04f0529236720a35b4a6fe73978bd8e799cb9575c4c6a18760fb1a3c82067563

Analysis

max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 11:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3proxy/doc/html/highload.html
Size 34KB
Sample261107-nktcssbs9t
SHA256 04f0529236720a35b4a6fe73978bd8e799cb9575c4c6a18760fb1a3c82067563
MD5 f65fa01e106bc3509a577b1aa86f94fb
SHA1 e9d5256171e017214723fa742f69e367ee1406b9
SHA512 3d47eb31a59a79b3a2a23625e4f4401047d6260db16bb69c7954fac79f19c14ef0e295bd93cdad514472dd515ce59e9c9bcaddcaa645d0bb495fded1f94dce38
SSDEEP 384:gqoNZgVvdvy3sAOllKMObVYOsSH/kTWCCLEm4lnnbT+OyaAdGKyZzqZwmoyXyfWa:d+WB5AOmYi8v+OyaA8vZmRYvlWwHU8MM
TLSH
T1DEF2FA13B7947B3191E30362520E42D0B73DA0E87727556470BEC06D271ADB8977BBEA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4860	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{DAD45BB6-90D6-4748-A08E-6414C3C72633}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2264	msedge.exe
2264	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4712 wrote to memory of 808	4712	msedge.exe	84
PID 4712 wrote to memory of 4860	4712	msedge.exe	86
PID 4712 wrote to memory of 4316	4712	msedge.exe	87
PID 4712 wrote to memory of 4316	4712	msedge.exe	87
PID 4712 wrote to memory of 4316	4712	msedge.exe	87
PID 4712 wrote to memory of 2848	4712	msedge.exe	88
PID 4712 wrote to memory of 2848	4712	msedge.exe	88
PID 4712 wrote to memory of 4556	4712	msedge.exe	89
PID 4712 wrote to memory of 4556	4712	msedge.exe	89
PID 4712 wrote to memory of 4556	4712	msedge.exe	89
PID 4712 wrote to memory of 1260	4712	msedge.exe	90
PID 4712 wrote to memory of 1260	4712	msedge.exe	90
PID 4712 wrote to memory of 1260	4712	msedge.exe	90
PID 4712 wrote to memory of 3948	4712	msedge.exe	91
PID 4712 wrote to memory of 2964	4712	msedge.exe	92
PID 4712 wrote to memory of 3948	4712	msedge.exe	91
PID 4712 wrote to memory of 3948	4712	msedge.exe	91
PID 4712 wrote to memory of 2964	4712	msedge.exe	92
PID 4712 wrote to memory of 2964	4712	msedge.exe	92
PID 4712 wrote to memory of 1668	4712	msedge.exe	99
PID 4712 wrote to memory of 4428	4712	msedge.exe	100
PID 4712 wrote to memory of 1668	4712	msedge.exe	99
PID 4712 wrote to memory of 4428	4712	msedge.exe	100
PID 4712 wrote to memory of 3368	4712	msedge.exe	104
PID 4712 wrote to memory of 848	4712	msedge.exe	109
PID 4712 wrote to memory of 1876	4712	msedge.exe	110
PID 4712 wrote to memory of 3660	4712	msedge.exe	111
PID 4712 wrote to memory of 2596	4712	msedge.exe	113
PID 4712 wrote to memory of 2596	4712	msedge.exe	113
PID 4712 wrote to memory of 4140	4712	msedge.exe	114
PID 4712 wrote to memory of 4140	4712	msedge.exe	114
PID 4712 wrote to memory of 2264	4712	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\3proxy\doc\html\highload.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9612ac188,0x7ff9612ac194,0x7ff9612ac1a0
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,15592528239904628068,17742370490729482264,524288 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,12997044344420539466,16436510924283302339,262144 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=2880 /prefetch:2
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,10621467827336964940,1311946845104037518,524288 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:8
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,4960131519007932897,7351849592285947836,2097152 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,68899139462622286,16498224409746319768,2097152 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=2336,i,15051279787978946227,15274149583430900248,2097152 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,7376895620467499802,7448784644119217634,2097152 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,13577764987015085240,18322196043939995134,524288 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:8
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,8989102632295795470,1666586960814072886,524288 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,2687459898421134297,7673174085975531129,524288 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,2687459898421134297,7673174085975531129,524288 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4788,i,17110033370391715253,7065477438553802192,524288 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,4571993426383620310,9430082908755424072,524288 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,7114204246358958709,15655117705821683356,524288 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:8
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,12159404562808884708,2521200451257184143,524288 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:8
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,8794740879167901787,14794956571397549746,524288 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6168,i,4778144873121684464,9760330584588512738,262144 --field-trial-handle=2884,i,11403229787469204763,15177978633402572567,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:876

