5b958ef642aaa77837398eba3e1ed927c2a59cac81b2e3fac82b8825b5b70d90

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 02:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cntraining.1.html
Size 30KB
Sample261102-ctqsgset7s
SHA256 5b958ef642aaa77837398eba3e1ed927c2a59cac81b2e3fac82b8825b5b70d90
MD5 86e7e467872bce3a3bc18bbac4580b9f
SHA1 13092c70952e5bed9bdef7581d5d75ffa977b0a9
SHA512 3fea275fa6cccb49e76d2d543625ef38d41d5cdd3e1ca7f507147043ac682501ab04e77c9d92141e28bb229e4b5f1726ecf78a7822a52ad55fe6a8238ad98d3a
SSDEEP 384:atHPLTkfvzTLNX8KbeAIXU8kuDPaN2SjtkAuop1lBhtFU8G3nRcBoAf/Ztr+f3N:adEDwU8kuDK2SjtkAuop1lBhfmMJsf3N
TLSH
T1A3E2C730A69070EDB227C6677F84F9746514B830D6E70AF2E076D2E98DC97E706E2709
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5064	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{614E5684-A677-47A9-A7F0-231F5040F243}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3580	msedge.exe
3580	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3568 wrote to memory of 4472	3568	msedge.exe	85
PID 3568 wrote to memory of 5064	3568	msedge.exe	87
PID 3568 wrote to memory of 2908	3568	msedge.exe	88
PID 3568 wrote to memory of 3336	3568	msedge.exe	89
PID 3568 wrote to memory of 2908	3568	msedge.exe	88
PID 3568 wrote to memory of 2908	3568	msedge.exe	88
PID 3568 wrote to memory of 3440	3568	msedge.exe	90
PID 3568 wrote to memory of 3336	3568	msedge.exe	89
PID 3568 wrote to memory of 3440	3568	msedge.exe	90
PID 3568 wrote to memory of 3440	3568	msedge.exe	90
PID 3568 wrote to memory of 4648	3568	msedge.exe	91
PID 3568 wrote to memory of 4648	3568	msedge.exe	91
PID 3568 wrote to memory of 4648	3568	msedge.exe	91
PID 3568 wrote to memory of 3180	3568	msedge.exe	92
PID 3568 wrote to memory of 2316	3568	msedge.exe	93
PID 3568 wrote to memory of 3180	3568	msedge.exe	92
PID 3568 wrote to memory of 3180	3568	msedge.exe	92
PID 3568 wrote to memory of 2316	3568	msedge.exe	93
PID 3568 wrote to memory of 2316	3568	msedge.exe	93
PID 3568 wrote to memory of 4624	3568	msedge.exe	100
PID 3568 wrote to memory of 368	3568	msedge.exe	101
PID 3568 wrote to memory of 4624	3568	msedge.exe	100
PID 3568 wrote to memory of 368	3568	msedge.exe	101
PID 3568 wrote to memory of 3528	3568	msedge.exe	104
PID 3568 wrote to memory of 4828	3568	msedge.exe	112
PID 3568 wrote to memory of 3520	3568	msedge.exe	113
PID 3568 wrote to memory of 1292	3568	msedge.exe	114
PID 3568 wrote to memory of 2684	3568	msedge.exe	122
PID 3568 wrote to memory of 2684	3568	msedge.exe	122
PID 3568 wrote to memory of 2120	3568	msedge.exe	124
PID 3568 wrote to memory of 2120	3568	msedge.exe	124
PID 3568 wrote to memory of 3580	3568	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\cntraining.1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff97891c188,0x7ff97891c194,0x7ff97891c1a0
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,1067570470756183617,3472762715079283443,524288 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=3412 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,11566301168011585816,7503566621728060913,262144 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=3248 /prefetch:2
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,3604973922013551177,4335148172249254437,524288 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=3192 /prefetch:8
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3028,i,11803845533298520935,15984278802714422841,2097152 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3044,i,12851738234149848838,8838924692446878666,2097152 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,6263877680347850946,7757973564440886652,2097152 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4164,i,13226085114484581358,15585559217076562140,2097152 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4188,i,1400621331447940044,10012567468863195320,524288 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3880,i,12990407065170197459,8493554681006490415,524288 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,983616637245845679,13151461103758253211,524288 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,983616637245845679,13151461103758253211,524288 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,11765077659717128987,14144972887728724304,524288 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,9498399680234494889,3708452819507463977,524288 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:8
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,6319314019509199869,1031821159789709016,524288 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:8
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,15949836635685538917,11086382485337535785,524288 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:8
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,9735974939919739016,1747470945165321406,524288 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:8
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,15061581830529582813,4241135322646413213,262144 --field-trial-handle=3252,i,13624986857371760709,6849738008628383494,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3580

