a6c8d4d041e41f0464cda57cb2193a5455a9cafca8c4441533c8071cc872db78

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
65b4f6ba-f69f-43dd-86cc-ef8999befd11.html
Size 495B
Sample261102-petxtahw2x
SHA256 a6c8d4d041e41f0464cda57cb2193a5455a9cafca8c4441533c8071cc872db78
MD5 f41eedd57c98f04adad28931b0898736
SHA1 018d88a8999be6925e9e209d2e58fc64531dfa8b
SHA512 d4bf9eb143794ac3ecb77f1fddaa7c0a8fc8e2b4c8fed21bbc173485480875aed6a6ba397667c1752e51f4eeb9a851be5a668d29b6ad182dcb1cf650a681bd64
TLSH
T113F0272BEC74486A49153B5B5B369778766700A6222DB3AB58A990800580DAC1B85CD6
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3472	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{7805FCEE-34A0-474C-B8F9-0EF413D742CB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4332	msedge.exe
4332	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3280 wrote to memory of 1608	3280	msedge.exe	86
PID 3280 wrote to memory of 3472	3280	msedge.exe	87
PID 3280 wrote to memory of 1512	3280	msedge.exe	88
PID 3280 wrote to memory of 2996	3280	msedge.exe	89
PID 3280 wrote to memory of 1512	3280	msedge.exe	88
PID 3280 wrote to memory of 1512	3280	msedge.exe	88
PID 3280 wrote to memory of 2996	3280	msedge.exe	89
PID 3280 wrote to memory of 1432	3280	msedge.exe	91
PID 3280 wrote to memory of 1432	3280	msedge.exe	91
PID 3280 wrote to memory of 1432	3280	msedge.exe	91
PID 3280 wrote to memory of 2576	3280	msedge.exe	92
PID 3280 wrote to memory of 2576	3280	msedge.exe	92
PID 3280 wrote to memory of 2576	3280	msedge.exe	92
PID 3280 wrote to memory of 5044	3280	msedge.exe	93
PID 3280 wrote to memory of 680	3280	msedge.exe	94
PID 3280 wrote to memory of 5044	3280	msedge.exe	93
PID 3280 wrote to memory of 5044	3280	msedge.exe	93
PID 3280 wrote to memory of 680	3280	msedge.exe	94
PID 3280 wrote to memory of 680	3280	msedge.exe	94
PID 3280 wrote to memory of 3824	3280	msedge.exe	100
PID 3280 wrote to memory of 3824	3280	msedge.exe	100
PID 3280 wrote to memory of 1748	3280	msedge.exe	101
PID 3280 wrote to memory of 1748	3280	msedge.exe	101
PID 3280 wrote to memory of 4404	3280	msedge.exe	103
PID 3280 wrote to memory of 5108	3280	msedge.exe	110
PID 3280 wrote to memory of 2396	3280	msedge.exe	111
PID 3280 wrote to memory of 2432	3280	msedge.exe	112
PID 3280 wrote to memory of 3120	3280	msedge.exe	114
PID 3280 wrote to memory of 3120	3280	msedge.exe	114
PID 3280 wrote to memory of 4332	3280	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\65b4f6ba-f69f-43dd-86cc-ef8999befd11.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x260,0x7fff26ebc188,0x7fff26ebc194,0x7fff26ebc1a0
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,2741090189281248416,7596378204790822548,524288 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,17707444172989823057,11240270153030074423,262144 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2416,i,13745404310573250228,787509111495548481,524288 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,1352278765765462967,13206223589648940308,2097152 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,18339372487384914173,13005302954684596788,2097152 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,7878184357033281709,5232094490482836110,2097152 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,2198682408570815016,3033664811556373982,2097152 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,4334438643815863736,390073774421149357,524288 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,12193523942451899100,69729099412955806,524288 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,8367839760093584915,16145458485006126044,524288 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,8367839760093584915,16145458485006126044,524288 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,16990484706146828796,11568574896053345752,524288 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,10435837879754796587,16810368951882279511,524288 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:8
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4192,i,11086320708091478937,10372482351291376999,524288 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3512,i,11872020928032794207,3546180843890690410,524288 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,16159013056147362852,399631722568210943,262144 --field-trial-handle=2344,i,7782232820493464763,5129185482211720256,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4332

