0d6a4ab6e143ffe9ae84b942e2f374522acd4f7b8e6d090d8564741a56b23db9

Analysis

user interaction
yes
max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 12:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
THDJG9D098.html
Size 7KB
Sample261102-p5p2jsct2p
SHA256 0d6a4ab6e143ffe9ae84b942e2f374522acd4f7b8e6d090d8564741a56b23db9
MD5 ecc49cc9a5793c04cc373e01bd7b8c82
SHA1 32d1a11e88311dce4faf1327fa2d29aca146fca5
SHA512 5d7bb45da0a569e0ce0284367be1b065961b9dcf098d8358d459f7b150b27f82a017da61ff16c6c29532c4a1f7b39842927e046bef53d569d42c6d4f4e17bff2
SSDEEP 192:vA4uiRsA4y+Vju3/Oi6/f8f1dk9tcCA/eKhj63Fh:o4/+vVgDjqh
TLSH
T17DE182138A24880D273270BAEA17B1C0D155A15FC996EC58B5EC62995FE4FE089F3637
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1088	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{0AC50F26-AEBA-47F2-8AA0-A3791B730E91}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1164	msedge.exe
1164	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 732 wrote to memory of 2776	732	msedge.exe	85
PID 732 wrote to memory of 1088	732	msedge.exe	86
PID 732 wrote to memory of 2460	732	msedge.exe	87
PID 732 wrote to memory of 2460	732	msedge.exe	87
PID 732 wrote to memory of 2460	732	msedge.exe	87
PID 732 wrote to memory of 1776	732	msedge.exe	88
PID 732 wrote to memory of 1776	732	msedge.exe	88
PID 732 wrote to memory of 3148	732	msedge.exe	90
PID 732 wrote to memory of 3148	732	msedge.exe	90
PID 732 wrote to memory of 3148	732	msedge.exe	90
PID 732 wrote to memory of 2940	732	msedge.exe	91
PID 732 wrote to memory of 2940	732	msedge.exe	91
PID 732 wrote to memory of 2940	732	msedge.exe	91
PID 732 wrote to memory of 4460	732	msedge.exe	92
PID 732 wrote to memory of 4460	732	msedge.exe	92
PID 732 wrote to memory of 4460	732	msedge.exe	92
PID 732 wrote to memory of 4504	732	msedge.exe	93
PID 732 wrote to memory of 4504	732	msedge.exe	93
PID 732 wrote to memory of 4504	732	msedge.exe	93
PID 732 wrote to memory of 5044	732	msedge.exe	97
PID 732 wrote to memory of 5076	732	msedge.exe	98
PID 732 wrote to memory of 5044	732	msedge.exe	97
PID 732 wrote to memory of 5076	732	msedge.exe	98
PID 732 wrote to memory of 4112	732	msedge.exe	100
PID 732 wrote to memory of 4032	732	msedge.exe	109
PID 732 wrote to memory of 3684	732	msedge.exe	110
PID 732 wrote to memory of 3992	732	msedge.exe	111
PID 732 wrote to memory of 2292	732	msedge.exe	113
PID 732 wrote to memory of 2292	732	msedge.exe	113
PID 732 wrote to memory of 1152	732	msedge.exe	114
PID 732 wrote to memory of 1152	732	msedge.exe	114
PID 732 wrote to memory of 1164	732	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\THDJG9D098.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x264,0x7fff16cec188,0x7fff16cec194,0x7fff16cec1a0
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2060,i,17030489550777636141,9876666762279733445,524288 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1932,i,17558533623813239664,10909497370021171749,262144 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,7541845053224474589,17505677401045272666,524288 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,12399018828947164031,1340176178078563349,2097152 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,587980511808614622,6402872778127163150,2097152 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,882639441447380094,6447895777314537109,2097152 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,9006174944517152765,14303632678076237291,2097152 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,14994963169340299942,9380602535220690611,524288 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,1942142455788894316,4585980200174573444,524288 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,7121346972439712091,16100990236284393005,524288 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,7121346972439712091,16100990236284393005,524288 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,6026332125601485640,3921237340023127298,524288 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,9780859352228396080,2929194674473060984,524288 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:8
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4804,i,12803643765606916754,12396645740971011276,524288 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,15366798858827545293,8482217459804477643,524288 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:8
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,134732708773184153,17487273283889634903,524288 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:8
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5132,i,5898713576164358333,16112423053630965579,262144 --field-trial-handle=2140,i,17695262215980965061,12758583337537280637,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1164

