2f3d90f76d9dcf2a0b51602995e58e9088ec3176960221e34527635fa6cb0b85

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
category/creativity-design/business-marketing.html
Size 773B
Sample261107-phackscz4m
SHA256 2f3d90f76d9dcf2a0b51602995e58e9088ec3176960221e34527635fa6cb0b85
MD5 eff2769910e001def3da3aa1b37e3768
SHA1 0b4d02c4ba8700d25961eb8ca7e3f52b97d5d819
SHA512 be79e8fb26a04413e839c9df4cb23359f50b5ba078b0db82cad69606534bdfca444d3a6a3b117e8110ebc52620b936f6c0ef415ee331d5bf073b21a00fc13816
TLSH
T1AB01F1EE69ADA2123321E268CDECBF40637302AED600DC8290054CAC51A055785CED7B
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4588	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{33D49013-E7ED-491C-9B57-C19C7CB16230}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2620	msedge.exe
2620	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4760 wrote to memory of 4660	4760	msedge.exe	85
PID 4760 wrote to memory of 4588	4760	msedge.exe	86
PID 4760 wrote to memory of 5380	4760	msedge.exe	87
PID 4760 wrote to memory of 5380	4760	msedge.exe	87
PID 4760 wrote to memory of 5380	4760	msedge.exe	87
PID 4760 wrote to memory of 4268	4760	msedge.exe	88
PID 4760 wrote to memory of 4268	4760	msedge.exe	88
PID 4760 wrote to memory of 4240	4760	msedge.exe	90
PID 4760 wrote to memory of 2528	4760	msedge.exe	91
PID 4760 wrote to memory of 4240	4760	msedge.exe	90
PID 4760 wrote to memory of 4240	4760	msedge.exe	90
PID 4760 wrote to memory of 2528	4760	msedge.exe	91
PID 4760 wrote to memory of 2528	4760	msedge.exe	91
PID 4760 wrote to memory of 2816	4760	msedge.exe	95
PID 4760 wrote to memory of 5824	4760	msedge.exe	96
PID 4760 wrote to memory of 2816	4760	msedge.exe	95
PID 4760 wrote to memory of 5824	4760	msedge.exe	96
PID 4760 wrote to memory of 4300	4760	msedge.exe	98
PID 4760 wrote to memory of 2072	4760	msedge.exe	112
PID 4760 wrote to memory of 2612	4760	msedge.exe	113
PID 4760 wrote to memory of 4112	4760	msedge.exe	114
PID 4760 wrote to memory of 392	4760	msedge.exe	116
PID 4760 wrote to memory of 392	4760	msedge.exe	116
PID 4760 wrote to memory of 2620	4760	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\category\creativity-design\business-marketing.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x2bc,0x7ffedaa3c188,0x7ffedaa3c194,0x7ffedaa3c1a0
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,6114299575992445388,4093208359832525497,524288 --field-trial-handle=2292,i,9768066416275073098,14170332083170349192,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,10600242382881081122,11221990961525565147,262144 --field-trial-handle=2292,i,9768066416275073098,14170332083170349192,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:5380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,8823754606188053851,10828502405806900074,524288 --field-trial-handle=2292,i,9768066416275073098,14170332083170349192,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,3512307746122689402,8914847216966981488,2097152 --field-trial-handle=2292,i,9768066416275073098,14170332083170349192,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,10509977741539802542,2443851284397832059,2097152 --field-trial-handle=2292,i,9768066416275073098,14170332083170349192,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,10242903609160648722,10914282497796086960,524288 --field-trial-handle=2292,i,9768066416275073098,14170332083170349192,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:8
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,17133091848279377687,122545766807014419,524288 --field-trial-handle=2292,i,9768066416275073098,14170332083170349192,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,6827976549242500465,9280158845708554523,524288 --field-trial-handle=2292,i,9768066416275073098,14170332083170349192,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,6827976549242500465,9280158845708554523,524288 --field-trial-handle=2292,i,9768066416275073098,14170332083170349192,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,18184802409482056003,15772520058618039394,524288 --field-trial-handle=2292,i,9768066416275073098,14170332083170349192,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,10137025905737236761,16136859592038772064,524288 --field-trial-handle=2292,i,9768066416275073098,14170332083170349192,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,2324840302576553210,11457907138122936437,524288 --field-trial-handle=2292,i,9768066416275073098,14170332083170349192,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,10526036071102132570,11901769451377931689,524288 --field-trial-handle=2292,i,9768066416275073098,14170332083170349192,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5976,i,10234768300851864714,15699330212671156394,262144 --field-trial-handle=2292,i,9768066416275073098,14170332083170349192,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2620

