f8bf2c5a4054c5367a3f16f08f8150ffc0eaba8dfddf61d6ccafefedb3afd4a1

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 16:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 5KB
Sample261030-tnypksdv21
SHA256 f8bf2c5a4054c5367a3f16f08f8150ffc0eaba8dfddf61d6ccafefedb3afd4a1
MD5 87ef34fd6680636f0c2dc1b333ce47aa
SHA1 0b4289e92ad55f2810a7e4096488dc2584f3f9fa
SHA512 0e7a8671a892931d76893b558666f46e24af4fb91c22a9d5877e505e5b112418689211a4dc399ccc626b293bd9556ffdd9113851dbcca9255254d6785f0a89ae
SSDEEP 96:THL3YDUjTAM/F15UQLG4vvBDk6Wq2QrhXJ6Sf5G0qzIq2QodgsQwJZ8VqNQgPWiJ:HowjMM/75UhwTWFQ9ZTRR1FQvsp+VAQg
TLSH
T1A6C1C75683481E3E52734176F192FA8CF2E2101F12612EE0F5752237AA4D974A67BBFC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5528	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{9CDBA853-7FFA-4E55-9D98-D8A90A70E3DD}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1620	msedge.exe
1620	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe

Suspicious use of WriteProcessMemory 28 IoCs

description	pid	Process	procid_target
PID 4520 wrote to memory of 4532	4520	msedge.exe	84
PID 4520 wrote to memory of 5528	4520	msedge.exe	85
PID 4520 wrote to memory of 3788	4520	msedge.exe	86
PID 4520 wrote to memory of 5804	4520	msedge.exe	87
PID 4520 wrote to memory of 3788	4520	msedge.exe	86
PID 4520 wrote to memory of 3788	4520	msedge.exe	86
PID 4520 wrote to memory of 5804	4520	msedge.exe	87
PID 4520 wrote to memory of 4400	4520	msedge.exe	88
PID 4520 wrote to memory of 3060	4520	msedge.exe	89
PID 4520 wrote to memory of 4400	4520	msedge.exe	88
PID 4520 wrote to memory of 4400	4520	msedge.exe	88
PID 4520 wrote to memory of 3060	4520	msedge.exe	89
PID 4520 wrote to memory of 3060	4520	msedge.exe	89
PID 4520 wrote to memory of 1420	4520	msedge.exe	94
PID 4520 wrote to memory of 1420	4520	msedge.exe	94
PID 4520 wrote to memory of 3940	4520	msedge.exe	95
PID 4520 wrote to memory of 3940	4520	msedge.exe	95
PID 4520 wrote to memory of 3012	4520	msedge.exe	99
PID 4520 wrote to memory of 1372	4520	msedge.exe	110
PID 4520 wrote to memory of 2028	4520	msedge.exe	111
PID 4520 wrote to memory of 4472	4520	msedge.exe	112
PID 4520 wrote to memory of 3560	4520	msedge.exe	114
PID 4520 wrote to memory of 3560	4520	msedge.exe	114
PID 4520 wrote to memory of 5188	4520	msedge.exe	115
PID 4520 wrote to memory of 5188	4520	msedge.exe	115
PID 4520 wrote to memory of 4420	4520	msedge.exe	116
PID 4520 wrote to memory of 4420	4520	msedge.exe	116
PID 4520 wrote to memory of 1620	4520	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffdef7ac188,0x7ffdef7ac194,0x7ffdef7ac1a0
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,14323702788769438275,17575549133381528387,524288 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,8944196790278991545,14940987640431579279,262144 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:2
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,17113691609241572252,15963322408201189099,524288 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,18438225414820504806,3599764596475464997,2097152 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,4175686678197769748,9019940807214745413,2097152 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,8521910027764456107,15288192975891200069,524288 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:8
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,6214770653999944918,8247685820591733819,524288 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:8
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5556,i,3361568960443963376,7317284382711251423,524288 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:8
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5556,i,3361568960443963376,7317284382711251423,524288 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:8
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,8485647562013060878,15041199497813437262,524288 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:8
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5648,i,5279011501750856316,16688742073429436739,524288 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,10087351761198086303,8419445782811466213,524288 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,5752880085393372178,12802622470506052638,524288 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:8
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,1389705403158633017,17113221463374066709,524288 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,3740240203948612990,2449391121926570393,524288 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6008,i,10495623653184862634,3404915107505763425,262144 --field-trial-handle=2684,i,7193395297176132496,9545100653992320430,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1620

