f617b2bd325b2a68a7ea0250c13b2d7d48d806c8048d294bc2aeab3a893ba24a

Analysis

user interaction
yes
max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 22:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.html
Size 53KB
Sample261102-2e2zmsxtdw
SHA256 f617b2bd325b2a68a7ea0250c13b2d7d48d806c8048d294bc2aeab3a893ba24a
MD5 1c7a7531069ed84391effc26d5c6d8f8
SHA1 e99734537d294334c9ae06b2dcadc879916a65cb
SHA512 de856ba3ac714f3756820cbd553ac131eb3641ebace581958315dbd64e19277e9f675a3b138f4ee56d562576e9f573c552d9d655176289b2a173f9952acf65f0
SSDEEP 1536:y1AG+GLIGUyoAU3rJEP0rQr++vrBrSYUdpsQo3jKSqfcvXR+d7uKVNQ3zi9ORNZD:0LmmbNZD
TLSH
T10433D717E7C62DB27F2136D99517774A2439830B5AC2C0EAD2B02C4C71E16FA979B0F6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
848	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{E4621F5E-48D5-4CC7-9CE8-102F92B83713}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4568	msedge.exe
4568	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1196 wrote to memory of 5008	1196	msedge.exe	85
PID 1196 wrote to memory of 848	1196	msedge.exe	86
PID 1196 wrote to memory of 4580	1196	msedge.exe	87
PID 1196 wrote to memory of 4580	1196	msedge.exe	87
PID 1196 wrote to memory of 4580	1196	msedge.exe	87
PID 1196 wrote to memory of 924	1196	msedge.exe	88
PID 1196 wrote to memory of 924	1196	msedge.exe	88
PID 1196 wrote to memory of 2080	1196	msedge.exe	89
PID 1196 wrote to memory of 2080	1196	msedge.exe	89
PID 1196 wrote to memory of 2080	1196	msedge.exe	89
PID 1196 wrote to memory of 756	1196	msedge.exe	90
PID 1196 wrote to memory of 756	1196	msedge.exe	90
PID 1196 wrote to memory of 756	1196	msedge.exe	90
PID 1196 wrote to memory of 4672	1196	msedge.exe	92
PID 1196 wrote to memory of 1716	1196	msedge.exe	93
PID 1196 wrote to memory of 4672	1196	msedge.exe	92
PID 1196 wrote to memory of 4672	1196	msedge.exe	92
PID 1196 wrote to memory of 1716	1196	msedge.exe	93
PID 1196 wrote to memory of 1716	1196	msedge.exe	93
PID 1196 wrote to memory of 1808	1196	msedge.exe	97
PID 1196 wrote to memory of 4984	1196	msedge.exe	98
PID 1196 wrote to memory of 1808	1196	msedge.exe	97
PID 1196 wrote to memory of 4984	1196	msedge.exe	98
PID 1196 wrote to memory of 3924	1196	msedge.exe	102
PID 1196 wrote to memory of 5044	1196	msedge.exe	109
PID 1196 wrote to memory of 1616	1196	msedge.exe	110
PID 1196 wrote to memory of 1736	1196	msedge.exe	111
PID 1196 wrote to memory of 112	1196	msedge.exe	113
PID 1196 wrote to memory of 112	1196	msedge.exe	113
PID 1196 wrote to memory of 2728	1196	msedge.exe	114
PID 1196 wrote to memory of 2728	1196	msedge.exe	114
PID 1196 wrote to memory of 4568	1196	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x27c,0x7ff812dcc188,0x7ff812dcc194,0x7ff812dcc1a0
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,2296041995379641434,852759325023680997,524288 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:3
  2⤵
  - System Time Discovery
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,10510280576314607939,15283958118395716,262144 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:2
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,9856886075101823273,171170772684143724,524288 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:8
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,6152477340271163595,15380579553719976474,2097152 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,12108811837334403119,8848761581787223838,2097152 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,330444594699489318,709601102939343566,2097152 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,2838938763545318361,3829080858804478550,2097152 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4172,i,15586060088642491057,2915059052200948366,524288 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,8655429804203157303,2977176171435545458,524288 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,14613892039483735340,6626821163761429891,524288 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,14613892039483735340,6626821163761429891,524288 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,849086292505525804,14705592073929947762,524288 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,6179603327597130859,5297254739883280901,524288 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:8
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4572,i,16449449955295846453,10550242481576512603,524288 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,16264182843355378797,2734480740554337550,524288 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6360,i,172150082813887931,9691093884003962695,524288 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:8
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5652,i,12516882206677332480,16723644824038469543,262144 --field-trial-handle=2856,i,9224476261935315474,17654495165947472299,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4568

