d31d3ccd5838482bdf2a6e6053b19af220d3ad7aa76596e4fa379c704ef01756

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 08:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/app/index.html
Size 74KB
Sample261027-kgla8sda86
SHA256 d31d3ccd5838482bdf2a6e6053b19af220d3ad7aa76596e4fa379c704ef01756
MD5 cfd62caae6b1fa070dd4ade74d582c00
SHA1 e551d3b62f808e90da95e00314cbe1cc55b343ba
SHA512 470287ee45fd9f0eb73c7007ff8b5e6f6895709878c2f05d5b9eadc4ca4be5e2950ade8a30d5bb8fa282fead58017c5880a33e6cd5ccf31bac73ee7f2ddf955d
SSDEEP 768:FfD8Fkf+43x//C/NREluu/PGoueQgopuduphrN28aBk+VBVLnIRYeDWcw4NRnJPo:x86Bx/aEluu/P6uduptNJmQRJPCquL
TLSH
T1DE73092561BB06374E3351643F8BA1053B3990037205DE287E9D8B845F8E978C6EF7EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3944	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{9F35EFF0-BA10-4AB3-8FFB-1B7C18AA62F8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3228	msedge.exe
3228	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4540 wrote to memory of 3668	4540	msedge.exe	82
PID 4540 wrote to memory of 3944	4540	msedge.exe	85
PID 4540 wrote to memory of 3064	4540	msedge.exe	86
PID 4540 wrote to memory of 3064	4540	msedge.exe	86
PID 4540 wrote to memory of 3064	4540	msedge.exe	86
PID 4540 wrote to memory of 3356	4540	msedge.exe	88
PID 4540 wrote to memory of 3356	4540	msedge.exe	88
PID 4540 wrote to memory of 4656	4540	msedge.exe	89
PID 4540 wrote to memory of 4656	4540	msedge.exe	89
PID 4540 wrote to memory of 4656	4540	msedge.exe	89
PID 4540 wrote to memory of 4824	4540	msedge.exe	90
PID 4540 wrote to memory of 4824	4540	msedge.exe	90
PID 4540 wrote to memory of 4824	4540	msedge.exe	90
PID 4540 wrote to memory of 3708	4540	msedge.exe	91
PID 4540 wrote to memory of 3708	4540	msedge.exe	91
PID 4540 wrote to memory of 3708	4540	msedge.exe	91
PID 4540 wrote to memory of 4800	4540	msedge.exe	92
PID 4540 wrote to memory of 4800	4540	msedge.exe	92
PID 4540 wrote to memory of 4800	4540	msedge.exe	92
PID 4540 wrote to memory of 5004	4540	msedge.exe	98
PID 4540 wrote to memory of 5000	4540	msedge.exe	99
PID 4540 wrote to memory of 5004	4540	msedge.exe	98
PID 4540 wrote to memory of 5000	4540	msedge.exe	99
PID 4540 wrote to memory of 2032	4540	msedge.exe	101
PID 4540 wrote to memory of 4304	4540	msedge.exe	106
PID 4540 wrote to memory of 3228	4540	msedge.exe	107
PID 4540 wrote to memory of 3004	4540	msedge.exe	108
PID 4540 wrote to memory of 4648	4540	msedge.exe	110
PID 4540 wrote to memory of 4648	4540	msedge.exe	110
PID 4540 wrote to memory of 1764	4540	msedge.exe	111
PID 4540 wrote to memory of 1764	4540	msedge.exe	111
PID 4540 wrote to memory of 3228	4540	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\resources\app\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff8523c188,0x7fff8523c194,0x7fff8523c1a0
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,16337633723866192948,7931831410250784009,524288 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1852,i,17335674402836240067,4294750630668159932,262144 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,9036914677000655715,11108951999013987062,524288 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:8
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,13019112384662060263,10131431067077906060,2097152 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,92446390826043788,11484319938987035571,2097152 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,7395669516494463195,3748768789431342951,2097152 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,2006538187339143607,3230247266653638646,2097152 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:2
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,2624326454962463635,18051245275767864802,524288 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,15047619931974215362,9622500824921475059,524288 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,6786131471530313708,10326497574115117006,524288 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,6786131471530313708,10326497574115117006,524288 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4688,i,8718283967656272547,1399670696472594514,524288 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,15682209603609406990,14389280013834190704,524288 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:8
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,8763294160036562213,11323541493754374995,524288 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:8
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,10619575173905133070,2992486048688659888,524288 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,6782384079663385589,8817621690178364813,524288 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,15817004731785297999,10320354473839765676,262144 --field-trial-handle=2304,i,8113380235525500332,9031641166739210118,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3228

