dfe13e7e59637a647ef27af0df02b00c914bab3c8c80af0bb3bb4d13322d594f

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 02:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
classifier_tester.1.html
Size 32KB
Sample261102-ctqsgset7s
SHA256 dfe13e7e59637a647ef27af0df02b00c914bab3c8c80af0bb3bb4d13322d594f
MD5 e4f2feed68a1b8e8f2e7022f9a744549
SHA1 3f980d70d8d2179b1606d37ff397235420dd022c
SHA512 bdbf936804f54f93ddb46ccd7a32673a6a41dd2a6205075e015c454a620cdfd4ff0162df25e4aa9b4355827bf5d7fedeaa825aec1f627bb6198729f6970e99da
SSDEEP 768:EdEDwU8kuDK2SjtkAuop1lBhfmMJMagmHo3N:LEtVag59
TLSH
T114E2C630A69030EDB227C6677F84B9746514F830D6E70AF2E076D2E98D897E706E1709
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4300	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{DC606116-6CEC-4BC6-923A-1882704FBA94}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4244	msedge.exe
4244	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe
4192	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4192 wrote to memory of 4428	4192	msedge.exe	82
PID 4192 wrote to memory of 4300	4192	msedge.exe	84
PID 4192 wrote to memory of 4916	4192	msedge.exe	85
PID 4192 wrote to memory of 4916	4192	msedge.exe	85
PID 4192 wrote to memory of 4916	4192	msedge.exe	85
PID 4192 wrote to memory of 4024	4192	msedge.exe	86
PID 4192 wrote to memory of 4024	4192	msedge.exe	86
PID 4192 wrote to memory of 628	4192	msedge.exe	87
PID 4192 wrote to memory of 628	4192	msedge.exe	87
PID 4192 wrote to memory of 628	4192	msedge.exe	87
PID 4192 wrote to memory of 2968	4192	msedge.exe	88
PID 4192 wrote to memory of 2968	4192	msedge.exe	88
PID 4192 wrote to memory of 2968	4192	msedge.exe	88
PID 4192 wrote to memory of 1752	4192	msedge.exe	89
PID 4192 wrote to memory of 1752	4192	msedge.exe	89
PID 4192 wrote to memory of 1752	4192	msedge.exe	89
PID 4192 wrote to memory of 3932	4192	msedge.exe	90
PID 4192 wrote to memory of 3932	4192	msedge.exe	90
PID 4192 wrote to memory of 3932	4192	msedge.exe	90
PID 4192 wrote to memory of 3140	4192	msedge.exe	94
PID 4192 wrote to memory of 3140	4192	msedge.exe	94
PID 4192 wrote to memory of 1048	4192	msedge.exe	95
PID 4192 wrote to memory of 1048	4192	msedge.exe	95
PID 4192 wrote to memory of 2820	4192	msedge.exe	97
PID 4192 wrote to memory of 4756	4192	msedge.exe	106
PID 4192 wrote to memory of 3092	4192	msedge.exe	107
PID 4192 wrote to memory of 1352	4192	msedge.exe	108
PID 4192 wrote to memory of 1908	4192	msedge.exe	110
PID 4192 wrote to memory of 1908	4192	msedge.exe	110
PID 4192 wrote to memory of 4244	4192	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\classifier_tester.1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x260,0x7ffacf1ec188,0x7ffacf1ec194,0x7ffacf1ec1a0
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=1856,i,17025730341304402607,7320178093594256701,524288 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,5448669178578692400,17452272535877322460,262144 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2500,i,2336446655152084452,2122325316041047797,524288 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:8
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,237891325430985937,12546286402158408028,2097152 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,5367470472053867839,15802490174506836341,2097152 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,12469648264951963963,2617300651243352566,2097152 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,10313352208273037023,2205094901504103603,2097152 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5136,i,7238624168755975211,16812096363225366452,524288 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5132,i,17022586536854285891,537632221840636515,524288 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5880,i,9387220719508820793,14334998833908942722,524288 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5880,i,9387220719508820793,14334998833908942722,524288 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4500,i,1984492756947097537,441196231591993438,524288 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4504,i,245812102184578451,15680893174374999286,524288 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=3412 /prefetch:8
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4488,i,10001333765172358171,13515724398909994101,524288 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5520,i,1900660830355465044,9904494606732695483,524288 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,15200042820368415500,12084226991498728313,262144 --field-trial-handle=2208,i,14381565259523974764,12926692066986577177,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4244

