299ff84d892d0634a09e0faa07eddc3ef1bbb0e9e8c81b56310b165ff158e18d

Analysis

max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
portfolio-1.html
Size 4KB
Sample261102-phr8dsbz2j
SHA256 299ff84d892d0634a09e0faa07eddc3ef1bbb0e9e8c81b56310b165ff158e18d
MD5 dda9e9562d0f2d0b13aad8a4d24d9ef3
SHA1 25faac8910e161f2d34de8e1acd1f6877f49ca0c
SHA512 29fe42c9f956a4020ef9f3daae18932de2bd3fe8f4d26d473e48b5c62f76f3ec122fc1eb5da699fc424113bc08d965a49f64e9711df390974543be9b019e1f2a
SSDEEP 48:4ztj29McaK5/VsUGo8pfw7y/WobuS6ykaHHW:4x2LRVV585wWOobuS6ykaHHW
TLSH
T1D391662128D4683346B786880E315F1AFFD6A247D61AAB5232FD67CB1FB7D15CC0350A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2024	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{D9D5EBF0-CFB4-484E-A2ED-2E2FABF19E98}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2452	msedge.exe
2452	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1580 wrote to memory of 4560	1580	msedge.exe	83
PID 1580 wrote to memory of 2412	1580	msedge.exe	84
PID 1580 wrote to memory of 2024	1580	msedge.exe	85
PID 1580 wrote to memory of 2412	1580	msedge.exe	84
PID 1580 wrote to memory of 2412	1580	msedge.exe	84
PID 1580 wrote to memory of 972	1580	msedge.exe	87
PID 1580 wrote to memory of 972	1580	msedge.exe	87
PID 1580 wrote to memory of 3944	1580	msedge.exe	89
PID 1580 wrote to memory of 3944	1580	msedge.exe	89
PID 1580 wrote to memory of 3944	1580	msedge.exe	89
PID 1580 wrote to memory of 3504	1580	msedge.exe	88
PID 1580 wrote to memory of 3504	1580	msedge.exe	88
PID 1580 wrote to memory of 3504	1580	msedge.exe	88
PID 1580 wrote to memory of 920	1580	msedge.exe	90
PID 1580 wrote to memory of 920	1580	msedge.exe	90
PID 1580 wrote to memory of 1652	1580	msedge.exe	91
PID 1580 wrote to memory of 920	1580	msedge.exe	90
PID 1580 wrote to memory of 1652	1580	msedge.exe	91
PID 1580 wrote to memory of 1652	1580	msedge.exe	91
PID 1580 wrote to memory of 2012	1580	msedge.exe	95
PID 1580 wrote to memory of 496	1580	msedge.exe	96
PID 1580 wrote to memory of 2012	1580	msedge.exe	95
PID 1580 wrote to memory of 496	1580	msedge.exe	96
PID 1580 wrote to memory of 2144	1580	msedge.exe	100
PID 1580 wrote to memory of 4896	1580	msedge.exe	107
PID 1580 wrote to memory of 4464	1580	msedge.exe	108
PID 1580 wrote to memory of 4412	1580	msedge.exe	109
PID 1580 wrote to memory of 1572	1580	msedge.exe	111
PID 1580 wrote to memory of 1572	1580	msedge.exe	111
PID 1580 wrote to memory of 4416	1580	msedge.exe	112
PID 1580 wrote to memory of 4416	1580	msedge.exe	112
PID 1580 wrote to memory of 2452	1580	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\portfolio-1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff8597c188,0x7fff8597c194,0x7fff8597c1a0
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,17832189665086074946,18361599801563138829,262144 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,8342290135391867051,8734586590086672674,524288 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,14708962665665612370,13157708621312687639,524288 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,12861778640506610451,11505981380977483273,2097152 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,11646623048070818275,12563106518073982771,2097152 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,3027868774137514062,4510014980052245251,2097152 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4164,i,6219012992657513655,17780399791373875676,2097152 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:2
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,6884090701018528762,9588855875804718790,524288 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,17005724918256080098,11908232958867384409,524288 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,12087488636765394426,16541447169555234048,524288 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,12087488636765394426,16541447169555234048,524288 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,14620117348588671408,15557658056874857361,524288 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4616,i,404473135374196538,2506400263895696621,524288 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4200,i,1149534263795034330,18026196465398927472,524288 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2848,i,9325494476524655125,11509237613937514912,524288 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:8
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6456,i,6128537484044854160,5312048959336245293,524288 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=1032 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5348,i,15513618832441942505,12216764431846281161,262144 --field-trial-handle=2264,i,3444830610557066691,13256638958174191712,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2452