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2a61e3c1-2c65-486d-be65-74582859cb93.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2a61e3c1-2c65-486d-be65-74582859cb93.tmp
Size 8KB
SHA256 661eeb142a804d6b6435dd465bc39975957cb9bed993b09cd6b00f534d29b297
MD5 6b0b0002756f10e43ad2cfff98b9b1af
SHA1 02d13b2c14e5ba028aab6454fca672319e709f72
SHA512 b5efcdb59b03320bedc5b66dda3f75ad53fbaa7a01611421032dec622095d7d57e9a73549228a0717a8b419e0523cbbb0c99d96fa65eea75ab1c2912ebd5fe95
SSDEEP 192:KOND6JU0QmiUy9vqo//0ZbQLchNx+qNU6:KOND6+ESqo//0ZbQwh5U6
TLSH
T1FF120A35B868EC775D93A594F0437623DF64407B9B89AF94D6DC2B1C02DB1ACA307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3b2c11ee-d57c-48be-bee5-92c96ecc6a14.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3b2c11ee-d57c-48be-bee5-92c96ecc6a14.tmp
Size 8KB
SHA256 8b6f9dfa138b11d17526d8e982d6e1b19e11bbd90be7e966bd588beb3567348a
MD5 742190cfa2eec4b4a2b7af3ae9a4ce54
SHA1 b33e0025798e9f4cbf5e6739afa6b3928c5f93c4
SHA512 4e2ae71f3b471bc44f86e7154a30c60f7147f697603828de90af33efa214189873ea7b3692fec9f6b98d104972b7e9f2486a016968f295c45039e56423411141
SSDEEP 96:KqONk4QsjpfbUmjH5ih/cIPURHl8h4otop5paDpBKP4v+Y1xf//ojd6xlYtYqso2:BON86JUm0QmiUyivso//0ZeBCo/U6
TLSH
T11C02EA34BC78ACBB9EE3AE45F44777239FA4106B96915F84DAD86A1C01D715C2303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

40ee0e92-aedc-472e-a2d6-e5c9e0c26b7b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\40ee0e92-aedc-472e-a2d6-e5c9e0c26b7b.tmp
Size 18KB
SHA256 087feda0a4b6e7a5ed0f807cd6ca99ed0b99fb80e0a36c88d1374cce134577c3
MD5 917d6feb9483b75f83daa226cb663663
SHA1 64e643e3332d1ad35ec0cb9bf218732bd965ebec
SHA512 e4a8e10efbe43dd9fc88964d467ac3a67e2c51f9954763ed21b07871bb816399e39a6fd0b5207853746ac69c12be60214cb4738975307b4a173f9042d51cfbf9
SSDEEP 384:hQkUSv0sNixfebQ5Oh//0ZbQwh5H7vBEj6IIll:T0Dju/sZzh5H75Ej6Lb
TLSH
T1E2828D31B8A5AC7B5AB3A550F14A3A13DF70D06BDAC95F94D9DDAB2C01CA1DC2307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c350454-756f-405d-861e-eee8cec63545.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4c350454-756f-405d-861e-eee8cec63545.tmp
Size 21KB
SHA256 7fc269efee0d1a1c31449738456629b3d6f525a3394a08e860416776390f5ca1
MD5 658449a79eaf50acf2c74b0b9bc34f14
SHA1 056ff500a3cf15daff0a47b8a1aeb31299984845
SHA512 9649cead6702b6c518b193a7c4e639f56c4f3cdff72388a30853de6d89875ae3819a892a860a4d60aef5e7604940d1cba44621c7ad14f9271539f82099861883
SSDEEP 384:RUiFzQkUSvozsN68TUNTUlIlxfebQ5Oh//0ZbQwr5H7vBEj6IIll:RvFdUnwg7ju/sZzr5H75Ej6Lb
TLSH
T16BA26E33A894DD7B5EB79A54F14A3613DFB080ABCAD5AE90D6CDAA1C01CB1DC2347D21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