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2876

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1a5b56fa-6609-43bd-801a-404b6db9cf8f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1a5b56fa-6609-43bd-801a-404b6db9cf8f.tmp
Size 18KB
SHA256 1302771475b3af14290f8ce8ea2306d845dcfb5ea77529bf5d7bb3400ae61f46
MD5 ade4e69de484751b11f1fdb1f40fae57
SHA1 8a2ed4281299b288442abaf020f786bf4dee23e2
SHA512 eabda319124b14454eee07ca907c62eca648b53cfa7f864ef8b0ad7c13545f6b883f90d99b313eca89b84a8a83bf6dedb12494a02e6d7cb0d174ae7a0dddfff7
SSDEEP 384:sQkUSv0sNwUDumOhsIp5u8iArbVH7vBETMIIl/:s06ikAXVH75ETMLp
TLSH
T137826E3258646D2B5AE3A914F14B3B179F74C56BDBD82F80D5DD972C01DB2DC230BA12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9b378346-aba2-4ce8-ad37-f6bfb82b8da5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9b378346-aba2-4ce8-ad37-f6bfb82b8da5.tmp
Size 8KB
SHA256 34657b5929a321c979df9ec8c43ed29a54458ada3ca47e446c31596ddf432b31
MD5 39e090c3d8dd34964bbb043cda27f1e4
SHA1 632061510c0add4d283917454d3a457fc3ca8085
SHA512 7d46e8c08301a25945f20ecdc9c53f16548d93fbe5ac0472880a82a5ecf40c5ac422b5ba69d250310a200d32e5d89afb2b6a195083f40bd519f0f4d4da0262a1
SSDEEP 192:oON66iDgQmiUyf64q5u88PpuhdJIWuZ9rq8U6:oON66Zl4q5u8iAr8VU6
TLSH
T1B4120B3668686C2B6ED3AD65B48737179EA58237EBC87F80D5DC162C01EF69C130B913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

16294fb1-a552-422f-9baf-422add83e1b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\16294fb1-a552-422f-9baf-422add83e1b2.tmp
Size 9KB
SHA256 c696cc025c8cd404df7413620008c3292f3da89fedaff393817a6c30813188ad
MD5 1adfd1196868c5176138bd7eb6f0a9c4
SHA1 6ec53f498d84d66c60b667c302409edd65f1a7b4
SHA512 b1b9020175daf5243aabdc663369dd30865025591d8ed7ccb61f07c501cfb388452b49000aad5ee059f12468faeac5809aebd84a07f92322b004a3a1902ae89b
SSDEEP 192:sxZmR8Ws/fWsG11BIdpdDHW6+WNGYaJtG+tIgrJ:sxZmds/fWsG11qNHbGqu9
TLSH
T1FC22B6116E28A97B8CC7D20DBB15BF53E6F9503295951E48EAFCC61C04E7ADE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

18081c85-4824-4ac0-ba22-2162ec34cd5e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\18081c85-4824-4ac0-ba22-2162ec34cd5e.tmp
Size 10KB
SHA256 f00ecdb70c99ec01b12a10e86b9d26b996c1c5e44b4b30a1fb41abee7ce2462d
MD5 af134cd75068b8404041108e02fdcd90
SHA1 422431beb138ab369074996ddd3ea56e3449dbee
SHA512 88e1c3a4f56453d5d6b4bb93ac644d1d32dafe8040c9a09300bc38f7f3cf4ea30d65ea3bcb6b375c6551bde372ca14a8e021307c2b342ac5a66606d7c27f0760
SSDEEP 192:sxZmR8Ws/fWs911BIdpHDHW6+WNGYay0G+tIg5/J:sxZmds/fWs911qjHbGQur
TLSH
T1F522D911AE28A97B8CC7D21DBB15BF53E6F9903155902E48EAFCC61C05E76DD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2dba58ef-0f6d-49d8-8820-b687ef615786.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2dba58ef-0f6d-49d8-8820-b687ef615786.tmp
Size 27KB
SHA256 4e48ada7027efe7aed9b00ee940a65fee1173a515a5c9e6520fd706ad9c5c6c7
MD5 1a4f33a7080012e8e226e4b6a65f888e
SHA1 79cbcb7037634b4707af2ca95a6420e8fcc9c24c
SHA512 4fb385a17feec5f733c64126438347623b906efcac336c1d22459ffa109f2e125c8cf203f9a041840698229e103a12a03d2027375c2df8ac9c296fd4876360ab
SSDEEP 768:EdyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3orouZ5V:EdyQRbrWvvlpZu1jaXKLf33TuZ5V
TLSH
T1F7C2F92B640CCB7E5FC01E9DDC6A6F976EA802C766588D4047FA984C02C77EE512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

