37c08c99884b9ae99588f931477945788d8c689981f905e34872aedc9b8c5572

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 18:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.html
Size 39KB
Sample261030-ws12lsfs2n
SHA256 37c08c99884b9ae99588f931477945788d8c689981f905e34872aedc9b8c5572
MD5 e35d580c5b17cb85a630e72d0b13cddf
SHA1 24cede3c3711d993679781809d8ce3527b005e5e
SHA512 9ccf17900b16c36905b115c9f1ecd2941a5c68062f38a4d6410a010bebcb78866f21dfa12e45914f0cf850773e8738866fa766e4d958cccc8c9391684ccd2c52
SSDEEP 768:gqNZdypJE7vSPbcp8jj0CERJ7SU6KkioaAx1AWi/WI3vVNGm4mmxWo0sCT:gqypWvSPbcpZRJ7n6KkioaAx1svOm4mL
TLSH
T1E703E933D4AC8427775A8B69D1B0B728D5ACDA15DA029BA0F4FD71684BE0EF605B730C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1896	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{C721FB74-9FAE-4B27-9513-5F92FFE96F06}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2292	msedge.exe
2292	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe
2528	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2528 wrote to memory of 4504	2528	msedge.exe	84
PID 2528 wrote to memory of 1896	2528	msedge.exe	85
PID 2528 wrote to memory of 4408	2528	msedge.exe	86
PID 2528 wrote to memory of 4408	2528	msedge.exe	86
PID 2528 wrote to memory of 4408	2528	msedge.exe	86
PID 2528 wrote to memory of 1028	2528	msedge.exe	88
PID 2528 wrote to memory of 1028	2528	msedge.exe	88
PID 2528 wrote to memory of 3196	2528	msedge.exe	89
PID 2528 wrote to memory of 4444	2528	msedge.exe	90
PID 2528 wrote to memory of 3196	2528	msedge.exe	89
PID 2528 wrote to memory of 3196	2528	msedge.exe	89
PID 2528 wrote to memory of 4444	2528	msedge.exe	90
PID 2528 wrote to memory of 4444	2528	msedge.exe	90
PID 2528 wrote to memory of 3284	2528	msedge.exe	91
PID 2528 wrote to memory of 3284	2528	msedge.exe	91
PID 2528 wrote to memory of 3284	2528	msedge.exe	91
PID 2528 wrote to memory of 2328	2528	msedge.exe	92
PID 2528 wrote to memory of 2328	2528	msedge.exe	92
PID 2528 wrote to memory of 2328	2528	msedge.exe	92
PID 2528 wrote to memory of 1912	2528	msedge.exe	98
PID 2528 wrote to memory of 692	2528	msedge.exe	99
PID 2528 wrote to memory of 1912	2528	msedge.exe	98
PID 2528 wrote to memory of 692	2528	msedge.exe	99
PID 2528 wrote to memory of 748	2528	msedge.exe	101
PID 2528 wrote to memory of 4332	2528	msedge.exe	108
PID 2528 wrote to memory of 4212	2528	msedge.exe	109
PID 2528 wrote to memory of 3008	2528	msedge.exe	110
PID 2528 wrote to memory of 804	2528	msedge.exe	112
PID 2528 wrote to memory of 804	2528	msedge.exe	112
PID 2528 wrote to memory of 3856	2528	msedge.exe	113
PID 2528 wrote to memory of 3856	2528	msedge.exe	113
PID 2528 wrote to memory of 2292	2528	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fffbbc6c188,0x7fffbbc6c194,0x7fffbbc6c1a0
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2016,i,12689076118355004876,12679869747636691889,524288 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,17697923711915174354,5759006015075641922,262144 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2560,i,8944123291630554550,9746920931133167354,524288 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,16254287479072852234,14610884033351675002,2097152 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,8334873725960296416,8805656561590354091,2097152 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,13072902411865260813,9730096588069904740,2097152 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,12433467222475062021,13341567835136869799,2097152 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:2
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,7538010921812508888,17650937104292160963,524288 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,13767228102874920013,5698377577865479561,524288 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,1401297986212671494,18234463637003249810,524288 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,1401297986212671494,18234463637003249810,524288 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,2717386396198271932,10853207917961888764,524288 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:8
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4148,i,8803091047331202794,10583606648242399309,524288 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,2786170819558064770,1391348514211688621,524288 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:8
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,14354540849304280299,13850921747086931140,524288 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,18241508801729363716,3138743096134107244,524288 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5448,i,18234280029296292549,4902836695132556305,262144 --field-trial-handle=2208,i,15437723973688651185,3804690507124881313,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2292