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1864

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

58c84aa9-c28a-4112-9ec4-a9efb7595e0c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\58c84aa9-c28a-4112-9ec4-a9efb7595e0c.tmp
Size 8KB
SHA256 209300c7970fbe303bd7e86a9b8b8d988313ffc6db426a808b9d323188a6cd15
MD5 a8e87cdab1c293975121fb749b98af55
SHA1 e1cedf08cd9a5e2f78069bf1e00860757be2c896
SHA512 aeb689e153a9f18ee56b55ea783574571c5f1e4cca3f2bc82f86e4655e2369ecca57eba621104b5f81565079f64b30dde63c41507c6fba78d985c4901e0a5520
SSDEEP 96:PqONkjQsjpfwDISp5ih/cIPURHl8h4otop5XmDiBfPGxvw45RxmJm78lFLxT+Xkj:SONj6iDCQmiUywiHq5u88PIUSqkHiU6
TLSH
T1F102F9396C787CABAEF3AD05B5873B175FA4112FE6952F84C9E85A2C40DB29C1307523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b61ca08-23dd-467a-bcf7-03a46dd8ec6d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7b61ca08-23dd-467a-bcf7-03a46dd8ec6d.tmp
Size 21KB
SHA256 a4c43d68fef91b944f4847bfb2ef855fbc98db9d0521656d91fefb6061d2d5dd
MD5 90976ef3aebe43d85a3e9e02d163fec3
SHA1 26192fda0efd60e5cf7a0ff69997e71a6613b3bf
SHA512 d52653748f00f1bb8e8e31ce566b1dcdd4ee247aebaebd9207fa65f464169ed9b78e0c6aed12ef947ae99eaa458b344bffcfe4eedf976648598b687209056eb1
SSDEEP 384:BiFzQkUSvnzsNh8TUNTUlIlFEedoqp5u8iI23vIH7vBE7dIIld:oFdz4wg09IkIwIH75ExLP
TLSH
T15CA26C3358A89D3FAEF39A51F64A3A03DEB44157C6D5AB90E6DD992C00DB1DC130BE12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

