ecf0aae5b0d8811bf27fccd33470c656c6904fb0b32196edb0a07f59b0942e83

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 02:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ambiguous_words.1.html
Size 30KB
Sample261102-ctqsgset7s
SHA256 ecf0aae5b0d8811bf27fccd33470c656c6904fb0b32196edb0a07f59b0942e83
MD5 81a0c3cc39515932d62b3555318af523
SHA1 7e99e47579cf0095d0457e786343a9feec50634a
SHA512 6d41da7df5e141512692d6964568d181f835e8402b88340551052f9efc28e628de3c5aa5a100e6f73d8b27b6c58d13d4d4f8b6d6862907402daed2e74a026643
SSDEEP 384:5tHPLTkfvzTLNX8KbeAIXU8kuDPaN2SjtkAuop1lBhtFU8G3nRcBoAf/ZtU8Hj3N:5dEDwU8kuDK2SjtkAuop1lBhfmMJBD3N
TLSH
T1C1E2C730979030EDB22BC6677F84F9746514B831D6E70AF2E066D2E98DC97EB06E1709
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3888	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{F70025AB-B734-47B3-843A-507218EB0F19}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1868	msedge.exe
1868	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe
2628	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2628 wrote to memory of 3020	2628	msedge.exe	84
PID 2628 wrote to memory of 3888	2628	msedge.exe	85
PID 2628 wrote to memory of 780	2628	msedge.exe	86
PID 2628 wrote to memory of 780	2628	msedge.exe	86
PID 2628 wrote to memory of 780	2628	msedge.exe	86
PID 2628 wrote to memory of 4556	2628	msedge.exe	88
PID 2628 wrote to memory of 4556	2628	msedge.exe	88
PID 2628 wrote to memory of 632	2628	msedge.exe	89
PID 2628 wrote to memory of 632	2628	msedge.exe	89
PID 2628 wrote to memory of 632	2628	msedge.exe	89
PID 2628 wrote to memory of 4360	2628	msedge.exe	90
PID 2628 wrote to memory of 4360	2628	msedge.exe	90
PID 2628 wrote to memory of 4360	2628	msedge.exe	90
PID 2628 wrote to memory of 4736	2628	msedge.exe	91
PID 2628 wrote to memory of 3164	2628	msedge.exe	92
PID 2628 wrote to memory of 4736	2628	msedge.exe	91
PID 2628 wrote to memory of 4736	2628	msedge.exe	91
PID 2628 wrote to memory of 3164	2628	msedge.exe	92
PID 2628 wrote to memory of 3164	2628	msedge.exe	92
PID 2628 wrote to memory of 4220	2628	msedge.exe	96
PID 2628 wrote to memory of 468	2628	msedge.exe	97
PID 2628 wrote to memory of 4220	2628	msedge.exe	96
PID 2628 wrote to memory of 468	2628	msedge.exe	97
PID 2628 wrote to memory of 4244	2628	msedge.exe	101
PID 2628 wrote to memory of 4296	2628	msedge.exe	108
PID 2628 wrote to memory of 4788	2628	msedge.exe	109
PID 2628 wrote to memory of 1352	2628	msedge.exe	110
PID 2628 wrote to memory of 4896	2628	msedge.exe	112
PID 2628 wrote to memory of 4896	2628	msedge.exe	112
PID 2628 wrote to memory of 2772	2628	msedge.exe	113
PID 2628 wrote to memory of 2772	2628	msedge.exe	113
PID 2628 wrote to memory of 1868	2628	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ambiguous_words.1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffaef07c188,0x7ffaef07c194,0x7ffaef07c1a0
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,3295654118052174325,10246577781186122411,524288 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,5559703975425517923,5825053471273283226,262144 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,790442747267336038,7421171813915866621,524288 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,12527531904742723758,4893024219706513021,2097152 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,4804761443885269184,2967010766479248511,2097152 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,7119965375780995603,10446347304901183258,2097152 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,6388505629900326119,6574870598208974658,2097152 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,4192791537972617491,12656699572453597300,524288 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,12877259554162927899,11813334801788344877,524288 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,9726793579070473596,7480894590088563087,524288 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,9726793579070473596,7480894590088563087,524288 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,16425341743980633068,7214354299942870255,524288 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:8
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,5725179683869966160,12410614571370438491,524288 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,17249945788065155056,14277301144499763061,524288 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,12300855993853349195,5120636399258121608,524288 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,17082792742137783609,6771486738120447370,524288 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5384,i,4280655343400121862,13923311926371248058,262144 --field-trial-handle=2144,i,2213541176501385859,1327309715978900106,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1868

