab4e1cdfab9c24cfadb775025bc513b4533d2
SHA512 4f64f8715033c07bb09553f8eecc622ef1a48a018a7aa116936aaf3fa2ed66b79937a69f94fb4b602ad81df582ab43b2cfc242c20680f7588c45233a0b682107
SSDEEP 192:sxZ1REWW/f7smuIdpHIHW6+WNGY36ouNsecIg5LJ:sxZ1xW/f7sm/oHbGXoJb
TLSH
T19D22E7126E28697B8CCBD20DBA19BF13E2F9507251D50E58EAFCC71C05E6ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3ee8f43f-1f63-433f-a164-e764728b09ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3ee8f43f-1f63-433f-a164-e764728b09ed.tmp
Size 9KB
SHA256 c800ac8451f479218dfd91241576fd06a38e576991c19e6be769c3dfe1ac81ee
MD5 b282f42f25576a1a2eff7ca80bdd1340
SHA1 2068bab19d408e9c7a7d05e05f8ffae4eea741c3
SHA512 0e35ab44dd6f6d378fddb29ce4ed16f4ed6915e51f3b3d5a50ebf761b54893632b881801451db2ba1abd5cb59ad2a17390a94d8ad5aee550ec80764859fecd56
SSDEEP 192:sxZ1REWW/f7sFuIdpdIHW6+WNGY36WfecIg5RJ:sxZ1xW/f7sF/eHbGXu1
TLSH
T1C022B7126E28B97B8CCBD20DBA19BF13E6F9507261D51E58EAFCC61C05E66DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9590ff44-5761-4611-8f96-0db8a1c14119.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9590ff44-5761-4611-8f96-0db8a1c14119.tmp
Size 10KB
SHA256 139100b6c3030b562181a7ba845b97c69f9af2d3c501b5fd78cbd600504afa40
MD5 10f550443d4feba65dd22dcaad0e4e01
SHA1 e7f4ab005e1353863b7efa2652996351bf990080
SHA512 f1b3fec6d6c5b4a40ad112dcb466ddec4545c95960464ac63d12ab88ea982c5ce17af6345259d2610253434015c6c35c3accac6559e3391960661657fedb682e
SSDEEP 192:sxZ1REWW/f7smuIdpdIHW6+WNGY36mNLecIg5LJ:sxZ1xW/f7sm/eHbGX0b
TLSH
T1D122C6126E28697B8CDBE20DBA19BF03E6F9507251D51E58EAFCC71C05E6ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 789c83a5ef0421dce0da515a28bda649eb278567d12e2c73172d4bbc5283e69e
MD5 3272de3dedf4df144e87d1c9f5c69445
SHA1 5f4a177e1e959780b70ad594ae81fd0391e24627
SHA512 078f23d70bebe8c845db4c9d32c8adb70960468c4d8292ff389dff36e729e45e21a832dcd24b97133c1431b363663241a4b5c59e3cae28414031005ac5c50707
TLSH
T1166193866590CC61FF6CC8F591F91F9B3A72668019936EC565ACFCFA68663C6C07203C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bf5f01247aa6068714aca9f1a03d29b5cecf4b6a5b8d3ec5e8d3d9ce4f9232ed
MD5 0015a250dee6d0cb5f374655b5fc28e9
SHA1 e2aa0c329fb9e62676402bb145bf979c090d669a
SHA512 fe202266f2fe78e7164277c73326836fac9cd3c345e10afc885d2f6c4fdc2503298577325103f49dabff4c5f95a78bffd278e698abaab937f45bfbe7949e932e
TLSH
T16361A4865580CC60FF6CC8F591F91F8B3A72668019932EC565ACFCFA68663C6C07203C
MD5 SHA1 SHA512 TLSH

Submit Download

db965bd3-4107-43ee-a441-687a4359612e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\db965bd3-4107-43ee-a441-687a4359612e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

23b17ae3-79ac-4b9d-9b82-91e89394f078.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\23b17ae3-79ac-4b9d-9b82-91e89394f078.tmp
Size 949B
SHA256 00a6aa472f63f6835cba86c1b111bd9f789d0ca494085fea23271787b0b03513
MD5 5fe8566c4817cb0df1eeaf673713c2f3
SHA1 14fe73efc688e827ba46a50345c41d1f3c3e73a0
SHA512 3c171f1d170556f1aea944727055631d07990d01ac37e6eb83706a19d24f03272881c21817230a34e35f3dc39bd494603304a2ddad8b0c0812f074780b4e347d
TLSH
T1DB117DB3C7D585AE891556F05A24AE2BCE2D0505421C7C1599D4EF2B93E3075E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

4bd3d5b2-25b7-4397-9f92-dfa823bff916.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4bd3d5b2-25b7-4397-9f92-dfa823bff916.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