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1f3cde3d-33a2-4b7a-9669-49610ad53fd5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1f3cde3d-33a2-4b7a-9669-49610ad53fd5.tmp
Size 18KB
SHA256 ee76ae24f046ec6aa0782e4bb640c7d84792656d2d9f72cb26b6273f0f1b0285
MD5 f0de344d12efe9f23785c36128313d68
SHA1 8edc916c92f6e3bb88b3c98ea5e1b21160be6eb2
SHA512 c9bfdeab8904f143e40763479bca2c1250611ad3cc6eb8124a39138d02d5176fdb64655b45b158b4472904eae15a38119c9de5241d1c5ad22a39c3290641897f
SSDEEP 384:4QkUSv0sNRUSbLAxb7pRh//p+GqJpH7vBE56IIly:w0h//hypH75E56Lc
TLSH
T190827D31B8A5AC3B4DB39251F14B3A23EF749467DAC95F90D5DDAB1C02CA1DC230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

307e279e-436b-4f36-97e5-1c7e31b8b1b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\307e279e-436b-4f36-97e5-1c7e31b8b1b3.tmp
Size 21KB
SHA256 5ea3e908ce8db708350c6b9178d6ccbe7507b08b8f8aadb5b961d3fd83028863
MD5 5a8124a8e3fe8607ddb8298a36c07f6d
SHA1 a5d9b433e6159d9561de189ce5b7afa5776f9895
SHA512 d3bf31d9b284c708e6fa057d53dc9ea7be9f57c165ec18d0f8b3dcd15bb55cbfe050ce463f10206d73f2a3387ce69b0402cbb24c75279310c9bbaa42b05340d7
SSDEEP 384:iiFzQkUSvozsNS8TUNTUlIlSbLAxb7pRh//p+GqZpH7vBE56IIly:pFdUbwg1//hwpH75E56Lc
TLSH
T184A26B32A894DD3B9DB39A91F14B3A13DFB450A7CAD5AE90E6CD9A1C01CB1DC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4fe36537-dc2e-4a9b-8388-4a542840672f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4fe36537-dc2e-4a9b-8388-4a542840672f.tmp
Size 8KB
SHA256 d8326065d19943b56a874578da1e71baf35ca556c8c9d039c07f02ff70c8b4e1
MD5 543bcaa919224ae817bbdbc05454afad
SHA1 fee1e849ffa022aaf4d2880fb10676dbd50ee5fa
SHA512 93d4f44fcffa874b784247d4ec057178a77118ce5e1a80cc9f1fa5ca552580a7d2df6fb6eedcd28c055e20142e868f1845ac68a816ea553136f7bf85c7ce6ea9
SSDEEP 96:KqONkTQsjpfbUmjH5ih/cIPURHl8h4otop5iaDNNBKP4v+Y1xf//ojd6x/eYzRtS:BONb6JUm0QmiUyPxso//p+8BCkOU6
TLSH
T1C002D838AC68BCBB8DF3AE45B4477B239FA4107B9A955F84DAE81E1C01DB15C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7a2fc0b-85bb-4d38-bbe9-21565670dca8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\e7a2fc0b-85bb-4d38-bbe9-21565670dca8.tmp
Size 105KB
SHA256 1d62e22dec5c299be491cb2f809a917a5b2650bcf6f26d1655b204a91c995427
MD5 a1423f7d471bb13fff5ecfcdaea6454c
SHA1 7ded49e29e2ee4ecada313702dc82cddf87e8600
SHA512 6e90c834830dc60cf4e69d47a842a672355eeac4f32e8a0122d66df5ce75da4ac71274dc3cb208dbb06f3cd4f506485158442b7832ede2cf24ef8c5b26c1705b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7N:fwUQC5VwBIiElEd2K57P7N
TLSH
T119B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

02957daa-6ab9-41f2-8b75-71b8939b71e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\02957daa-6ab9-41f2-8b75-71b8939b71e6.tmp
Size 10KB
SHA256 794b51a676fdcf93132455a0c2992f01f50037a609edeb6d14964cd768c8c79b
MD5 076beff203dcac3df242eeaf3754962d
SHA1 ce44d15be91e03a3b5ad1caeba9575cf9a6d742f
SHA512 cad9d16d90a459c3af175c0302bb5a37a167d58ae817b60d4c70a858e821080b75244e9bc8396a81d26bd263fc9226397af22284080ad694c10c8ac6ca51c00a
SSDEEP 192:sxZeRWWN/fysCYIdpdvHW6+WNGY363Zdz+yIg5fJ:sxZerN/fysCpxHbGX/db
TLSH
T19122C8626E38697B9CC7D209BA16BF53E6F9503251D51E48EAFCCA1C05E66CD120B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