742c1567-7f59-491f-afdb-e1435b0e7a3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\742c1567-7f59-491f-afdb-e1435b0e7a3c.tmp
Size 105KB
SHA256 baa37fb90b22728e8621cb1e0cd8370d14339295fb597cb899c58908f1d9ea43
MD5 3cf096da5ebbeb243b3cc63b1ce61c42
SHA1 ca076b08c459cee4e3c214a706dff7f9e182cb83
SHA512 9947e993a1b05c95053c60c8e5a9c544169c0476f5ca113971ea72db5ce4a94442075b08a2a9e36d34e5f00f8b4a8b4233e22fa2a713e941c9d3b5cc8e620092
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7K:fwUQC5VwBIiElEd2K57P7K
TLSH
T12EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

0a3943a7-d223-4eb0-b2e2-9e22d721f1c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a3943a7-d223-4eb0-b2e2-9e22d721f1c3.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

30ccf630-ada4-4b13-b35c-f726e55c1dcf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\30ccf630-ada4-4b13-b35c-f726e55c1dcf.tmp
Size 9KB
SHA256 55e71bbae63d04bcbf51a52ac68fd236399b24ce02178c7daa58559f852e408b
MD5 05519810aef683fa55eae606e73bada9
SHA1 181394a719187a877572ece1b55398a8ab936707
SHA512 bcd9af4905347db979b5585ec0f20859d1a3d092b8b6d628d0845d4333e65f893300aa061fda8313ed89765ae350a9ec1dc73f2c3c47010fa29431a72072d9bc
SSDEEP 192:sxZ5RPWe/fSs/Na/IdpdGHW6+WNGY36WgLUQIg5dJ:sxZ5Ae/fSsFawcHbGXPV
TLSH
T1CD22C7126E78A97B8CC7D20DBA25BF53D6F9503291D02E58AAFCC61C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5ec7ad91-d30c-45f4-8770-7512a198a880.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5ec7ad91-d30c-45f4-8770-7512a198a880.tmp
Size 10KB
SHA256 f09a1a2c0e9e6fc0363171fe210289f02f69ff23ace8bc1ff6c2b10a1ed2b1a4
MD5 420178c1faf7ce07b6fb7a35e7a82033
SHA1 a9057caedbeeae2f9f3b540be46321c03b2ebf94
SHA512 a618e73345aa99ebe3023672c8d00fed4197b504dec0bdb6f4ae3a8add90d7835e34e4ee91791f9f5228e7a6ab1442542ed4a8c593c6927edd8447fb7f4386fb
SSDEEP 192:sxZ5RPWe/fSs/ma/IdpHGHW6+WNGY36tNtLUQIg53J:sxZ5Ae/fSsOawmHbGXF7
TLSH
T10222D8526E68697B8CC7D20DBB15BF53E6F9503291D01E48AAFCCA1C05E76DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

