e04f66fa30331149a196c5856b6c4e43ee234dd6f13f97b0f34ef78d9643421a

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/11/2026, 22:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BBWJS3.html
Size 64.1MB
Sample261101-2bbnaaythw
SHA256 e04f66fa30331149a196c5856b6c4e43ee234dd6f13f97b0f34ef78d9643421a
MD5 7ccd9b0a9bc993b1767f518d2d90e3ca
SHA1 457515f881803ccb021175004ec84535494c851b
SHA512 9d6aad7553c90737c399daa6e461d15243fe3c0ebbbbcbf1560b964030d4d76d455eadeba9a894267209697d016aa6042a8fd8eef162dcb4426169170f2dd476
SSDEEP 49152:tH3fZuumNs1PVnlfizRyffggYiongQVsWLaiCIImkOyT1kqAF6ufsmbbJDfmsJ+m:4Mfjoc4v
TLSH
T1B5E7EF38B5D22CE6878F1583542F3BCD1C2C5A47634BA65CB5D978AFD1886609EFCC28
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4608	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{56AAB0A0-3FC4-4091-94A3-A296E3D63291}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4904 wrote to memory of 2180	4904	msedge.exe	84
PID 4904 wrote to memory of 4608	4904	msedge.exe	85
PID 4904 wrote to memory of 976	4904	msedge.exe	86
PID 4904 wrote to memory of 1928	4904	msedge.exe	87
PID 4904 wrote to memory of 976	4904	msedge.exe	86
PID 4904 wrote to memory of 976	4904	msedge.exe	86
PID 4904 wrote to memory of 1928	4904	msedge.exe	87
PID 4904 wrote to memory of 760	4904	msedge.exe	88
PID 4904 wrote to memory of 760	4904	msedge.exe	88
PID 4904 wrote to memory of 1244	4904	msedge.exe	89
PID 4904 wrote to memory of 760	4904	msedge.exe	88
PID 4904 wrote to memory of 1244	4904	msedge.exe	89
PID 4904 wrote to memory of 1244	4904	msedge.exe	89
PID 4904 wrote to memory of 4092	4904	msedge.exe	91
PID 4904 wrote to memory of 4092	4904	msedge.exe	91
PID 4904 wrote to memory of 4092	4904	msedge.exe	91
PID 4904 wrote to memory of 3684	4904	msedge.exe	92
PID 4904 wrote to memory of 3684	4904	msedge.exe	92
PID 4904 wrote to memory of 3684	4904	msedge.exe	92
PID 4904 wrote to memory of 1948	4904	msedge.exe	96
PID 4904 wrote to memory of 1948	4904	msedge.exe	96
PID 4904 wrote to memory of 1448	4904	msedge.exe	97
PID 4904 wrote to memory of 400	4904	msedge.exe	98
PID 4904 wrote to memory of 1448	4904	msedge.exe	97
PID 4904 wrote to memory of 400	4904	msedge.exe	98
PID 4904 wrote to memory of 1848	4904	msedge.exe	103
PID 4904 wrote to memory of 2732	4904	msedge.exe	110
PID 4904 wrote to memory of 3252	4904	msedge.exe	111
PID 4904 wrote to memory of 3344	4904	msedge.exe	112
PID 4904 wrote to memory of 4456	4904	msedge.exe	114
PID 4904 wrote to memory of 4456	4904	msedge.exe	114
PID 4904 wrote to memory of 4936	4904	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\BBWJS3.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff636ac188,0x7fff636ac194,0x7fff636ac1a0
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,13087199526340589633,6095581077832598850,524288 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,9875304569597125291,481578467120374716,262144 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:2
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2236,i,2644745054408526541,17734656505034657741,524288 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,18037901361801483354,3789305998337733550,2097152 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,195756809314745299,7141614540042517392,2097152 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,6016162718580469244,17719375469311476564,2097152 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4168,i,15168941002384845864,9880472356762867885,2097152 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:2
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3480,i,7053656184964757074,7831853896280139171,524288 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,11648362987036083217,3330885504087864957,524288 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,8124995186195357724,1600309447213778222,524288 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,15496423144894501167,2795401337636662591,524288 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,15496423144894501167,2795401337636662591,524288 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6212,i,6497940695392513530,10808936048867525844,524288 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,13346749255796354477,15462982882491512483,524288 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,15816896063926244329,5302332079386922154,524288 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2044,i,1967237777359899981,5015076323517424291,524288 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4872,i,17387921591117439961,10157154964237963493,262144 --field-trial-handle=2600,i,13495737101484888391,1983528623334679203,262144 --variations-seed-version --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4936