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1724

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1f37d131-3d21-4a45-be3a-afe4af13efe0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1f37d131-3d21-4a45-be3a-afe4af13efe0.tmp
Size 18KB
SHA256 22e9e3c2bad6f107fd7c6fa16f0435537fa85c0329a293df31f156aa189b741e
MD5 59487e2e0471c80e0f42826e8a0675ed
SHA1 609f99b7cc98173216d3383156f1e3ba6da3382c
SHA512 676541b065fa4230b2f300be87a319d49080eecb4de2d0d8cfc08ac53ca16d091579b598dacbed253960009833feb899ba6e9477ccd573bb3e0c3a2c6e79e9c7
SSDEEP 384:MQkUSv0sNqT0iYydZAMhHX58Ew8D7XNL0UH7vBErSIIl19:M0Mydh1aizp0UH75EmL39
TLSH
T17C827E31E8A86D3B0AE3A614F54A3A43EFF4901BD5C92F90D6ED5B1C00DA69D234BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33ea3cbe-2fd7-471b-bbd6-61d295492c08.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\33ea3cbe-2fd7-471b-bbd6-61d295492c08.tmp
Size 8KB
SHA256 46f9ea93947d41372a2667cfe36afb0e3d05c5a2d8c84ec2c2a328794241ed9f
MD5 e6bbdd569ae44585f9bc389715003125
SHA1 cd378ae49f43e1f4ebfd0b30542da6d63d3f1f3e
SHA512 7c216540a5ea8783177c13c3d971a66300b01f6ebe630552cc19df4939d98faa47084b605b199da2d64effc34b4dc73c92c3aeeedb561278998ea9c1417a0a9a
SSDEEP 192:pONT6wlDsQmiUyFLT4X58gZojzorwo7XPFIEnveLq7U6:pONT6k8GT4X58Ew8D7XNL2UU6
TLSH
T149121932E5A8AC2B5DE2A459B48B35039FA5512BDA497F80C6FC1B1C01EF65C134BD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

354cb01e-18b3-4b39-82f3-12a3b5e45f27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\354cb01e-18b3-4b39-82f3-12a3b5e45f27.tmp
Size 21KB
SHA256 5b3448121fc5ce6f40a14bf0d8954dd10f3f0349a5b121752010bdb439959cdf
MD5 6a95f906c98b93e86d8217c590144de8
SHA1 8f3c46a7127bdabbe6ef2b4c469971bd5555c77b
SHA512 a5b10cfb99bc81688769acb4bc432cce16bdce6275c039826235c569ea99ef9ef1d015e98a9449de10d5f255bc057ad80142b265c2f2561fc26bf8dfbdd6549f
SSDEEP 384:niFzQkUSvPzsNy8TUNTUlIlT0iYydZAMhHX58Ew8D7XNLbUH7vBErSIIl19:iFdrLwgwydh1aizpbUH75EmL39
TLSH
T15FA26B3298989D3B5EF3AB54F54A3603EFF4906BC9896B90E7DC5A1C009B1DC134BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36d8c07e-8073-474e-91a9-48511b3daf2f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\36d8c07e-8073-474e-91a9-48511b3daf2f.tmp
Size 8KB
SHA256 3181a1a5438397a4a03c79a411fb76cc8cf8af4d3857293a2ebd20ffa88a169e
MD5 6a1478d8154f74badd98d88076352f5e
SHA1 786b9baada7fb24549314fbdf7264ffdeef04cda
SHA512 a5106edb67f4d03b3a05a1688d24f1ed91b50a88a4a11c34fc8c5f8bb7c7e23e1e31f42dcf9c318354614aa94d9428f71784e64ebf5c27a5f8f6ce7cae1fe2de
SSDEEP 192:1ONY46wlDgQmiUy5LW4X58gZojzorwoUDlScU6:1ON16kgaW4X58Ew8DQ7U6
TLSH
T1E702E735A9687C7B8EF3AD09B58A26139FE5102BEA552F44DAFC0A1C00DB65C1307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84af364c-9442-4828-a20a-976569f26d1f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\84af364c-9442-4828-a20a-976569f26d1f.tmp
Size 18KB
SHA256 b3cf2f8f3609579a9bead61ccb97adcab852d6e125a16a8dddec01e6aceb7792
MD5 4b75f359eb5484a2f209c53da002ccc5
SHA1 a8d154060bf38e3912f5b4effdd5646baf9ab0d5
SHA512 9b923979a03bb12db50f9c3fb6d293013034ddeae6182d8d46d1bee1055148a87c0fa02c8cbc9331bd0e141a455e0326ec9e65651e409cb658cd8fbeb8b3783f
SSDEEP 384:uQkUSv0sNqS0iYydZAMhHX58Ew8D7XNL0UH7vBErSIIl19:e0Bydh1aizp0UH75EmL39
TLSH
T1D9827E31E8A86D3B0AF3A614F54A3A43EFF4901BD5C92F90D6ED5B1C00DA69D234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

