ee7e8891d4f1b7ba2f3df2bce206f7b5e677c75207ab27f8d16f287f6a9e4eec

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 12:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 46KB
Sample261102-pj2s8attat
SHA256 ee7e8891d4f1b7ba2f3df2bce206f7b5e677c75207ab27f8d16f287f6a9e4eec
MD5 28b179e9c28c7c464ef6fbc2659c3ca3
SHA1 c0fdb64607c7c1bec375690ad1f5696a44edf801
SHA512 af48f8d398066231b92e6904758f4ba515fbf70a8d9c245d2abc5754625f3e82cffec82017e0eda27b120939b5ca842ef2792be3f51681773d4736f5de4636ce
SSDEEP 768:jPWHz/xXiK8FZFUvGgmykSke7l5oUinW0R/Q0olukrBrUZRBxbJXLIQmOK4ROE:7El0h40uTE
TLSH
T12B23D673658C603A322B8353A4E0B7ADF969C502CB334959F5BC77AA8FE7D425933214
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4536	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{57BCD91D-1CED-47E1-820C-3F32774FD218}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2744	msedge.exe
2744	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe
4036	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4036 wrote to memory of 2600	4036	msedge.exe	86
PID 4036 wrote to memory of 4536	4036	msedge.exe	87
PID 4036 wrote to memory of 1276	4036	msedge.exe	88
PID 4036 wrote to memory of 1276	4036	msedge.exe	88
PID 4036 wrote to memory of 1276	4036	msedge.exe	88
PID 4036 wrote to memory of 4516	4036	msedge.exe	89
PID 4036 wrote to memory of 4516	4036	msedge.exe	89
PID 4036 wrote to memory of 3952	4036	msedge.exe	90
PID 4036 wrote to memory of 1728	4036	msedge.exe	91
PID 4036 wrote to memory of 3952	4036	msedge.exe	90
PID 4036 wrote to memory of 3952	4036	msedge.exe	90
PID 4036 wrote to memory of 1728	4036	msedge.exe	91
PID 4036 wrote to memory of 1728	4036	msedge.exe	91
PID 4036 wrote to memory of 3284	4036	msedge.exe	92
PID 4036 wrote to memory of 3284	4036	msedge.exe	92
PID 4036 wrote to memory of 3284	4036	msedge.exe	92
PID 4036 wrote to memory of 4324	4036	msedge.exe	93
PID 4036 wrote to memory of 4324	4036	msedge.exe	93
PID 4036 wrote to memory of 4324	4036	msedge.exe	93
PID 4036 wrote to memory of 1916	4036	msedge.exe	98
PID 4036 wrote to memory of 1916	4036	msedge.exe	98
PID 4036 wrote to memory of 1164	4036	msedge.exe	99
PID 4036 wrote to memory of 1164	4036	msedge.exe	99
PID 4036 wrote to memory of 3928	4036	msedge.exe	103
PID 4036 wrote to memory of 4420	4036	msedge.exe	112
PID 4036 wrote to memory of 2320	4036	msedge.exe	113
PID 4036 wrote to memory of 3468	4036	msedge.exe	114
PID 4036 wrote to memory of 4324	4036	msedge.exe	116
PID 4036 wrote to memory of 4324	4036	msedge.exe	116
PID 4036 wrote to memory of 2744	4036	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ff85e7fc188,0x7ff85e7fc194,0x7ff85e7fc1a0
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,14564399645099712259,13148192539486966347,524288 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,8199376145555719996,14571453343126274501,262144 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,15517439241234956896,4798389561130852987,524288 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,3538775334200072401,4497477355108014925,2097152 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,12766707147530415089,11066120540087635558,2097152 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,14767673424630203951,13596253745530680754,2097152 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,1660582909732342939,5030234554542481978,2097152 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:2
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,13762587054888920009,8426702566682876150,524288 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,3511054169516372763,7437370559416171685,524288 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,2274868919588543945,6730034740457747389,524288 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,2274868919588543945,6730034740457747389,524288 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,7975348394837771194,3579123485669799072,524288 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3684,i,14107619302997110649,11711943007159329327,524288 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2452,i,16164895846895611592,18101335744420246167,524288 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,9963088587634039425,4099174109396710102,524288 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,2196563009135663816,4027197185959131479,262144 --field-trial-handle=2248,i,1049713684552657745,8773697241397280209,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2744