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

065357be-f8c9-42f0-8677-fdf67cb7f4dd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\065357be-f8c9-42f0-8677-fdf67cb7f4dd.tmp
Size 18KB
SHA256 66be735cd800342edba448cde7f0be05b4adb89cb40ef2fe976fb9f319ea81ad
MD5 ded3feff72f5469a450f966cd0f66f73
SHA1 ab8cf98e98c029cb1aaf3c1fea810b588fe02f46
SHA512 8f0fd27cb5aa8566f1491c8c5aa91daa8707385dc1763a596f00a4b3dd0d721334184f8c49e7403b6cd0a7baddc697d14b536c0aeaf5380a942b58cd011f75a1
SSDEEP 384:siQkUSv0sNX0JynLbjicpph//F+oVZMhrH7vBEnjNIIl9:sa0fyxn/tx/MhrH75ExL3
TLSH
T181827C35A878AC3B4EE3A601F14B3A239EB8C157DBD51B94D5DDAB1C01CB29C234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5529e2ca-e6a5-45c1-879e-0f1d5c34c683.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5529e2ca-e6a5-45c1-879e-0f1d5c34c683.tmp
Size 8KB
SHA256 d66c446c39d39353b81f0655317b8cbbc60e30de013314ad087f3cfed307e77d
MD5 e4193b098e033d5d447870273ef2ac7e
SHA1 47b158769cc75fb98abd7f45d31af670f582365b
SHA512 628f49498afeaeecf12da0dbaca7bbcb8d97ec0fc83190687dfa36c590a3da7ed598adf58496762f40bfcb07bfd37668f3e98ae7a2060004b51e7bd218da2cb0
SSDEEP 192:IONi6JUxQmiUy444iLo//F+oV41Nx4qWhrU6:IONi6+PF3iLo//F+oVcMhrU6
TLSH
T11C120935AC78AC3B9EE39A95F08736238EA48167DBC56F94D5DC2A1C05DF26C2307C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5ad40f76-807d-413f-88aa-f7f0306c14e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5ad40f76-807d-413f-88aa-f7f0306c14e5.tmp
Size 21KB
SHA256 31aed3ca5e4b4946bcd275eb0ec212c9a11d2a36a68536fee2fad6b7037a18b4
MD5 17fc3dcc25a02e89298428d8ffc3e3d1
SHA1 dcf0bffcc80e770b7ec9a03ac70a1d5531459319
SHA512 6cbe915c3f27f9b862442367f0531cadefc24283b1214136846a5f4a16fe4898530f1a3fc3ea47f13b53519195304a4a61f4c44944e37a14f49dcf11164cdbf7
SSDEEP 384:kUiFzQkUSvoqzsNp8TUNTUlIl0JynLbjicpph//F+oVpMhrH7vBEnjNIIl9:kvFdHEwgiyxn/txLMhrH75ExL3
TLSH
T15DA27E3698A8DC3F9EF79B41F14A3613CEB48167CAD59A90E6CD9A1C00CB1DC234BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5b002b70-40d6-4f86-a238-644c49741cfd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5b002b70-40d6-4f86-a238-644c49741cfd.tmp
Size 18KB
SHA256 8ea8bf7b8174cba680067e6af87b1ee83dec2bf0e7ee86f0b1d9f6254807bc79
MD5 174870931222c2189ed0d5b8a6f7a029
SHA1 2598245b9347f6aa68e3647da3c71c19a715adfc
SHA512 2f1d5980ab5c3242d326ad4fba4a165b60de4e214915419f1c7f0f42d4afd7a656d732ad165db77f6d2c0efed021790521c5c8a292e8aa737bf55ccf88f94e3d
SSDEEP 384:piQkUSv0sNXVJynLbjicpph//F+oVZMhrH7vBEnjNIIl9:pa0+yxn/tx/MhrH75ExL3
TLSH
T199826C35A878AC3B4EE3A601F14B3A239EB8C157DBD51B94D5DDAB1C01CB29C234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

