hxxps://www[.]unserebroschuere[.]at/Heizbaer_GesmbH/MailView/

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 09:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.unserebroschuere.at/Heizbaer_GesmbH/MailView/
Sample261102-lthxbaef92

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
900	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{F543A9E7-C61F-421A-B3A7-2357C105DFDE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1124	msedge.exe
1124	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4932 wrote to memory of 4676	4932	msedge.exe	85
PID 4932 wrote to memory of 900	4932	msedge.exe	86
PID 4932 wrote to memory of 3064	4932	msedge.exe	87
PID 4932 wrote to memory of 3064	4932	msedge.exe	87
PID 4932 wrote to memory of 3064	4932	msedge.exe	87
PID 4932 wrote to memory of 4120	4932	msedge.exe	88
PID 4932 wrote to memory of 4120	4932	msedge.exe	88
PID 4932 wrote to memory of 2176	4932	msedge.exe	90
PID 4932 wrote to memory of 2176	4932	msedge.exe	90
PID 4932 wrote to memory of 2176	4932	msedge.exe	90
PID 4932 wrote to memory of 4436	4932	msedge.exe	91
PID 4932 wrote to memory of 4436	4932	msedge.exe	91
PID 4932 wrote to memory of 4436	4932	msedge.exe	91
PID 4932 wrote to memory of 2680	4932	msedge.exe	92
PID 4932 wrote to memory of 1072	4932	msedge.exe	93
PID 4932 wrote to memory of 2680	4932	msedge.exe	92
PID 4932 wrote to memory of 2680	4932	msedge.exe	92
PID 4932 wrote to memory of 1072	4932	msedge.exe	93
PID 4932 wrote to memory of 1072	4932	msedge.exe	93
PID 4932 wrote to memory of 2428	4932	msedge.exe	97
PID 4932 wrote to memory of 2444	4932	msedge.exe	98
PID 4932 wrote to memory of 2428	4932	msedge.exe	97
PID 4932 wrote to memory of 2444	4932	msedge.exe	98
PID 4932 wrote to memory of 2432	4932	msedge.exe	102
PID 4932 wrote to memory of 536	4932	msedge.exe	111
PID 4932 wrote to memory of 3096	4932	msedge.exe	112
PID 4932 wrote to memory of 4848	4932	msedge.exe	113
PID 4932 wrote to memory of 3540	4932	msedge.exe	115
PID 4932 wrote to memory of 3540	4932	msedge.exe	115
PID 4932 wrote to memory of 3196	4932	msedge.exe	116
PID 4932 wrote to memory of 3196	4932	msedge.exe	116
PID 4932 wrote to memory of 1124	4932	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.unserebroschuere.at/Heizbaer_GesmbH/MailView/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff928dac188,0x7ff928dac194,0x7ff928dac1a0
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,18174021756225049532,18398232378502992179,524288 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=2828 /prefetch:3
  2⤵
  - System Time Discovery
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,15985575801750448558,2312164662664252938,262144 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:2
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,8436260205519831014,7271462092068478214,524288 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,304699577579305951,7212935172126995752,2097152 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,120027460823757762,17077009558891138586,2097152 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,2632743917002302305,5660627124953791135,2097152 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4164,i,1017615687598674755,15126235902276345713,2097152 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:2
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5608,i,5286219219303239063,14585030826547155586,524288 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,13187717512920829014,16598261047338927500,524288 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,3419801501324596168,9580370567490572960,524288 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,3419801501324596168,9580370567490572960,524288 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,9164576776846642763,5592377675770107185,524288 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,6783082502774212489,12370161866814871264,524288 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:8
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,6903406158346963467,451145137062720794,524288 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2068,i,7240404809574923297,3368440417774779229,524288 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:8
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,16362763182470983170,10704308109972437845,524288 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=2080 /prefetch:8
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6344,i,17157322267317517507,9152792377233096002,262144 --field-trial-handle=2776,i,5628862639659084697,8830671203527089921,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1124