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4156

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1e2ab6f7-36f7-43a8-9531-62255397804e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1e2ab6f7-36f7-43a8-9531-62255397804e.tmp
Size 8KB
SHA256 1279c7c71be4328a65cbef044bd3514aa128425b8880e5eb40a8fc5514a69f1a
MD5 e030c2b3288354ad7c35330a2bd580b8
SHA1 c1ab3547f2da2133215f494b307fee1dff025e0f
SHA512 5596553d56fb863337921be7085b83a294674b71b455b5995a28caf79a1b702dba3c5cbb222fd428d525c4edcb6980f9d46436c54c731848f2a141186136ff58
SSDEEP 192:jONj6nnHTQmiUyNIrYcX5hQDP1JOnHoqSSJrQg3+pq5lU6:jONj6nljrNX5+DtJOnIqNJrL+alU6
TLSH
T1E5121B31B9A4AC375EE2A5D1B48731539EA46127DA857BC0D5EC2F1C01DEBAC230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2589ee74-c9a0-4dab-80e0-c9cfbf5bcc47.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2589ee74-c9a0-4dab-80e0-c9cfbf5bcc47.tmp
Size 18KB
SHA256 bce8450c80892eb1e79e759a0692439125a4ceb73d768250f7618245aa543513
MD5 b6189dc28f9ac59d44457bee236f5c0d
SHA1 cb5f80fabecc7ade05af3b1621cb7eb959dbd4e0
SHA512 9e95914039acedd699f9cb53a7fc57292aa52a4212f9b16de6d6ace8ebccabab64887e7dcf59a7eb570b0895a798060eb8aed5d9351d5e3439939c8cb538118b
SSDEEP 384:eQkUSv0sNalx2OwidiJQX5+DtJOnIqNJrb+alH7vBEZ5IIlu:O0fIBOkDzOIqNhb+alH75EZ5LE
TLSH
T17E828E316864AD374EF3A651F14A3197EFB4A16BDAC81BC0E9DD9B1C01CA79C230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5402fb37-0083-484e-95c2-64432c842a31.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5402fb37-0083-484e-95c2-64432c842a31.tmp
Size 18KB
SHA256 3d3d768b5f104ef01cc4500ba04f265d02e86634bc9f03f869e2d0cf80248bf3
MD5 d7ac89ce5041531ca8a260a502fb653e
SHA1 bb12688c8e768dfacc99289cc3bac61fef56efe7
SHA512 fb3c7d47bf1d4fa827a21c0f3ce3c83dc5bab012beaed3ab15faa3ae5a57ac7a026657995b6883ebe5c4968583c702279c7b1642ea557f23d8acd8b8b0f63cd1
SSDEEP 384:VQkUSv0sNawx2OwidiJQX5+DtJOnIqNJrb+alH7vBEZ5IIlu:v0OIBOkDzOIqNhb+alH75EZ5LE
TLSH
T178828E31A864AD374EF3A650F14A3197DFB4A15BDAC81BC0E9DD9B1C01C97DC230AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7118b6be-43b6-4a1c-9e1e-c3af3761b5de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7118b6be-43b6-4a1c-9e1e-c3af3761b5de.tmp
Size 8KB
SHA256 1977e8811c2c054830bef023ae60b6cd70522454b399fd76c2a33c04798748c9
MD5 35f7379139ae4643129143e615fa21b9
SHA1 cc8d8fb787369fa59f12b5e3edde766eb9e4ec0c
SHA512 fd19a4f08db9658a1cf7c1d6b7ca0df4ad80c8f782769b8e8faadec099bf8431f1ee8bdeeb82739f01b540ff6d2c5da519b56a04c837cbd704fcc873d7d74c7c
SSDEEP 192:EONq6nnHGQmiUy0IQYcX5hQDP1JOnHodMc+G2U6:EONq6nCQQNX5+DtJOnIN+ZU6
TLSH
T1F602E934BCB86C7B8EF36D55B48623139FA5216BE5956FC0DAF81E1C01D7B5C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d24032e322bda4aa4f943eeee5c1be2eee903b8fa00c6e40c3ae3aab1d6e57
MD5 cf18b86051311e5d4cb3435637b32441
SHA1 81808c10d3ea99d837ac73ca978bbac4af2b14c3
SHA512 d8f6d4f7cc0a9a322acccdf645cd0eaf7d236c68d82f2fd25c2d01e1e6ce323c3d584edd204b1c68ced260f3cf67a5be22a62de64511401735df9213129ac8f0
TLSH
T1EFD02B02FE898A6CD4921C34012E811D36CDF40049027041C0B023974C04701102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ba460c9f5a00478279781ba3317975fb747ea7519f30b24bac67a94df77c22d
MD5 be02dc26a22f37196d8a2ed1f90604b5
SHA1 0d4f49e0f6b152530b0ff133dac678914194c470
SHA512 74fcddf19d34dc2b1dc8ec59c0f57f326e68c7c9b62fb89494b07e2bd52522d6f7662a05f91a2d0787fba43ac2646fc3214bc591a45f14862aa715bcd9206f88
TLSH
T1EBD02B02FEC98E6CD8921C34012D811D36CDF4004902B142C0B023974C05741102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