0ce0bd76-1356-436f-8e36-68eef2386a5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0ce0bd76-1356-436f-8e36-68eef2386a5f.tmp
Size 9KB
SHA256 cd5d1641eb49d9a1aa2f40c62850aa4a2d0e11853cacde4c4013ccc3f711d75c
MD5 a31aecdecdf2a69fc80d8ab5a8e2ad37
SHA1 e6bb191def12bcb1a4b5e7b121f160356569365d
SHA512 474a7a7319aa5ec35b4985e517f428b6737e93cc9e7af8aa04f78f8b3fa89d32b0bd7a67bbe2e6e9cddf1ff4f2575b12f562822de51d53b841e76dc761d7fdb8
SSDEEP 192:sxZ4RCWz/fAsJVIdpdvHW6+WNGYrvE1GIgrJ:sxZ4Pz/fAsJmZHbGu9
TLSH
T18B22C8516E28A97B8CC7D20DBB29BF13D6F9503295951E58FAFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d30e533-1172-44f5-8a8e-4129896ed794.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2d30e533-1172-44f5-8a8e-4129896ed794.tmp
Size 10KB
SHA256 817433680e2e732c6fa8b67e1b232030fbf3067e05575db35766c2f2adf10933
MD5 845e5e2bc0a4355c3edf624e2e6834ac
SHA1 7d00e227cd5e07af379a6f5578d7701b57622bc6
SHA512 aebe8da2143453e167e3a55955ce7bf3f4f1103ac52f7c691137dcfa3939709acc3f9ba1bf39eb4be224d8804ec98edf83137628c90fa8aef375f932f1bc5a2f
SSDEEP 192:sxZ4RCWz/fAsqVIdpHvHW6+WNGYrGQXTGIg59J:sxZ4Pz/fAsqmPHbGlt
TLSH
T1AE22E9126E78A97B9CC7D20DBB15BF13E6F9503251901E48B6FC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3096b1ed-39d6-4770-976b-5c6e386f057a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3096b1ed-39d6-4770-976b-5c6e386f057a.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

449f4f0a-8caa-4a63-bd1f-8451b085f05a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\449f4f0a-8caa-4a63-bd1f-8451b085f05a.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

61e7b497-a638-4d72-b305-f4c0c19e8019.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\61e7b497-a638-4d72-b305-f4c0c19e8019.tmp
Size 10KB
SHA256 7a9e2c203d6aaaf752837deab49129af71ed200d4aaba053bde72cc6a10d94ed
MD5 26e43e40b044be9a6972d6508e59428f
SHA1 4bf3ba7dba059ad096db270ae6b14f27fb482f33
SHA512 9b89313183c8abc71caac8d3ec64c01ab0a00717b019f36f2397cd519e9fcd8529ed1a4741f612598a8348758a848664bd895be8ed2604e6debf9dbd5c5a4414
SSDEEP 192:sxZ4RCWz/fAsqVIdpdvHW6+WNGYr3QI1GIg59J:sxZ4Pz/fAsqmZHbGft
TLSH
T13422D8126E68A97B9CC7D20DBB15BF13E6F9503251951E48F6FC861C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 e21ca332f33824dd080c010995f9f482e9c9e4c45f3cd6f7f923fed56cc30420
MD5 2268bc7133db57917813caacdad0be10
SHA1 33cae33afbc04302d6204662a9292040b197ba5e
SHA512 4dc78134b2bdcb2fc2b599445879cd4724757929ee687a311698e7e1c49788b94225f923ad579b1eec25291ee89e4583c5578f1195546697efd59c63936361c1
TLSH
T10DE026A548C8C23EB748644B12FCD7CCC3E1366B93C06D9F1B88C48D7081098A2E66E0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 3fee6709f08e9664e4996b47283d42598d2ccdf21f7e241b752620b08cef87c7
MD5 0b7cec9da1fea461df410ec15626426e
SHA1 bbaa42a15f291800b23f8abe1e220ae371dfd296
SHA512 ee360fd08152fec7dc6e22eb7bd3796261161fc60673848e1fe69600ea1d72a4cc908cb31d6d2db05d266ff047c9d41ad5785af077e2abe9466a5481f5dcf324
TLSH
T1B451F8C46DA58895DBA80C71A5C29E83373C4DB55D973F5210ACC8BA6B0F3B4B10207F
MD5 SHA1 SHA512 TLSH

Submit Download

418cc014-debe-4845-a70e-ae9126bde96e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\418cc014-debe-4845-a70e-ae9126bde96e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