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3824

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0f47be82-afe6-4d3f-ac81-fe5397aa7b1c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0f47be82-afe6-4d3f-ac81-fe5397aa7b1c.tmp
Size 21KB
SHA256 bd82f1bb9b405cf75b5e14573324bde04feb46b2c730949f80b51061aeea2925
MD5 2c155afa91d57aa271009b2c0ce2e5b8
SHA1 f22867d9ff5f58a5af55f574aa752a54d7d938a3
SHA512 b0a2d4698b631c6c23a34cff7102af60063fea53c0ace74ec3c2d764de06f960631dd9f262be388bf72cf709cac2015286e9109723cb3e95db8b4ef2cdb0444d
SSDEEP 384:ViFzQkUSvSzsNK8TUNTUlIlysPh1D3liazIGmAs8PDX+YKWiAH7vBEkCIIlb:cFd6rwg12cLlLZtiAH75EPLZ
TLSH
T141A26D739CA8AD3B5EF39A44E10A3913DEF4816BC9D5BB50E6D99F1C00CA29C134AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

24613250-ce4d-465a-822e-bd729177f103.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\24613250-ce4d-465a-822e-bd729177f103.tmp
Size 8KB
SHA256 b2684d510981b267e960d1f31e49166241dcfbdbe3526207e32bd94b7ea542a7
MD5 03a0e12bdc07da745989e2c525fd96a9
SHA1 8c21d0f4d0df0532446e27eeca6feca4b2b11cad
SHA512 88647f8bbf4cab370e9c2c31811ac2e3856f091acc5fde16c0b901f9d516a02ba331885cb7d81d085e555acb0f6dd8c0357e43e7cac11d1cd290bf0a6a0788f7
SSDEEP 192:aONj6IE7QmiUyEJTPuIGmAcjzor5RZSC7sMeeU6:aONj6Dt7PuIGmAs8RsTeU6
TLSH
T1F502FB35AC787C6B9FF3AD09B4873A239FA5102BE6952F54DAE81B1D00DB24C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d138b29-d565-4502-b723-a03c3158689d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4d138b29-d565-4502-b723-a03c3158689d.tmp
Size 18KB
SHA256 38d84b156b315fc034066db799a39403452047d19e9fa401ac20c6c4ee41615d
MD5 169c4951e2c3e1b2d9dc386827068671
SHA1 e92d765c35dd2a46e5b8d686f601c0f061b76afa
SHA512 af7a4669bb5592dc6be50978dc31ee8ece2e4619637b24bbe58444675125c74821899b7353786c1f9bca4b8fdacae42a4c90e1fae7a9d897059388aed2dfc4ae
SSDEEP 384:CQkUSv0sNybsPh1D3liazIGmAs8PDX+8CiAH7vBEkCIIlb:60i2cLlLgiAH75EPLZ
TLSH
T141827E72EC787C2B5EE3A504E14A3923DFB4D11BD6D86B50D9DD9B1C00CE39C234A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5756961c-dc5c-4d4c-b86a-e01d0c3726a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5756961c-dc5c-4d4c-b86a-e01d0c3726a9.tmp
Size 18KB
SHA256 9e4814476bc4a0bca61ce650d822227c022ec0130d2de61514492dfafb0c3d0d
MD5 b070261783c4d22f6361dc98a898221a
SHA1 959cd8e24e9a1b656bf09dc35759a492655f6191
SHA512 45a669600203a46cf531857da21c04d5b04b9933e1f1f1ca0a68aacda563ec641879b879059e464bce892bdd0917142c0b468636c0225c9d6174f0cc1056a8f0
SSDEEP 384:gQkUSv0sNyysPh1D3liazIGmAs8PDX+8CiAH7vBEkCIIlb:I0J2cLlLgiAH75EPLZ
TLSH
T175826E72EC796C2B5EE3A504E14A3923EFB4D11BD6D86B50D9DD9B1C00CE39C234AA16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

020bda84-d437-428e-8e7a-2b3b024fb897.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\020bda84-d437-428e-8e7a-2b3b024fb897.tmp
Size 9KB
SHA256 28de41aaba60521ab2c2ed8f36af49d98b7956daca91c1b2e18d6ec249f8d248
MD5 32ea634a17a202b89e5653e32b5630de
SHA1 008b87f9e0d78b4e46357e2ccf4285e2f5ee49f4
SHA512 4a4fa15213c00c83fb94351249b26d92d116c687979b6ff5175a8525136cf197f424f508c48124afd58d9fa213b4bbf99a71601fd2ac8a2dce31f777b2c8d6b5
SSDEEP 192:sxZdR1Wo/fcsbK5MIdpd0HW6+WNGYaplx2zIg5oJ:sxZdOo/fcsbKTOHbGWu
TLSH
T1D922B8526E28697B8CC7D20EBB65BF63D6F9503291D42E48EAFC861C04E76DD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