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3876

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

03f98f77-d2df-432b-9a6e-0c48d6952c33.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\03f98f77-d2df-432b-9a6e-0c48d6952c33.tmp
Size 8KB
SHA256 66d9707c660416e53d8195ccd85ccbdb0a6183161ed2301f15334d16fc789c9e
MD5 1eb436f7d2c5651deea1a7396aa4b6f7
SHA1 8edb1992218e2d050e2e9d4a7f4ebe26b3b7de40
SHA512 7dad8c954afefcd267125a0c79ed465e78192c5322bd62cbe64aed19a45b17485d45e0527a5983a5089539d7e17f845b07f271b2fe4459322b57df8b5aae1cd6
SSDEEP 192:wONG6iDMQmiUyLfRq5u88PI2mKW9uZoqNyU6:wONG6l4Rq5u8iI23pWU6
TLSH
T1EF122B3668787C6B7DE2A851B5873A174EA5822BDB897FC4C5DC271C04EF29C230B613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0c43ab59-4da2-4985-8f74-536093d60a2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0c43ab59-4da2-4985-8f74-536093d60a2a.tmp
Size 18KB
SHA256 ccdb095aae70da2032b5ef346a8f4110bd52d771216b2a33cd05232b07a0e215
MD5 9f03e73309e5ffd37f0145fd4f3a3841
SHA1 63bd6db517c7337a60357e31fa021ef5e1a754fe
SHA512 0ee9d7a1887a609c72f66da91fdc6d6158c314169240b56a516742962126548d6abe8a31ff70de72c38ea9996869c39a7d9e2386ba481bf7d46b1978268b5e55
SSDEEP 384:gQkUSv0sNLtTuW40Dp5u8iI23pWvaTZccIIlr:I0Gu0rkIwWvaTZccLt
TLSH
T1A7827E3668796C376DA7D560F68B3A039EB4C25BDBC42F94D5DDA72C00DE2D82307A12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c937842-8d31-456f-adfe-0097748d017b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3c937842-8d31-456f-adfe-0097748d017b.tmp
Size 18KB
SHA256 32c7410753f026d26cbd40084ad2c127ca459f7603923902af5ddf638597a0c9
MD5 d4174c14d49e98bb4974d7e9bd520d93
SHA1 532c593f9fa8a2da3bda2573cad11cd3dbbcff36
SHA512 b0c376d76d9cd4a03b061ef612c16737ba77ae9e7e11338552d13e78605d2ad245238fcd16820b40b1956dcd1980519dec02afaf364e81441b1bc29ab618915f
SSDEEP 384:SQkUSv0sNLoTuW40Dp5u8iI23pWvaTZccIIlr:K0Bu0rkIwWvaTZccLt
TLSH
T1DE827E7668796C276DA7D560F68B3A039EB0C25BDBC42F94D5DD972C00DE2D82307A12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

