4eb8a931ce62033170c09fc831f84dea8edeb63e4a8ddcdc5091258df6cb6afd

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
error.html
Size 1KB
Sample261102-wthawsd19j
SHA256 4eb8a931ce62033170c09fc831f84dea8edeb63e4a8ddcdc5091258df6cb6afd
MD5 a421a490517024415c254488b3b0daae
SHA1 654105a8a174dd9b5a34776b1a24154783aab5ca
SHA512 5bac52e30dad64fc937f867b4e4e03a7e7cd44eb0ba030070c2fe586fedb6aefe00b9862c4741f6d090e6ac73b3ce249140ae1a3f0eff70b3633f3621f612495
TLSH
T18631222E09411D3A5271A2387323BB8D99715814F143794DB05E62C36EF19399BDBFCA
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4224	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{BC39A9A1-CFC2-48A9-A2A7-122BEE5B9B68}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2092	msedge.exe
2092	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4684 wrote to memory of 636	4684	msedge.exe	84
PID 4684 wrote to memory of 1748	4684	msedge.exe	85
PID 4684 wrote to memory of 4224	4684	msedge.exe	86
PID 4684 wrote to memory of 1748	4684	msedge.exe	85
PID 4684 wrote to memory of 1748	4684	msedge.exe	85
PID 4684 wrote to memory of 1564	4684	msedge.exe	87
PID 4684 wrote to memory of 1564	4684	msedge.exe	87
PID 4684 wrote to memory of 740	4684	msedge.exe	88
PID 4684 wrote to memory of 3312	4684	msedge.exe	89
PID 4684 wrote to memory of 740	4684	msedge.exe	88
PID 4684 wrote to memory of 740	4684	msedge.exe	88
PID 4684 wrote to memory of 3312	4684	msedge.exe	89
PID 4684 wrote to memory of 3312	4684	msedge.exe	89
PID 4684 wrote to memory of 3556	4684	msedge.exe	91
PID 4684 wrote to memory of 1560	4684	msedge.exe	92
PID 4684 wrote to memory of 3556	4684	msedge.exe	91
PID 4684 wrote to memory of 3556	4684	msedge.exe	91
PID 4684 wrote to memory of 1560	4684	msedge.exe	92
PID 4684 wrote to memory of 1560	4684	msedge.exe	92
PID 4684 wrote to memory of 4884	4684	msedge.exe	96
PID 4684 wrote to memory of 4228	4684	msedge.exe	97
PID 4684 wrote to memory of 4884	4684	msedge.exe	96
PID 4684 wrote to memory of 4228	4684	msedge.exe	97
PID 4684 wrote to memory of 312	4684	msedge.exe	99
PID 4684 wrote to memory of 4984	4684	msedge.exe	108
PID 4684 wrote to memory of 4492	4684	msedge.exe	109
PID 4684 wrote to memory of 4132	4684	msedge.exe	110
PID 4684 wrote to memory of 3528	4684	msedge.exe	112
PID 4684 wrote to memory of 3528	4684	msedge.exe	112
PID 4684 wrote to memory of 2092	4684	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\error.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x25c,0x7ffac5bdc188,0x7ffac5bdc194,0x7ffac5bdc1a0
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,9088669844167812605,16086023126292983494,262144 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,14203058836808911844,7387498269073697995,524288 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,7999418862846583218,16112513831161766876,524288 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:8
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,1988747421460970310,9296583139985254631,2097152 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,8358247969286539652,7002198235494747497,2097152 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,11061989176485615821,13262497687067949936,2097152 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,10294390219910915475,5786692274592367436,2097152 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,12156390819251241174,2074569241639450031,524288 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,3266847329935792877,13125692912678486152,524288 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,7599658409972022524,11276063162661128445,524288 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,7599658409972022524,11276063162661128445,524288 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,17940686038084470090,16474190677910432387,524288 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,3628172020708099977,17537741065403183029,524288 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,2401010302534008655,6947606342737556251,524288 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1004,i,13659878390848235549,9999445137917198508,524288 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5832,i,16071878585939081413,2048119270238967805,262144 --field-trial-handle=2344,i,9118630739441318016,3906829770805994274,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2092

