2f3d90f76d9dcf2a0b51602995e58e9088ec3176960221e34527635fa6cb0b85

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
category/creativity-design/design-art.html
Size 773B
Sample261107-phackscz4m
SHA256 2f3d90f76d9dcf2a0b51602995e58e9088ec3176960221e34527635fa6cb0b85
MD5 eff2769910e001def3da3aa1b37e3768
SHA1 0b4d02c4ba8700d25961eb8ca7e3f52b97d5d819
SHA512 be79e8fb26a04413e839c9df4cb23359f50b5ba078b0db82cad69606534bdfca444d3a6a3b117e8110ebc52620b936f6c0ef415ee331d5bf073b21a00fc13816
TLSH
T1AB01F1EE69ADA2123321E268CDECBF40637302AED600DC8290054CAC51A055785CED7B
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4404	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{0FDD5C54-BBF3-4111-8BEB-D896ED1FDA2D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2976	msedge.exe
2976	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2536 wrote to memory of 3380	2536	msedge.exe	84
PID 2536 wrote to memory of 4404	2536	msedge.exe	85
PID 2536 wrote to memory of 1160	2536	msedge.exe	86
PID 2536 wrote to memory of 4476	2536	msedge.exe	87
PID 2536 wrote to memory of 1160	2536	msedge.exe	86
PID 2536 wrote to memory of 1160	2536	msedge.exe	86
PID 2536 wrote to memory of 4476	2536	msedge.exe	87
PID 2536 wrote to memory of 4764	2536	msedge.exe	88
PID 2536 wrote to memory of 4764	2536	msedge.exe	88
PID 2536 wrote to memory of 4764	2536	msedge.exe	88
PID 2536 wrote to memory of 3824	2536	msedge.exe	89
PID 2536 wrote to memory of 3824	2536	msedge.exe	89
PID 2536 wrote to memory of 3824	2536	msedge.exe	89
PID 2536 wrote to memory of 2076	2536	msedge.exe	91
PID 2536 wrote to memory of 2076	2536	msedge.exe	91
PID 2536 wrote to memory of 2076	2536	msedge.exe	91
PID 2536 wrote to memory of 5040	2536	msedge.exe	92
PID 2536 wrote to memory of 5040	2536	msedge.exe	92
PID 2536 wrote to memory of 5040	2536	msedge.exe	92
PID 2536 wrote to memory of 1932	2536	msedge.exe	96
PID 2536 wrote to memory of 4312	2536	msedge.exe	97
PID 2536 wrote to memory of 1932	2536	msedge.exe	96
PID 2536 wrote to memory of 4312	2536	msedge.exe	97
PID 2536 wrote to memory of 1008	2536	msedge.exe	102
PID 2536 wrote to memory of 1640	2536	msedge.exe	109
PID 2536 wrote to memory of 4752	2536	msedge.exe	110
PID 2536 wrote to memory of 4260	2536	msedge.exe	111
PID 2536 wrote to memory of 4028	2536	msedge.exe	113
PID 2536 wrote to memory of 4028	2536	msedge.exe	113
PID 2536 wrote to memory of 2976	2536	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\category\creativity-design\design-art.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffa4f2cc188,0x7ffa4f2cc194,0x7ffa4f2cc1a0
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,3268761129266669353,10214381217904428011,524288 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1828,i,13720146846719770485,17182539685225895607,262144 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2384,i,8665287650784086235,14468362609687279815,524288 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:8
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,14236476511181550599,15230785092489310164,2097152 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,5167601987369649836,12435323518618376247,2097152 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,10089998355619292466,13300684929969368478,2097152 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,7897280059080720292,13080837368272636069,2097152 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,6875307971148709408,2721575339084712797,524288 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4736,i,6271457429559604549,11976100387250983765,524288 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,11592564588569708989,648562645325141892,524288 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,11592564588569708989,648562645325141892,524288 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3476,i,15493122577237087471,10578878022540464905,524288 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,7168723470194144841,4109857161846341699,524288 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,5148000920762710563,4010387472994785945,524288 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:8
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,13797845548410543227,1160701317401639442,524288 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:8
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=744,i,10915061549180797624,3011922091471593910,262144 --field-trial-handle=2328,i,15877052421401361949,2897745135980134321,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2976