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4548

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

32baa615-f62c-4b04-b6c3-bfc1fa66cfd2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\32baa615-f62c-4b04-b6c3-bfc1fa66cfd2.tmp
Size 21KB
SHA256 2578680cd8ef70645599d939a8d694ee50b71dd93eddabbd906c1f3732570c8d
MD5 e1ac3aefd0e436fbb9689eb0c86dcb3f
SHA1 bc10076926cc469445c23246872e3dc8eac2dcb1
SHA512 19246e4c87de392660e4611eec018098d520632845ea38ed394a1990735c21caea3d30329bb9695f17b6d67cc8a1c5bdd8c3996388bcf8c752ed5204c4d668f4
SSDEEP 384:fiFzQkUSv5zsNC8TUNTUlIl8PidhtQX5+DtQODEBfAWjH7vBEdXMIIl2:qFd53wg6aakDeOQNAsH75EdXML4
TLSH
T1D0A26B33ACA8DD3B9EB75A51F14E3217DFB45067C9C8AA90E6DD9A1C01CA2DC134BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a879d37-7ed1-475a-938f-350df41b9f52.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5a879d37-7ed1-475a-938f-350df41b9f52.tmp
Size 18KB
SHA256 78f1ccdeb5fbed79bfd04daccca9793ce90e0b20b1606c3ac1aed1e6e21bbb88
MD5 1a6bceac807fd1ae036c694ab7b8eee5
SHA1 24dc7b51cb330489fdd1598e94be0cea6532f521
SHA512 d48bf6f16fe111a278f41d09ecd2aa53f48e0041a9823bff21b63407d357952d665592df63d78d71cbd893de9d9123ea49ab1184c0eacdf818053fdd52bf0782
SSDEEP 384:YQkUSv0sN6TPidhtQX5+DtQODEBrAWjH7vBEdXMIIl2:Q0laakDeOQBAsH75EdXML4
TLSH
T169827D32BCB4AD3B4EA75651F04A3657DFB49167D9C82B80D9ED9B1C01CA3DC234B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5dd81ddc-97b8-4d71-8663-0166cd57a0cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5dd81ddc-97b8-4d71-8663-0166cd57a0cf.tmp
Size 8KB
SHA256 fa799ae7238006869163a7b4a899cc5a4abed25f900377355c04c0f8c6170aac
MD5 9a5a0bc1bd2d33da7c4541403b1c137d
SHA1 7d4333ea3e85f8c730dfd1886e58f80309606d64
SHA512 22d17b7abbce561cd2969345b19cf4ebad26eb45f512d0929a1f98cb12699b9e967177c3de8440b46426a0df3e91c256a760d258a1558864bef51a588c76a96a
SSDEEP 192:EONT6nnHGQmiUy+3QYcX5hQDP1QOD1McfUmU6:EONT6nCRQNX5+DtQOD1MmU6
TLSH
T1DF02DA34BCA97C7B8EF66D59B48633179FA4213BE5946B80DAE85E1C00D765C230A823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