67c9deea-f5c5-4b78-9765-a18886cf3f3b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\67c9deea-f5c5-4b78-9765-a18886cf3f3b.tmp
Size 10KB
SHA256 85cfd001b0fde9f08c33147e8c8cfdac4b53a43c3db020f10c87167647b33745
MD5 08e7b30976ebb0607d389a41c528c73c
SHA1 ba7224d6414297471d2244989a0414166a6f878d
SHA512 45c46539908dbe5e46e9cb812b71c029d68cbf22b491a7097397ef3f750d58b6133233696ec73a2b2fec375b59b67fdaeacb4b1cf4d59e0dd3043d5634d35d2d
SSDEEP 192:sxZyR9WB/fIsBfMhUIdpdFHW6+WNGYaKKrYIg5ZJ:sxZyGB/fIsBfMhNbHbG4d
TLSH
T14822D9616E28A97B8CC7E24DBB15BF43E6F9503291D11E48A6FCCA2C15E7ACD124740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76ebddf3-f5be-486d-99e3-0a643f34d064.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\76ebddf3-f5be-486d-99e3-0a643f34d064.tmp
Size 9KB
SHA256 96653a5d6da379eac5a8c887bf66fccb34f6c870f160b9919b15e0486026be32
MD5 9fc3ec786a6e5681693ecb3908d733e4
SHA1 387b38ba95d8afd24c1c4c84cf8552364cd1f8c2
SHA512 20587d5704399cd02c3081df78fa75b6cd3fe7adf02122891b6fe714c1f0c124e7f1e57377585a589244e9605732e11980e5e39655659620af0a640ada1b11ad
SSDEEP 192:sxZyR9WB/fIsbhUIdpdFHW6+WNGYaJurYIgrJ:sxZyGB/fIsbhNbHbGF9
TLSH
T13622C9616E28A97B8CC7D20DBB15BF43E6F9503291D51E48E6FC992C04E7ADD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80883109-e5f6-4a01-bdd2-31ed99884d05.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\80883109-e5f6-4a01-bdd2-31ed99884d05.tmp
Size 9KB
SHA256 ef755a303d8b9416867152547fc8e33d1c4e346e4e7a323c4ed31d0a4c234a47
MD5 ff06a8001ebf061e3a58eef10a89a69d
SHA1 ba06fb0edd1c1da71ae1abe624f6cbc1ea121e7c
SHA512 4f7ca05132b620995cdf9ea316bd4e26b4c79170b292d5aa4ebee56c2e4165e032721733e1f9d0224fbd57c673ac8da61fc5042b310abf769ead9fa001da8af2
SSDEEP 192:sxZyR9WB/fIsEhUIdpdFHW6+WNGYaJurYIg57J:sxZyGB/fIsEhNbHbGFb
TLSH
T10122C9616E28A97B8CC7D20DBB15BF43E6F9503291D11E48E6FC992C04E76DD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8dacf7d6-cae6-4c79-9088-6d6e31863195.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8dacf7d6-cae6-4c79-9088-6d6e31863195.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96f4c319-7303-4ec3-9bcc-00ebd0c67de0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\96f4c319-7303-4ec3-9bcc-00ebd0c67de0.tmp
Size 10KB
SHA256 b4d57899a98c19339a967ed8b87f8cc8130dcb48b456f6c1823e735649028aff
MD5 1d6b7e6a1fa0ce972ca9548298ad0b0a
SHA1 07a8f45ec77c7bd354d8561f4b0fa63bae2d49ab
SHA512 4fb2db071e5ce6fba3239226ccc203107ff35780e03a0f249be3c8bc1b8d9029b75db14c570d5cce37baf5b3dbdfd7e0853797b5114b30a3a3178ac63320343d
SSDEEP 192:sxZyR9WB/fIsBfMhUIdpHFHW6+WNGYajRrYIg5ZJ:sxZyGB/fIsBfMhNlHbGyd
TLSH
T1EF22D9616E28697B8CC7D24DBB15BF43E6F9503291D11E48AAFC8A2C15E7ACD124740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 108614cff09824b42196a34ff7d547631d9924b517937ff361838c196d6aeb2b
MD5 e2822fe075f64d5ff377cab5741420f5
SHA1 14f85507e91b3068e53b63a9a1453c0592229dda
SHA512 99e3040fc52fe3967720fab7c8429083dfcd86c81cdf0a978f815b3262c6b4dd1dd344a91757e97be7d698e6e0b1aebc8464e07b407dc6440ee2712e28063fbd
TLSH
T1A8E026CEC5C9C32EA30C647701B86B4CCAA13F1FD7C46E8E1784C485B203454A2866B0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 45269e0e1b395c53c7e67946a6491fc344d235234b62593cba9d16974305dfd8
MD5 4b847c9a821e729f1bbbbbde5be4c62f
SHA1 607ca7821e7f0ca6bc5ca37f38bb4399a7d495b6
SHA512 5c9c6d3a839c7683fd7868697a757d73a33c4498b83c6b2e7668eaf52618d00b1eab189c2f6b3e36bb94a73eca70fa6907e7911e55f560b1aac68cfe64e8ba7e
TLSH
T143614E8458520C11FBAC91BCB3CF75CB32B45BB191A30E114FDAD8A5AB36F1B60140EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b506e732fc2e29a8f81da3d7660677de305259f638a73960f3451bf8186e6834
MD5 9dc37c8255fa994fe48e64a377d53eb1
SHA1 8775ddeeddd6d8f271cc99599bf19c706c1c56cd
SHA512 ef84565e610e39a4a7356e21e2317c7e8ac84f6bcbce2c507153622abc94740bab484c983774c702668807f25a537190734db40d7cfcc7f68aace62483a4defc
TLSH
T1AC614E8459420C11FBAC917CB3CF75CB32B45BB191A30E114FDAD8A5AB36F1B60140EC
MD5 SHA1 SHA512 TLSH

Submit Download

be405122-284c-4bb4-a932-f1c7ca84c3ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\be405122-284c-4bb4-a932-f1c7ca84c3ab.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4fb6ed1f-d316-4920-b8da-86df9258cfc8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4fb6ed1f-d316-4920-b8da-86df9258cfc8.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

626279cc-01aa-47ca-93cc-875af4cb4284.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\626279cc-01aa-47ca-93cc-875af4cb4284.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

fff31ce0-2d82-413a-b7c1-f658ece544dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fff31ce0-2d82-413a-b7c1-f658ece544dc.tmp
Size 949B
SHA256 ce49e47654de58551cd881afa008075cb8949b039ad9262ee6a6552314a86508
MD5 82e10f6b70c646fca61c0dbbda12fdb2
SHA1 80244e8e7909de01de94ef04d284dbb84ac94e5d
SHA512 d648718caa6d9c574a55ee1bf06f3481ebd1ddae4ed8d0afcf140ad55b359dc193137877bda76e0df8db9f17e1874baadeee0577634d3809cc18548f58feb99c
TLSH
T11A117AB3C7E5856E8D1156F05A24EE2FDE2D0606821C7C1989D4EF2B93E3475E00299F
MD5 SHA1 SHA512 TLSH