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:808

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1d259402-f07a-4860-8bc4-302a9923cfac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1d259402-f07a-4860-8bc4-302a9923cfac.tmp
Size 8KB
SHA256 914f83827b73d10ceb01b342d066936ac663d6fccccebba0d4eb6a6c02b85b54
MD5 696fa8131545a0dd91672815c463ec61
SHA1 44d877498beb192506c014a0f4e7f852acabcefd
SHA512 02ce4ec06840be24fb6e50aad8a022520dd4fd5699864205161ed2f051e216d96b84312bf537cfd56b1e33adcdc9e3777c73b316811ed30c3746693bbcfb2268
SSDEEP 192:KONR6JUAQmiUysJZo//ihBjkGnPwosD7SNxqqzU6:KONR6+AhZo//iDkEYoPrU6
TLSH
T17E120835B868EC3B9DA39585F08336139E74816BDB856F94C9DC2A1C02EE1AC530BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2b08381c-1eb1-4dc8-8f6a-a0e577eeba15.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2b08381c-1eb1-4dc8-8f6a-a0e577eeba15.tmp
Size 18KB
SHA256 61ddc9abe2d1fb719256f921a3dd5e6f37ac80246505afa6ca2cab5848ef5ce2
MD5 7a76aa3e0c4398bd0863268fda01b384
SHA1 3201fb581352d937caf7fa26af61c2041d2be59a
SHA512 91a0c7e7e1b01f19c1aceaad8ee77ff2f0645cf1763162455a69c9f4f5b39f6464fb97ae44838625ccb9018fd6352e11bafb8f706d16008221d9ae199830aee7
SSDEEP 384:HQkUSv0sNo5xK6q3bYW7h//iDkEYoVrH7vBEncfIIl5:Z0ngt/aDp9rH75EcfLX
TLSH
T175828D71B868AD3B4EA39244F14A36179F78C067DBC41F94D9DDAB1C02DA2D8230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6526d09d-6cbc-47b7-bdfe-b9019435c67d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6526d09d-6cbc-47b7-bdfe-b9019435c67d.tmp
Size 8KB
SHA256 bfe7d30695706cc1054a266e670f4de1b18e1abe65ae87eb59f43605cc61a66c
MD5 152adfed66d65d3598bd8069cae7bac2
SHA1 d6748031047a5482f2a6aada5d6f928e0fe0609a
SHA512 864f8d7fd9e9337af7ff3ad0682394bf288f49640b062dd7bc3231cb3e76d4d19410995451bdd0e6f051ca18ed3163cb8ab04d2d63dc0d389ca530c53701a26d
SSDEEP 96:KqONkNQsjpfbUmjH5ih/cIPURHl8h4otop5caD/BKP4v+Y1xf//ojdMxMY+XhBjW:BONl6JUm0QmiUy9Jso//ihBjU5BCzGU6
TLSH
T19B02D735BC68AC7B9EE39E45F48777239FA4107B9A911F84DAD82E1C01D755C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b05f2e5-add5-4372-a3e0-51a4dce1ad2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7b05f2e5-add5-4372-a3e0-51a4dce1ad2a.tmp
Size 18KB
SHA256 21588e50ddd1056ac0be745fc3b5fcdbde7e7652c78dc0fab679032e40a978d1
MD5 40e6e1775293f81de759e499e724c5e3
SHA1 547c6bb73d8091d7d130e3df2856cebd9b2ba05d
SHA512 8b2daa2c7a09d9b23a52de49584fbbd3ce19f39a1d198d506bde9e76aa3cda7e9432333fa63f8995002b3482af98ddbe38db80fa31b4ea24b4602a02a7383aac
SSDEEP 384:2QkUSv0sNosxK6q3bYW7h//iDkEYoVrH7vBEncfIIl5:W0mgt/aDp9rH75EcfLX
TLSH
T193828D71B868AD3B8DE39245F14A36179E78C067DBC41F94D9DDAB1C02DA2D8230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