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

05e0e8a1-1bd0-442d-aaba-aaba9a9b502a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\05e0e8a1-1bd0-442d-aaba-aaba9a9b502a.tmp
Size 18KB
SHA256 83917b858ad076454affa641d33c393179c4e66c79d5033061dc6322f74f3797
MD5 162f7d1135698bbce3b0bfd00ffb91f2
SHA1 93ba86d53e45cdc4ba3d0e6664856afb83aac0e4
SHA512 b19b761647932ff3bdedd385ab3fa1c2d64803cbf7a1d750c1b7cd728dd7b6edafbd03cc5134ec1471b06cccff880fb92e752287a86d780030587bb685f9eeac
SSDEEP 384:XQkUSv0sNoUY1nz5XpCBGYX5EOFN30CH7vBEJmoIIl5:p0hzrsGYuOFl/H75EgoLv
TLSH
T15D827C71A8B46C3B5DE3A510F14A3A07AEB49117EBD96F90D9ED1F1C01CB1DC230B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9af7d9b1-fa35-473a-ae41-60a1626d2fb7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9af7d9b1-fa35-473a-ae41-60a1626d2fb7.tmp
Size 18KB
SHA256 6a844035ade3ff054a83f1ad080603d21c9d0e96d4907e115fe7f3474a88b6bd
MD5 1f502b3d4a3b6dc1340d775b04a40b05
SHA1 170e6cea7329b790ec7ca91a6c3a6b551b4dd244
SHA512 2b309f67ba22f47e8e2a03dd6efb1a9a43db911029fd8bee28614dce446b1107ae7e585b5577e3d67a29252f7cac4adc6226352ed977ae6d02148985d9aa2aa2
SSDEEP 384:xQkUSv0sNoUV1nz5XpCBGYX5EOFN30CH7vBEJmoIIl5:j0CzrsGYuOFl/H75EgoLv
TLSH
T120828D71A8B46C3B5DE3A510F14A3A07AEB4901BEBD86F90D9ED1F1C01CB1DC230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

0911365a-09dd-4542-9170-be0b2ae78913.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0911365a-09dd-4542-9170-be0b2ae78913.tmp
Size 10KB
SHA256 a7facce7d62cfd7e2ec5a4165b502aefd60421e016efba685cf5bb46da63501c
MD5 22b5d7784006d8f03a1e53c99559ec71
SHA1 9a640305fe89582bc1d4f7863df10632b6013482
SHA512 d4d20184ecf24d8afd11522d75a2d319e4c4dee09bee6419da50d41abc6ed40ac5d8bdadd7247fd45864eb93096b14947cbf687cbd25b18bdeda6f728fa44a7b
SSDEEP 192:sxZXR/Wl/fKsLCIdpdLHW6+WNGYgwxu+dIg53J:sxZX8l/fKsLrRHbGHiT
TLSH
T1E622B6516E28A97B9CC7D20DBB15BF13E6F95032A1D11E48EAFC8A1C05E6ADD520780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e03bf4f-0c93-4275-bed5-16f73a080565.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5e03bf4f-0c93-4275-bed5-16f73a080565.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

96dfdfdc-f1b8-4923-9a99-ff4de29cd295.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\96dfdfdc-f1b8-4923-9a99-ff4de29cd295.tmp
Size 10KB
SHA256 c8c53ebddf9db06ddad1e6b554728c951a73d08d11242eaa9c691e35b2c9c5e4
MD5 43d2ddabee534ee45243692e9c4a34f9
SHA1 1df039675ddabb28b0a45523b3ecdf81c11d641b
SHA512 db37390db2b4da3a2ee59ac4b76f883734a4620194fea7c723db201394e53e90bb324f3631bfe4375b6982beaa5d6b9f0453a6e98fd5281cc66c6896c2525fb9
SSDEEP 192:sxZXR/Wl/fKsLCIdpHLHW6+WNGYgOem+dIg53J:sxZX8l/fKsLrrHbGciT
TLSH
T1BE22B7516E38A97B9CC7D21DBA15BF13E6F9503261D01E48EEFC8A1C05E6ADD520740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9bbe8376-433f-4c58-8145-3221a4ac748c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9bbe8376-433f-4c58-8145-3221a4ac748c.tmp
Size 10KB
SHA256 6d03f633bf2be9756de0cca9f46928c71ab8728ca342f5938d9c6748583f51fe
MD5 7edfc1384238fe61143c313e38f9e824
SHA1 3f2aac071785ba545f1b3f278960f70bc0aa5eb0
SHA512 0b125bd16c81c116718302d8af0c106d4bf7aa6f19a3c8c564c0399ee7cd0853d654804f939d895378fca9547453070286fa15c7daf27596bc87cd46b088db3e
SSDEEP 192:sxZXR/Wl/fKsKCIdpdLHW6+WNGYgdLu+dIg5dJ:sxZX8l/fKsKrRHbGqid
TLSH
T1ED22A6516E38A97B9CC7D21DBB15BF13E6F91032A5D01E48EAFC8A1C05E6ADD520780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 9dc16949851553ca08e12ec3386dc551e8de222e8669316234c342fa5a8c7c9a
MD5 110dcf01c5ce326bcb475f0a78911296
SHA1 951020bca0de8eb1636cfd6099f0d8ffc74e848c
SHA512 bc0c575eda475896224312154e59b50ba629198e1a1700ebc12d89e9c7f73a048a871e95b0ffa053226c6b9f3f4890bb7baaf1237a4096a518c4901df2acdd9c
TLSH
T16061C6C01EBAF5A9FBF84378C5DA13A738F498B8358B1F52105BC1B9640B72558C032B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0e1e90961130c7e0b9fb875ce8eba77480bab8a9465542cd97a328768738e458
MD5 7161559ddd511da175c3034f2180069e
SHA1 3eec6ca1e2879e26a41311f297a5c1eb3e241745
SHA512 a394e594d016c38cea30d95c1abd61c0d50cc181227ae0538bf20ec21c8e9d9a7ef17e1a544d134ad069aa6a83bdf297d1f6c1f00ff94e8e9f30918a4624f079
TLSH
T17161B5C01EB9F5A9FBF84374C5DA136738F498B8758B1F52105BC1B9640B72559C032B
MD5 SHA1 SHA512 TLSH