Submit Download

c693399b-e080-4962-9c10-5bddc178da75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c693399b-e080-4962-9c10-5bddc178da75.tmp
Size 27KB
SHA256 e5c53fa3776e8e936adf632bd7c3abee103b6860011393cc163811124fe084c2
MD5 ff1ce7abeaff5e0a6b31546054626de3
SHA1 da3406134742063d453f4085e741adeb40036b0a
SHA512 88f8e7b3fcb6ff9504c72cc53e5113245914f1578377c015c02389d71083420632b9e28a2620c29fcf2139748fe51a2875b5b182f7b6a41ce8776b7f1c697128
SSDEEP 768:ZWyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3qroMZcP:ZWyQRbrWvvlpZu1jaXKLf33BMZcP
TLSH
T1E2C2E92F640CCB7E5FC01E9DDC666F976EA802C766688D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0da9f695-d62e-48f8-916d-0132051b6619.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0da9f695-d62e-48f8-916d-0132051b6619.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9efb68ea9952485c1bb8e0e96edcacebecb4d56abec4fefceb579a66a59fb6ff
MD5 6de6429d4b624373a8d5247dd8101990
SHA1 0c4c16a6342a4b86b4507f35fd61431728edefe0
SHA512 8d96bbafee4976203d38685076f1b4d631a910a97719a37087d061a19a28b0016d834f05046a7af23b8d5b95c051db277d7a3b33c63c091d10c8ad69fcd2ef68
SSDEEP 192:6ONC6iDyQmiUy/i2q5u88PI2mKWNuZbqXU6:6ONC67R2q5u8iI23BIU6
TLSH
T1A3122C3668787C2B6DE3A851B5873A178EA5422BEBC87FC4D5EC562C41EF29C1307613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c75b54c6-8638-4a48-85df-abf1d7bda3ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c75b54c6-8638-4a48-85df-abf1d7bda3ea.tmp
Size 18KB
SHA256 f40a41f37d82caeebf29b90e7f3da706d45cefddfd0d810b85f54bfe9a1e69cc
MD5 f8518e2a705323eb9015ffe368b2aa96
SHA1 194a6befc16351afcb996c7ba5b0df776b258796
SHA512 df7f4c631243da0b3b73f64be9ed9a51bd0500ea253920ab645220397e17765a66d9fd0090ab9f8217709b0f4b12ed1ba7677d4f985abae659d8281db2fca9d3
SSDEEP 384:sQkUSv0sN/FEedoqp5u8iI23iIH7vBE7dIIld:s0J9IkInIH75ExLP
TLSH
T199827D3568786C3B59E3A511F24A3A13DEB4811BD7D82B94D5DD9B2C00DE2DD230BA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce66f10d-5e71-4b32-94de-7372c3fffa52.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ce66f10d-5e71-4b32-94de-7372c3fffa52.tmp
Size 18KB
SHA256 b344e39c4b9a10909ae5eb65d5bc67601b677c53b216718464630981dd0093fc
MD5 eea2d52300819c6dd1ba0bc2bbdfbcd8
SHA1 5c2903a9ba2480533fb2790f66e9ceeedf96a6d7
SHA512 27ebb178a41dcffd74e1364c644de948b19178c87182b223c66387b92e035a24acec0f040977024a207ed5eca93fdda513b20d1490b8b84c6803b63129f6bcaa
SSDEEP 384:6QkUSv0sN/WEedoqp5u8iI23iIH7vBE7dIIld:i0M9IkInIH75ExLP
TLSH
T11F826D36A8786C3B59E39511F14B3A13DEB4811BD7D86B94D5DD9B2C00DE2DD230BA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

85dee9ba-b1ee-40e4-b50a-41f3276d20e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\85dee9ba-b1ee-40e4-b50a-41f3276d20e5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 84b14dfc6e8c8c59dbd62ad46d04f3e41bf66bd8811ac632983b3e11ca23ab40
MD5 0360a8cb5cb02d8f27e9c190eb746ad1
SHA1 c0fec894c37255efa4ba624b0e4626e6e8705fd3
SHA512 6771fca57e40581268e24266413a446b231259b5566f0831870e9964119ea2e27b33732a21285a07ca3368065500021b2cca90981b1a6a0a4d7275e695dc7f1d
TLSH
T18E415D59AAED1018B3B77F5A9BF6686D487A7D772F06D46E00110D4F0A23F00C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download