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1448

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1809da00-f554-491a-8471-baf38192d9c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1809da00-f554-491a-8471-baf38192d9c5.tmp
Size 26KB
SHA256 7f3c9f9f6cece9eaf750a72bfd3f7de186e19eb6a2d56032a880449b0a177acb
MD5 47f1e5f36fbb214ec18dee6ed9de7542
SHA1 91e93985a57bd496943868450a8e6335c0472f18
SHA512 c0d346abfd90b5cf5eb093215fe800d02e8a7b9dd068ac0eb7c20812ce7f87b0d114ac5b249ce9543bdb928bf22f2ef7a1ef3021940ce6071de3a6580465f348
SSDEEP 384:RiFzQkUSvHqzsNN8TUNTUlIlTOlAWpu2P749iX5F1VdSH7vBEfKIIlb:4FdCQwgiV8a5SH75ESL9
TLSH
T1C5C217F258D79C3AD9AE9B03A33D2D039E7CC057B9946A90F789561CCC861BFD30A911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3bb08d46-2680-4b7a-b785-ae837590b2f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3bb08d46-2680-4b7a-b785-ae837590b2f3.tmp
Size 18KB
SHA256 096cc71eef1fd837c8b6f7345cafcb9c8446eb9b6ead6048871f0ed814369db0
MD5 4f92fc76ccd692fe476d5fb09e035f63
SHA1 853425ac4e92ac5bb785560a3c8e4cd137e61a52
SHA512 83a92e0ef67b7e53cf129ef916295dbf80abe82c6f1de6504a3d9765d48aa9f7dd1087f5ef85d3c3e40734c49e540d2243784b9069ae6bb44ab02fc2ca26b8f6
SSDEEP 384:wQkUSv0sNzeOlAWpu2J49iX5F1VGSH7vBEfKIIlb:Y0Sn8aqSH75ESL9
TLSH
T19A828F31A8746C7B0AE3E650F10A3A53EFB49167DAD43F94D9ED672C01CA2CC174B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6fb55b69-6c05-4454-8c92-eac85e35244d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6fb55b69-6c05-4454-8c92-eac85e35244d.tmp
Size 8KB
SHA256 dea2d627d896277a4d590d94e7eec8e837b1b2ee6ff6fa78fff24cbbd975203a
MD5 54711f2fc9930c621b11ab99d95cd043
SHA1 259b339850829e9643bd3ec08eef0dabe7e9cde4
SHA512 f34af247e4cc3a9d37797df0a69830dd4d0cef486cbc236e72b6da1d1a0ccc84710b0befef30070e26bf5ed6997260e63a9b22bfe166c6745a3e54befd3957ac
SSDEEP 96:gqONkGQsjpfuMVwptaL5ih/cIPURHl8h4otop5NiCDPBIPuva6zx8X5Fxux++YvN:LONS6AmwprQmiUyn56siX5FNHkJiGYU6
TLSH
T15E02EA35AD686C7B8DE3AE55F44B37239FA5116BEA942F84CAE81B2C01D765C1307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7f1991c9-8ea8-44f5-b15e-a6e9c8c1ffcc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7f1991c9-8ea8-44f5-b15e-a6e9c8c1ffcc.tmp
Size 8KB
SHA256 145884ed87677fa820d73ac4cc1f3b49152c9c5c2308e04691292a37685bebf1
MD5 4240b13937b12c638e933dea2ef0e209
SHA1 59b9a286a799ac7f3aa728240f6c0e13e45f204d
SHA512 ce36a5b3c050bbb74f64cd00184cbde84fec8a7dbfbffaf670cda0ff0212daaa216b71e45f0aad77c1e0123fffc9dd7f0034ae0eb9df9bb8aa5274ff60fdc926
SSDEEP 192:aONG6AmwpiQmiUyR5IsiX5FNH7Jd6blRxqnU6:aONG6ipeGIsiX5F1VGSU6
TLSH
T14A121A32A874AC3B4DD2E955F08736139F655267EB887F84C9EC272C02DF698470B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