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1264

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0323b731-3228-4e02-b533-ab58320fd6ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0323b731-3228-4e02-b533-ab58320fd6ed.tmp
Size 25KB
SHA256 3ef06d7b14011ab0e6a97d458453e71293d5363cb7e792cf4c0e3b6495065012
MD5 f9d30fb2bbbdeecc4906d38216982007
SHA1 41f47cdf4f197cee2e48736e0e2a1a994e0266fd
SHA512 9af3f75c6c25bb7bb3268b08d6e8ea797099bc1c0e5f74a9714168abd825c7c5101a50046f7c69aa10d0348a542f2f419b07305d7ace71bd13ced3b10378baf1
SSDEEP 384:n1iFiZcIs3sN38TUNTUlI4JaKM/U1w2f0BCUvPAVG9gtuLBiTYgL/7IzTom:8FQs3iwg7e8BCUwVAgtoBiTq1
TLSH
T17BC25A32EC58DABBEDE64BC9A74A3A03DEF44163858C9AC8D5D91D1D00D75EE030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f035d21-b7e3-443c-adaf-1fce5f623e3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2f035d21-b7e3-443c-adaf-1fce5f623e3a.tmp
Size 27KB
SHA256 e8b722fe4049667f34157b299d25a979566b884b75f7233bb4e114def41923c4
MD5 ad55dccb42ce0023af6ad968ab801302
SHA1 5b1325a6c42490814c4499879bf8db7b6e7580b1
SHA512 02c84fdf9b430fff30c3abf96ceeefebabaf39850a4f583655e5ddae7da2bb9ed9a1591b1c09393327e6f080bb7df9b3f3f9391073e284eea765301f2f82142d
SSDEEP 384:nniFzQkUSveq3sN38TUNTUlI4xaKMbU1w2f0BCUvPAVG9gtuLkmTH7vBEnmtQgLk:iFd53iwg7m8BCUwVAgtokmTH75E4vL8
TLSH
T161C25A32E898DE7BEDE64FD9A34A3A43DEE04167898C5AD4D9D91D2C00CB1DE134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

39cbc781-1a8b-4b4c-b4a0-e9620ccb7c94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\39cbc781-1a8b-4b4c-b4a0-e9620ccb7c94.tmp
Size 26KB
SHA256 c8336823523d6f1c77d51fa636046d2b0ffc9f4d8babf8034f80733d0cbad5b2
MD5 bd1ed2fc7b6a830ca4ef6bc37d40df0b
SHA1 0fc20baf42166f9f3ac9b72a18f848ffb5c30e3f
SHA512 e1c7f3f7abbb06c9211790c9d2cdfc812b96076d6361589f9484b40361b9c3a62a88c2bdc89d139035fd7a475d51ce22ce17521c39983239f8dbc08c64ef1a44
SSDEEP 384:n1iFzQkUSvb3sN38TUNTUlI4xaKMbU1w2f0BCUvPAVG9gtuLBiTH7vBEnmtQgL/s:8Fdb3iwg7m8BCUwVAgtoBiTH75E4vL8
TLSH
T16AC25A32E898DEABEDE64FD9A34A3A43DEE04267C98C5AD4D9D91D2C00C71DD134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92fbf883-43ad-40a6-abe7-e9911e94cc00.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\92fbf883-43ad-40a6-abe7-e9911e94cc00.tmp
Size 26KB
SHA256 794c43e59c4d7ce4901b463441c2a78da1948e1f60f90242ca4869fd40c5e917
MD5 7683d5e24ae36b93e07b0c60a447c792
SHA1 743508b8bbed1c29a170559098a127e56803f679
SHA512 a716e73c5a1351816d571926db8848d784f145615a67a0bf047a108071f1e5ceec4f76decec3eec85d36616c43843d1cbd50760663251bf478fffde6c6e4ef9d
SSDEEP 384:nTiFzQkUSvb3sN38TUNTUlI4xaKMbU1w2f0BCUvPAVG9gtuLBiTH7vBEnmtQgL/s:+Fdb3iwg7m8BCUwVAgtoBiTH75E4vL8
TLSH
T1D8C25A32E898DE6BEDE64FD9A34A3A43DEE04167C98C5AD4D9D91D2C00C71DD134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