065faeeb-f06c-4afa-8f3f-50973b81e7fe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\065faeeb-f06c-4afa-8f3f-50973b81e7fe.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0c74a2b8-dee8-4719-bb8e-826d38324963.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0c74a2b8-dee8-4719-bb8e-826d38324963.tmp
Size 27KB
SHA256 e1d87708c6a3ef1fe283e3c38af6947be445114f5a4053cb93bc3a03e1f4accf
MD5 820f118c41266c76f7e0502de458fc75
SHA1 5e6b5967aad19b6141d2c5aa8ddb877954b56be2
SHA512 1e05d7bfba2d39fb5ddda9777c498ae0266044ad8fe44a08fc0dd51609e7ae5eed2cb90b5e8946158289493565121b59de51cb5ace487712db9108d8b13849cd
SSDEEP 768:nDKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/AroqZ6:nDKlm7QWvUYe0u1ja8/L/E/Lqg
TLSH
T1E7C2FB3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA91274DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

50a007e7-d363-444b-934f-4903e1db1928.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\50a007e7-d363-444b-934f-4903e1db1928.tmp
Size 10KB
SHA256 eb070cbc3609674b12d85ae067df6cf24a7a4438f71854e4b3ff0b4374b63c40
MD5 2bf715bbddf57a97b8ef706f27113175
SHA1 b24f75c4d1ab5963ca5bc905ccefe971af9aa390
SHA512 5c10fae5f9faafa9ffa4a001b1e227bf5a0fc18b7b00b552cf0f592cba28fde949358ac0a1ef7760db42afbbf7248d6cbc768c9823725dc9c6f8dc43a6731198
SSDEEP 192:sxZeRWWN/fysCYIdpHvHW6+WNGY36pZ+T+yIg5fJ:sxZerN/fysCpPHbGXEdb
TLSH
T19122C952AE38693B9CC7D21DBA16BF53E2F9503291D51E48EAFCCA1C05E66CD120B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8ed27806-3957-4fb4-b86d-fc1f5d2aab86.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8ed27806-3957-4fb4-b86d-fc1f5d2aab86.tmp
Size 9KB
SHA256 cf5a206042b207faaf0c59267ac42940573b487e1fd888fa2be6eb7cafd39e86
MD5 24d44513b8ffe5bf7734cdcdf8601598
SHA1 7c8aa017b99f90a704034d6d96aa5e8fa1bae632
SHA512 e7f64d7edeecf5566017d7ed75a3df2048d6b14fe7d6017d89e3fbc8086673bbf2a767c2acb03c171e194ef46dd11ec1edec2c28d2970fa36cda9b3239f65590
SSDEEP 192:sxZeRWWN/fysDYIdpdvHW6+WNGY36WFz+yIgrJ:sxZerN/fysDpxHbGXsd9
TLSH
T1F822B8526E34A93B8CC7D20EBA26BF53E6F9503261D51E48EAFCD51C05E66DD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 a43af4ad95b31e628ed8e30e4989eb0bc25f15612ca822cec4788b0149803e23
MD5 bacec3ff512dc2bf7bf3a2ac5aac72a9
SHA1 56128edfb22f8582ea954074df6bd395fdf092b8
SHA512 41bce87b53bf6c1094212b4d7b05cae738ee84ac4be06c477c792d05c68e13c3d741e4b7ae47b59c6ad7a5c6fa4afd002ac28cbc4f5b5f7b8148c76ebf374ce9
TLSH
T11551B6F0319341D4F7A54273A3E29597353099A050A70F6230FAF9BA5DC7704D8EB86B
MD5 SHA1 SHA512 TLSH

Submit Download

139c1a63-c4a1-4f07-b4e5-9e408d617187.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\139c1a63-c4a1-4f07-b4e5-9e408d617187.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

7c4b6b60-855b-4875-bd95-41ff4ac906bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7c4b6b60-855b-4875-bd95-41ff4ac906bf.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

ee74b6e9-a124-452d-8d0a-43d60232e43f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ee74b6e9-a124-452d-8d0a-43d60232e43f.tmp
Size 949B
SHA256 a6d971a1353458b7dd52bb068562cf58e5375d12c0a6a09433a0582f16cf3c0d
MD5 b1f8f45e49de5f7bf2286b2d4dbcece5
SHA1 8a8dbb80b658a384816d8cac271ba82822fcc8d0
SHA512 160e7b69d2d21b43f8bfc4e6a0678ddb882352afcd75d21e81d151c827cb0e4c840ede2203382ecb70c8664e8c12214f2e6e0eadac46a18895c997b6f21ff604
TLSH
T154117DF3C3D5856ECD015AF06A28AE1BDE1D0506821C7D19CAD4EF6BD3E3475D00155B
MD5 SHA1 SHA512 TLSH