0375499e-720e-4779-93f5-b90726a9c670.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0375499e-720e-4779-93f5-b90726a9c670.tmp
Size 10KB
SHA256 7d47f2760074eb9defcfd9e7b6749bb4fb6404e59546a1e8bf3418b76b8e7a34
MD5 c874b2568ea37001680e7be682960f85
SHA1 bda0095e2f0e5e7073d60f2997beb3826b7ffc40
SHA512 2c9b5c4121e92be99ca51c1c2c1ff04f5504ce2156610de5bf1605703d4021af4a7d67b58007e6ce3f0b95b7f73c34fd50105c9e232eb513095cd42ec87b1f36
SSDEEP 192:sxZrRmWD/fQse8IdpHzHW6+WNGYYBnJ1usIg59J:sxZr7D/fQselTHbGfJBJ
TLSH
T12D22B8616E28697B9CC7E21DBF15BF53E6F9503291901E44AAFCC71C05EAACD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

35aff93f-c84f-4d66-b5c3-fd50eda40b0e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35aff93f-c84f-4d66-b5c3-fd50eda40b0e.tmp
Size 10KB
SHA256 f116c504957c09b3ed1690c191644def6297217c4274e585c19982107c750916
MD5 4d7b544be3a262b37693073879b4af6a
SHA1 a2b3f118b64f957bcbfee56fb763a82a9be03334
SHA512 d7d2dc2a070041e4c3cb7eb82f09131a7a27bfc72fe93024bf0b3f20b23270a471b267c7aa43fdf2a7bef159bc953dd1311f4a30d9daa9d8651c950c6b62ec57
SSDEEP 192:sxZrRmWD/fQse8IdpdzHW6+WNGYYBuJWusIg59J:sxZr7D/fQsel5HbGfMAJ
TLSH
T12E22B8216E28697B9CC7E219BF15BF53E6F9503291941E44AAFCC71C05E7ACD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62050dbd-f09f-4619-b384-188d766da590.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\62050dbd-f09f-4619-b384-188d766da590.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

6e0a3f8a-2d00-4e83-bc35-7d97f61a89cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6e0a3f8a-2d00-4e83-bc35-7d97f61a89cc.tmp
Size 27KB
SHA256 1d834d0a0413e2e39f9f062490eb44ebbefbd3220ce2df3b5a42308b32067c21
MD5 317d3acd3b5b90b0e1b77321ebce76b2
SHA1 2d45266b41369bddc0b7a9b0f5c7fd8041abeb29
SHA512 3058a56ceaa09f088c1841cf3fbaa715115f89decb59ad408dad8cbb0cfda505b3073c9ed24f8c1eca3ba41e68b7096adf027a740a1cb6ea1c13e4c7da67f706
SSDEEP 768:cxyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXjropgLb:cxyYR7jWv3NpBu1ja/CL8OXQQ
TLSH
T1F8C2E93B640DCB7E4FC01A9DDC5AAFDB3E9802C796548D4047FA994C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