22dcb362-0b90-46d5-bcc4-178f16df6fd4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\22dcb362-0b90-46d5-bcc4-178f16df6fd4.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

8e0ce75e-e51d-4e41-b44b-05b9c71ff149.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8e0ce75e-e51d-4e41-b44b-05b9c71ff149.tmp
Size 11KB
SHA256 e230a57ba2ed9355bf30adbde659d65ee1245554e8cf12aef6c77c437efa3e11
MD5 d6ec35f975744edd32c30fc3493b9aaf
SHA1 3a3dfb7b943f1bbce3edecf815ad4c51f77c152d
SHA512 318e0445ee8c9d904cf238f30be1036b995d842a0de82d8d168f78b6571d6d91ea77612cd5943845668e281422eaf62c8707ade265d5f356214e5d5c66b23db1
SSDEEP 192:sxZVR6kw/fCsPaQZLn8SzodpHxHW6+WNGYorlvS7M7Ig51tEJ:sxZVXw/fCsiOgpRHbGLSavtI
TLSH
T19742E7156D28A93B9CC7D20DBB55BF53E3F9503291911E88AAFC8A1C04EB6DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a3915822-8004-44a2-bfac-2bd5e1753706.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\a3915822-8004-44a2-bfac-2bd5e1753706.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

d97b3d21-1763-4b48-aaa2-3dd4e9b624c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d97b3d21-1763-4b48-aaa2-3dd4e9b624c4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

e74260be-eb2e-4e0c-b0a5-f05d070c888b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e74260be-eb2e-4e0c-b0a5-f05d070c888b.tmp
Size 1KB
SHA256 a143313778ca3bf30d3f54266ae660e3cb313254b8b8591ef5d7fcb206a9ff93
MD5 7590b789362f19aaef2b97a7a4f69278
SHA1 256b56907d17399cbf6567b949e075d9f9b1a596
SHA512 15d9b29d81502524b4f5e14a8a6a39a3789cb5fa4f5625a6135e92e87f56e81f6de9b46c43153ba7198b074852ded1f5d040549541891bf0fff3bb4ee66a481d
TLSH
T11031AFF387F4856E8A0196F0AA18BE2FCE2D0514431C7D9A85E4AF27D3E3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