Submit Download

f898408f-cd2f-4e9b-ab3c-2c92bf37caca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f898408f-cd2f-4e9b-ab3c-2c92bf37caca.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a60270f8bbc35913607e7f142cd7b81c1d7d8c86ec65be53ef384f8daa0c4be9
MD5 340d72468a471c58f3370e025f4a5daa
SHA1 d0a1119c5ab0d001ad9202d98a18694c86d60983
SHA512 653c7228507717f51654e4905a73fef99e5ca9a708836c9de6f7084488f7d5f0755752a1f87597b0725b6cdf34d2fe4378616ce8c3bd2357494682bda9bbad82
SSDEEP 48:K08i8t8w8c8i8A8g8xb888L8sIS808xK98418C8xx868hY8j808g8SyLgvmqwaOs:KMkQKxKqG3OKMMLtSKukSd
TLSH
T1F591B26170AB160539BD78885375862A464231F37418F92F7FBD84E39E2BE009EFD9D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c20208b2-d3d6-4438-aeda-c674f292e305.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c20208b2-d3d6-4438-aeda-c674f292e305.tmp
Size 10KB
SHA256 b09039780280d27df747137c2c03ac9d3043d31eb67d82e723e02d96b90555ba
MD5 2d3fafeafdcc323619b34250865004eb
SHA1 57e0b688313d1d7ecf119e7a9a900ddbe6d657b0
SHA512 8a0b8df63108e178523025c2bab7cefd796f8d9ee798ab4a4ddd6a7c312176d58144d569a840d139e35aa6c8bafbd42fef44c8fc4a795e5a7cb78eb2089c0624
SSDEEP 192:sxZeRWWN/fysRYIdpdvHW6+WNGY36WFz+yIg51J:sxZerN/fysRpxHbGXsd1
TLSH
T18822C952AE38693B8CC7D20EBA16BF53E6F9503251D51E48EAFCD51C05E66CD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f520543a-211b-4ffe-a6e0-b97bff4bc4bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f520543a-211b-4ffe-a6e0-b97bff4bc4bf.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

3428c0c1-7244-476b-b8a6-2f6e565a558b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3428c0c1-7244-476b-b8a6-2f6e565a558b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

e0f36d5f-3c1d-4de3-997f-01c8160787b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e0f36d5f-3c1d-4de3-997f-01c8160787b0.tmp
Size 18KB
SHA256 3f6c4065805b3b7d002e55c84e6c1ddf6b44c018dd630684da888af8fd63d984
MD5 f9cd38db7684ebf837c91f3140075501
SHA1 d7f1c3a0369b30a209da93bc802a5c8dd97dc35d
SHA512 aa0b3473cdb3b8b6d81eaafa51bee7face6c4155e8937abd0f136175080ae228a1b7d0bd91288f38c7d91a935bad7fe52288127cf6e0bfd5c6f1c629637aaf03
SSDEEP 384:uQkUSv0sNRUFbLAxb7pRh//p+GqJpH7vBE56IIly:e0c//hypH75E56Lc
TLSH
T1CE827E31B8A5AC3B4DB39251F14B3A23EF749467DAC95F90D5DDAB1C02CA1DC230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb10498a-4bd2-419e-907b-77935b002ae0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\eb10498a-4bd2-419e-907b-77935b002ae0.tmp
Size 8KB
SHA256 3d2c8e28fef092954e99a4a268be4e1f74d28c663796b5bfe8631e9e4a88d3a1
MD5 3af989b8afce6886596d7948dc1954c9
SHA1 087ee64ffdbd9b0d1633d72c400f6a56812f8b3f
SHA512 b5a89188f050aae2cfd8831992eb90c4ecbe2bc16690042f36f79eb402d624b13f0e57b635ec4a52e35afb6b430032f9c522f90caca4deb49fdd2b64add32ea2
SSDEEP 96:9qONkrQsjpfbU2H5ih/cIPURHl8h4otop5iXDNNBTP4v+Y1xf//ojd6x/eYzRtIG:0OND6JUtQmiUyoxjo//p+GqLmNxkqPU6
TLSH
T17C120835A868EC3B5DA39591F0433A239F644067DB89AF94D6DC6F2C06DF1AC530B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f888aecd-13da-4c1a-be25-90bbfa45949c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f888aecd-13da-4c1a-be25-90bbfa45949c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e38186c3186bde7306c770d3c591d26d1feeaef63bcf5db8740f081965af0f4b
MD5 e410990d234b207d66f61ee184a67ace
SHA1 208dbd26b591754da2c8ecabbaa383b7190ea881
SHA512 e2641c36dcb53e54b0452c43107efa35572ec951a8d0b64df1f162db3d17cc9339353e3fec0e1f30b987bd398904d18595a4f8dbb7b8ba74c4fa86f760533596
TLSH
T165412B6CB6E91108B3776E1A9BF7642E487F79271F0B855D00110E9F0B62E40CC61737
MD5 SHA1 SHA512 TLSH

Submit Download