6001832efcbd72550f2260533a2da63a28265979af180b60d80cfbbf917d99f6

Analysis

user interaction
yes
max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 18:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gl4JdUW5.html
Size 3KB
Sample261027-xff2caf18j
SHA256 6001832efcbd72550f2260533a2da63a28265979af180b60d80cfbbf917d99f6
MD5 bee2ecad568cca3bbba7dcb9f3ced48b
SHA1 927852d4fc04ce2952187f54179d0f651be57179
SHA512 b759f1f046960c2c9bc20b1f874fadaf76ec9caa7321fcb0bcaf5ffe7b7a7828a84ca4b7d3a0030c08aa20966fe2394fc071b5b1b5de0ae938043b8a2b96ca1b
TLSH
T1656142038840C8279165A3347AD2F508CA68D183D35DADA9B29E119E5AC7FA1C7F72F5
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5088	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{525CB2DB-DFA3-4403-9538-AF7083D4FD79}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4572	msedge.exe
4572	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4876 wrote to memory of 804	4876	msedge.exe	86
PID 4876 wrote to memory of 5088	4876	msedge.exe	87
PID 4876 wrote to memory of 2152	4876	msedge.exe	88
PID 4876 wrote to memory of 2152	4876	msedge.exe	88
PID 4876 wrote to memory of 2152	4876	msedge.exe	88
PID 4876 wrote to memory of 4044	4876	msedge.exe	89
PID 4876 wrote to memory of 4044	4876	msedge.exe	89
PID 4876 wrote to memory of 1752	4876	msedge.exe	91
PID 4876 wrote to memory of 1308	4876	msedge.exe	92
PID 4876 wrote to memory of 1752	4876	msedge.exe	91
PID 4876 wrote to memory of 1752	4876	msedge.exe	91
PID 4876 wrote to memory of 1308	4876	msedge.exe	92
PID 4876 wrote to memory of 1308	4876	msedge.exe	92
PID 4876 wrote to memory of 2956	4876	msedge.exe	93
PID 4876 wrote to memory of 1784	4876	msedge.exe	94
PID 4876 wrote to memory of 1784	4876	msedge.exe	94
PID 4876 wrote to memory of 1784	4876	msedge.exe	94
PID 4876 wrote to memory of 2956	4876	msedge.exe	93
PID 4876 wrote to memory of 2956	4876	msedge.exe	93
PID 4876 wrote to memory of 1948	4876	msedge.exe	97
PID 4876 wrote to memory of 3748	4876	msedge.exe	98
PID 4876 wrote to memory of 1948	4876	msedge.exe	97
PID 4876 wrote to memory of 3748	4876	msedge.exe	98
PID 4876 wrote to memory of 1776	4876	msedge.exe	102
PID 4876 wrote to memory of 2300	4876	msedge.exe	109
PID 4876 wrote to memory of 5048	4876	msedge.exe	110
PID 4876 wrote to memory of 676	4876	msedge.exe	111
PID 4876 wrote to memory of 3532	4876	msedge.exe	113
PID 4876 wrote to memory of 3532	4876	msedge.exe	113
PID 4876 wrote to memory of 4764	4876	msedge.exe	114
PID 4876 wrote to memory of 4764	4876	msedge.exe	114
PID 4876 wrote to memory of 4736	4876	msedge.exe	115
PID 4876 wrote to memory of 4736	4876	msedge.exe	115
PID 4876 wrote to memory of 4572	4876	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\gl4JdUW5.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffae32ec188,0x7ffae32ec194,0x7ffae32ec1a0
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,16988431989241146675,11370585959115737601,524288 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,13868545222409763903,9076089571001350358,262144 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,4543476881754688527,1011345689612508304,524288 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=1924 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,3724771073854873137,11788961410337336574,2097152 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,14895284152539816475,2677770438688197227,2097152 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,1221979736687447160,17346774055867378713,2097152 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,354739674586224033,7863318220238294669,2097152 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,881086270407696664,3794238820058481996,524288 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,1899274098351477461,14937795728214013775,524288 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,5551151584413790982,9457573381314659994,524288 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,5551151584413790982,9457573381314659994,524288 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,14150269460744243699,15033386084530568282,524288 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,10581682863526785894,781550937452003406,524288 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,16368124411747975255,7172987815554248342,524288 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,4101530668366502232,4306675778579226520,524288 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:8
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,3860692274788440062,10926558024312020441,524288 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,16046784808160262803,12659394100348668346,524288 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,6298948720724370473,444534128413464620,262144 --field-trial-handle=2092,i,9974223759026278915,871517688332315697,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4572