Submit Download

55ae2461-8bd6-4608-8047-9b0f4263e831.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\55ae2461-8bd6-4608-8047-9b0f4263e831.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

ae1bb621-ba21-4a56-9b8a-135d57f1ef81.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ae1bb621-ba21-4a56-9b8a-135d57f1ef81.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

c03c86f4-070a-41df-967e-2a595638b4a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c03c86f4-070a-41df-967e-2a595638b4a8.tmp
Size 949B
SHA256 642e4aa026100fb8a4f038cc2e4a9190a54da97ecc0afa80c6ad9374badd3ca9
MD5 c3dcd3b4653a8efd841ddf663f8a8ee2
SHA1 6d2da4983a2c03180d979b9ee0ece0029771d87c
SHA512 31aa03aca17a437df402294a482b8c13d8df8e6520aa7090b39d3ce7c96fd240a519d8f830747975fde1671e156634cc401b06488dabff9ee7ba325cba3f2a5a
TLSH
T100117DF3C3D5856E891116F06A28AE2BCE2D0516831C7C15C5D4EF2793E3075E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

c46f55cc-83f0-4b3a-bac7-d5d71c44d6d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c46f55cc-83f0-4b3a-bac7-d5d71c44d6d6.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3c03af0774b7590840fb30f0cc4d759efbc81ccc26ff195dec06419c7722065e
MD5 845703d0e1c027981cc468adb9a457bd
SHA1 7451476905bcdf37684da2d29ce6f9f085776129
SHA512 9bb63d0aaa77cd637d865422478ff77daa5b6418aa3bbebb282b1eca1e2484b178a045e464809f15deb43ca59de7579cbd5329f37f3c42fbba3793c5c5087620
SSDEEP 48:K0wfWaAqefbWt2ISyfK9O1UfxoPYVGu0yLVUplXD34brOrIS94K9d1P4x9oYePPz:K4HmKg4Gyq8K7qwPaK8Qiu
TLSH
T15C913F0171AB1211397F698C41B4866B424631F23169F92B7FBCA4E15E2FE541EFECC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c64f6839-1fbb-441f-96e4-ffb152cd1245.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c64f6839-1fbb-441f-96e4-ffb152cd1245.tmp
Size 27KB
SHA256 98dc18b43948b7644e47ee4350168368aa068991bf17e2cda1b2e8139be5c0ce
MD5 a689b38cdb805875e485fbec577969dd
SHA1 81339b33bd28bac3ee0e811bd88f480726b82abc
SHA512 5518209d4c10b014a0396b33e6e114de03131502449045a4b65f176b3059a8588833c5b13f1ef536b4e3dd78f986371dd78673e5fceba66493f056d21d4c770c
SSDEEP 768:7cichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzcro5tnp:7cichfPWvPZplu1jan+LKgzHLp
TLSH
T128C2F97B640CCB7E4FC00A9DDD5A6F9B7E9802C7A6588D4047FA984C02C77EE61264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb3404bb-7dfb-4cf0-96af-89960d281299.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cb3404bb-7dfb-4cf0-96af-89960d281299.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6c96062-ccd4-4d17-a40a-331cb11ea293.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e6c96062-ccd4-4d17-a40a-331cb11ea293.tmp
Size 9KB
SHA256 97e2ba8e0d2ee8ffd294c74c694ccdfc568a86a2e3b567ffbe271da04f8e8b09
MD5 aa393e76999d802ce68d0e3a9e404b84
SHA1 9ab274e8ba18ad20c63f6fc4660a37474908853b
SHA512 9c17daa81da70ef5499dc13e711c047332c1a45f4613e462f39132544f2b2eae31064ac1c7a3af0cbce1cd7ee004d4ce1d289df12266a015b5c8e2a3e7c76aa6