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6e715fcb-6056-4680-aa05-7b2dab6c9e4f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6e715fcb-6056-4680-aa05-7b2dab6c9e4f.tmp
Size 8KB
SHA256 1b1d52514c98abb8969275a2efb9a805b86c3cdb28e98b06940dbb34a5a7bc4b
MD5 1d3d19c8dcd127f09b47aa613ed32ddd
SHA1 ea84a15e86a75d8732f1f427062dbbac0443676a
SHA512 a93a98f5606dc6417aea7d993ecc4fa48ee8584b01b50143e2b1777d65bc154db81b939bbb4c55d83c227a8569527a29aeb54056276604683c142fc38896321d
SSDEEP 192:SONO6iDCQmiUyYTcHq5u88PcnZcSq1YCU6:SONO6/wHq5u8ic2BU6
TLSH
T1AA0209396C787CBBADE2AD55B5473B179FA4113FE6952F84C9E8162C01EB29C1303923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c8c16a5-255e-4fd3-a1b7-ec1b7d77e43c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\4c8c16a5-255e-4fd3-a1b7-ec1b7d77e43c.tmp
Size 105KB
SHA256 1d62e22dec5c299be491cb2f809a917a5b2650bcf6f26d1655b204a91c995427
MD5 a1423f7d471bb13fff5ecfcdaea6454c
SHA1 7ded49e29e2ee4ecada313702dc82cddf87e8600
SHA512 6e90c834830dc60cf4e69d47a842a672355eeac4f32e8a0122d66df5ce75da4ac71274dc3cb208dbb06f3cd4f506485158442b7832ede2cf24ef8c5b26c1705b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7N:fwUQC5VwBIiElEd2K57P7N
TLSH
T119B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2b6f38f22081ddaa1111b84705bb0452e935cba70ffda2b2886601f1d8df6360
MD5 ec02b779d41e6c7bfde9a979b0a24d5d
SHA1 d7bfaab5e399fd543bd91b28be91cb05e1603c12
SHA512 7039abea8da570fee0fd1cebc7e8feacc30cdd16fd0348ba5146c309f1696c541bd99a85a480ad3c227df6df586718bd26cf483ae0af65010caac2db1bde30aa
TLSH
T156D02BC8D0D43558E01630351027850233CCDD54F003224680450591C4402C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4953eb47ddf8fed591c7d8926a102a58328776c2f8bcb0dcc6c2f6f790020aa9
MD5 4dce79f6f910909bafe5b8817320847d
SHA1 e10678ff1c26e3e9d2f3bf3bb824dc7adf3c47e4
SHA512 9329ecf2bfca29939d71c91b740a18344d0c73d558771b355af8d5bafc3d053fd9c23a07e1db9b22bfa7909d7bb78bb5272f713dbfc950acdbf066383642330d
TLSH
T146D02BC890D43958E41630351026850233CCDD54F003234780450591C4412C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

0ccf2a38-196b-4162-9ffc-d9427fa1c79a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0ccf2a38-196b-4162-9ffc-d9427fa1c79a.tmp
Size 27KB
SHA256 11d51222fd718c58f881a416c78e4cdf4827f9c233250cb17070c96a9c099fa5
MD5 e4f40b6c5f71bf1eb81cc09dce3e18d5
SHA1 90e1e539ff60997ceed35970ab8e9b6bdc62a5d7
SHA512 25424a49ee7ed55ccadf099db1549d1a2c721a0c306369e4138b0cb64785bc82261d68b3942fe634debd0425372c820a0e00b8cee3c913a53253de1cfdbea4c6
SSDEEP 768:AdyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3XrofZzN:AdyQRbrWvvlpZu1jaXKLf33EfZzN
TLSH
T193C2E92B640CCB7E4FC01E9DDC6A6F977EA802D766588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