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2ed7d606-7ed7-46ee-8aac-ca072dda6640.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2ed7d606-7ed7-46ee-8aac-ca072dda6640.tmp
Size 21KB
SHA256 94fb5c3c6c85b268ec98fd965272e5bc1616476c8017628be98ef4fd51998cad
MD5 2dec5b7c78f39c988d70ad4d5819ba8b
SHA1 1dedb5e6cba088e05f64c9c6d5fdb0f7dc7469d7
SHA512 a8e42c015d762f2d8f487a4221a68d43a2047b2362af189ee7d14bab67d1cf99a9d811e240d06a028d7c4cddfd306734361c30517d5a4aa95200776a16c643e5
SSDEEP 384:niFzQkUSvGzsNZ8TUNTUlIlAoi5EAUQLBGYX5EHc46Ul++23rPPvaTZcsEuIIlw:iFd2gwg+9lGYuH56blbnvaTZcfuL+
TLSH
T1FEA26C3298A8DC7B8EE79B51F64E3203DEB04167DAC4AB94E6DD591C01DB1DC234BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d35c8cc-980c-4e98-925a-fb45275986fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5d35c8cc-980c-4e98-925a-fb45275986fd.tmp
Size 8KB
SHA256 2b1a66ae7137a09995931cfd6d735279d11368996879eb8c83a21a3268c8ca32
MD5 8d75373e0799dd231ab26d40f2580f77
SHA1 53d33e3d0ab08cff1d595271a0cddafb89f6ef5e
SHA512 2872f4eb335b3ce312fbbde76cd9940ec7a311891aa167ce9c00fdc85904597b45a1cdaadd740be8fc5871f69e8383700c411fe115a5dc13067ee7583274f890
SSDEEP 192:LJONO6DphmqQmiUyyky3q8wGYX59ezeCc3onWkk7oBU6:lONO6197d3RwGYX5EHc4wsU6
TLSH
T19602FB35E87C7CBB8EE36E55F58B26139F98112BAA952F44D6E81A1C00D768C2347837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69dc5142-d496-417b-85e2-1e0e280c461a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\69dc5142-d496-417b-85e2-1e0e280c461a.tmp
Size 8KB
SHA256 552456b65353289b9364d716ee4f4e1444a8569a558b4b642afd84818e948c8c
MD5 9d7ac8e58d7efef48119a76679f81dbb
SHA1 7cdb4f9a1ff2be7f56f44feafbbcef1bdcc7d5a1
SHA512 0364e00a4064b245f5285b5ca650b4172ef02a5a3ac497fcbc6bc26754e3ceb44acc95a6afbf777ca2818b76e0484b00551082af6d47e406ae5c94e4c81993c5
SSDEEP 192:/ONa6DphAqQmiUyyMy3JwGYX59ezeCc3on6UHF++23dkII3q5EPU6:/ONa61H7F3JwGYX5EHc46Ul++23mPPU6
TLSH
T1E9123A35E8B8AC7B4DD3A551F08735139FA84227EB887F40D5EC1A1C11EF69C230B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