849fcc13-36c4-4678-ba05-28d02c0372fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\849fcc13-36c4-4678-ba05-28d02c0372fb.tmp
Size 9KB
SHA256 420dd9b8566c704733d1a73ee2f54e4b06b989ec1d9315ecad311f3038ca2cb1
MD5 7958ae62f4299ea6ec03e9390b728822
SHA1 8dcb733ca90740a9ce6bc0bcf5f632d875eaef9c
SHA512 ebf3e557dc8e5341be91458206569f2d1c57c19a6b5a5473fe1786a56953a5be946d3918e484d59dde1a109cde0661e4d10f5d566e729c9f5dd463f16d3b8643
SSDEEP 192:sxZrRmWD/fQsY8IdpdzHW6+WNGYYB1JEusIgrJ:sxZr7D/fQsYl5HbGf3y9
TLSH
T1C922A7116E28A57B8CC7E219BF15BF53D6F9503291D41E48EAFCC61C05EAADD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87e06ecd-c13d-4142-8f5b-13fc906cced0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\87e06ecd-c13d-4142-8f5b-13fc906cced0.tmp
Size 9KB
SHA256 c7ff03e5121a5c0553b326e10e9f035ed1240bf184cab5b1548ebd67e55b37c7
MD5 ef501cd8aa951fe45a7be1af23c5a830
SHA1 ec451c6922e71d0c5526e14482d6682eee9d667e
SHA512 efca8b19bd3dbd6acde907308d08b2d5b735ba23e620a5cf1390c2e4a8634aee03ca96b1d5e5463cae67b196a16333e4abd9207599d010b68e29472141d72e1e
SSDEEP 192:sxZrRmWD/fQs18IdpdzHW6+WNGYYB1JEusIg5fJ:sxZr7D/fQs1l5HbGf3yX
TLSH
T1A122B7116E28A57B8CC7E219BF15BF53D6F9503291941E48EAFCC61C05EAACD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 e679b0eeaeecfc4cabe79a8fbb09013c147a84f82e3e195f83391b9f4c7b4f96
MD5 d3e90b85483183d15ce874bc41acd132
SHA1 7946cf09c1864a1a8c8cbc95609ff2b05f7209fb
SHA512 f6a5fab69c078e68ed0a31b808e2ac317251c269dcb320d4103ea668768dd5e9d9d2282119169d3ff921627fff234fc1f8864d8a84094fdc1febb1156b49a3b8
TLSH
T1CEE0268545C8C36FE30C649742B8834E86A13A1BE3C0BE4E6B44D888B202440A7C66B0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 ec490db01498f118ecc6cbfb52672a1343681d7e466273d5ff21f2d018f61417
MD5 df719730128445aefde2ff0a27ad104c
SHA1 3ba42851d658a40bcf5841e287e836f03ef95470
SHA512 ce3acdf3af9c9edb5ec09d37126074b927c2987e7b1392bb7af1e5d24be753f3c2861803f972efcd33050815b536ee22ab51e13da9a3adea5a1f98d5c2fe902f
TLSH
T152517285E6D184B0FF59D970B1DE2F873AB887B959C71FB32CA4D5BDAB0A7065830044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 af5cc4644a03eed3cc5a04871b063e321a2682c15b2f5a9b948ab80713ac7050
MD5 432204892441006344ee912660f70a93
SHA1 72ff418638621b1831da88033439004b3001dc49
SHA512 3092466b16ce58a4e950ff936f1c06f115833ad9d4486c4047c0da4a311e6428b47b54dad64569f92cfbc8c1f2a4585f3fc78bd961aa40b7580ddbffaa065917
TLSH
T10D517285EAD184B0FF59D970B5DD2F873AB887B958C71FB32CA4D4BDAB0A7065834044
MD5 SHA1 SHA512 TLSH