18ebcd75-30c8-4da8-8769-6b07372f7bd1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\18ebcd75-30c8-4da8-8769-6b07372f7bd1.tmp
Size 9KB
SHA256 2ee8619938d664e39da4b18c32ce09c5720ac712ae27eec2a90f50a9ec6e5b25
MD5 1049bcbd3701b6f812e0acb3b317fd25
SHA1 4db8b4f70a78f72abb39062c121ac812cce00f59
SHA512 ea1c9250599b36b99c3f0b1d4a2ceb0adb02dd148d7901052d4039f537ba64965f3a86217ff755f578734b4565d62d7c92c66c8afe462ffa5fabdc70f5672d27
SSDEEP 192:sxZrPRIW+/fDsVJIDIdpdcHW6+WNGYaJtc8oiIg5uJ:sxZrPd+/fDsXIc+HbGlw
TLSH
T1FA22D9226E28B97B8CC7D20DBA15BF53E6F9143251D51E48B6FC862C05EAADD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2960c9c7-5d80-4d49-a5ae-3e40d7fe25d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2960c9c7-5d80-4d49-a5ae-3e40d7fe25d6.tmp
Size 9KB
SHA256 e09ce973ab3cc255a550495321c35e40f99d0bb09aff6ef92b09fe21e4c72465
MD5 9dd0d534ba3878c01aa3618f62aadf4e
SHA1 3b0a3150854e8da36c29891d8af3cf46f02444b5
SHA512 ef095b23991f70a6970bc3ace7b5839f9ab4bfcf664af62a1601ddc5ac5f90166df754c9f41e52a88f073d0ab8a45f80681cd0138cdfed4efd4ea6bf7c5a86a8
SSDEEP 192:sxZrPRIW+/fDstJIDEdpdcHW6+WNGYaQc8oiIgrJ:sxZrPd+/fDsPIQ+HbGg9
TLSH
T19112B7526E38797B8CC7D20DBA25BF43E6F9143265D51E48E6FC862C05EAADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

366afa5c-a761-419b-ba9f-cdc91c5b921f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\366afa5c-a761-419b-ba9f-cdc91c5b921f.tmp
Size 10KB
SHA256 c9edd1c1b2a6deb771a2376fbb39a937c2a2f26fb18cc81ad98e6021d38ffeb4
MD5 14692f9ec8858ef898e4ec9bc1d987db
SHA1 290d7fb6d06ab05664d3a64a58e74f78d673b504
SHA512 15c479eea604b8af55ab2faec972f744f93d848324a1f0561a98d487c3241900ea76e6e9c58208b6bebb937ae944d13aca7c31b4d649888e6f80a4675a402b91
SSDEEP 192:sxZrPRIW+/fDsViIDIdpdcHW6+WNGYaXPc8oiIg5EJ:sxZrPd+/fDsYIc+HbG9K
TLSH
T12122D922AE28697B8CC7D20DBA15BF43E6F9543251D51E48B6FCC62C05EBADD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3adab122-4d40-4cf4-93af-ebfbf60e08b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3adab122-4d40-4cf4-93af-ebfbf60e08b9.tmp
Size 10KB
SHA256 22169d25b7425ce5598c9588482c3c6c2a28bd055018580a1cb0364ff8598d34
MD5 81b38c3c3f253855b85676930f170073
SHA1 80fcf778cfb393fb095f57d00e9776f4c8b7aad3
SHA512 8bf9f6a4dfe9f81176f115059ce0d42608b9851baaa2592e465533ecba18f082b2afd8c8045ccb2e10d3fe01a754974e6f6d13e5ca2d7c1d01fc39c9d4cdc535
SSDEEP 192:sxZrPRIW+/fDsViIDIdpHcHW6+WNGYaD0c8oiIg5EJ:sxZrPd+/fDsYIc8HbGQK
TLSH
T13322D922AE28697B8CC7D20DBA15BF53E6F9543251D11E48B6FCC62C05EBADD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5ba1b4e2-bc0b-4d6b-aaf2-3d75eefe32b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5ba1b4e2-bc0b-4d6b-aaf2-3d75eefe32b8.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 330d37b03f14365b9e95498a017f8e6e50f095b5bf280d7acf83d6d3714a50f9
MD5 7647104e48db9a0e9b0f39dd32e64297
SHA1 a29464d40bccdff5637185457e8ee2562b8a31c4
SHA512 6dafecc7d4040401d4f8a102630e392ed052c99c292778521c16d219f750fc621bf278137a97cf68fcb6dd415c16753ab3b0468186b32b615ed1f4866d617601
TLSH
T1C5614BF475934755FBEC40FB41E115AB3B3B499C548B6E310CDED4784A4AB16B35AC40
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ad685b2801ee452685f5b5f8f5762dbae551b06dc8457365839ea4a06f7594d4
MD5 6ed4586c996661dfaefadd76032d366d
SHA1 0e4ffaa4c7a26bdee38d6c956b2fe48bc27edd9c
SHA512 f038f23dbb2a16ed59c4a02619afce75bf80b10177401f48d19f4bcba2b80a08d569491d2fb21730996a40446ccbc5412d05cfc42dc8220d05f1b49bbec75b7b
TLSH
T13D614BF475934754FBEC41F781E115AB3B3B499C548B6E320CDED4784A4AB1AB35AC40
MD5 SHA1 SHA512 TLSH