750df0db-1056-4079-a169-270a7ab26b28.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\750df0db-1056-4079-a169-270a7ab26b28.tmp
Size 18KB
SHA256 82e7fd331fb8cee36f25d2a0644e404010b8342754504e4c31ab59bb33a2e780
MD5 e1a28c573b281241f2a3bb9b129761a9
SHA1 e41bb75b069386a112f9ecee6ddcbe6eee43e1a8
SHA512 827cdf922c0b08d7cdf8e85ad423353e372036e5335a48d8818654d2c263e94a6a54fd87753a828f936d0adac381c127f941c64007974ec3c62d7f26c22264b5
SSDEEP 384:yQkUSv0sNHAoi5EAUQLBGYX5EHc46Ul++23/PPvaTZcsEuIIlw:q0t9lGYuH56blvnvaTZcfuL+
TLSH
T1A1827C35A8B9AC7B4AE7E261F14A3603DFB08117DBC86F54D5ED5B1C01DA2DC234B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

091fa314-0a3e-4880-9ea4-0ac898fdbff4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\091fa314-0a3e-4880-9ea4-0ac898fdbff4.tmp
Size 10KB
SHA256 65dba967674d606f399bf822d70cd332884ceabf650e4ffa2ebf5dfa9db78909
MD5 e858f220a8e44303852d6e6638439915
SHA1 13736bbb37b70a71749fb2d271548c82a9f3cd72
SHA512 75a2ec856b76c75af52c94f03a30519889cba66227742d9fbb8767f7034cd55af6710f23b9c393f317b6c9929b2784f6299561b4456e70280ba60790cf894f92
SSDEEP 192:sxZoRBWr/fxs8n03SiIdpdaHW6+WNGYgQsjRIg5dJ:sxZo6r/fxsHiLIHbGnd
TLSH
T17022A8526E38697B8CC7D21DBB25BF53E6F95032A1901E48A6FCC61C15E6BCD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

30fdebc6-691e-466e-bc15-fb20e0e9be94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\30fdebc6-691e-466e-bc15-fb20e0e9be94.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

38738901-f3b2-490f-8304-caeb374bc39d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\38738901-f3b2-490f-8304-caeb374bc39d.tmp
Size 10KB
SHA256 67b33a931f65bd13b3486339c3b5866c5dbd02d35ba457ed73644ba947e4fe75
MD5 03270fd646e6e647202310e0dce50a6f
SHA1 5d1a05b7b398817a8d3673ca644ae6be946b42a3
SHA512 a26602d5d4062af9670aea266e611dd4dab8085079ffb331730feb78618a2a73727d9f74bd3971598af4c671bbdf469ba26930e16aa7ca1281acbab704b7a705
SSDEEP 192:sxZoRBWr/fxs8n03SiIdpHaHW6+WNGYgI7uRIg5dJ:sxZo6r/fxsHiL6HbGHd
TLSH
T17E22B8526E78697B8CC7D21DBB25BF53E6F95032A1901E48A6FC861C15E7BCD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e2b5f9e-7735-4c26-82d5-8a64b9b0dced.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6e2b5f9e-7735-4c26-82d5-8a64b9b0dced.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 45a204dcbb371d86da5d1369607ce0339189b500723756af33ee873f5bde4bc6
MD5 aefcbfaf1d5a7692b5a1397c91605846
SHA1 39e2c8c2c523e4d7498ffb8f58015ff96f2da616
SHA512 0b5e0cb4f60f3de47dd9d9ca5ebe4693fa58dc29c4155a6f08d9f4332a3057ded4d4ea6bbc7fdd7d154fe8d255dd56cb7a3e2f0432e1cfcd1132f55567f06ca0
TLSH
T102E0268814C8E23FE6186A57016E530C87A1272BA7C07E5F5B24C5847687044A2AF690
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 be8d6e042ca57010174ad23f07372788cd670e069810071dfa66d2f49e5c3c6a
MD5 3844f34fc6e0e93c5db67d15684abdce
SHA1 1944ece37cc3fb9f76650c28c676ec07218a8dfc
SHA512 934e79dba5582aad9a62f118a92356e46d243a0145292f5223c8c75380d3286e61a1476810b97a0d9b45d855564460d83228b4a7f0f1f4dbf7e6b3e2d9bff43c
TLSH
T1A6E0268804CECA3FE758EC47026C536CC392361BAAC46A0E2B18C98A7647140A3CA6D0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 aeef7edf5850e3ef08eb807c32f63d13d84e962ebf6188b99436fb8f96472eb2
MD5 77b2f2bd6873f589653ee87c7cdd03f2
SHA1 78f685d29287a4605ea6b8e189ac10ba60adbe99
SHA512 2cf6e739c095514c18413e878dd31b1f418b97ca984e0ce7271c183ed2d98af5b32dbecec2705597294db8a3158ff40212f954b7a937adb35200c08012c37526
TLSH
T147616241D6937055FBA85071BAE922CB3E3AA8ACD6834F011EF8D87CE84F35D950DC56
MD5 SHA1 SHA512 TLSH