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:952

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

41062f2b-35f1-43e3-8928-ac0af5085987.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\41062f2b-35f1-43e3-8928-ac0af5085987.tmp
Size 8KB
SHA256 24b57a9d938de0058e28ddb803185efe1af21421d5be54b2fef83aa2ee956ce9
MD5 54f95664d519a240fea9a93016833326
SHA1 00f8905ed393485d3a0564bcfa880aae5db93c47
SHA512 da007da94586d8e7f54d288c22e02d8d142aa944282295594a944e9d3fe54f817f89ae978e22fba60561409c891406aab18126938e75043636408e26a658eda6
SSDEEP 192:EONK6nnHGQmiUy/ZQYcX5hQDP1XOEMcwyHU6:EONK6nC+QNX5+DtXOgrHU6
TLSH
T1A502DA34ADA86C778EF7AD45B4872313AFA5217BE5846FC0DAE85E1C01D769C2306C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f141a91-96a7-445c-8379-3752aa430384.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6f141a91-96a7-445c-8379-3752aa430384.tmp
Size 8KB
SHA256 f81d71b77990110605a13952dff32dba5cdb4f888f361ef6599436c607a4dfe9
MD5 b5d719610dd3d021c8d42a0968eb5815
SHA1 b01df183f8d54871ec97e9194ca88092c1ecc0be
SHA512 3f09fa48c8733bd0952379becaad57fdf5a0405b12ec34ec6f371d94f4624e4ee1f2a31aa08053386c7aa219c8f3258fe01949d24da5f2b34c8366a8d586bee0
SSDEEP 192:PON76nnHGQmiUy8Z+YcX5hQDP1XO7uFfEIg3lrq5dU6:PON76nCn+NX5+DtXO7y8z2dU6
TLSH
T1D012FC31ADA8EC775EE69595F0873153AEA52127E5887FC0D5DC3E1C01DF6AC230AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8ed7b4bb-3f6b-4c1e-b7fb-e6de8f3d79de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8ed7b4bb-3f6b-4c1e-b7fb-e6de8f3d79de.tmp
Size 18KB
SHA256 8dd4b4007b91127c70b8953230dc7dce7f541333ac29ef80e49ee26a84d277b9
MD5 046adf84d90ae96071dd31021320bc58
SHA1 4986a97a67424ed7d86ce52690a7cd5ba6364757
SHA512 91e8c596aafb261106c363aa513d3111c8f236a5ca7393b92ddc91b40ff643f747b8ada1060e16b7c695dbbde497ba8ec477b0000f11d5edd800a8497df32b1e
SSDEEP 384:YQkUSv0sNCcjiDFiQX5+DtXO7y8h2d2I7bIIlS:Q0mwhkDdO7dh2d5/LE
TLSH
T14D826D35ACA8AD378AA6A550F14A3253DFB46127E6C85FD0D6CD7F1C01CA6DC230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