07d7c293-4f18-4368-ba2e-930343a5a9f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\07d7c293-4f18-4368-ba2e-930343a5a9f6.tmp
Size 27KB
SHA256 3efa40f8342f79f799878f99ee90d015935cb5d812d41546183219bc2fb32706
MD5 58748bc3cb54517b09017ed88cefb823
SHA1 b71604ad0fcd03f41d3eb36eeccb22d4d9378054
SHA512 6a8caa89e2a7bf2d2c6370a1cbf73142fd353492c1483d1d980d1334574acc53caf7fe9b1c0fde8973e74cd1ed238e4180e2f761f0b7eaeba8704fcd18e3e5cc
SSDEEP 768:WeWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy71ro4cfejmRJ:WeWPcLKWvKeEeu1jaClLiF7O4cWjmRJ
TLSH
T17BC2FA3B640CCB7E4FC01E9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29dfb26c-e094-41c0-ba23-f570a2297da1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\29dfb26c-e094-41c0-ba23-f570a2297da1.tmp
Size 10KB
SHA256 8b03cc1cc24e9a784b39b459daa51ad36d7c7e4b07ce9180415d87607524e247
MD5 75f8be21e3a68a64ab82823e87e823d8
SHA1 23835f3fbb07d7dafd7ea38f3d7700cbaa67a8e0
SHA512 07f2f6cf724d6a755d59f0ba33aad3d33af0be728dc510e6fd618d91df44746998138dca53ef0577e34dafe2909a6bcd0fa291e7f1a9bd7deaa275b044991f00
SSDEEP 192:sxZdR1Wo/fcsbO5MIdpH0HW6+WNGYap2nAo2zIg5KJ:sxZdOo/fcsbOTUHbGMnYc
TLSH
T14E22C8526E38693B8CC7E20DBB65BF23E6F9503291902E48AAFC861C05E77DD124740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7819fe74-8aac-4f0e-b6e3-0efbb15a18f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7819fe74-8aac-4f0e-b6e3-0efbb15a18f7.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

92dc740f-9cc4-4340-aed6-66b811ce9f1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\92dc740f-9cc4-4340-aed6-66b811ce9f1e.tmp
Size 10KB
SHA256 6216f59315cb83c77f107f4651657587c5de310d531a4c1590e65194754e7a82
MD5 262f7b8532033880d749c500aada0b9a
SHA1 2a5dbf47831d53cda5a318da482a03e06cbcb545
SHA512 c7de71197afb4ba92cd2ab1cd02397108e0244c7712342848e789a6ccfe7ff3cddd1a61fc1da954c6ffc85aaa9191f26ebf8cf755b73724c8d54342838003da8
SSDEEP 192:sxZdR1Wo/fcsbO5MIdpd0HW6+WNGYapbA32zIg5KJ:sxZdOo/fcsbOTOHbGlpc
TLSH
T18822C9126E28697B9CC7E20DBB65BF13E6F9503291902E48AAFC861C05E77CD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

99398672-c1da-4591-a6bd-6bba8e6cbf9e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\99398672-c1da-4591-a6bd-6bba8e6cbf9e.tmp
Size 9KB
SHA256 64df68a4f7bbc4da9e17cf8628e75dcb6a9bdb048d0e59bc2ddc69a9c5d457d2
MD5 e4dedc4698c39d57f65b5658eca1e6fc
SHA1 5e295fbabc0a40fd9f8e97f742004612e916bad2
SHA512 3bce39c976b9edde3486700f7f71af02407f62de20617bed0954ba2431697dcf6d890ef38cd542e071f4e1b9b75a785147ad9cb673d89a53a6888c1e6ec84796
SSDEEP 192:sxZdR1Wo/fcssK5MIdpd0HW6+WNGYaplx2zIgrJ:sxZdOo/fcssKTOHbGW9
TLSH
T17D22B8526E28A53B8CC7D20EBA65BF63D6F9503291D42E48EAFC861C04E76DD124740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 47ae7570ed99ae4ebeaafcf5aa9956920d154dc78477c56d2c0d4385ea8a8a09
MD5 675d61c5dc329a895056b8c5c21c7a46
SHA1 0a2c7963a7c24f8446d7de8df29c714e8bf36293
SHA512 dca077934a8be82af60bcbb2d289aeb831848a1ada05a30828747cb3898926d475d0a038aa0463eba6d88f60c98fad7487be34938168b6b13cb976f66806cafe
TLSH
T19B51D8845AA4A070F7A4797992D0128F3E36E9CC86DF2DD10168C4B8FC4E39D838007C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 d4c89ae5b8ef7723e1905d210c8fa39e9b19de131dfa7703a0441eb9c5d74d2d
MD5 5aee7850b2b3fa7d39238d013ef6f9a8
SHA1 7584aa2c2b34e405d733f27f404537a8d29e6c78
SHA512 746df2d5eed5bab19a0fd871ee6fe4eed295fb8ea8504dcb410e00a22325e18aa3448a4601c7c5c722804e6f1847af297ada7126dad7480016e66106e11a1443
TLSH
T1FC51B8445A95E070F7A4797992E5128F3E36A9CC8ADF2DD51168C4B9FC4E35D93C007C
MD5 SHA1 SHA512 TLSH