04076af8-af35-4789-8ea2-9287bf9a1040.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\04076af8-af35-4789-8ea2-9287bf9a1040.tmp
Size 105KB
SHA256 2ef96264d2b79f2f32ba7c3f4d8bc3a7cd12206153f6218f7bbe1251f2de650f
MD5 1ad9f96c1fcd1af763818d9e108bb5f4
SHA1 1e2816ec93f878922501ab302f5c8c4e7ebcd07d
SHA512 e00a04412dedd2975b5ca272c9660f6c9931bacff5f3a31e6eda9d9dbf0a5b61954f0ec88458dfe5f52a32f35c3785be60c678cc8a35853099cfde0c58ccdbe9
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7d:fwUQC5VwBIiElEd2K57P7d
TLSH
T1EFB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

1cd099a8-3c24-439a-a71c-e5f62795dc4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1cd099a8-3c24-439a-a71c-e5f62795dc4a.tmp
Size 10KB
SHA256 8f983f3195cb6021ee1902ac4078aaf6beffc5639fd1b150b1b304a7eab0e5e0
MD5 d9aa2b09c6d9287e8888a3c71d65e933
SHA1 cd01190059fee16649a0b07e04b734066f534f21
SHA512 10478a135098b945f0dbc9cc7f6ea3534371e4fb2b79f398a52e4243d31393d5d39092bd61162bee490f744b6adb60ef3cd20a9cd05b0291d29b6bfb021d77b4
SSDEEP 192:sxZpRJWU/fXsFQIdpKDHW6+WNaB+/Y3zw+M5Ig554J:sxZpuU/fXsFxwHb5/Z8
TLSH
T19D22C7526E386D7B9CC7D21DBA15BF53E6F9503295D02E48AAFC8A1C04E66CD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3533afdd-3749-40a0-b32d-1cd8b6183114.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3533afdd-3749-40a0-b32d-1cd8b6183114.tmp
Size 27KB
SHA256 69d72e267b7f8440ea0fe4e4e4ecbaa41029708eba5a92772a55a6ccc85ecd28
MD5 5a1776ef7b7ce0492ac7abaec3540447
SHA1 c2286bb9bdaca3068b2622156514b9ef45f25a01
SHA512 bda0d463eb0f4785b4c5654aef8b912ca87e3bc6e4936ea20da412453c7c8e522694683471bd0439a3bcee83015a0320f756517b7a57691d729dabd744e99294
SSDEEP 768:jd30AbSWvS2998F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72rrolZMl:jd30AbSWvS299u1jaLmLZ12YC
TLSH
T1FCC2EA3B640CCB7E4FC01A9DDC6AAF9B6F9802C796549D4047FA984C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c694eaf-37d9-43ce-b034-9d6afc42d119.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3c694eaf-37d9-43ce-b034-9d6afc42d119.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b0eb2c8-feed-4054-bd33-9b1dfdbcde33.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7b0eb2c8-feed-4054-bd33-9b1dfdbcde33.tmp
Size 10KB
SHA256 55e44bfd48acd17c3978412dc20ff4a699d2e367c7103674511cd4334e3f117b
MD5 ed32441c3c3b1b07ef2045a16aa90e54
SHA1 b89b73328eac5ed712eb1c1404b22c00c2e493ae
SHA512 42ec33df1d804f7d555a2b05fe13becb65e415ec745a67941388ea0c459f099ea90830a24793d4959aaa33f67e59b3b1dcb2a6c468da610eeb5f02199c81d5e5
SSDEEP 192:sxZpRJWU/fXsFQIdpkDHW6+WNaB+/Y3NwBM5Ig554J:sxZpuU/fXsFx+Hb5/A8
TLSH
T10722B7526E386D7B9CC7D21DBA197F53E6F9503295D02E48AAFCCA1C04E66CD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