Submit Download

7d540ae7-8786-4b81-b6fe-4bde32dae431.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\7d540ae7-8786-4b81-b6fe-4bde32dae431.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3427273e-953d-43f6-ab5d-b074c21fa01e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3427273e-953d-43f6-ab5d-b074c21fa01e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

36685d42-d641-41ab-b8fd-6386c8f2e79d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\36685d42-d641-41ab-b8fd-6386c8f2e79d.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

c6091717-dab1-4f19-b70c-eab838e20421.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c6091717-dab1-4f19-b70c-eab838e20421.tmp
Size 949B
SHA256 6b49094f7decfaa726c4b64b49bf0080c8edce23169d2e521432041b64c17294
MD5 7976b564c04352917cb113a2e712df22
SHA1 2041d6aa5faa29fcbcd36d52cc276f0533428229
SHA512 2bdf1d77bab56d2e242cfa1e615cc2f6900e72f48c6e9984fd71b8e98da52b7c4135b095f81feb3e10050f0691b1e137d9c0422eb001484915a79d13d740f4ff
TLSH
T114115BB3C3D595AE890116F05A24AE2BCE1D0605421C7C1A89D4EF27D7E3475E00195B
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c456f7823dd30b2bb93300fe9f4f9e822fc0576bc3d0ff5f8efec9f5c879576f
MD5 f5956557ae9212058352f57a7d8131d6
SHA1 dd068df8ecd1cbf887b8fbe2880b58f4a915602e
SHA512 2fa75ec60d9a7a38c6309386f5260923fc5e11ec2fc0874e591c00ab9533576483337d0f4ab8246c5ac6d6b9bb71f87170b0bcf49399ae0e64b129dc1adf3d94
SSDEEP 96:KAHGKIQm+xOK60qFuz/dvDb2z0qInbKgiIBbUFNMbjo/:w1R1L/
TLSH
T1AF91340172BB4240397D288C45F88A2BD592B2733124EE7BBFAC94529D6ED140DFDCDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf60075a-abdb-4962-b20e-86754b24dfad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cf60075a-abdb-4962-b20e-86754b24dfad.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc573ee7-a0e5-47d8-950d-3ce5f7b67047.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\cc573ee7-a0e5-47d8-950d-3ce5f7b67047.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a0cd4648-d069-4a5d-aced-5f6f47ecbc88.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a0cd4648-d069-4a5d-aced-5f6f47ecbc88.tmp
Size 8KB
SHA256 c28da6049c03bdb9fd856550e630a9dc79440855900ecce7de6809072fde28f2
MD5 9278bd6d4e8c7a577191793d0704a6a4
SHA1 d100bf60748febb2d0f973fa748be3c0ffc89a02
SHA512 d13aa876efb23260b3b1d938347792a120a54cac851663ff1eff16a4512bf7003a2744916eb1cff713c2b15e7c95d10e2384ad68dde07abb49fb38f885836f42
SSDEEP 192:GONB6iDDQmiUyYNcdq5u88PcnZmHGauuZnq/U6:GONB6Amdq5u8icIHGaRUU6
TLSH
T176122C366CB8AC6B6DE2A9A1F04736139EA5412BE7497F84C5DC272C06EF1DC5307A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b3dc69f3-793b-42fa-96d7-449d173ed652.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b3dc69f3-793b-42fa-96d7-449d173ed652.tmp
Size 18KB
SHA256 067599894c55d0e14e3f3fe0bf3fa9a5282ad49ea6ac057821bde3dabba41a24
MD5 f8e7f2a4d3b3d6723c7741f996d3cc35
SHA1 f0994cdbc395521772dafda78e89485e11c2ff75