1aa61436-cf5b-496d-88e2-3eab298074c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1aa61436-cf5b-496d-88e2-3eab298074c4.tmp
Size 10KB
SHA256 4f8d9b0fb6f4ceea3b4493d4ff4046be4067b6711fba28f24fba741c36c400df
MD5 6d455e008cd53ba92d2b95d86b59de95
SHA1 d7fcf2962e6df5e224249d5437d0c040be4abb5e
SHA512 63f63d581727dd17d7f54af3811e7c212a3434709f6fc1e14f3beb3888e83c518256e544bcb46a35a90fafe993e0e111b6643cac3bc73eba47fd74c257dfcc91
SSDEEP 192:sxZYR9W8/fJsz6IdpHZHW6+WNGY36Be+0Ig5JJ:sxZYu8/fJszT5HbGXex
TLSH
T10622D9566E38A97B8CCBE20DBA25BF53E6F9503251D01E48A6FCC61C05EB6DD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20c98c0b-085b-4bf8-bf5a-6f343862316c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\20c98c0b-085b-4bf8-bf5a-6f343862316c.tmp
Size 9KB
SHA256 6b059f86184e8176d06ffcf327db8cf98a9fd4be854644ae88d7ff99129b49fe
MD5 b5655b9233b9092433fb03f61fbdd7e3
SHA1 9de0d0b73bf2c6f345f2a58d50e9afc9763ea3e0
SHA512 d267ecaef7f586540a9679e16ec1ade59670832241390f3aa3ca0f0d82d496e6b49bd2b96aa63e5a464807c39a19f843fe8ce4817907e14ca3f47c1ce687e6fa
SSDEEP 192:sxZYR9W8/fJsU6IdpdZHW6+WNGY36Wl+0IgrJ:sxZYu8/fJsUTLHbGXE9
TLSH
T1CD22B7566E38A57B8CCBD20DBA25BF13E6F9503251D41E58E6FC861C05E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2b11c7e7-2540-4f60-8653-a025af783b70.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2b11c7e7-2540-4f60-8653-a025af783b70.tmp
Size 27KB
SHA256 f6e5cbfea5aa2c5bf516812673517689e06ad65596c9480aae9fd6f0bd322118
MD5 431bc8448e193d6337786f311fe56776
SHA1 846c3bf38d976f2aff43af957d54bf26a5803e63
SHA512 9d85b2355dcc606b5312124ad9fd67eb34bae00305c82c34dad77356d4de482114037d1f6773f499d3ebbb82c5a9b03e37e472536f417eaac264f416a532c5c4
SSDEEP 768:DzKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/wro34:DzKlm7QWvUYe0u1ja8/L/E/b34
TLSH
T162C2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

34bc32f1-4673-4c58-a78b-d2337280b236.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\34bc32f1-4673-4c58-a78b-d2337280b236.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3be475ef-40bd-4261-b618-f7b45d0e21b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3be475ef-40bd-4261-b618-f7b45d0e21b6.tmp
Size 9KB
SHA256 3e04c5322d47c8295848e2f9edb1b90f971b12d5240902aa5326911b6917661e
MD5 0952e952a9fb17041575d5614a8b9ec6
SHA1 ab7a74c66bf8db1366feb98739ae06b978300c3a
SHA512 03bcb80435c83fff3f9b701c951c3c77c8b082375885bd7b529be07befcec12b069bc9dbdee05a5f367b758650d286ec8ef1735a6b7418f0b62cf8e279e9e1b8
SSDEEP 192:sxZYR9W8/fJsa6IdpdZHW6+WNGY36Wl+0Ig5rJ:sxZYu8/fJsaTLHbGXEv
TLSH
T11D22C8566E38A97B8CCBD20DBA25BF13D6F95032A1D01E58E6FC861C05EB6DD221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52a696be-6b33-4ee5-b800-4ab01f38e6c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\52a696be-6b33-4ee5-b800-4ab01f38e6c5.tmp
Size 10KB
SHA256 cd4dbf189a420678d4a40cdf2cb27fba7fd66134e73efc0cd5635dc7f266ecb8
MD5 a32e1c30a228faec445d210852dd7660
SHA1 ae5197464bc3c3bf27536ce916a307f6b9d1e83d
SHA512 6da1bef5f3906c56e85a33eef0b5e16b878ede86443689794f79bef79761608d358a6d1e6e04a68b8f26b5d58767a30ea652bdd8338cc574910577ec54b97c1a
SSDEEP 192:sxZYR9W8/fJsz6IdpdZHW6+WNGY36t9+0Ig5JJ:sxZYu8/fJszTLHbGXzx
TLSH
T1C222C9566E38A97B8CCBE20DBA15BF13E6F9503251D01E48A6FC861C05EB6DD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 33B
SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
MD5 f27314dd366903bbc6141eae524b0fde
SHA1 4714d4a11c53cf4258c3a0246b98e5f5a01fbc12
SHA512 07a0d529d9458de5e46385f2a9d77e0987567ba908b53ddb1f83d40d99a72e6b2e3586b9f79c2264a83422c4e7fc6559cac029a6f969f793f7407212bb3ecd51
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 293B
SHA256 ebbfcf4ea35d332eaf8660d53b3c3ac75bdfb47a0b753fc93fda33309a46adab
MD5 68bf1d8afc0de3b67995debf1763ba35
SHA1 53afe8c186d56090347157e783622b680e641ff9
SHA512 6220b71b43d0e20e6bfca197280a9529019a5511b5bd148059fae3efeb876db0dd58a97bf8e5303665ab6a5cd62e765bc0d18bc6b6299da87baa6e91b08addd6
TLSH
T1A7E02B8D45CDCA3E5314A4C70675934E85D4371FD7C07B6E4F18D84C324B888AA9FAB5
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 30e62995ab492e2867eec3bb83b11fbd5456f36f9abcdb3b4d3daa7d6b5bd713
MD5 9cd46f2d3dba9f6311ccd2e3ca4b1c78
SHA1 5e227aaaacc413af646e21c66f2802edd6ae0f22
SHA512 98742decfb9eb114b05a6f6cbc72861a74be6985724a6bd12022d84368a49ef44e312c837171393b418c62b8feabb70da37d611e0adf94c4f4becc3c498ddc80
TLSH
T17D51F88658A38BD4FBED61FC8DD211CF3B3CAD8086830E72A196DE797827794B12C050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 ec4ad5725752d023d27342b25dd9386e1624c1b76009ea6ba8c910e045a29510
MD5 6f55e69a6391248c008225cead6d09f5
SHA1 47ae3947785975b1baf27067a5535120c852fee3
SHA512 4a1f55ba79878c73b2830f3a0acada197f7dc560b98b39b361dd31b6b389bd0c7f83bd65ccf50aeca2e47b9b68a92cf6af5851878adc38f3f39c3d9b0e1e32df
TLSH
T16B51E88658A38BD4FBED61FC8DD211CF3B3CAD8096830E72A195DE797827794B12C050
MD5 SHA1 SHA512 TLSH