102785cc-cf91-46b3-98d0-77ae2cc80416.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\102785cc-cf91-46b3-98d0-77ae2cc80416.tmp
Size 10KB
SHA256 e5a5eb72a6678ce2b499642dbce60c78b1b75f9c96347fb5d11008008bdfa409
MD5 b5534e9eed555c2f9fef7f9f4b264e74
SHA1 ddb87b1bb36a3b0a4595fc40c6fdd1070ade72c2
SHA512 0384890cc657e9f5761905ce6820313162f351cb372be9fd87410dee4413be188591a894fffad506ee4e4168a119162b96f03548438d43224b536d8dff6ca7f2
SSDEEP 192:sxZ7RQWH/fGs1EN6IdpHZHW6+WNGYa44htNIg5+J:sxZ7BH/fGsuNT5HbGhc
TLSH
T11022D8516E38697B9CCBE21DBB55BF43E6F9507291901E48AAFC861C05E7ACE230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1da4bc80-d096-4ebf-85df-fa272eeec5a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1da4bc80-d096-4ebf-85df-fa272eeec5a9.tmp
Size 10KB
SHA256 b4b5c12b16b9bbeec782dc6e0686682b82b98ff375708527a028a48433067d4b
MD5 7fdd53ad9c38d32823b115d123ea7072
SHA1 57f519f8f83ea3c728cdc425c3eeb39f5119d7bb
SHA512 19fffa37c242e9a5bdcb2190268f31d20a83bae10945e56b4102d12ddb27a6eb7fa61b227c7b78fd84d8fe4285ce7909d3f7e0cba5ee7a4b4bc82d9b931e40d1
SSDEEP 192:sxZ7RQWH/fGs1EN6IdpdZHW6+WNGYaujhtNIg5+J:sxZ7BH/fGsuNTnHbGCc
TLSH
T1D822D8516E38697B9CCBE20DBB55BF43E6F9507291911E48AAFC861C05E7ACD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33ffb9fe-bcea-44bf-a500-d1bd9a8530e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\33ffb9fe-bcea-44bf-a500-d1bd9a8530e7.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f29d375-5082-4f4a-a057-648728ae20da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3f29d375-5082-4f4a-a057-648728ae20da.tmp
Size 27KB
SHA256 9b8be2a38e3619764628fed4c7bc41c532dc821e785705918896161e40475f3d
MD5 2cab9f4021c423aad52a0fb58adf0a2b
SHA1 67cb5d03cf3a5643782251cf2a4bf9739f64cf98
SHA512 57586a813d43c3b812054e24fe73b9ad21d538307cbce9fd91a9797ec740e70250decb4738d788da40f35b9312353fec4e0c393094b9d762cfdc6ef42056a2e5
SSDEEP 768:UtyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3nroMZ8r:UtyQRbrWvvlpZu1jaXKLf330MZ8r
TLSH
T175C2FA2B640CCB7E4FC01E9DDC6A6F976EA802D766588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5815d8f6-6020-40aa-b133-dcd77663f384.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5815d8f6-6020-40aa-b133-dcd77663f384.tmp
Size 9KB
SHA256 5481d6c2edfbdc638587f46dc5d7974094af95f10403f1e1d5c45dfd2f41e907
MD5 42f552e5926cc9b68788e7fad5248d2e
SHA1 774f3e86b1aed2658a71203493698d35120ce5fb
SHA512 d2642a2c8cf868039566ea4c10390bdb7d8a288737ecb8e94b7b5b93caf22878098c604e2844152477c154f93a648d3bce22b2c6c9701e2db048c14eb642a9c1
SSDEEP 192:sxZ7RQWH/fGs1YN6IdpdZHW6+WNGYaJ5htNIg5MJ:sxZ7BH/fGsmNTnHbGRu
TLSH
T18E22C8516E38A57B9CCBD21DBB55BF43E6F9507291901E88EAFC861C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ad391a2-1ed4-4257-bfba-17ff86393519.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9ad391a2-1ed4-4257-bfba-17ff86393519.tmp
Size 9KB
SHA256 149e2d2ee0415300eb8fa24f618a51c7305bb9bbdf7c5d3c8784b01f9a1310d9
MD5 71d7e2c25aa772d52862a70c88b1ba35
SHA1 ffde61252dfb130570e6d3ffd354e3c2099f254a
SHA512 ebe8c557d338e5ac766a9ffd1ada15ffa0af1305f0907dbe86881f8679ac74ee4be94ee52deddf8805ae4017e5a4a6eea642c7cc6984c6fc27bbad727f1c6821
SSDEEP 192:sxZ7RQWH/fGs/YN6IdpdZHW6+WNGYaJ5htNIgrJ:sxZ7BH/fGsgNTnHbGR9
TLSH
T18F22C8516E38A57B9CCBD21DBB65BF43E6F9507291941E48EAFC861C04E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 0afa05200d5659ccb8902d7a7ed681caf6617c8febdf3383f624f4b650f530c3
MD5 e589252f4fc385f434bc62fa80be0060
SHA1 388ea50aff8b8ad707484a251a2e651b159d82c8
SHA512 36b590d70ca7fabba9e08d5afcd3a0139389f6b5dde881e9739dbcb1626c69d0a53b97f37cf11a9a22c1b419bccf597fd19305530f3a9aa63da70efbf5d69c29
TLSH
T1D8E026C816CAC22FA208684B056C6B0C87C1371E93C4AA0F170CCF897406184E69A7D0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 02a9921e22ee55c3bf4d38146809ffd1b73123e8c4ee695ae23fe8ea3c70fa73
MD5 f423e6f2c37145a3af1274516859f725
SHA1 26efb06f55dc2c6ae01d901d6e9a16dc148ad3c8
SHA512 0bf73f1d574371fb6fbee51318f57d2b2267b47648911ed4c59265d95189f33deab59bd02b18e32b7e935fbf7a5b8671e74945df942e24633ae15364e01b82c9
TLSH
T15C614E8458520C11FBAC91BCB3CF75CB32B45BB191A30E114FDAD8A5AB36F6B60140EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 166d67839efde4dadd4bac209877039e468d4af6c8d249c3715c29b5b1008baf
MD5 e08afbca180c157d777a49ad9fb6db29
SHA1 d750f16f36cc183cadbbe03e3be0eed56065319e
SHA512 57b9b05d7e8128930eafa2b2c609b4389b57c90ef3e79c0a30f9f9fea464d0bc3bd28a8c11121b224ea3728d3d38541a1b7835f2292345cbcf49da4726aa8394
TLSH
T1F3614E8459420C11FBAC91BCB3DF75CB32B45BB195A30E114FEAD8A5AB36F5B60140EC
MD5 SHA1 SHA512 TLSH