55a5b9fb-10b1-4c62-bcbf-38c5e89e2ef6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\55a5b9fb-10b1-4c62-bcbf-38c5e89e2ef6.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 c295a9745b324b9fd471d7865bebe5719602d14d0c9eb9cc9d38f573502a0425
MD5 47118d63abc86178ee4b1c979777e614
SHA1 b7ffd453f6a9135981a32efceae8f31afbe4689f
SHA512 c66cf67e12cd07f19481888b0dee2b8d9b302e6a23bcc4776994b58ce4b0ce0e470fd67f4e5e0ab920f5ab33f4eac78159be4137d9a19c8f7343538834ae25e6
TLSH
T1EC617364DD604459FFB803BA89CC3D8B353779A054B39F2A087CD6FAD87A39499891C4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e56abad4a4d516a1ceacebcc558b64c6ffc0f29f08b2dbff04c3297d153621c1
MD5 4173a9ffaefa7e8176691441e5fb7635
SHA1 b47a8a4ecb6100d53ddf1a339801cabc3ef8443b
SHA512 75193460c42d2e40a6b4e85ee06b9e573f7cc425c0df2418bf217c1a0d7889ea08ce38f303ce05591d5e0ffbe478ad11300e06826787fe037f5e5ac47cd1da1d
TLSH
T15D617364DE604459FFB803BA89CC3D8B353779E054B39F2A087CD6FAD87A39499891C4
MD5 SHA1 SHA512 TLSH

Submit Download

7ef2de80-225c-45e6-87cd-6b1921b96501.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\7ef2de80-225c-45e6-87cd-6b1921b96501.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

4b948eb3-03ac-4962-8240-817634aceb95.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4b948eb3-03ac-4962-8240-817634aceb95.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

98d395a1-6eef-4e39-b34f-335b1d7b4325.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\98d395a1-6eef-4e39-b34f-335b1d7b4325.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

dccaaa3e-bb09-47e2-85db-9f682efc66d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dccaaa3e-bb09-47e2-85db-9f682efc66d2.tmp
Size 1KB
SHA256 3c2455df8830c830465e3e362e0ed5782780be6922a145add01b8d3cfde7691a
MD5 480ba2b55c4399d3f6a94ff36fc6478f
SHA1 76e8875cf13adca3b3ecb27281a8d82f4483808f
SHA512 7d01cb5b91b81bfbfd2125a7e90535f2dd894010f26355292c8707b89284b288c1d54c8914857a45df25b78894733bfbf0235987d105c71b697e597787c4be34
TLSH
T1B5315FB7C3D5866E891116F0AA24AE2BCE1D0956422C3C16C9E8EF6BD3F2475E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 967B
SHA256 d8abe33b1d0445f85cddd54af2692426662a715a379b48ed8cbb13b08e59074e
MD5 cf6f2dcea1bac6ed04d24b0d2b1c7f62
SHA1 53f684a7cd5488ed8fed1b0f81b015235005d4aa
SHA512 22069df7da5c27790a904dd6feb9dca3b0efaea4e7beb7ab4d1720b0be8b8f2cd90b27b36e0bf36cd5248c3a1babcfa0c860258f3f3f0599b6ba12d51e50a402
TLSH
T1F5114E21213E5345267E250D51FC98178641A2B37624F79E7FDCC8568936E204DF88CA
MD5 SHA1 SHA512 TLSH