4f792250-4f2f-42cf-8298-9c364295ecae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4f792250-4f2f-42cf-8298-9c364295ecae.tmp
Size 10KB
SHA256 2b30b58aefd285dc4360a27c76d1e7043cf9cf3b87739f2c7d944b6b55042996
MD5 8ea8cef2a5bf0977af65225db49a17e0
SHA1 001b0cf48f7440cea13a06949ca8ee7501154aa6
SHA512 a62bd99caa8657c8969563559de808239d6d3fb3fd81449617305c734e780f4a8890b17f2509cfb0bdb7b28e8128aedf97ff6c3d503aa72c3f53398fa5cb86e5
SSDEEP 192:sxZaRHWL/fZsn1sIdpHkHW6+WNGY36po9uIg5zJ:sxZacL/fZs11EHbGX/P
TLSH
T1E022C8126E28697B8CCBD20DBB55BF13E6F9503251D01E58A6FCCA1C05EBADD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5de19296-b36d-46a8-af10-a0d78b140456.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5de19296-b36d-46a8-af10-a0d78b140456.tmp
Size 9KB
SHA256 79133103fb3769a2f1c7e176217b69d5b782cf51644f858298fd4220db3653cf
MD5 35a726cab4ce7f9a1dd11efa4ec7f9b1
SHA1 ecd82f44a28753bc5ca203cb46c07e8cf0d12256
SHA512 f800753e3827a5db780a089679ee3c2d848f5e31869ab7a831f89ad4edece77bd15766cd07f52a44d3e054eebdef2d25aa26435afe037b5895253506da3c7c12
SSDEEP 192:sxZaRHWL/fZsO1sIdpdkHW6+WNGY36WT9uIgrJ:sxZacL/fZsu12HbGXt9
TLSH
T19122B8116E28A97B8CCBD20DBB25BF13D6F9503291D41E58AAFCC61C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91756731-4389-42d0-926f-252872037d91.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\91756731-4389-42d0-926f-252872037d91.tmp
Size 27KB
SHA256 c7f2850d133d2d1e5a809a8d0e6ea76ee313b3376f95b2a6b0e1e545dd1abb48
MD5 029e8b5922b2e24e00c4d5f0a9c7e402
SHA1 cd0843286673ab4f22c86ff86fb54e558cc18cfc
SHA512 4a081bcfb4e85d55cf029e113261b9f10a1589c41c5a93fba82f76afcf8faeedc90820139dc9992775c7bab92cc9ff0ca30c9a3dec519794666f82fab1c09125
SSDEEP 768:1ZKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/+roj2B:1ZKlm7QWvUYe0u1ja8/L/E/Vj2B
TLSH
T185C20A3B740CCB7E4FC04A9DDC5A6F9B6EA802C7A6588D4047FA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9195c67b-6fca-4727-b60c-00d32a55bf12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9195c67b-6fca-4727-b60c-00d32a55bf12.tmp
Size 10KB
SHA256 9f2beb9f8b4ef9287d02ade247a72ba58b872358417690160bd42f46adf738ee
MD5 cb2fc343e84aec85375d3322545e855c
SHA1 1c15e0442df51f5fc59f360205afe5c548b6d18b
SHA512 97a37647417f387282295c5d88c56a2b99414e0992adedcdd3bef7b48a1ef28164eb23316a564bd9773ec6e59a1a7551671d6d76f5dd49744c1967b6df826efe
SSDEEP 192:sxZaRHWL/fZsn1sIdpdkHW6+WNGY36b39uIg5zJ:sxZacL/fZs112HbGXQP
TLSH
T19022C8116E28A97B8CCBD20DBB55BF13E6F9503251D41E58A6FCCA1C05EBACD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 b791193c731bdec9e2c23e609b8572512f704244406a1f1503b07afa8225634e
MD5 78511fc4c65a42b0d64b06ff2e49ada9
SHA1 1d26a6ab116c1268cf5b8542af6772657a86d8e7
SHA512 3c06e0bbf9adc779a8d802675c200b038f0d46fde86f9b98e6476101740301476678c38900c50f339a4c570c63681437c40854554b8093479c5572d8df2214f4
TLSH
T1D65167C741524C60F796C3B7A3F649E3BA34CAC71D9F1E510484ECFA8846FD4C08014A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a5de489f502a90c620939cb6ff7bdc73e0cb155ef99ce3096ffcb0e4dc6ce196
MD5 84c11df7c51b77f7947796f268e8c1d3
SHA1 198c17ccdd08bd05076e6f30a8b80200f96f63ee
SHA512 a9d970caa508cd0a7592dbb1eeaf9c1673447b1955524a7d3d2cdb5c48861927ee1f3510eff7d29820b9d9b078a7f095799df84b36061d07ac37acf091153ecc
TLSH
T1925177C741524C60F796C3B7A3F689E7BA34CAC71D9F2E520484ECFA884AFD4C18014A
MD5 SHA1 SHA512 TLSH

Submit Download

e4448340-e3e9-4322-8252-dae66af8d89c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e4448340-e3e9-4322-8252-dae66af8d89c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

5bd35a10-fe50-478b-bd5c-694c155fcf46.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5bd35a10-fe50-478b-bd5c-694c155fcf46.tmp
Size 949B
SHA256 5ba71f5eb3693a4c75fc75455d77f33d2ae6d4506cde5e63807d8608c6dea594
MD5 6b968d16f666fae452b7c9fdaefea5b0
SHA1 7aca48bf42bfafc4a1abbd8d588cbe39438d5635
SHA512 f7ae5ddb4362274ea14fa42fe90c3163bd0f4adc57824c9248762dbf8b92fadff59b93158fbfac10aa70802014b2bd425bfaee335868fa50be5c25cde8458f70
TLSH
T18C117DF3C7E5856E890116F09A24AE1BCE2D0906421C7C1985D4EF6BD3E3076E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