777d7bd5-85c4-4210-9476-dcff93d724fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\777d7bd5-85c4-4210-9476-dcff93d724fc.tmp
Size 8KB
SHA256 dff5e038e862369b86a39c97f4c550b11346b0dc0f6d16b23e0cfed1c78a983f
MD5 90ca8e5f89112286d0e8e15ce45425ae
SHA1 0756c5d08ea4449a6bfbfc946caf5558d73223f8
SHA512 7129f7a6bdfef521b0cb20ae65e0572a4912afbf5b9093ef41e440137c0ae14252b112175f181196cfb53a1a98f37f46519310a6b8103e163b2fcdcb67eaa005
SSDEEP 192:oONT6nnHuQmiUyL3vYcX5hQDP1QODEzNKMg3jq5WjU6:oONT6nKmvNX5+DtQODEBqAWjU6
TLSH
T157121A35BDB8AC375EE66990F08732179EA51127EA887FC0D5EC2E1C01DE6AC130AD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ccfd9a8-5ed3-47ee-a636-3e5a524388c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7ccfd9a8-5ed3-47ee-a636-3e5a524388c8.tmp
Size 18KB
SHA256 81bd45c658a930a2bacbaa577adead42e3ad41e209ad86f41a33170708069f3c
MD5 d7c06ae8ce7ee0c8258509a7df0ed689
SHA1 9280b3874d761c99ccbd1eaa2eb51f27c8462060
SHA512 92cfdc0fff8a374a02937b4317b80f5c8a3303f1c2876f1078d7d026de4a9d74cf8dcb6d6211e53ab3525d4922679d703d00afb7645bb1a1185fcd65e16d55c5
SSDEEP 384:7QkUSv0sN68PidhtQX5+DtQODEBrAWjH7vBEdXMIIl2:10SaakDeOQBAsH75EdXML4
TLSH
T1DE827D32B8B4AD3B4AA76651F04A3657DFB49067D9C82B80D9ED9B1C01CA7DC234B913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3d82724-045d-4ba5-9c7e-f829324b22bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\f3d82724-045d-4ba5-9c7e-f829324b22bc.tmp
Size 105KB
SHA256 1d62e22dec5c299be491cb2f809a917a5b2650bcf6f26d1655b204a91c995427
MD5 a1423f7d471bb13fff5ecfcdaea6454c
SHA1 7ded49e29e2ee4ecada313702dc82cddf87e8600
SHA512 6e90c834830dc60cf4e69d47a842a672355eeac4f32e8a0122d66df5ce75da4ac71274dc3cb208dbb06f3cd4f506485158442b7832ede2cf24ef8c5b26c1705b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7N:fwUQC5VwBIiElEd2K57P7N
TLSH
T119B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d24032e322bda4aa4f943eeee5c1be2eee903b8fa00c6e40c3ae3aab1d6e57
MD5 cf18b86051311e5d4cb3435637b32441
SHA1 81808c10d3ea99d837ac73ca978bbac4af2b14c3
SHA512 d8f6d4f7cc0a9a322acccdf645cd0eaf7d236c68d82f2fd25c2d01e1e6ce323c3d584edd204b1c68ced260f3cf67a5be22a62de64511401735df9213129ac8f0
TLSH
T1EFD02B02FE898A6CD4921C34012E811D36CDF40049027041C0B023974C04701102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ba460c9f5a00478279781ba3317975fb747ea7519f30b24bac67a94df77c22d
MD5 be02dc26a22f37196d8a2ed1f90604b5
SHA1 0d4f49e0f6b152530b0ff133dac678914194c470
SHA512 74fcddf19d34dc2b1dc8ec59c0f57f326e68c7c9b62fb89494b07e2bd52522d6f7662a05f91a2d0787fba43ac2646fc3214bc591a45f14862aa715bcd9206f88
TLSH
T1EBD02B02FEC98E6CD8921C34012D811D36CDF4004902B142C0B023974C05741102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

1a8d850e-7e01-4c11-b5ce-b682171bb168.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1a8d850e-7e01-4c11-b5ce-b682171bb168.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

26f40626-dddc-4ef6-8a52-260396cfd70d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\26f40626-dddc-4ef6-8a52-260396cfd70d.tmp
Size 9KB
SHA256 8aaa574d876f2e9c28270daed0711d28bdbe05d8048a5a998ffc9620f32d480b
MD5 f95794175fed09bc3981a7f1e3a46365
SHA1 ceb2388338865ec2f33a271d103758e9c573a0c3
SHA512 c7709588dc934182d96095f6336903d19bf9ce1042ff0ec5023a8f5647f95451e983ddd04fa7afbaeaf2bdbdf3d9565caed4f0f3173039d566c0b595a1e93c29
SSDEEP 192:sxZCRdVWn/f3sx0IdpdrHW6+WNGYYB1MaoIgrJ:sxZCUn/f3sxtZHbGf09
TLSH
T1CF12A6127E38A57B8CC7E609BB55BF53E6F9503261941E58EAFC861C04E66DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2888bcf9-85fb-4675-8211-b86ebd3373f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2888bcf9-85fb-4675-8211-b86ebd3373f6.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