834348b1-3aaf-49a8-a9fd-3ad67f543813.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\834348b1-3aaf-49a8-a9fd-3ad67f543813.tmp
Size 10KB
SHA256 7b21d9af21955fd38984f213928f46d0ae0ea2afba37f7daccd9c2b4ff3d5d84
MD5 09e62da0d3a6d39d2716a73c941b7bbf
SHA1 037d1614b4d460bdc48edeaf41b99bc53f09d9ac
SHA512 7e3e71009d4d05b0345973e05002ec999becd2036449a28a4bdafd4ab4ea71acfac38a5a46f1f949b3e02c4cdc250fcdc71f16fad2bd844a4fa942761129d52b
SSDEEP 192:sxZpRJWU/fXsDQIdpkDHW6+WNaB+/Y3/RM5Ig55SJ:sxZpuU/fXsDx+Hb5/TO
TLSH
T15522B9526E386D7B8CC7D21DBA19BF53E6F9503295D02E44AAFC961C04E66CD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 85f9271ed2317c535ffeb8ce869227ae1b68161eff6b0697dd79810e5c263625
MD5 a66e931d071e07c1ef1aa99a5541f126
SHA1 1b1156d14abb26705774a89df02ef6ebc028e301
SHA512 833a2adfd4bf7f1afaa8cfcf690e43ce4beea9f4450d8715f2ce5e0eb4723706e31481e3664fdde8a4258372a410ea6270caa1fcb5f36345caaf5c726befe6a5
TLSH
T1E1E04FF916C9C22EB318655B01ED435CC2D1761F97C46ACA3704C48C7281A84A7D7AA0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 76686bd7c782e91b47153a4b3158ad4c8e9526345c703107294f1a5ba7556427
MD5 88c38bc39b6c77454fd01608f524c494
SHA1 19f8fef2216d61548e6e41d7a0d4c16b2fddb026
SHA512 d2fcd8e6fef607e5b85d4184384fc719f1f71b81a0740380bf170ce8bb28523e76c1842a4b48170391423b0885abf96b9f5f7e863b34ea5ab7e811b803046d25
TLSH
T14C71F7400B134A97FB9831F0EEDE31ABFD71798060739D8193A4EF78460AF855CA53A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d008c52cea05c9801f570710f89b7cb0c1c162fbf583ca0f214136af16270c00
MD5 e1ef67301e8f7ca5592239f3fe8a1d8e
SHA1 8ed3b7f8b87cea81f0e490151714c1b9e06b0578
SHA512 9717dc18883963061bd497402bc0f8a354e5393ae7e62cdc6010bd329e763ea69c6488f6223e4e5e3891f91dd93823b6794e6d04a4833437fdc9d6ac8049e9dd
TLSH
T16261A3410B135AA7FB9835F0DED930ABFD70788061739ED29350EF78860AF855C9A290
MD5 SHA1 SHA512 TLSH

Submit Download

2f6fcde2-6074-4951-ad35-18b26c042ed6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\2f6fcde2-6074-4951-ad35-18b26c042ed6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

6860c192-6dc7-4ed9-84c4-ffd76069f7e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6860c192-6dc7-4ed9-84c4-ffd76069f7e6.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

85419e7f-a3b8-41bf-abd3-9db982330b69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\85419e7f-a3b8-41bf-abd3-9db982330b69.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

