749e998df02b426772dd42e77af79690dd8e52ac52fcbed28bdae257359dfd7e

Analysis

max time kernel
148s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2025/04.html
Size 770B
Sample261107-phackscz4m
SHA256 749e998df02b426772dd42e77af79690dd8e52ac52fcbed28bdae257359dfd7e
MD5 4c6db0ec2ecd72020ed67c8572e85f07
SHA1 a1912e1f9475e70c18987b02ef76b410511f9ab7
SHA512 5dd66ad533c4f5d65f0993f597bc5ea519ebe052a7fc5e7f30d5385dd326fabee37a14709eee5f46b307a79fb375488fb160012065fd99d69cbaea76e00266c6
TLSH
T17601F1EE699DA2123321E268CDECBF40627302AED600DC8290054CAC51A055785CED7B
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4164	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{79C0A0EC-B3D9-47AE-B282-2A9532EB5F9E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1816	msedge.exe
1816	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe
4576	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4576 wrote to memory of 4476	4576	msedge.exe	85
PID 4576 wrote to memory of 4164	4576	msedge.exe	86
PID 4576 wrote to memory of 2712	4576	msedge.exe	87
PID 4576 wrote to memory of 4548	4576	msedge.exe	88
PID 4576 wrote to memory of 2712	4576	msedge.exe	87
PID 4576 wrote to memory of 2712	4576	msedge.exe	87
PID 4576 wrote to memory of 4548	4576	msedge.exe	88
PID 4576 wrote to memory of 4000	4576	msedge.exe	89
PID 4576 wrote to memory of 4000	4576	msedge.exe	89
PID 4576 wrote to memory of 4000	4576	msedge.exe	89
PID 4576 wrote to memory of 1380	4576	msedge.exe	90
PID 4576 wrote to memory of 1380	4576	msedge.exe	90
PID 4576 wrote to memory of 1380	4576	msedge.exe	90
PID 4576 wrote to memory of 4672	4576	msedge.exe	92
PID 4576 wrote to memory of 1508	4576	msedge.exe	93
PID 4576 wrote to memory of 4672	4576	msedge.exe	92
PID 4576 wrote to memory of 4672	4576	msedge.exe	92
PID 4576 wrote to memory of 1508	4576	msedge.exe	93
PID 4576 wrote to memory of 1508	4576	msedge.exe	93
PID 4576 wrote to memory of 2316	4576	msedge.exe	97
PID 4576 wrote to memory of 2316	4576	msedge.exe	97
PID 4576 wrote to memory of 4780	4576	msedge.exe	98
PID 4576 wrote to memory of 4780	4576	msedge.exe	98
PID 4576 wrote to memory of 708	4576	msedge.exe	100
PID 4576 wrote to memory of 4984	4576	msedge.exe	111
PID 4576 wrote to memory of 2892	4576	msedge.exe	112
PID 4576 wrote to memory of 2952	4576	msedge.exe	113
PID 4576 wrote to memory of 3028	4576	msedge.exe	115
PID 4576 wrote to memory of 3028	4576	msedge.exe	115
PID 4576 wrote to memory of 4616	4576	msedge.exe	116
PID 4576 wrote to memory of 4616	4576	msedge.exe	116
PID 4576 wrote to memory of 1816	4576	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\2025\04.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffc001ac188,0x7ffc001ac194,0x7ffc001ac1a0
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,10892659654049335706,5938225597515473096,524288 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,15470601970494782428,9475216966167717382,262144 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2416,i,5668650970882205607,2240340469225764095,524288 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,6185768958500126085,3860087841484085221,2097152 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,2215941331945307506,14392891676915968220,2097152 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,8833334643062221076,18032798601917563005,2097152 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,9701579598363735852,16211329698183738483,2097152 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3472,i,2930382480107659131,6794205986574550352,524288 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,1441089650888062754,5197302973750897320,524288 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,13333411104142542814,12417993876907550247,524288 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,13333411104142542814,12417993876907550247,524288 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3528,i,6368678000808365224,6115609196912375098,524288 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,16338209532116926905,13627666772958706412,524288 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,15456895887217775619,9268259316461724436,524288 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,7386164160661455108,18091436138416719878,524288 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,4670154764488015892,12376275161579809261,524288 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6520,i,17554815637623935639,5478165920434017566,262144 --field-trial-handle=2360,i,16865252180878962277,14488948695731155768,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1816

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5076

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4871e226-6d88-4c1e-be71-58ed67ec1f28.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4871e226-6d88-4c1e-be71-58ed67ec1f28.tmp
Size 18KB
SHA256 870199cf00407f5367377ebd649635e1f418ae8fdb1d92920a2823ff85484641
MD5 9cf9c76cc6f12aaf738c9ebe53e7d1a7
SHA1 d132b6a246b5a828c966a0d95e9c1240c78ba7b9
SHA512 ebf747913585f894fc18cd873945275906ef1eb16ac54d0dd3e9398e1aa92912d5ee617d1ae7686a33dfdbb100be88388899c387cffbeb7c360660e85167454f
SSDEEP 384:5QkUSv0sNWGwHCnuBzOjTVi0OGCj7+20qfH7vBEnc5IIl5:b0rinFOxj7ltfH75Ec5LX
TLSH
T145826C75B8686D374AE3E244E14A3687DFB8D057DAD62B90E4DD5F2C01CB2DC230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