74439f2e-1c3d-4193-a4ec-4bb93419f5a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\74439f2e-1c3d-4193-a4ec-4bb93419f5a6.tmp
Size 10KB
SHA256 f2056c43da835d847f210aa7f6e314d20693627c16eaa367f5d108dfbb60122b
MD5 0856483afb3e02eba10ae6853c443b67
SHA1 5ed0c638881768d54d4150ce6f20231ae718046d
SHA512 31fe0e4d1cf03c596f4601d90199fd87477bfa81016ea9657f7c94c9f1dd35ba82a6b3b6aa955eda2f4216059c7b52f891421307b3a6e7eaee9e1a5c825ad8ea
SSDEEP 192:sxZCRdVWn/f3sz0IdpdrHW6+WNGYYBvuaoIg5zJ:sxZCUn/f3sztZHbGfUn
TLSH
T11022B6127E38A97B9CC7E609BB55BF13E6F9503251911E58AAFCC61C05E76CE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d13b40e-e83a-4222-acf4-d3ee4d62340f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9d13b40e-e83a-4222-acf4-d3ee4d62340f.tmp
Size 27KB
SHA256 769defa3d210db668a9bd5aa42662aed213c114ed64462ca9ebfb4017b55cba8
MD5 6ff2b7e154c4575d75967764a4d7bb32
SHA1 0cfeb70407dcf53031f5a162a7b687aba6e2d31c
SHA512 a02b08b3e33a103bd86c81eb7accd9e5593a5ae4c49c9b150a57e1ce6bec2cebe091ce1d25e4de26fea732bef4af43a315ecc6147e8183bf1ddf0aa5c50d99ef
SSDEEP 768:EE9AyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXxrop/Mw:ZKyYR7jWv3NpBu1ja/CL8OXKX
TLSH
T18EC2E92B640DCB7E4FC01E9DDC5A6F9B3E9802C7A6548D4047FA944C02C77EAA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 6f1402ac98e130dfb3d4d3799744b0fadf1c94a9ee78bcbfec6f58c98ed81ef5
MD5 8f419d7563d658c922bc7117c78e091f
SHA1 8caec8002b1c7ba5aff8a918e078ae3fe7c99040
SHA512 e8e65255579a45eb1cb45e7afd309211035cb193d3e48bc17576f28d220e1380210e61aa474724e82599d47fa79b64003885b535cc24625928d7fffb6564a474
TLSH
T145E026C548C8D22FA30CA44712BC939CC2B0361B93C0690E2784C8847182041A29A7A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 3a8f32559594a9d11a3243f9527c47b3a654ad228f4b23b603128b7ebc31bc65
MD5 0237d934db841b9d0a337ea44a9b29c0
SHA1 57e8b07bba1601a99e6c7425c324a643395d492d
SHA512 15e69bcd834d43defbd5882e02e87dbc96a9c59b7d4d4b76c9422dc676dee262f520775be3cb12ae32afe305bcf100c0536485a45397024275e2c9984a4c8250
TLSH
T194513142ED5082BBFFAC6EF18EE4A687363AE5F815431D3904E4D7FA97563B0050C054
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9126351137105955ea9e0748c84d9e0d6e30ed0b6587fe258fa7f32f674d8140
MD5 03ddbb20d670908f096f1a38fb90682c
SHA1 5b7fb1ddaef3f52d67c8b39b975f1b0051521b64
SHA512 69de4253b5693d5755f784e22781ad63c70acc70b1573d76d33c95f2da508cfd5dab1a47f8da0212892f88f8b9933cb986b370aac1238cc3ecba74efa8cdd00f
TLSH
T166513142ED5082BBFFAC6EF18EE4A687363AE5F815431D3A04E4D7FA9B563B0050C054
MD5 SHA1 SHA512 TLSH

Submit Download

0c2475a8-59e5-4f1f-a090-dc41f55f1923.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0c2475a8-59e5-4f1f-a090-dc41f55f1923.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0a587c7b-0737-46fb-95f7-0a815fe269f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0a587c7b-0737-46fb-95f7-0a815fe269f4.tmp
Size 949B
SHA256 deba520a46de6b42d58850eceffd05d49691147ad621831139688f7a626e3dff
MD5 3ab7eba58b8dade6b49f688290891de8
SHA1 cc037cee136560022da299774bbf6421ca3b700f
SHA512 1b273e618e6d4a04c85d47042f8caad2cd96fb39dcce54d59a48f26f1edf85436a915b706b416487eff9df4d45ba5d93639d8c2db4a179f92d5e29efa9149113
TLSH
T176117AF3C3D585AE890116F05A28EE2BDE2D0606821C7C59C9D4EF6B97F3475E1029AB
MD5 SHA1 SHA512 TLSH