SSDEEP 192:sxZXR/Wl/fKs8CIdpdLHW6+WNGYgdLu+dIgrJ:sxZX8l/fKs8rRHbGqi9
TLSH
T15222B6516E38A97B8CC7D21DBB15BF13E6F91032A5D01E48EAFC8A1C05E6ADD520780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c8f9529d-7d12-4644-8c2b-1dcc712cf83f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c8f9529d-7d12-4644-8c2b-1dcc712cf83f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b3358839-3398-4526-98a2-5247276fc354.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b3358839-3398-4526-98a2-5247276fc354.tmp
Size 8KB
SHA256 a6b9d77536eb2ec8a8fd5d59ea0e8f20fe1c887bdf02f1f09bb15ff4b4c3049d
MD5 eb16bb39b5fdeee61dd968b33d2d0c9d
SHA1 2615aee1ee5f238bf1f45e73999dc4068d79736d
SHA512 3be1eb7136531f9273fb683dbd43b0d552d252bb1f0786d5988e88078f7a89b0d6a5bd089c24770c1d466661441d4657e76abe1c5418695e0c9388c8d4b28fff
SSDEEP 192:/ONi6DphYqQmiUynWewGYX59ezvCnyRWNdeRkII0Crq5oU6:/ONi61vnewGYX5EOFNt0CU6
TLSH
T173120835E8B8BC3B5DD39950B48735135EA4512BEB897F80DAEC2E1C01EF59C130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e533bb34-6f44-4605-9d61-2e5a201a9d58.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e533bb34-6f44-4605-9d61-2e5a201a9d58.tmp
Size 8KB
SHA256 f609e6ed4414f97cbd822ce356cf8b5de1f444dcf1aeb1e4cb67161509e35e62
MD5 eeb6ce301aba25a2eada37effe13acaf
SHA1 db940c09e2440a6aff464c9c8076000df572b192
SHA512 3d31746eece7a3641f1641cac3dd288e313c61cc37a1a7e910da7bbfafb5d63a5410fbdffd699ad1fdcb1777b39114f0d6f03e975e4424b9d50986c8522e3d66
SSDEEP 192:LJONs6DphmqQmiUyrWq8wGYX59ezvCnyRykk7lYU6:lONs619dRwGYX5EOH6U6
TLSH
T18202FA35E8787C7B9DE36E45B58726139FD8212BAA952F44DAE81E1C00D768C1307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed9f9a98-69b7-4ada-9a3f-70a76594685f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ed9f9a98-69b7-4ada-9a3f-70a76594685f.tmp
Size 21KB
SHA256 c63a93fc1e8fcc7195100e15bbd547e44ff0ea1f517709c2a3d4cbb242ca25fb
MD5 107cc5515729bc3c14f939c6a381c14e
SHA1 9c518f6752b0ce4fa7ceb72ef56605d7b9da3d60
SHA512 8b3e20c1163f3415c542a8d1fb51577d3cd0623149bc82ebdff8316ad53c99fa6a2b87b2981683e683060c89fefb2c92cacce885852aea20116639b3418df334
SSDEEP 384:SiFzQkUSv7zsNp8TUNTUlIlV1nz5XpCBGYX5EOFNl0CH7vBEJmoIIl5:ZFdv4wg5zrsGYuOFv/H75EgoLv
TLSH
T1D3A28D7298A4AC3FAEB39A50F64E3607DEB44057DAD5AB90EADD5E1C00CB1DC130BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ebb65a27-e3b3-46da-86a0-21ce5483661a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ebb65a27-e3b3-46da-86a0-21ce5483661a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0277522b2965c8df98fa32d2e6b13f3b466fbf1c93fd054c08c227f2dfd468f9
MD5 e77453bcc64605e6005346c82a70f847
SHA1 e54f95c3c2a10244c45ab6138b6cbf07865510cb
SHA512 7a69cac9613296b62eea9035faf104f1d54ff58eba5c2ed46115efb42886d1c0088043dd25f903b6e47305b4ddff4d85a550768e5cff222efaf09d67678010aa
TLSH
T1F341075CA6F91148B3B7AE1A9FF6A86D447FBC672F06C19D10110D8E0726A40DCA1737
MD5 SHA1 SHA512 TLSH

Submit Download