99a33624-17b0-44a4-8518-3f1163d3019d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\99a33624-17b0-44a4-8518-3f1163d3019d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 dda76eca047d98ced861729152437e27c88f83cd294dfcdf2133628a11636b15
MD5 bb009d4222e006c2e2e9fd78bc72595e
SHA1 94e903badd2e77f3fe4e574c0f2f4b82fef975c0
SHA512 486ffd23e5e92057a68b66edf05fa8282681742cde92945a9e5e4e8c54a36d083e91739c2f7bf1416175f5a8cb3d998db83d010223f53f7b611863a2c11155a4
SSDEEP 48:K07+/bldd+bNglIS7+K9L1J+xTuYIZrfyLMb6G02aDbqpyIS+DK9amgL0Ae2m24C:KsIoKxiGGr+KwfBKKqgCWjSKJ
TLSH
T181915511327B1201797E265456759B6B865270F33018EAAFBBFC52E28E6FE000DFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a04d65bc-f4ee-4f21-b8e5-56fec6a2c6e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a04d65bc-f4ee-4f21-b8e5-56fec6a2c6e6.tmp
Size 9KB
SHA256 195b278a4f26612cd55e01639cb8c15b336a6f7e4a116d30ef02ea619e952f38
MD5 026e9cd1eebea48e34f325cc6aeb388f
SHA1 7fe3fd8777d50d85723450d6a0e63b1fec395fc6
SHA512 9c8167036814fac15ef7814fb3acb693d3fc8840e59576dd614251ff6ec2c188e0cadb7a1d4b66d5a88dd0bc91411906b974b2f533061576b576c47dbdedef9e
SSDEEP 192:sxZ1REWW/f7s1uIdpdIHW6+WNGY36WfecIgrJ:sxZ1xW/f7s1/eHbGXu9
TLSH
T16722B8126E28B97B8CCBD20DBA29BF13E6F9507251D51E58EAFCC61C05E66DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

caed5bc1-e71f-448b-88e0-5ae96e15e6e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\caed5bc1-e71f-448b-88e0-5ae96e15e6e9.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7e61a0d-dff0-4068-be42-57284f5841d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e7e61a0d-dff0-4068-be42-57284f5841d8.tmp
Size 27KB
SHA256 d0c44ba508b27b65581ce162b6729a670178757aa69d1a60b1d7f940deb15bf5
MD5 5848e59081b75438145fb7970758b9fa
SHA1 67e51793d415268f80ae2888606810f801d95355
SHA512 dfb9e7b6d4cd66a0c1ac29bd640e98ae980a98f3c557fba6eca9795e89efc9f1b47546f781c01695f6acbf5f5326546dfd55cb09b9d326f9fa1ece6d320fa3cd
SSDEEP 768:QCKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/3roTtX:QCKlm7QWvUYe0u1ja8/L/E/kTZ
TLSH
T137C2FA2B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7fec0088-b3b4-4cc8-9165-aa05e6b73e2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7fec0088-b3b4-4cc8-9165-aa05e6b73e2a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c31c6646-9c93-49b7-8b0f-ff08abc31e27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c31c6646-9c93-49b7-8b0f-ff08abc31e27.tmp
Size 21KB
SHA256 a6b15b0a5d392e7066e90e7fc2cfc77665e6cabe3eca361a217dca8ddc6acf51
MD5 dea51e646ca3ca38c95de665d45540da
SHA1 ea6b597f3bfea9d2841713e42df84f2becb5e3c3
SHA512 8b63681cc5289f996ec88c4507fd422779481a532ab8e82cef1623d7b2840bc07cebc7e0ff27286f9f6372f88a0bc465a0e0fa649639e6b29884167130784f5f
SSDEEP 384:qiFzQkUSvSzsNZ8TUNTUlIl8uVLZP1bqcLh//afV+/vaTZcSIIld:hFd6swgZv9/CN+/vaTZcSL/
TLSH
T119A25C325C98EC7B9EE69B50F54B3213DEB081A7CAD59EA4E7CD9A2C01DA1DC2307D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6bd854fc-99eb-43f4-bc2d-57742bcab54f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6bd854fc-99eb-43f4-bc2d-57742bcab54f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fbbac5fa-64bc-485d-ac2e-b1f732a882f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fbbac5fa-64bc-485d-ac2e-b1f732a882f9.tmp
Size 18KB
SHA256 20b7b91e0f33f006dc9561c40e62a3b2323509ce536261c759f80948a5911256
MD5 9ed177a818cbbb769191421455558a99
SHA1 22c3cce2612c3f8562c164909ff6f96d243ec1c6
SHA512 d28869c24f3aa4f04f7247ce861cd42a9cc8a61776e3ea26d945d72d396e41291ee7f73fcd087acd270c536fad157bfee72070fc1f728a8cf012a2e563108be4
SSDEEP 384:zQkUSv0sNHpuVLZP1bqcLh//afVA/vaTZcSIIld:d0lv9/CNA/vaTZcSL/
TLSH
T1B2827D356C69BC778EE7A650F04B3613DEB0C1ABDAC45FA4D6DDAB2C01C91A82317D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 677d7a23685208a8bd0f4af096a6467f27ba6f7bfddca505b86ba41df00f1aee
MD5 9379e58e324701c69c01dcde6ba6dd37
SHA1 65c38b89522d759b0582a4489003b43e2369bf4e
SHA512 a397fe30e73cec8a5a574d9df48ef1678b3707cb39dab61ffc101e88d5a9c7d0eeb3189512fe15d17d2f31310b43db6986ddcf71f2e14be73bd9aec4d79142a4
TLSH
T18B41275CABFD1148B3B7BE56ABF6A86E487BB8732E06C45D00110E4F0A66B40C971733
MD5 SHA1 SHA512 TLSH

Submit Download