Submit Download

322d0e56-6ad7-42f8-b106-74b77edbb6dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\322d0e56-6ad7-42f8-b106-74b77edbb6dc.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

8f71ab84-a9b5-42b8-8759-cb168f349e87.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8f71ab84-a9b5-42b8-8759-cb168f349e87.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 b31155563651f5aadf32ba00fe0b8d9165fcb172ea2f6fdf9a17b1a4b1199a75
MD5 dacd0487d898a41a1480ff0a2499df29
SHA1 a83f660950c2ae7626d892aa54ca32d22654c9a1
SHA512 7561fb21c6f3fc6345d7ce69ae632495e5e34fbaf7e94ea0287d39b5920c83dfac40f826b4d6fd82b9fd697e6f90378a4527b5b06e0d6ba291f1863615fc9e1f
SSDEEP 48:KglEZVnTHIbbebIStIK9N1/IxNYYO/VFyLeZ04WcMFbwX4ISQFK901GFx+VYvws0:KIygK3KmWNKKuIFD6KIAKOhKKKwBk
TLSH
T1A5C10450317B064539FE39989474871A568232B7302AF52BBFBD48928E6FE180DFF4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c128f7b2-db80-4ad3-b83d-112ffaf64d60.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c128f7b2-db80-4ad3-b83d-112ffaf64d60.tmp
Size 9KB
SHA256 58755c8bc2a5e8476cd5b61296a1f9fa43fa6b437cb4ec9b9a94ef46c3e6fdea
MD5 c66593845c85f706dfcd7affd3609e85
SHA1 edde0dbb7770e6b366af12eaa8d81b6f90368629
SHA512 f3c083560c0b1a103fe785a16d2a8286bf6e6a27465f118092621e60a427db5d70e44498175cc6a446b6c7a03da01e9311ca06aff13443ee580559357a679d97
SSDEEP 192:sxZCRdVWn/f3s60IdpdrHW6+WNGYYB1MaoIg5JJ:sxZCUn/f3s6tZHbGf0B
TLSH
T1D822B6127E38A97B8CC7D609BB55BF13E6F9503261901E58EAFC861C04E66CE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d40c6891-de99-4f50-bfac-32952a012348.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d40c6891-de99-4f50-bfac-32952a012348.tmp
Size 10KB
SHA256 4a7e6507e32e5a72bb303d2302b0784d55a832bacb394eb6586fd40f5233213d
MD5 4250c2163de90c2329af2ee219c12fce
SHA1 fe4c8f3e690225f41d844c802e1f49cb7f85faaf
SHA512 d748225a672e51e275b8f4a7fc1562cb07078f38189b5139bf66e0ab2770aaa0c61e4ba000261a26032a7a16a37304d985a3f73483d72943304774f4c0e5c509
SSDEEP 192:sxZCRdVWn/f3sz0IdpHrHW6+WNGYYBQ9aoIg5zJ:sxZCUn/f3sztLHbGfUn
TLSH
T1E022A6127E38A97B9CC7E609BB55BF13E6F9503251901E48EAFC861C05E7ACE124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e6fd6ba-2ca2-42d8-9efa-fc3d195894f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5e6fd6ba-2ca2-42d8-9efa-fc3d195894f4.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

0434f4ca-1ae1-42c5-a967-72854e581fac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0434f4ca-1ae1-42c5-a967-72854e581fac.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7c8373eaf93ba995715235055112246b322acfeb99584b84cfbce9efe41a5b70
MD5 1705e61257afe50cceaa09945663428d
SHA1 5f42286183e9ae89298ce8deb6356cfa6eb3df96
SHA512 65f419eec9abb987f88a825d1081e05d49701f413349ef7f25e7416325cb23931d1508ed6dd97a4bb4dfb64141fe06d4d8af9717141b80e3c911f348168d58a2
TLSH
T151410B58BAFA1148B3777E5A9BF6A46D443ABD772F0AD49D10110D4F0A27B40C9A1B33
MD5 SHA1 SHA512 TLSH

Submit Download