1dbc0087-1e6c-429e-81f8-304950757ff0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1dbc0087-1e6c-429e-81f8-304950757ff0.tmp
Size 10KB
SHA256 7687bf9450fbaceb225784633b4f9499a5eebde326c795bbac5e83d22444c26d
MD5 9a9af3e0c4b7af7bdac86a57a847cec2
SHA1 d63e3aae068268a60b8573617c058e1384881b91
SHA512 06b45bec972e8608be7df5dcce3881728be1bde4828bf6442d4f01d8f68b7b0f53060e94cade6b360fad01811777223384355061c6a0d8d259a80d2cf9e29a09
SSDEEP 192:sxZ5RZWJ/fqsgqIdpHcHW6+WNGYYBw6JbfIg5NJ:sxZ5OJ/fqsgj8HbGfZl
TLSH
T10022B8156E28697B8CCBD21DBB55BF53E6FD5033A1901E48E6FC8A1C05E66DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47d34b4e-cedc-4f79-8f8f-38f7ea5d373b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\47d34b4e-cedc-4f79-8f8f-38f7ea5d373b.tmp
Size 10KB
SHA256 e8b1601546313f8ffcac98b9c7526f4bfeb93a53ee557f48cf4d677b33783516
MD5 8ff249319a11148824f92f6966045699
SHA1 38a0bc4e33292b3400394dc9c517fe450c9aa594
SHA512 cb70f1a04495320b48f7545680dc34f6390aa746083e837c91b17f50d77333e1b56d769725424748b08bbdce8446e1e1e37151e4d9ac676952be609d6b1175c7
SSDEEP 192:sxZ5RZWJ/fqsWqIdpdcHW6+WNGYYB1wNfIg5vJ:sxZ5OJ/fqsWjKHbGfEz
TLSH
T11F22C9116E38A97B8CCBD20DBB55BF53E6FD5032A1941E58E6FC9A1C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

50dc7a42-f314-48be-92a2-f37de5b5930b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\50dc7a42-f314-48be-92a2-f37de5b5930b.tmp
Size 27KB
SHA256 2de998583e034c49c23c280272afb4f5d832cb8bb3609bca2b8a74776dad7382
MD5 8eed42184c77e4daf997944190f808b2
SHA1 718732c65621c320b6084a9c8f7014d23e780808
SHA512 b838468e99e122b30fcf4615ba9c0d3104a4ab5ff2dff9d6e3e9454aae3ba9203c46775810b5d1486711140e14fd6715a6f1cb5b118d2d0b583b00f3520666ef
SSDEEP 768:6HyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXRropZiN:6HyYR7jWv3NpBu1ja/CL8OXqu
TLSH
T198C2E93B640DCB7E4FC01E9DDC5A6F9B3E9802C7A6548D4047FA984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5364ab5e-0604-4ad7-8459-5679ef6a8914.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5364ab5e-0604-4ad7-8459-5679ef6a8914.tmp
Size 10KB
SHA256 dbf6f930473018ca8f2c82674f293ca49a0dd9a8db1cd9c4505678bb7b4024d1
MD5 2a2ba12f34a87ff8a55e1b8708c60a3d
SHA1 40af792929054eabd8490eec8c561ed007877fef
SHA512 de2b384279c1290c7aa1b975cf4fbd22d5eaf058604810cdbff1cafa3d6974f4ada86fedb711bc13de0f3500b807a75ca4aa5704051acb3de56f2e17a78f23e5
SSDEEP 192:sxZ5RZWJ/fqsgqIdpdcHW6+WNGYYBr6aNfIg5NJ:sxZ5OJ/fqsgjKHbGfBl
TLSH
T13C22B8156E28697B8CCBD209BB55BF53E6FD5033A1941E58E6FCCA1C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 034e9b199cb6919511dac39f804565fb2af4a466bc7c1b2d59a0e3e85ac899c2
MD5 aab7742e86bad235bc83cbc3c6a0ce05
SHA1 e6264d4a9e7279a802951ab5abff7a57068b57da
SHA512 1e8d46a1d39b51a1cfe6e007659f01df6af7e3c6d875fc1ff9947bb05e8e7bd42269f180b732c68a7b8af78c7154062f4b45c5d48a02d25a840a8740ad7503ea
TLSH
T113E0DFA449C8C32EE7CC658702BC938CD2A0365EE2C07A1E6704C9887449080B382A90
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 d19b1437199ca2a4c0ab1b84e04839578f314e05e103ae1c16eb6ddac71dddec
MD5 b894705c2eb2e2a19ad94c5cf0d07004
SHA1 ba2a6e9e41c664df6d0cab7b4755d1f8a8e86c71
SHA512 aa9982734920dbcdc2a169a9b92578db80fd4204b4e2f4b239fe2d848bfe7e26562d206d54e2174793337908ea6e2c93178e35539f12052b9c66ea93a133965f
TLSH
T142514D824AA2FEC4F7A9073170D712A33730884D80B32E4A11A8CCB9BA4FF56B174C74
MD5 SHA1 SHA512 TLSH