735eb1ef-f26a-4d45-9af1-35fdb6fdb344.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\735eb1ef-f26a-4d45-9af1-35fdb6fdb344.tmp
Size 10KB
SHA256 d1533e18fbc107a37ae76bcc055132a45db9d36d028737619989eb3863ef0435
MD5 53c91b086c76ca62d2afa24c0be4f8c5
SHA1 85d6c12316afd1befa3c593d4fd8e774df58f99a
SHA512 9c65f541e7668c32aae5fb55b95a26115fcfc49eb4f7978d276fc92bbbfdb2b8be3191a6a1dcfa9cfaa53a631380876a8f31cb7c94152faacd682a88202db8b1
SSDEEP 192:sxZ5RPWe/fSs/ma/IdpdGHW6+WNGY36JNKLUQIg53J:sxZ5Ae/fSsOawcHbGXg7
TLSH
T13322C8516E68A97B8CC7E20DBB15BF53E6F9503291D01E48AAFCCA1C05E76CD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 dab94ed797ad8640f1c30674287f6982adc1a73159e41a7ba89e8c5952361d63
MD5 ffe1842c403d89029ad7acbf68e2b5a1
SHA1 a0362f54c161f07229dba2e0e43ae1ce50998541
SHA512 804982a191b2b3c5575f5c0afcc6e8920f5dd8444598602612a7edf8b449d87131119a89e38f6e6b6c694ba058f9e5380f58522ce10bd94c7a30818097120f7a
TLSH
T199E026A608E8C22EA32A644B01ECA70CC2C0F71BD7C0AA8E5748C8887441490F6CB6E0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 02987fb443d15d88ab6ad9b02b2c3667951db0c0d1559f7110cd78589020927b
MD5 2f2b11327cea2c513d5bef8265c97f39
SHA1 15784a5b4ee3a589cabdbb57108d80b98a94385c
SHA512 710aea15d3fe5b8b07d29e7eca8981ba7734aa5403dd42f1e45a1e71181c24f4dc36230d5e42c48dd94d7487fe550712f8fb7ec773ca0211b7902119ce115b5e
TLSH
T1575195440E9B7190DB884234D2DF35C3B6F069BC31A3AE651797D8782BCEB47ACC4050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 33a8f242a58075d4ad8d858f2d809a8ea4dc8a41562162b8a3518cb13b8dfb45
MD5 c022b6486423b5dcb5fe401386c67ecb
SHA1 e8154dc3804257fc6f56cabeca319f85e8e84335
SHA512 038c42ec3e2be78a8721e38d93a18782dcf5bb263b038f20780aaa4b612962c8628f5d765c1bf96157ab6986b097af796b4fd4a18a0d741413cb38f3d6a0839f
TLSH
T1775193440EAB71A0DB894230D2EF35C7B6F069BC31A3AE651797C8782BCEB47ACC4050
MD5 SHA1 SHA512 TLSH

Submit Download

e7d2530f-f1f5-49cb-9e35-42b08e8388a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e7d2530f-f1f5-49cb-9e35-42b08e8388a5.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

32fd0653-adb3-4adf-a059-1d95f527bb00.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\32fd0653-adb3-4adf-a059-1d95f527bb00.tmp
Size 1KB
SHA256 776bea36c6ad3492a7ac1b992b83ceb6683d3b0d9c1d6630fe201433eb88a1c6
MD5 8e54e2d78bd115a63d87b793807b5105
SHA1 f380d2c9271491670a4ec22910a69235d473d46f
SHA512 a1a4198120786b7d2dcd5bbecc9c47bfd98e9769511e8716f83e0905a0d8def3833f1d5ba7ee5960fdf564d776e86dd1e0af2ae0ab77910935dcdb834f5582e2
TLSH
T10521CEB7C3D5867E890156F0AB246E1BCE1D091A422C3C16C9E4EF5BA3F24B4E10158F
MD5 SHA1 SHA512 TLSH

Submit Download

81733f6a-1f36-4a11-aad6-ecba8d79cda9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\81733f6a-1f36-4a11-aad6-ecba8d79cda9.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