040359a8-7897-480e-8238-c1bab46a9f3d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\040359a8-7897-480e-8238-c1bab46a9f3d.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

0b3f5237-8049-4b4f-81de-ae5afc65bc93.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0b3f5237-8049-4b4f-81de-ae5afc65bc93.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c0f092cb-690f-4cae-81d5-38363d8fa519.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c0f092cb-690f-4cae-81d5-38363d8fa519.tmp
Size 1KB
SHA256 de1be575f261e8f1c69f00d55bddd9edbe6313aaca730d6727a2a3411534cb37
MD5 992a6bf60473cb2da423140d387b096a
SHA1 81c2bb7f79e4ac389e389e42e02f145af804c7ad
SHA512 749b79f7c8ee6262c34795a108fef4dfdcba81729508808089225d7a5f5aa59f9359c36f7c6593d95919f86342d9ae59b06b34a4c8f207fdb0d01e2b5273e2aa
TLSH
T117318DF6C3D4867E891516F0AA24AE1BCE1D0916422C3C5A89E4EF5BE3F3075E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 50c3130edffd715b7df8345b14858b6561068399b91b29426f0422f7bf73370a
MD5 16a8b48e48044f8ef2033cb78b84839a
SHA1 5281ff11a73768142f1425a85faa894bd3f5b2d5
SHA512 4487b272061651ca418b902977e80ef2dbdfe2c1f4e324624403523af91a518bcf3604ec886eb62993ebb728b406f015a2434ebe90f9f8f53425b097f967f81d
SSDEEP 48:KIDI1Ks04jyLEzy+suCLbyB6ISWLK9y1ALxEbYJqC2yLbef7F99ebtAFISbQiQtj:KIDCKs0+mLWK8YoaQHEgKlaO2jWKwse
TLSH
T106D1365130BB068538BD288895B5876E524236B33019FD6FBFBD41619E6BE080DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf6cffd8-63fc-45c2-903b-3745f47390df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cf6cffd8-63fc-45c2-903b-3745f47390df.tmp
Size 27KB
SHA256 0fc9be23ab806089b962371564688e0960c87f0ee1a1f7e434f36f1191501ad9
MD5 ef189271331f4bd4f6cfaed5a661dbcc
SHA1 160f32b805ef0211dfb28827f6b4ee2dfbde32bf
SHA512 982839154e6bd3310610fb4c2e2cbda2237f7d060fc426af80180536a8588135cad727bbe34f7f20e8e580ffcf660ec9f52db6872a8ad1558d601c3035081906
SSDEEP 768:Q1y4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbHroRgo:Q1y4J/DWvbtBhu1jajiLm0bUuo
TLSH
T10FC20B3B644CCA7E4FC00B9DED5E6F973E9802C796948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ea951f05-e8ea-467e-b14f-0a03c5f5daa8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ea951f05-e8ea-467e-b14f-0a03c5f5daa8.tmp
Size 10KB
SHA256 433b4c5507dde23320cd9f8b5baf4d764054915a4f010f00d564c84b392e6cd9
MD5 ef336db59e828110d41763cdc6ffc50b
SHA1 c1e69f6528fda167ac40d0c0ee92fa33b03c5bb9
SHA512 dfdede3abe95cfc9fe1e423349743f8fda5bb0400348eeac8246abab55627a5ba96c558dc687be70455308508ee093a707433f410f87630d1b347c1354aad3b3
SSDEEP 192:sxZ4RCWz/fAswVIdpdvHW6+WNGYrvE1GIg5fJ:sxZ4Pz/fAswmZHbGur
TLSH
T1FD22C7126E68A97B8CC7D20DBB69BF13D6F9503291941E58AAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96475231-8cc2-4f54-a411-69f2c29e5af7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\96475231-8cc2-4f54-a411-69f2c29e5af7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

beb24f84-44d7-4a15-ba7b-a6d5c0ab20da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\beb24f84-44d7-4a15-ba7b-a6d5c0ab20da.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5bc2d8f1ba8a490b3d09697c3595d8034829a546ac8f83cc633507c426a99150
MD5 3c6108ccaaac6be26546cec95f3b02e8
SHA1 a782feb13e01d1cd6bdb4fbabf6aacdbb0ebf20e
SHA512 632864440facad2b757b2d6f279f3541208cf5ed369af6cd5b709f87ec0b0bdd87f26e0bc619588b06956242fccd49855316150345187641f54e0b803fb0a93d
TLSH
T1FB411758B6EA1148B3B77E569BF6A86E887FBC772E06D05D10020E4F0B72B40C961737
MD5 SHA1 SHA512 TLSH

Submit Download