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5204

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1800

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2cfcbceb-6165-4620-80ff-e6222cc803a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2cfcbceb-6165-4620-80ff-e6222cc803a3.tmp
Size 26KB
SHA256 f3a011986ad0749451cf71bc6bbf684bdf97a6ce9e79d48a594f9a5f12bddd26
MD5 a415128ddb5439e60fa5cff5904e9976
SHA1 1891ac37278c07125c980a06069ddd098581895a
SHA512 25f6ec7fd9e73fbcbd8cbdebaddf3bfd01f2fbdf3657ed18892f20417068871b2e69e6025f3b521eb03a168988c977083d4788f3a13858c38ccb7de60c26121b
SSDEEP 384:nTiFiZcI63sNQ8TUNTUlIm2aKMswmw2fiBCauGlAbuLiJsa+VYYrgL/7IzdoC:+FQ63Zwgc3hBCaXW6iJhgPJ
TLSH
T18FC25B32EC98D9ABEDE68BD5A74A7603DDF44263958C9AD4D9DC1C1C00D71ED030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

30b90c92-808d-4951-85eb-7e8bdee8acae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\30b90c92-808d-4951-85eb-7e8bdee8acae.tmp
Size 25KB
SHA256 cd6baff11f8d00dea97b58c14a9ac2f8d7e3f068ea6b55f1be1e310e754ee79f
MD5 a84b5fc3930d5a98d004a98c608e84eb
SHA1 9622dd07f2bb4707008d958f8bacdad2a5c7a84f
SHA512 a8eec90828390a70a58938ef38d930a546dff54677fdc8fe634271327c554a99714225bd893a04ddd2c4f12d22dc8ffcb4eb2790f6c5b1e853265fdefcd96b43
SSDEEP 384:n7iFiZcI63sNq8TUNTUlIm2aKMiS4w2fiBCauGlAiFssa+VYYrgL/7IzdoC:WFQ63DwgcdnBCaXHFshgPJ
TLSH
T16FC24B36EC98D9ABE9FA8FDAAB4A7603EEF40163959C56D4D9D81C1C00871DD0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

953014bb-bb2f-4b42-974e-d8cae7ac9902.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\953014bb-bb2f-4b42-974e-d8cae7ac9902.tmp
Size 26KB
SHA256 5b0144fe6c14a48d9945d714b173f312539ac943eadf58a7327c25836bf89c61
MD5 30c48932052cc1e90d76f07b3a911c1f
SHA1 f6ec8dd35234188742072fef922404af862f58e5
SHA512 0c92a3bbfe55abec3287d0277d39c92c367f9000e38feb85c8aab2a4e2521be8985513e1cbd7bf80a3d0cc2239bac369ef584ddf129337e81847a7e87e38d387
SSDEEP 384:nYiFzQkUSvJp3sNc8TUNTUlI4laKMUuFw2fiBCauGlAbuFmJ2ImulgL/7Iz2IIlL:jFdX3JwgblKBCaXWgmJ5musLJ
TLSH
T18CC24936EC98DDA7EEEA8E95B31A3643EEE44213D99C9AD4D9C81D1C00C71ED130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2f67a665126f0d437497b394b50cc87ce72773b6abd85385bb78adf0ad326302
MD5 a98f4348736e1c7c5e70799864c15774
SHA1 fa2e3725e970aab935f77d155b649177f50be7d6
SHA512 c1dd68c743d45af6f713c7d8fade4a675abe4d224e86b956c5aaf959ccda0a92b9824b0e784a0ee9992843bfc2a7a73f85267479d6e5ffa0aa5827760492419d
TLSH
T19ED02B20B6A87654E006343C0114428C31CE5570140BB400809413A40FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

0ff6b8e0-5177-4ef7-b438-dea0add39f5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0ff6b8e0-5177-4ef7-b438-dea0add39f5f.tmp
Size 11KB
SHA256 51925f79b0b36a1f2cbc57a2b935a68b83b874d98d6c3f8fbd8dfb65ddf2150f
MD5 b29c9306a2b3577b1a885be2f927bc5d
SHA1 7e33b0586d55d9a5b9ea11f2cec59e7341022c66
SHA512 346a878fb2b91d70be984d14dd80edbee8320eb62236e9915adda8c50ed4f5328eccc939bf641148b5cf69c8645a104779e6c103710831cec382b8475c9b9958
SSDEEP 192:sxZIRuku/fysfaQZLK8QzodpHDHW6+WNGYordcSF6IgjtoJ:sxZIXu/fysyOVTjHbG4SQjtM
TLSH
T16942F8156D28A93B8CCBD219FB557F53E3FD1032A4910E48AAFC8A1C15E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7d983c7a-25a6-4343-b8ca-6a4fa36e3459.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7d983c7a-25a6-4343-b8ca-6a4fa36e3459.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88e1c075-1c0c-4505-a0a8-3ce80d06af69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\88e1c075-1c0c-4505-a0a8-3ce80d06af69.tmp
Size 414B
SHA256 414531c026c57f8f75660485d8c86f4c37181c92665c06beb2bc41052a9050ef
MD5 fad1fbd56f395c8cb9c598bbe0c16bee
SHA1 881a395113cf1d2dea5dc3ca81c01a0b3210f49f
SHA512 7d3f61036d13695f6763b224cb615cfd224aad01a8228436ecebaeadb9cad27536f893e777993a09116d5814dc17cc0cdcdb54b646d3d5b73a2e028892c820d5
TLSH
T1E2E02B6AC861EC3B08FD0B7D50650345F71023372A41985B3B3D810C8FF45374185D6C
MD5 SHA1 SHA512 TLSH