Submit Download

b0b93dd0-3106-46f1-a3e0-6cf7b8ed21b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b0b93dd0-3106-46f1-a3e0-6cf7b8ed21b1.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3c60d9de-4c56-4acc-9a64-f25d34a70287.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3c60d9de-4c56-4acc-9a64-f25d34a70287.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

62d23024-6e8c-416d-88cc-ec71c44a078b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\62d23024-6e8c-416d-88cc-ec71c44a078b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

7d7df182-2f4c-4165-92b5-820085fb496f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7d7df182-2f4c-4165-92b5-820085fb496f.tmp
Size 949B
SHA256 afa9ae8166e82115926456a6fc12aad7875915d4b5e86f674d4dca266ad21c7d
MD5 dd90e93e1f7d871703cd4e7c20b65e44
SHA1 9f3cea68886032bcd3973ab351abe0356210976e
SHA512 2689511dd5c03dcfa6455496cecc238eea88fc28c063ef9b55cbd968cfdf6259661e40cfb66a54ffaac79b78a6fb530224ff5ad89e24b34d408884bcf3b12209
TLSH
T1F51190F3C7D5856EC90556F05A24AE2BCE1D0546421C7C19C5D4EF2BD3E3075D10195F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5b7b7343c833396b055c80b8d1213dc4a017570297c26a25db71cf3221e24549
MD5 e0015606f1e0ceec4dd797b0dd84ec6e
SHA1 c8501e6a40e2bb4b3b49e88c3d2c179ae896c869
SHA512 b2a04c42b4c9f9cd0516e5bc2518177844bb1017312de2cbfcf66f50026518b170d58747adec22a9ccee536caa36e1476a68e06f88f1ae248d9a571ae9e36315
SSDEEP 48:KgLuvL1ttOb9wVISrOK9715OxjeY4JbPyLgvmqwaOPbmdGISCPK9e1kPxYfYlWTk:KIogKV2qOPyKQEjPGKMMiBKPG6r
TLSH
T105910F61316E030239FD2548A1B6861E429531F73068EA7EBFBA42F54E2EE441DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a40b29ca-c3cd-418c-867c-6513d7476e1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a40b29ca-c3cd-418c-867c-6513d7476e1d.tmp
Size 9KB
SHA256 2c5c5074ff7a4ca50bd4466ffac25faaaa3a705dd33e18b0582968f7cf3bfa9c
MD5 2f627a9c7107a8d25124fcf8df162461
SHA1 47a6877060554a2532aed18fdd805ae27e19f342
SHA512 3e5350e20149b7e961a383c44036a84520508ef4cd873fd9bba15831591babe00ca7d37430461ad963dc95310c06b463a22516c9b8bb08892205c13f949fd3be
SSDEEP 192:sxZ5RZWJ/fqsoqIdpdcHW6+WNGYYB1wNfIgrJ:sxZ5OJ/fqsojKHbGfE9
TLSH
T16C22B9116E38A53B8CCBD20DBB55BF53E5FD5032A1941E58EAFC9A1C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c5e48aa4-aaed-45c7-9895-890c94fee86e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c5e48aa4-aaed-45c7-9895-890c94fee86e.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