Submit Download

350fad2b-5619-43e8-bb1d-32b8863cec7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\350fad2b-5619-43e8-bb1d-32b8863cec7d.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a6f9cd9-854d-4793-9ada-f176d827a38b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7a6f9cd9-854d-4793-9ada-f176d827a38b.tmp
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

aabe20c7-d00c-4b18-9ea1-a11d0c0bc58f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\aabe20c7-d00c-4b18-9ea1-a11d0c0bc58f.tmp
Size 1KB
SHA256 cf35bcbca2169be88e61d1442277b5a73fb4517706b1c2187977e82028a09294
MD5 5e6b9228b142b76fc999e91fd47180cf
SHA1 911dd417626f8ce331013ab142715b9c67095490
SHA512 143cb9d6527361e29cac3bc1cc597116957bf41649e2dc60a341d407b4c066c352da6b4b1915220b2cb8ea3ef51dff7962fcb9523545b4f6b6f0385001166ecd
TLSH
T14F218FF3C3E4866ED90156F4AA29AE2BCE1D0546822C3C16C9E4EF1FA3F2475D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

d7bba416-635a-46e8-8855-9582469a0875.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d7bba416-635a-46e8-8855-9582469a0875.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 e4ddeb6047e060ad07e47fe28be21507feb84cff943c4d19438a4a752fe29ebd
MD5 f1a01c15fd6daee36d637a3afca8db52
SHA1 4c3afdb25ea38f8d17a5237f97b353b9794e2051
SHA512 1e382807257fa84537aee4c1f81b4d06585a8acabbcdd442e2a2329ccffa7210fac17d0cdfa41916e8f6b71f8d279388b860d2ddf862b2e1f8cb833b9c955fa5
SSDEEP 96:Kc0AKla+CaQKTSMr6KIIS6EwKRybyPs4yq:SDPeJnoyPs4yq
TLSH
T147B1D615717B535038BD298880B6971E528236B3365CE62FBFBD00B54D6EE484DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

109b6120-0f2b-4cad-8470-9404aa57207c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\109b6120-0f2b-4cad-8470-9404aa57207c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d793895f-d719-4649-b627-7ee2e522fd1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d793895f-d719-4649-b627-7ee2e522fd1d.tmp
Size 8KB
SHA256 4a2c5fcccc2cefab76dc1adec6c79953f925a653bbde7cb150f30d901c479a63
MD5 beadff99a27176c5339126faf55b4b2a
SHA1 01eda6502d0e9a8eb5da6b75a615e76692f9db47
SHA512 35d2acd4f2b23f4ca0f72083a1fa2fcda41b3d9920c3edeb2ae7472d5feb95f8766135173b8444657fc0b1af80818f8b03d42eaf3c48ecfe73a9d785f0475458
SSDEEP 192:4ONT6IEcQmiUyJVJTGuIGmAcjzor5RZtDX+427HpqNU6:4ONT6DsGTGuIGmAs8PDX+BHAU6
TLSH
T15812F936A8B8BC6B5ED3A944F44739239EA5412BDA887F50D5EC2B1C01DF35C530A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29072dcf-9445-434f-b5be-09a0b82b3ca7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\29072dcf-9445-434f-b5be-09a0b82b3ca7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 5ed057942a3b0ad9398efcb4150589bf6d847c5ef0f620b7dab19f7ee8c863e5
MD5 f842873e0955a725d58e422a07910e1b
SHA1 b57704475d6e4a4d5c52015a4b4e3e4ef17366b0
SHA512 6e6ccbf262bd759c2d7e82d8fb3e27a7cf2fbd5cefbc31b4b7e7efb3ab9fcf6044ee6235f647e0b74fc8e35ccc5ca71c86c741e374f1c5e3a57428e23a2856e8
TLSH
T106515D6866EA1105B3B37E5ADBF6786F587E79332E0B949E10110F4F0633A41C861B37
MD5 SHA1 SHA512 TLSH

Submit Download