Submit Download

c96d747c-f399-4f4a-a12a-baed90d10797.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c96d747c-f399-4f4a-a12a-baed90d10797.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

1d1f7308-f826-43d6-896c-16830728dad7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1d1f7308-f826-43d6-896c-16830728dad7.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

b6dab9ef-f407-42d4-a3a4-15411f43ffe9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b6dab9ef-f407-42d4-a3a4-15411f43ffe9.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c064a745-6e9f-4e1a-b9c1-b0eb628328cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c064a745-6e9f-4e1a-b9c1-b0eb628328cc.tmp
Size 949B
SHA256 562efdbafac5ad72d45ab20fda4d7b55ad8b4fa10308d8380305a12f304b42da
MD5 e93dd0491e6171bd35c5ba274ab2fa5d
SHA1 89bece47d5546d14f6fd0b98f47ad6012e089267
SHA512 87c5c4ca6b11afda6d2197d3e068f091d6ed311a7c44a69a9ca3d6eae956e6e487cf700b4b5eef2ea8dcbbd526a4df54caf7e8b10051f80fa486dfdc48b41fda
TLSH
T1B1117AF3C7D5896E8D0516F05A24AE2BCE2D0A06431C7C1989E4EF6BD3E3075E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

23185001-6f48-4a8d-8176-6e9ce2decea0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\23185001-6f48-4a8d-8176-6e9ce2decea0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b86fb967ba601e0ce6b8859acfadccbb1d1873985b3d7f65cf4c6ba30377f30f
MD5 6d243354e3a54b153973f791b983d560
SHA1 4e1b8a4dac7e1531887ab1504c7fea3b0df916d9
SHA512 31e5d5d87e9fdb23359c4c86dcb28a8b13f0833570929b34a1f46c931f63485af66e66a8c1f4e41204e67ac33e0a3a9a722add248a1060495d458866d1026228
SSDEEP 96:KqONkhQsjpfbUmjH5ih/cIPURHl8h4otop54MaD4iBKP4v+Y1xf//ojdAxXRtIob:BONp6JUm0QmiUy4t4iso//F+o6BCA0U6
TLSH
T1E902D839BC786C7B8EF39E45B04777239FA4106BA6915F94DAD81E1C01DB25C2307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9e6a563-a55f-46a3-acf1-4bfa8f4ead85.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a9e6a563-a55f-46a3-acf1-4bfa8f4ead85.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 32e64f05c654e50e7512da25a950e7af6af487e3486d6f5d0c66797f6a020636
MD5 4e11efe6769c8bf9f7bd6fe6aeed8605
SHA1 11a5495cd2efd0b0f915236b9b91b6547904d4ee
SHA512 a3e3c047a354851fe474c501b69eeb450edb756e424b1918f5ccd013d2817a6c4f624935cc97a0eafbbb26927f3c9eccb6c1af60d514f3cf9651356ab074f9af
TLSH
T176410798A6ED1148B3B36E4AABF6A46E487FBD372F0AD55E00110D4F0A73B40C961737
MD5 SHA1 SHA512 TLSH

Submit Download