Submit Download

8cc40643-6d53-44dd-afb8-15e6056d2ac3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8cc40643-6d53-44dd-afb8-15e6056d2ac3.tmp
Size 11KB
SHA256 f77ed8ea82d23eb21bc5004db44d6904163164a04d2d2bd234fd3db3db097279
MD5 4f20cdb1b0236a9bb734a1895e044422
SHA1 b41c80c4ea108c4bb28cde1ee27d297b939f6c0d
SHA512 507d8f7e9190c83ac8b6cb677fdd626bbf63181891bbca01745a940b395e8e994b2400416ccfec5d4d96d69bc2e4b39b3ef982a0cd98f617313ddc6f9b5b42bf
SSDEEP 192:sxZIRuku/fysdQZLK8QzodpHDHW6+WNGYo3dcSF6Ig5PtoJ:sxZIXu/fysdOVTjHbGESQFtM
TLSH
T1B042E8156D28A97B8CCBD219FB557F53E3FD1032A4910E48AAFC8A1C15E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 6e62857d3cf4a2ad4e67249ed4d68eab4d5bbe0dbb8a40fb7c7ee028faa544c6
MD5 2df1a9b343c9d696c372df7b0756b068
SHA1 a35e8f1251d04d3064dae8081b55179227bf7192
SHA512 59503f803d5ad472c0ee705ad649571db09861e127e5081df704b3d247cabd681cc4f300873e98bebd95f1cc98afb88b85c8d80e098c5c0cdbd48c40bb2e0444
TLSH
T145E026E644CAC32EE29C648F02BC670C83C1767ED2C8690E6F04C5C97005448BFC26D4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 9a4fad512e931e92be82fb902b7e687f2e676c079fa24c03893a0528f1e749da
MD5 e2e0c71d639d327560a1bff3beaf068a
SHA1 70c05d3ce9b057df681c845530b09e167203cc12
SHA512 79b9db591e395936e431db505f1600f66d7ebb5499fce726064e7c7ad99baa76733efe97e8a9a8e6c35ecba21a07b173417acade05118d6f07c415900856079d
TLSH
T152E0208885C5C31DD54DA98701B8A70C93D036AED2C07B1F3701C5CD7006084EBC15D0
MD5 SHA1 SHA512 TLSH

Submit Download

6c791deb-de62-4b99-8efd-5f4e95bd2906.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\6c791deb-de62-4b99-8efd-5f4e95bd2906.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

001cc0ff-bfed-4bf7-8fd0-8849826a49c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\001cc0ff-bfed-4bf7-8fd0-8849826a49c8.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

25d1fb2c-7985-433d-aaa1-41dc9cbaade6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\25d1fb2c-7985-433d-aaa1-41dc9cbaade6.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