Submit Download

03390540-7890-4417-9a54-c478773e4ab5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\03390540-7890-4417-9a54-c478773e4ab5.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1455f3be-e030-4ae5-ad8c-965d59f8c000.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1455f3be-e030-4ae5-ad8c-965d59f8c000.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

1a1c9a0a-476d-4d44-b3d9-45bec96a831d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1a1c9a0a-476d-4d44-b3d9-45bec96a831d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

73698602-b263-42ed-86f1-59366057b5d0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\73698602-b263-42ed-86f1-59366057b5d0.tmp
Size 949B
SHA256 b8154a33d90d1f48850c1f8139c288f51696aace7fde222d46d1cfd9c0a66c71
MD5 3ed19d4531c755df7378523977e92027
SHA1 8be860d7d00eaf04f494421816390af91d987723
SHA512 1108f37d460822ffcf44a9ae5f114b5227e9a2a2763507a24fb4a823f600a76e27675d1db6e107d6223a94467080ef8e3282e66fafe2b26f928cd40f29d57969
TLSH
T18B117DF3C7D585AE890156F05A28AE2BDE2D0A06821C7C16C5D4EF27D3F3475D11295B
MD5 SHA1 SHA512 TLSH

Submit Download

2fc969d1-1f4e-4aa9-af62-3b2a51412c30.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2fc969d1-1f4e-4aa9-af62-3b2a51412c30.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5861144d575699874efb63e0e989102c3bda6cc045f8df107a3fd6bd7f338d23
MD5 250f8a19b018ce393f01c639d43d27fc
SHA1 200e24cb6bae2c4a5ceb5bf768c7c008357d28bd
SHA512 e87b25bc0bb93837fe230757232ebefabe83c3c75282a2a05a8ab6227f81c1f6ebcd95091f005a2f72f4a00c12c38ec7b3ad0ded6fc91753ddffa5882eee9328
SSDEEP 96:PqONkjQsjpfwDISp5ih/cIPURHl8h4otop5ymD5BfPGxvw45RxmJm78lFLxT+Xka:SONj6iDCQmiUyVfHq5u88PIUSq/HiU6
TLSH
T1BA02E9396C787CABADE3AD15B5873B275FA4112FEB952B84C5E8561C00D729C2307523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a80cd0b7-5a72-4492-9ad1-fb538d62d02c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a80cd0b7-5a72-4492-9ad1-fb538d62d02c.tmp
Size 21KB
SHA256 0e7fd1579ef146adc4546e83886f1a5ed95fcb5dfe7a395046db3f7b9e4cb652
MD5 b06ec0adfe8104bbe35b74f6028d7625
SHA1 a6442cf5bf3fa4cb4f0f7c3d94f1ef6ca37b3622
SHA512 23d8beb10982911138688c3deb38b27f4a7247186bb7839096b16872461f53b92c80953ee049314acabc102355b037c28bde80814fa5574f69d2132f9914dbd4
SSDEEP 384:GiFzQkUSvpzsNV8TUNTUlIloTuW40Dp5u8iI23wWvaTZccIIlr:tFdJUwgyu0rkIrWvaTZccLt
TLSH
T14DA25D7758A89C3BBDB69A50F68B3603DEB0826BDAC46B94D6CD952C00DF1DC2307D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f6194a1-dd9c-4187-b782-839456d6c59c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5f6194a1-dd9c-4187-b782-839456d6c59c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 aa124ba746a7a0a1829b64c99cae2870581b8817926c31d5b656ddae005815c1
MD5 f07c43b364328349344570ba8ab3a59e
SHA1 7b321a54fe74acc88aa3f5fad1e1fc3fd32f9464
SHA512 6c261d71f7ee748075b40162f0301e0b0212621b6822289d57160a210750632977072d80955a6f5496a3e23aefd454ccddb2ee7c1008b6ccb71ff4e0ec18c76d
TLSH
T198412C58A6E9114CB3B7AF169BF7A86D487F79732E06946D00010E4F4A62B00C9B2733
MD5 SHA1 SHA512 TLSH

Submit Download