9b82c9dd-4d56-4118-8848-e88a05d21426.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9b82c9dd-4d56-4118-8848-e88a05d21426.tmp
Size 1KB
SHA256 689ee6fbb64b894fe686bac676e933608c3a8dfc5f99001cc84bb58ae9a1c39a
MD5 b3553f84411e9aed435b692abe464bdc
SHA1 9fe0de3976a183edb115417c3757f829d2f03937
SHA512 3bea18dec4702d4c846c0d38a42e28958293e584d8c8deda27fce8800c4721c6ec486252db6d3ceceb11639add408c5dfa8f8d9678eda61a24e3756a804a9c5f
TLSH
T138216AF7C3A15AADCA0141F09A196F1BCF5C0502435C3995D6D8AE2BA3F24B5D10554B
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6139800e5590e75124004cbee4fd87def65ac0f0caf452cefd8c8b28222fe0f8
MD5 c7353779df9bfcba35bdbac267a7f459
SHA1 65866d9213b9f24991dd81822098fc2a5153073e
SHA512 55532da14503246fa926aa908966b9bb20ab39216b7829efd759c4b05500d9f3d754b761821d1444dc5846dff1475bd073a8b63eda1987739925c020d970c754
SSDEEP 96:KVFsXTtDnr0XmaarrKiSahr2FdOPnYfnSx9nBhx0dksaVxKi4aHx2/X8VMJ+KC4I:GH70JZ
TLSH
T19D912F11336B12C03DBD698D44B6963B524271BB3118B52BBFBE45A28E2BE145CFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f8c753f7-4b09-4bad-b879-4737b0c45962.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f8c753f7-4b09-4bad-b879-4737b0c45962.tmp
Size 9KB
SHA256 e1fa2bb3e67c45377548a038ff9aa006264aff51d2c78fd621ee2021a7e7ab49
MD5 571feece478b6bc2753a9bed24434409
SHA1 ed7efb23b74d7f414dad13b1f3c2b493f5468e4e
SHA512 b9267620ad0eba46237478e98ec3914a5c4d2f5416531b6675f09cf3ee8b2c5f08da0996b7b637825175fc0da4967747eb15bbebf6606d46851e97b9afca7450
SSDEEP 192:sxZpRJWU/fXsUQIdpkDHW6+WNaB+/Y3/RM5IgrJ:sxZpuU/fXsUx+Hb5/T9
TLSH
T1E122B8526E386D7B8CC7D21DBA197F53E6F9503295D01E48E6FC951C04E66CD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d0c0200d-f599-4f36-a478-59a495de99df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d0c0200d-f599-4f36-a478-59a495de99df.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbc18ea5-0e07-483d-b5f8-e174f5c935d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dbc18ea5-0e07-483d-b5f8-e174f5c935d6.tmp
Size 18KB
SHA256 82b55769b12478e1ce05dc203535632004d681da091eae5db31d4ae3996c1c1d
MD5 8dcdad3383f0c560f6d91e2ac87d7b39
SHA1 0ed24e6ed2965eb12e5080bb6e444c224461d621
SHA512 8b3b823c70f692a24abd9b7553318040420b755c1a03cd0b4cdc106c620b721952cbafd525864b089266451fc52fe08ba99fc4d294f7e31df0ea48cc8942fa8c
SSDEEP 384:dQkUSv0sNzTOlAWpu2J49iX5F1VGSH7vBEfKIIlb:H0zn8aqSH75ESL9
TLSH
T167828F31A8746C3B0AE3E650F10A3A53EFB49157DAD83F90D9ED672C01CA6CC174B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b9172d9-5ea5-4369-b793-f69d6b493cf8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8b9172d9-5ea5-4369-b793-f69d6b493cf8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 5c7e7aa3200919f9304c43af7035a1adc1ba77808dcc96f3e2bbf18f6a0e428d
MD5 257fa801b198832c704c53576ec6a440
SHA1 ce9f94e9ca55e9d1ebb3d82b0fc7ddb3839b660d
SHA512 ac500f4f0ee10239efca973996e5f86fe8bcce556681de71b71cbb41075ed6d7a6bc5d5787ac17d27232601dac458c22a7814bbc614eb777a1f663864c831bce
TLSH
T1DA514D58AAF91118B3B36F56AFF6B83D957FBC772E06D49E00120E4F4622A40C961737
MD5 SHA1 SHA512 TLSH

Submit Download