58bf22cf-d5b3-4c8d-96e9-866f21290491.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\58bf22cf-d5b3-4c8d-96e9-866f21290491.tmp
Size 1KB
SHA256 681ecbc067b7adaa48de22c65c9dc9190a3d0bcfd64b5ad36bd6fc642493c1a9
MD5 f0ef81d2865fdc3f9464467cdca03a68
SHA1 3ea1982786d821e278fd2cd0b2c5e7b0f24eebca
SHA512 eff65677863dbfb1392dddf56a16ef3d3a5aa315c1062691f5d900023b3ace6f1d61b849ea9cf62f3a896e5fdb0b93c05c4eeca85d5c52f73c41864aa4d35057
TLSH
T1A031AFF787B4856E8A0196F0AA18AE2FDE2D0514431C7DA984E4AF2B93E3471E14165B
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 d38e464672934f53c3a0a4399f87a78e9bff3a6d8064cf60331ae74338d85622
MD5 f234b9e315fb070d23b6a2aef863f100
SHA1 1e40f2f2ec2205d4a210638a62eb90e58c770b59
SHA512 d2c821ca7ee05aceabd5af84911ee4506a428c50826a25957d2bd15ba8a0f43cdf762c4a790a366de8e84aca9782a1faf8098825eacaf5dd6ee4eb5f4c55f06f
SSDEEP 192:ST/2dXOJhJlpfnpp3tNXVrN3w+Z6eME0DE/eeuT04vG+no+nF0:SL29ObJffppdNlrtqf0
TLSH
T13CB2321571BB421039FE391892B5976E068271B33119E66B7FBD00B68E2BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a109315c-8867-477c-9845-167cc8d3e2f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a109315c-8867-477c-9845-167cc8d3e2f4.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f123a707-ec45-4c4a-8a91-338d863255b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f123a707-ec45-4c4a-8a91-338d863255b1.tmp
Size 11KB
SHA256 a6e1b3c5a5c2cb4a2d944f418172b6eaf0e7ba4d5bb1ed2a4cd4f3db6c68c6c5
MD5 f42a6b38fef9dea856b85e6f662d290c
SHA1 6eccd8a1d0cc4de348adfe9cea41c396d76d9008
SHA512 be80ca464b1c807be1bee098dbbd3c04d03bb897785bdda8000e192d580d645b67ea8016311e184bb93e34e166c3695a81abdc845f42d8a52c085234b972ec7d
SSDEEP 192:sxZIRuku/fys6aQZLK8QzodpHDHW6+WNGYordcSF6Ig5PtoJ:sxZIXu/fysjOVTjHbG4SQFtM
TLSH
T1C142E8156D28A97B8CCBD219FB557F53E3FD1032A4910E48AAFC8A1C15E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b0cdd80a-9f50-4fe3-b740-a0a30365775c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b0cdd80a-9f50-4fe3-b740-a0a30365775c.tmp
Size 26KB
SHA256 e7aed157ae7ac3363315d45f710039f0ec168649eaafaaadda9a4aa7435a2b37
MD5 a3d85deb2c5b6e867ced3f86bd28bf17
SHA1 9fd757ec8c109bb4013b6207280f277720b8f265
SHA512 1937f0c315adf21206d7063f76a70698402633c499a09bd1a8f8a24ee159cea94cc0e2a4ba847db82b8d430881c9faac5b7b2b49f061c7905124ad2a3d4bfffa
SSDEEP 384:nyiFzQkUSvY3sNc8TUNTUlI4laKMUuFw2fiBCauGlAbuPiJ2ImulgL/7Iz2IIlL:5FdY3JwgblKBCaXWkiJ5musLJ
TLSH
T177C24936EC98DEA7EEE68ED5A31A3643EEE44213D99C9AD4D9C81D1C00C71ED130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b7cd21a2-7722-4980-8f4b-f15b773f538b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b7cd21a2-7722-4980-8f4b-f15b773f538b.tmp
Size 26KB
SHA256 80fe3a11024961d4b6d42a77a108587824bc963ff656140bb595756322af3ad7
MD5 d58a0894b98d5e745f6517cd7aaf8777
SHA1 a18b39c55e018b5eafb240fe4fe245e05a02fd3c
SHA512 0cc608acfd4c0aa9dddc8a0ee0c26c460c9d02f6dbfc8c1f6ea54a7f763886adb8782c7c160b696dcc5bde15e7b119f12a6f1e2b00b094550ae2fe30a5f412ae
SSDEEP 384:nsiFzQkUSvY3sNc8TUNTUlI4laKM8uFw2fiBCauGlAbuPiJ2ImulgL/7Iz2IIlL:XFdY3Jwgb1KBCaXWkiJ5musLJ
TLSH
T1E8C24936EC98DDA7EEE68E95A31A3643EEE04213D99C9AD4D9C91D1C00C71ED130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 25486d2e8b443eb0b5e98ca4351435958eaeef6c7f6dd50cb2604e4be6219d20
MD5 f728ac71fbf1da5ea4a6263d4fdcab40
SHA1 be19b22c51e69e7cb1d6e678381df239144c6419
SHA512 572c0f2412bb64cb8f17bf6a31995e72eba5cc0ed6d5ff8ae1f9d04443f12d99e7b28b1c3e8fdf7f0204e4e36ad36cd7c46acf686ca551bfc2030ba3bcfb87cf
TLSH
T170410658A6E91149B3B77F1A6FF7A86D487FBC672E46D49D10110E4F0A63A00C862B37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3012-204-0x0000026356920000-0x0000026357920000-memory.dmp

Download