Submit Download

5d6b3858-071f-464b-9ed6-583e79c856cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5d6b3858-071f-464b-9ed6-583e79c856cc.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f7bd7b9-481f-4897-a08d-7ebb41c822ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4f7bd7b9-481f-4897-a08d-7ebb41c822ba.tmp
Size 949B
SHA256 530e42220e07aa9c77c4294037c57f5f377a72bcaa47ca0c1cee9898a9a3d9d0
MD5 fff73087b98e5a366e91209b67d384fb
SHA1 b78ee8b9a253fa23b2014c67f0777534aa9cb85c
SHA512 46c08745434a46de2bbed589dcc22d8892e8e9586f714356877505bcd8f79e41fa9e6f4b2b7102585edfe8eb2dee66a190424379940f76bfc173667a4a637c35
TLSH
T105117DF3C3E5856E890156F09A24AE1BCE2D0906421C7C1599D8EF6B93E3475D10155F
MD5 SHA1 SHA512 TLSH

Submit Download

6a55a8bb-a55e-40cf-9517-6c3ca2df9a9f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6a55a8bb-a55e-40cf-9517-6c3ca2df9a9f.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

ead321bc-2e0f-403d-9f5e-615793741d56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ead321bc-2e0f-403d-9f5e-615793741d56.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 1b2e3d662b1f64342a222cde308a680aa6e5f0d89fb49b8771971fb3da08c013
MD5 266bc63d7646c71ae9cc95278e966995
SHA1 0dda48c52769bdbf6d9b0f358b4e5c6fe1baddfe
SHA512 38c743280e2acac9c6254ef0e12df41fb0164d5d9eab004c24e8c1cf3fbc8f557e91988e1e5efa53dec07c738ddb352e86f8d8b1fb46d17f5edf98da75908e7c
SSDEEP 48:Kgfir/BhBab5UpISPaK9v1lax/KYstvTyLnKzHJp5Sbx8hISXSK9X19SxXCY0lHe:KQsAKVC+ikAKR+uRmKKoS+ROK6E4
TLSH
T10AC1B01571B7020039BD759880B69B2B6281B2B3311AE53BBFBC50A58F6EE544DFF4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d883b4d4-4c29-4e02-8a5a-3206dcdc17ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d883b4d4-4c29-4e02-8a5a-3206dcdc17ce.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dfe77396-70cd-46d6-89f7-eb5064a8fbfc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dfe77396-70cd-46d6-89f7-eb5064a8fbfc.tmp
Size 21KB
SHA256 7b0aec0357ae1bd069ed3c5c0f59a65305bf173e16a6f90241a0d70fbe884f8b
MD5 95a57aad62202bd8ddec6e6cac6d116e
SHA1 975959701de91d44e9811956a8aa89a963f8ad7e
SHA512 34762a40a929f4cb5d5c62d677c16e1a2ecb5782f12a72a4c6fc1869a2cd68ac5231cd451601183acba81f1e39aab0e7117c70dbe20b4d385c1f75bf7f549b42
SSDEEP 384:EiFzQkUSvkzsNi8TUNTUlIllx2OwidiJQX5+DtJOnIqNJrp+alH7vBEZ5IIlu:fFdY/wg/IBOkDzOIqNhp+alH75EZ5LE
TLSH
T1CEA27C32A894DD3B9EF79B90F54A3257DEB050A7C9C4ABD0E6DD9A1C01CA6DC230BD11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

50b16f4a-e4f0-49e6-9db8-49086fd01660.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\50b16f4a-e4f0-49e6-9db8-49086fd01660.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1417ee76d77e3b326cf4465c0c83015c968acfbe27161ebb747c555ab3c1001c
MD5 8c6c0531f622e1fa1d9178c647cc3211
SHA1 4d83a6d87ddc5d8d92470f918703993df863a6f5
SHA512 e932ac5b8f2bc63c3e83742113286747ae3b9606fd65d77ee558f4b5676c5646d5ff49a2418a7d91f899eeeba7c4400f8c672387e88fb0a9ad373f7955e8e440
TLSH
T15641E958AAEA1158B3B76F59AFF7946D487FB8772E06D45E00110E4F0A27B40C972733
MD5 SHA1 SHA512 TLSH

Submit Download