e1dc1e9f-75e0-4dba-a184-b9a2ad5748d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e1dc1e9f-75e0-4dba-a184-b9a2ad5748d1.tmp
Size 10KB
SHA256 1d513327bb3b53bbc2accfafdeae1dd7065fa3678dbeb3fac9efce41e1778e6e
MD5 038c25a746710f65d201c2aa551f6f0d
SHA1 f1deec60cc2da3efacef086f6220fa8e072405af
SHA512 5093429f357f00d28871281eb3a397a879490b24c04a420557fd2ab499c530f05853afea752bfc5565d253e0befbf45944296ec71244aa09f7b4c5e56e938e84
SSDEEP 192:sxZ5RZWJ/fqsglIdpHcHW6+WNGYYBw6JbfIg5NJ:sxZ5OJ/fqsgW8HbGfZl
TLSH
T1E522A8156E38A93B8CCBD209BA55BF53E6FD5032A1941E48E6FC9A1C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ec547b33-cec6-460a-bac9-ad2be3328f94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ec547b33-cec6-460a-bac9-ad2be3328f94.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d447d77d-d785-48b5-ba24-6e724daf64b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d447d77d-d785-48b5-ba24-6e724daf64b0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5381339-bfa0-4fd0-ab03-439caea7c7f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d5381339-bfa0-4fd0-ab03-439caea7c7f1.tmp
Size 18KB
SHA256 c6c144f219cf31329c75dcaed11920f47497af77567c92ca7cff6ffb523ff1d6
MD5 0a187cdb1fae27f526f9de4e7a579d7c
SHA1 193c36033b2c3ad6bf8c7371ded0e1a78c543eb4
SHA512 002d2397054f588a7e6a3e16d6c66387ac0eaa879dda1b740c89969d42c202242bf9cd372a83d227e8d1949695e2f66b6d63efc623231f866cbb1cce15e0434a
SSDEEP 384:hQkUSv0sNCbjiDFiQX5+DtXO7y8h2d2I7bIIlS:T0xwhkDdO7dh2d5/LE
TLSH
T1CA827D35ACA8AD378AA69550F04A3253DFB46127E6C86FD0D6CD7F2C01CA6DC230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e4f65ea9-4e3c-48e6-a382-2ebd463093b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e4f65ea9-4e3c-48e6-a382-2ebd463093b4.tmp
Size 21KB
SHA256 12b0f4f356dd1770f4b4df898f25f18cd9eae8138188ea8d3ff02252ee065f87
MD5 0d295b0a62824231f50d26e6e6a93bb8
SHA1 66c85aa4c329b6da8db7e8c98aed150d628f3d19
SHA512 e8370f7ef60367df4bbd6a4bad1596ca28450e4265406e0d36eba61c1f9145a609043bed95aba0d3878c94fae78026a23393ebfb1b5eac0b2b90ce0008fd1d0d
SSDEEP 384:tfiFzQkUSvxzsNa8TUNTUlIlcjiDFiQX5+DtXO7y872d2I7bIIlS:tqFdBTwgKwhkDdO7d72d5/LE
TLSH
T169A25C329C98D93B9EBA9A80F54A3253DEB45167D584AFD0E78C6E1C01DB2DC234BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3217a732-682c-47d0-afcf-f5f74a6d43cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3217a732-682c-47d0-afcf-f5f74a6d43cc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8c68b144502343511c213f409c98d5e4ba8d73b8e99fab1c4fb19b4dfc64d1df
MD5 d6c81a9414084f34e7306e5ee37e4cb4
SHA1 6f2f1a58e96d4857604cefac6137c583b908af84
SHA512 97928698af361c37c30ecbf27760d4d318bcb5f28c2f5b335e83a1387591282907562410f05d8eccd5c2fe347d1ce3c5dfe2fb84ffb5c9fe376f0bf8df61940e
TLSH
T105410358A6F91148B3B76E5AABF3A86D847F78772F06D45E10110E4F0A62B40C9B2737
MD5 SHA1 SHA512 TLSH

Submit Download