Submit Download

60d37742-274c-4e6c-af93-aadce81558e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\60d37742-274c-4e6c-af93-aadce81558e8.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

5107076d-2fb4-41c8-8cac-942dbd253846.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5107076d-2fb4-41c8-8cac-942dbd253846.tmp
Size 949B
SHA256 a2dc4d686e171bc06c5a09583d8e0734d6d665574fd262c3ec941657c1929bb5
MD5 eda6aa4f34bb95e3ea07598a2756bb46
SHA1 bfcec3cb98fbfbc298f44a50f6f2ef60fd722d56
SHA512 cfc9bd18b40ce46c6d54e6e8f5586ed9cccbda1bbc978bed51c843047255aff77e6182ab32fc68c488b22d4e63bda47eef0bc411cf3a31680d74302fff389cd8
TLSH
T189117AF3C7E585AE890156F05A28AE2BCE2D0606421C7C1989E4EF2BA7E3075E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

6d721f86-301c-46ca-b578-e50aad5b7f16.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6d721f86-301c-46ca-b578-e50aad5b7f16.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

9c890ad0-51e0-4aa0-aa9d-3263d79f75cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9c890ad0-51e0-4aa0-aa9d-3263d79f75cc.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4c6e8c24e5c5ef3eb67a890b1fca49e8691a16cc2efeb5677094b9ca8e3ee79f
MD5 8c32640c9e1a3ad84c9d7a97f0df7691
SHA1 156d04889a5a6ef3445fd2f27f92997823bd576b
SHA512 4550ad210c71dd0f637916a7d050e6d53c26de8ef059a772cec6a4be802820dd829cae5cbf9a9ad46fca9d00e01abf33e2d2c654cd792228f9696ec46c5b3a08
SSDEEP 48:K0nKzHJp5Sbx8hISXSK9X19SxXCY0lHbyLRAthrvzMb/KXIS5MK9Z1zMxxcYKbPk:KkEQKJGa6+YKD6wGoKzSm9
TLSH
T11E914D61307B56413C7E694C80A5862A126231B33059EAFFFFBD54A54E2FE041EFD8E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a67d8466-4134-45d3-a090-8cae36b6a3b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a67d8466-4134-45d3-a090-8cae36b6a3b7.tmp
Size 27KB
SHA256 efee30eab717e50d5bc4e459327484da517444961e272c56300d2c5137372a12
MD5 d89877081c27b19f75bdc752fdd7fb6d
SHA1 cb8ec3bc66fc7671449916f7fc324648cf1b250d
SHA512 c17ff6bea81c6043c9d1266262888063dc273934e763123af7f25d4e1439643ff0e7d20e711466fedf9ab639c3735512b71a9f87682ae89692ee16866565a23e
SSDEEP 768:mfichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzRro27H:mfichfPWvPZplu1jan+LKgzqgH
TLSH
T1F9C2FA3B644CCB7E4FC01E9DDD1A6F967EA802C7A6688D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c9265437-523c-439d-aaf4-007a17828de5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c9265437-523c-439d-aaf4-007a17828de5.tmp
Size 10KB
SHA256 4703bb47badc22862cb31b4e16c493d187202393ce8acadd465bf2b64f814c81