e7da314f-21a4-427e-881a-ce999712dcd1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e7da314f-21a4-427e-881a-ce999712dcd1.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f5abf743-092a-4f6c-b608-7c75ecf8d959.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f5abf743-092a-4f6c-b608-7c75ecf8d959.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 96668eccd8e275aaafd5b59b79803de7b9b638714b41d90fa481dc82a824f92e
MD5 61036d932e99235096c9baa225f76f71
SHA1 7f93102bab583109c768abf01108ac7677cab98b
SHA512 a09dddd8876d67cdc134741e3011bb6902d79468963cd0ff83d39af8230e9643a2413458e159e9cfdbce0ca0bece1f933a7f0f92cba6bb9828a7a1efc2d36e21
TLSH
T11A117C4A702E05403A7D3D046279D41A8B4332EE3814E46E7E9DC9A53927F206EB85D9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 967B
SHA256 4080ad0ca70672a664db64ed61655ef927262af11a4fc1b5abffaa343e64843d
MD5 b32d79a5861e7ca77b31934dadc85d6c
SHA1 59a58118259972b4fbac658e6396f4c6eb3d402a
SHA512 d09415a1c5b489d17a9a4bc4d2b1713447b5b97ea004d839180686864e0d97c245d9569c65f1316a3fcab0b6f38467a485080d96ec4d182bf0f2414706918f34
TLSH
T18F114C5AB12E05403A7D3D046279E41A8B4332FF3814E46E7EADC9E53927F205EB85E9
MD5 SHA1 SHA512 TLSH

Submit Download

b73dc05b-7303-4e37-a13c-287cbc3229c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b73dc05b-7303-4e37-a13c-287cbc3229c3.tmp
Size 9KB
SHA256 3091ece412e695ac7b197b7d0112fdc46cad428aaaeb0f98618d6f3eb8178de1
MD5 913dbcc76b176cab1d8474d6e1b0ecbd
SHA1 ab647696d45ff7d06ed71f8f8f7055f29b881a23
SHA512 4102591ace5ae7f1396c669c3f14f8d004a90d543f7247c9b7f91cb1cc222ed654b63a8c722f1a7d6057958cf443d87721506b4619578f8e911b4bc61996b65a
SSDEEP 192:sxZaRHWL/fZsj1sIdpdkHW6+WNGY36WT9uIg5JJ:sxZacL/fZsh12HbGXt5
TLSH
T16D22C8116E38A97B8CCBD20DBB65BF13D6F9503291D41E58A6FC861C05EB6DD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6c8cc33-4fab-4fea-b1dd-b418362af52c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c6c8cc33-4fab-4fea-b1dd-b418362af52c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2218e04-7fab-4685-aea0-1782623a3bdb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e2218e04-7fab-4685-aea0-1782623a3bdb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1427cb2-95d7-4e13-ac8f-5f03334e8b04.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d1427cb2-95d7-4e13-ac8f-5f03334e8b04.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f47e573c-7f58-4a83-9e57-00af4088e484.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f47e573c-7f58-4a83-9e57-00af4088e484.tmp
Size 21KB
SHA256 73436f7ada7e6e5a30b5ef3d15bfafe30596376757848e2e4f032ad1cf8dc4c2
MD5 09cde0f63bdfd5b241e0629730c5a473
SHA1 70956f82f6358693bdad54b5dad88097b9be4a67
SHA512 b85f97588049d4ee182ee06c4150d5533c1b37f6acdf8c5989ab1f76715865254d7d8db9a7b72a5c4feacc97f9972189896e29e81ba5949d08fe5767218f3272
SSDEEP 384:OiFzQkUSvPzsNY8TUNTUlIlsxK6q3bYW7h//iDkEYovrH7vBEncfIIl5:lFdrhwgsgt/aDpXrH75EcfLX
TLSH
T1BAA27C72A898DD3F9EE39B44F14A3217CFB480A7CAD59AA0E6CD9A1C01DB1DC134BD11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b06e4963e0717e86d4ef4a05fe2bce3f8496296f3a16e27719e9e936a36a6b1d
MD5 cdcac80b9e3b75ea6aaf173189d46cda
SHA1 27853cb8589c1eaeb630e683510abc3614433ba3
SHA512 52bc061207536e1c5f7432539e69d8ce65d0f12c48c2ba4f4341bf7d4b9f762f694cb095cac4f49a885ee081ae4e96448f69d1da8d37acb75d63d8665a8461eb
TLSH
T116416D58B6F91148B377AE5AABF7A86D48BFB9372E0BC55E00120D4F0622B40C861737
MD5 SHA1 SHA512 TLSH

Submit Download