f6235b09-7896-445b-a722-5a38c2658ca5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f6235b09-7896-445b-a722-5a38c2658ca5.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 641065f5bce45ba4f93f28fafd094975d7d6870e2382b19fdb19ca7124020116
MD5 46943a25daa4b844d4acc6c5ddeb98da
SHA1 218a575d839c486ffd12499a828ed5177dbea35e
SHA512 96386eb86de007625cf661984fa1434fa718ff5bcbb9498badff67eeba51e38472510e1f33bac91b6be346b9425dc6509468ed28f2e67f2f238e560e0f67b207
SSDEEP 384:SL29ObJffppdNlrtEYFdFyFJFtF3FrFPFYFrFsFRFFFxFBpFvFIFNFtFMF3FW:SL29ObJffppdNlrtEoHWL31R9oRkj/DW
TLSH
T1D5B2101571BB421039FE291891B6972E068231B33119E66F7FBD40B68E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c5caa4b4-2673-4b4e-9da7-73e01fed119b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c5caa4b4-2673-4b4e-9da7-73e01fed119b.tmp
Size 11KB
SHA256 72cde2a2e9f0442b20c6ec982f9ab8bffe25c41221c826e0e4a6b197e321a153
MD5 c21a0a18b2f2cb903696e12ef12bc394
SHA1 58aadd21a870cbe8c96d981cdebbf968c89176af
SHA512 a4871b3b8505739ac9f80099d2c326fbce50af2017f0f8be398f28d4d9f97fa6540ed09ea0451035ea89bb751db1e7a6c5446fbdb9465205a5457870529b6ac3
SSDEEP 192:sxZVR6kw/fCsdQZLn8SzodpHxHW6+WNGYoClvS7M7Ig51tEJ:sxZVXw/fCsdOgpRHbGASavtI
TLSH
T14842E7156D28A93B9CC7D20DBB55BF53E3F9503291911E88AAFC8A1C04EB6DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c784973b-70c5-403f-9eb0-ba4bd0fa1890.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c784973b-70c5-403f-9eb0-ba4bd0fa1890.tmp
Size 11KB
SHA256 af96f7c2c01a4cc21795a8def7892e589506a4dccdc734e76fbe51964b7c1fe6
MD5 49d3773530b8f963be7c70cfad648610
SHA1 ef0ad6c0cacdad714d2dca5c218040a16fee119a
SHA512 606516c5bfbec39c1c1f25e077bd420b34a3301dc3c2623434fc54a431dbeb1982a3198d1c3766874b32219b3c9ee8c1da64a8ea2710cd4fc00d89a0bd388fe4
SSDEEP 192:sxZVR6kw/fCs0aQZLn8SzodpHxHW6+WNGYorlvS7M7IgjtEJ:sxZVXw/fCstOgpRHbGLSajtI
TLSH
T1ED42E8156D28A93B9CC7D20DFB55BF53E3F9503291911E48AAFC8A1C14EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f77650d0-1e19-4661-b7d3-e5541caf955c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f77650d0-1e19-4661-b7d3-e5541caf955c.tmp
Size 414B
SHA256 5d9a9d074924d3712cac3daa3b29762dfd2b556765391e7a09343d14eff2d785
MD5 248b5e9e0c9cf6af3e624808020486c4
SHA1 1e362a79ff4678c91953c1715157c0610f7f64d1
SHA512 0e03b76d1bc34b34d761145bfc276d53943b6275814e2655e8496abb7be3b79ab5e38c60af0c267d077195219c5fb0ccdd664fc370c8b7d36e801cb825ab23d4
TLSH
T1EBE02B6ADA31EC3B1DFD1B7D5494034DE70023672B80994B3B3D850C8FF1536518686C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 df601cb6fc37e66764d284864419591626a92cefd13c7b0dbc9e38db6455a58b
MD5 2070661f087b8909703b7e7879ac70ed
SHA1 bcc69c0965b860054cb00af558ac32dc225b2593
SHA512 dc48be3964da7e3183c1d27c868ce749c334d9353c8f8a6306830460f24341e42ec0f4b30642c38770ea28f032ef953f2a0452b464e8a0ca064e369b870312b9
SSDEEP 384:n4iFiZcI63sN78TUNTUlIm2aKM/q2w2f0BCUvPAVG9gtuLyiT7O6R2FeoSqgL/7d:DFQ63ywgcojBCUwVAgtoyiT7TRXyQ
TLSH
T1C3C25B32EC58DAABFDE64FD9A74A3A07DEF04163958C99C4D5DC2D2D008B9AD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d65ff3c4-b108-43e8-a559-bebc002497ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d65ff3c4-b108-43e8-a559-bebc002497ef.tmp
Size 25KB
SHA256 d8508403cb212e035365093e09137900b19c5713843a3e4d3a10456a64416ece
MD5 5b0f1496541879e65526eede9d4133d8
SHA1 e3ad4d081cb3ea63f00daed9846ee3bd7cd26f8b
SHA512 97d07721cb7bd61863ca033e4c231b5fcf86ae8f391547e5e950c38bb0e93752f0bc89372eea2f5f2280f4c339b50e91446270cca4aee49ec09808bf449cbcfd
SSDEEP 384:nCiFiZcI63sNK8TUNTUlIm2aKMix4w2f0BCUvPAVG9g7FI7O6R2FeoSqgL/7Iz7Q:JFQ63DwgcWZBCUwVAg7FI7TRXyQ
TLSH
T1C2C24B32EC99DAABEDFA4FDAA74A7A07DEF00163958C89C4D9D81D1D00875AD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a7ada854e9d088397b17a862fbfe5b07cd75dc340f8068f1b510da63222944a4
MD5 5b5e188b5e32b06979ad8b68823e2821
SHA1 75c92dcf59bf87e240fa777639ca24656ac17997
SHA512 554cdbced46a4604a829dcae1846c8ba06957bbe36f1ba34f01315126e868c63ab0712adf7be60d8b37ffa0381653cbc7f8a41dd3f2a8395306ebcbf09e509c6
TLSH
T107412D58B7F91148B3B77E599BF6A86E887BB8772E07D45D00120D4F0672A40CCA1777
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4300-193-0x000001654EEE0000-0x000001654FEE0000-memory.dmp

Download