MD5 6f23f72892bddc2312a17fa42b80a8b6
SHA1 1a9cd00092f8debf74c6ed6792637893fdb9d8d9
SHA512 2c2de98b34e34bcc1eebfd864457eb337ef5cc8d96314c535912783eb1dd6296e40c87b3ae2e51f6e64670cc28aedfd735c89384e494a75f142d57678aff24aa
SSDEEP 192:sxZoRBWr/fxs8ng3SiIdpdaHW6+WNGYgdIjRIg5/J:sxZo6r/fxsTiLIHbGyb
TLSH
T12D22B9516E38A97B8CC7D21DBB25BF53E6F95032A1901E48E6FC861C05E6BDD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db09e9fd-45ec-4a89-a18e-82d3ccffdb90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\db09e9fd-45ec-4a89-a18e-82d3ccffdb90.tmp
Size 9KB
SHA256 d0470bd7c9e9fb43626c4f966321d1481c64cc8750445030b28d6caaf3bf1c70
MD5 0758e4c01d41eaacf474c3eaeaa3892b
SHA1 55e3046399781d5b745f89ef4edd6202a051bca3
SHA512 0645856f5e808f591b062b44008236b89912d4af3b855ceff1e92ef02eae58f300c2755586849e741b274de0266f3c14ea5337d99b7f41ae0c74df069025ac65
SSDEEP 192:sxZoRBWr/fxscng3SiIdpdaHW6+WNGYgdIjRIgrJ:sxZo6r/fxsziLIHbGy9
TLSH
T1EB22B9516E38A97B8CC7D21DBB25BF53E5F95032A1901E48E6FC861C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6afeb637-5bc1-4cb8-b155-00a4c8635c77.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6afeb637-5bc1-4cb8-b155-00a4c8635c77.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c15a5069-38bc-4e53-b734-70e0f02d3806.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c15a5069-38bc-4e53-b734-70e0f02d3806.tmp
Size 18KB
SHA256 fc916b08a17037b1ea734370e1507631a03d933b8e1f86056e19411ec1f2b08b
MD5 aef46e22890a958a73e484f55107fb18
SHA1 ace56651d7343652424c1c673097a93c24e49d5a
SHA512 65791442cbb59112d06778c2f05f9731311610cd43bcae48bdc0d9fc85538003eb3472df93cd461c41eb5adaa707cc6e8583681e335def44365e6331947b74c9
SSDEEP 384:AQkUSv0sNHxoi5EAUQLBGYX5EHc46Ul++23/PPvaTZcsEuIIlw:o0e9lGYuH56blvnvaTZcfuL+
TLSH
T1C0827C35A8B9AC7B4AE7E261F14B3603DFB08117DAC46F94D5ED5B1C01DA2DC234B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e03933f0-b2a6-425f-9e89-afb4fe08dcbc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e03933f0-b2a6-425f-9e89-afb4fe08dcbc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ae33951e91e5fd246dd910e065fd927319adf169848b6a7e28383a5ad1d5f16d
MD5 3d6a51062e78b33f505aff8bea0ef75b
SHA1 c560fa6616a32ed7066283105f6eaaefa71e91cf
SHA512 b745d286f43935eb1eca1680bfe7ac9337c2d31fbd52acc0d3439519ab80053721ef7f2a875983e8255f3f88b8e051892ca7f311cfc347d60a80c5f7a3dea8a1
TLSH
T1F041065CA7E91148B3B76F4A9BF668AE487FBD772E06D49D00110E4F0626B40D871733
MD5 SHA1 SHA512 TLSH

Submit Download