SHA512 4d9a87f47a496ab4fdbbd1e830c4eeeecf0fb2b5cc70e1d54bd40dbc95f7cb677658b69a9108066140c0076baf2dc25e6e77f36bfd4ec1a2df9928996536b7fc
SSDEEP 384:rQkUSv0sNA52f+Otg/p5u8icIHGarUH7vBEwYIIl4:l0hpXkcmrUH75ENL+
TLSH
T192828C366CB96C6B5DE3A661F10B3A13DEB4801BEBD91F80D4DD972D02DE1D92307A12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6939e37-92da-462e-9bfa-11cf18c96f9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c6939e37-92da-462e-9bfa-11cf18c96f9c.tmp
Size 21KB
SHA256 67277d9f2abd5db726808843de6cc58289a69d74edc9a0bc6bbe2b19f4b42669
MD5 5557920e472d0aa97939ec4bdd11bdd4
SHA1 1c0c7a4b8292b76f7c473cda6c2aa72b904ee61d
SHA512 6628eaa06c36b5a06f455e74bff44b2c6fcd02adf3c10e1659b639eb910f679c34673d62ff55386a1b5cc629377878f1c0429acd82c8a2d8099d7a422061efdc
SSDEEP 384:tiFzQkUSvfzsNA8TUNTUlIl52f+Otg/p5u8icIHGayUH7vBEwYIIl4:kFdbxwgrpXkcmyUH75ENL+
TLSH
T1F8A27C335CA89D7FAEB39B51F10A3613DEB4406BCA996B90E6CD5A2D01DE1CC2347E11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6e02812-fb83-4198-88c0-406d092b1b0b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e6e02812-fb83-4198-88c0-406d092b1b0b.tmp
Size 12KB
SHA256 c3b12a41530727d34e311230a05b789dcad44d173361c34b44c07fcf3671c02e
MD5 2147a986b1c571052480ec83f504da61
SHA1 2e1496eac62e784e08dc1485675a7412ab1ed0bb
SHA512 63f5300c8e5b3731801df14198811156fb5259e9e7e149be02e4847ecda643f4ab974ea9876c1381d00cad70205beaf4a17e05b466f52deebb555396ec8cfd1d
SSDEEP 192:+LsNA0Qhfx1WyDPsmQmiU1Ya6w4p5u88PcnZmHGaKlAnq/MRiU:0sNA02f+OtY/p5u8icIHGaRUOn
TLSH
T15F423C366CB5AC776DA2A5A5F10B36139EB8406BD7882F84C5DD672D02DF1DC1307A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20148501-f109-40bd-9121-0480ebf0af19.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\20148501-f109-40bd-9121-0480ebf0af19.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fb3bbfc8-dfc8-4d99-a261-1941f94dd603.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fb3bbfc8-dfc8-4d99-a261-1941f94dd603.tmp
Size 18KB
SHA256 7bfd326940adfc7bbe65891458631a1f03f8d9a4882793abc14905cdd5332364
MD5 3e894a740aeff7148cd789d9db9f64cb
SHA1 5abe463ef3959c7c08900f9d0f3ae4252666a7ad
SHA512 22544adce4924b5904dc2c5524bb6e2b1e90a25889539f5e9cb7c74abb748f1330f2bae884cb7255376b1043a6dfa8c4fb17d3883b564e41349aa5ac1fac126c
SSDEEP 384:iQkUSv0sNAU2f+Otg/p5u8icIHGarUH7vBEwYIIl4:a0upXkcmrUH75ENL+
TLSH
T178828D366CB96C7B5DA3A661F10B3A13DEB4811BEBD91F80D4DD672D02DE1D92307A02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 310e520efe5bf26da40d8525047beb66a8cb1f53474b6d926ad3e6951e6fadae
MD5 2f572f75f22d2579146a630ca035efc6
SHA1 481f32e4daeb255d914ab6a74d8a02f29fc31397
SHA512 74c21095b80741c24ac08cf6b4eca745e01bee0404c11afdbb2b87d9b57cc91a80e817de5984e01989bc60932c0d5001ca3f4d80dcd9b6a89174ed5d5f423fc2
TLSH
T1BA410668B6F91148B3B36F5AABF7A86D587BB9372E06D45D00110E5F0A32B40C962737
MD5 SHA1 SHA512 TLSH

Submit Download