Submit Download

aa76b789-b5f6-4342-af54-ea9f8d2c4c3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aa76b789-b5f6-4342-af54-ea9f8d2c4c3a.tmp
Size 9KB
SHA256 62b67981b7b310a34869b03a27f6b1204cab08fc692b852aa7ee9dd240faa382
MD5 ef0aee4338732f4589259bd32c78a59f
SHA1 70e4af00248dff855f01f1f334af434f28c8c142
SHA512 b44303be26bdda4fed6684f016093f9036948dc5c2f9a730537b3bcf62721b2975ccafa4f120b19f98dfae4b4f577428965bc58f24f44a9fccd1407dc35b558f
SSDEEP 192:sxZmR8Ws/fWs911BIdpdDHW6+WNGYaJtG+tIg5VJ:sxZmds/fWs911qNHbGquF
TLSH
T18C22C711AE28A97B8CC7D20DBB15BF53E6F9503195942E48EAFCC62C04E76DD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c4347493-f03a-4336-a121-da38418227fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c4347493-f03a-4336-a121-da38418227fb.tmp
Size 10KB
SHA256 6e8db8d064efdc1b0da0c81befd64a5f01e31e775c279e543e1748f1b694aa73
MD5 fa2a275bb8eb3b22944274a83e235f31
SHA1 9651b16de02bd23a449042dd6c464cf426685256
SHA512 a7bc7c93c5982d52c8020ba5b12853b770d66a84093d279f8bcd0fa9e910ca4dc884f021c19e2beb6b6bd53580e4dfb7209c8fe3ff31fc860bbae51e4c016fef
SSDEEP 192:sxZmR8Ws/fWs911BIdpdDHW6+WNGYafPG+tIg5/J:sxZmds/fWs911qNHbGuur
TLSH
T1C122E9116E28A97B8CC7D20DBB15BF53E6F9903255952E48E6FCC61C05E76CD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1991887d-7495-4404-8c2e-0bad48f829e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1991887d-7495-4404-8c2e-0bad48f829e0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 3b8abb436eba6a11dc29df8f383b3ae2230bb6f025c4acb8b1ff023080b84089
MD5 1419d4085962d369c1de0ea650620dd9
SHA1 dcc793f627aa830d3336ea095e1c134fd91689d4
SHA512 ed526d0c91267ab5a71f50344fbb3d02feadd0ca3b37288f17c596b1cec58b41703fbda5b8a97b9c2af560f710ee7229408669ee7dccc087799462ea1850882f
SSDEEP 384:kiFzQkUSvCzsNR8TUNTUlIlmumOhsIp5u8iAroVH7vBETMIIl/:/FdKgwgaikAkVH75ETMLp
TLSH
T1A1A25A3398949D3F9EA79E10F64A3717DEB0816BDAD4AB90E6DD952C00DB1DC130BE11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ac4e6532-95b9-44a5-996f-2f433378d207.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ac4e6532-95b9-44a5-996f-2f433378d207.tmp
Size 18KB
SHA256 ed8f01a9ef5304cd7920690c74106cb6e698c9dc5f32f107452300aaa7072ace
MD5 baf3feed5a940cdc2f77b9625c780492
SHA1 66e96fbdeae72d8d89c210ff433fa269eb8e5652
SHA512 04bef752fe45dd4085f71216f48ee008e3fbe7b2164d0f81d49e1d7cff84db31debaf6221748ef3b0b7a6bbf36387486684d71a0281fd7390c3e950e41745e4a
SSDEEP 384:yQkUSv0sNwUmumOhsIp5u8iArbVH7vBETMIIl/:q0NikAXVH75ETMLp
TLSH
T1CC826D3268646D2B4AE3A914F14B3B179E74C16BDBD82F80D5DD972C01DB2DC230BA12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dfc867ad-b00b-47e9-9c5e-af47c25a5469.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dfc867ad-b00b-47e9-9c5e-af47c25a5469.tmp
Size 8KB
SHA256 93d3f5f9c27de58279d0a7bf9295da61613d0c6da37624d31ba467a09a159722
MD5 872b77a803e6ec2c905f39108b434f81
SHA1 c7a3c2972644a695e5dd1f7e089148370de914c0
SHA512 2e1a61a7c4dc924d316501200d8e6cbc5a24c55d5c8de3f18b639858a1e138a5809a86be3346b26091d0ab022b0c7ef5763d652b3d8db5a47e408ab4e6bb3464
SSDEEP 192:SONa6iDCQmiUyI6Hq5u88Ppuh3SqoTx9bU6:SONa6/gHq5u8iAvorbU6
TLSH
T15602F939AC693C7BAEF3AD15B5873B175F94013FE6942B84D9E81A1C41E729C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

566d9c45-d3a1-4400-a042-f733f8aa97ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\566d9c45-d3a1-4400-a042-f733f8aa97ee.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1f82728e3df86ecb615626ffd22daedb3e3b067fed68abb8373e2b996dbe1cc8
MD5 0fa3d2fa9419ca83c2e44c20f1cd16f5
SHA1 23018031f48309efe6b69e3d38b2dd6f3077c94a
SHA512 0614391445f2cb6ee4fc67a31eca5203ec1ed23ede21fcd70550062444e084ff8c70df80739fddb30bfe682090ddb3635a33edc1509d779df9ca54d3581521f1
TLSH
T13741095CAAFA1158B3B36F569FF6A46D487BBD732E46955E10010E4F0A22B40C8B2733
MD5 SHA1 SHA512 TLSH

Submit Download