887b2aab-d0bf-4c64-86ed-84219e4e0440.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\887b2aab-d0bf-4c64-86ed-84219e4e0440.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8e59de9230e554ef96ed161e278174ed72f4a2948ab1b714bbe59605276b058c
MD5 043ba89a2afaf7febc584b3d85f99bae
SHA1 3464e12d6e130731e28a9c8f8d55c371316ec0be
SHA512 b94759adaeccc6799fc7ea6eaf193016c50c731123d52a3e0f548c4bd0aaf41d937a71bdd922adb5ce579db776d03918927726b636c4441401319b5b6e760e30
SSDEEP 768:dFKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/yro8d:dFKlm7QWvUYe0u1ja8/L/E/p8d
TLSH
T173C2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512B4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 24fe8d2a823ef07afa1a187ee24e9a04e1d83e397274dc09f6c0b6bc8fd603c6
MD5 5953311c9f12ceabc7e428ad140d16ac
SHA1 c4f3b300f377ff4747b9f97ce036ceb5733f695f
SHA512 c85c93edcea263ccae3a27f5d589dedf2da432617033bf5ce6ea430e2fdbe9ecdf24167713e345d0f15fd75325e295a75825cad4485a02a458e1028e13781e4d
SSDEEP 96:KkOoKvaqBKD+6YkQkgkZPeykKmBewkia65Ya5ulSK+Yf:uHJVlC
TLSH
T12891B21071BB064038BE359C95B4872A564171B33016E62BBFBC40A59E2FE485FFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b198919c-6961-4dab-8ac2-67d01674b362.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b198919c-6961-4dab-8ac2-67d01674b362.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

b1daf6fe-13a2-4bcf-be73-c8035435ced9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b1daf6fe-13a2-4bcf-be73-c8035435ced9.tmp
Size 9KB
SHA256 832468cfb019296588177f3c6fb4bb2db53db0be0f2218fe37741e8f0fc1a92e
MD5 9925a16e055b6971fdcb4d9ee693a4ff
SHA1 320fe0ad5c7dc81d4e254118cfb4cbdbc50b4c3f
SHA512 2ba76b500a08cf83622e97c33273e8ec70bf26c36b4242687c0e658e47b875325eaf52dfac28edb9446e5979264254c69628c8e0c83930704d6ec6805158c41c
SSDEEP 192:sxZ5RPWe/fSsiNa/IdpdGHW6+WNGY36WgLUQIgrJ:sxZ5Ae/fSsoawcHbGXP9
TLSH
T19622B7126E68A97B8CC7D20DBA25BF53D6F9503291D01E58EAFCC61C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

06650038-fd78-43ee-82bf-98f6e8408afe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\06650038-fd78-43ee-82bf-98f6e8408afe.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

cb8bb77b-a170-4c78-8269-fc47b650e9da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cb8bb77b-a170-4c78-8269-fc47b650e9da.tmp
Size 18KB
SHA256 f88c6d7441f8ba83ecc757384611009f5f0de85d497c338fa8d4db938116ead1
MD5 615d1e3257aa9b888600c409baf2aed5
SHA1 f2aeac36c7db14d6d67a9b38e3566254eb76235a
SHA512 b9f93a1c72bf3ac1ce7c25ab432cf79c993471ec83beb48afe1f4edbc3a19c51665d50af66d34d6fcfe6996d361407ec2ac84959c22256e5d4ec5fc2a14033b9
SSDEEP 384:RQkUSv0sNiAfebQ5Oh//0ZbQwh5H7vBEj6IIll:D0Wju/sZzh5H75Ej6Lb
TLSH
T10C828D31B8A5AC7B5AB39150F14A3A13DF70D0ABDAC95F94D9CDAB2C01CA1DC2307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ae041f52-3e44-45e3-b804-8fb9f2daf006.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ae041f52-3e44-45e3-b804-8fb9f2daf006.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7a12ad70b73077420011495530c1138c1834d38febb5a6690c86b3d5d44da5a0
MD5 7cec256e05f070e99a6b3b349bdca4f9
SHA1 74bb96de25701c83367153de04d9c42ed0030882
SHA512 47d8dbc4b8e63daa4fecd0a754d65200735825a9798bd367a0792c065745d621559eee4da29c5817d9310c99783ac354c925600a8db70145e7cde96782f50902
TLSH
T11D41365CBAEE1048F3B36E4A9BF6A86E447FB9772E0A945D00110E4E0A22B40C871737
MD5 SHA1 SHA512 TLSH

Submit Download