61c8a335-ddb5-4d41-9d9f-eff9bb0d6604.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\61c8a335-ddb5-4d41-9d9f-eff9bb0d6604.tmp
Size 18KB
SHA256 01c0e9ba98192a1c0059945588f9cb86e7a3a1e22972d89e55cb55e0971f54d2
MD5 56176d29b264736733e22bd2dcc1002e
SHA1 39d694253cc76c54b00e14631c0c5eda05026038
SHA512 b196f64dd887b220a2f485a54541a45da5ef071427377622f8ed20cb775e8cd1ca038f6accac7238ae1d5658d1dda460a0b4a6facbb5487716cf9aa4673db97a
SSDEEP 384:cQkUSv0sNWzwHCnuBzOjTVi0OGCj7+20qfH7vBEnc5IIl5:c0oinFOxj7ltfH75Ec5LX
TLSH
T178827C75B8686C3749E2E244E14A3687DFB8D057DADA2B90E4DD5F2C01CB6DC230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7e5f8998-17c9-445c-9a19-244031aaa722.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7e5f8998-17c9-445c-9a19-244031aaa722.tmp
Size 21KB
SHA256 bd1b59a7811827f0f372fe6db923eec65a1157847e7611c4bbb611e444acf58d
MD5 32c74e4e5d8e659d250a94ee1e2a8718
SHA1 b5c5b668862a62f0f4bd8fde0f15880262ce11e0
SHA512 220eaf5f55fe0e4c6f8b4e9391f4eb7fc61585f80ae7005f062b506b4f943a6d8c884167780c496ff97e7ce3f6866b6a44a5cb0c0f4c7d0f17e0b08fd09cad3c
SSDEEP 384:piFzQkUSvmzsNW8TUNTUlIlzwHCnuBzOjTVi0OGCj7+20+fH7vBEnc5IIl5:AFdWfwgoinFOxj7l/fH75Ec5LX
TLSH
T18DA26C72A8549D3B9EF7DB44E14A3647DFB480A7C9D66A90E6CC5E1C01CB2DC234BD21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9637cbf6-f404-435b-9796-a19b9f56c3bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9637cbf6-f404-435b-9796-a19b9f56c3bd.tmp
Size 8KB
SHA256 788771f7938519067f61d615a2a867ec3027c2c3a05efdb7795e4d70b083d4a9
MD5 01f115951b125cc1f259c378445d4a39
SHA1 40387af446c5c3d3137849000d9e5bf71c1cb230
SHA512 a80ca8cf9f39d87532c3fb798494beafd9a3dd24b036b68f6af8e533696569b257b0e23b59a41fed9c9d150e15892bdc8303276da788108e9a5f07664e387f09
SSDEEP 192:bON36yYQmiUya8hOCTVg10OQmMCj7+20z3UlqeU6:bON36z6hOCTVi0OGCj7+20wfU6
TLSH
T13C121935B8686C775DE2A684F48B32578FA84167DA467F90D0DC2E1C01DF6AC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

020d270a-b49c-4661-aafc-79ec4853f9fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\020d270a-b49c-4661-aafc-79ec4853f9fd.tmp
Size 10KB
SHA256 362cdedb6ec24288e65198bfddfe732410c53e6fcfb0f8bb39a14c7e36a46324
MD5 82b34c5454b7ad594b5e5313e839d637
SHA1 35142d356cc10c26bcaaa5caf32ec9a78b677448
SHA512 c9454d91ebf52dcc243a8482711ef3ac2e1cbbd7d57f4c0adf9ee8983940fef27618821ed3994673cd387bf177525df6029210bd00fa457c2193fad9ac3c6d6f
SSDEEP 192:sxZXRXWq/fUs4cIdpdsHW6+WNGYRPnMLtIg5ZJ:sxZXMq/fUs4FuHbGm6l
TLSH
T18822A7156E38A97B8CCBD30DBA55BF53D6F9503291D51E48AAFC861C05EB6CE230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

358047b2-5b33-41e9-b461-0628fe29698e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\358047b2-5b33-41e9-b461-0628fe29698e.tmp
Size 10KB
SHA256 e7731f4c9a6d8154ea2906f8b9c0a9a2477c42f48c0a8e826e8852858dedca8f
MD5 d7af0e817fa0f0b26353eb94540e6fd7
SHA1 5e8ccd87eca5831e2ede3f1306c14e5439785181
SHA512 32005e26c56e6f3515dec5b8b576e8cd7c6d7e06955cf69878f804647de493752bcb1f94f88c2d89fa32f45d28afc151224c1d72c3f0c5199158a08a77acfe9e
SSDEEP 192:sxZXRXWq/fUsjcIdpHsHW6+WNGYRPBjZtIg5DJ:sxZXMq/fUsjFMHbGmpL
TLSH
T17D22D9126E38A97BDCCBD20DBA54BF53E7F9503251901E48AAFC861C05EB6CE230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c550f76-dd3f-4549-8d33-db246a50e224.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4c550f76-dd3f-4549-8d33-db246a50e224.tmp
Size 9KB
SHA256 edcbd88411b91416e5f6fdbe60de8eef9d0144c12882b524ee7c92e6ca6d65b6
MD5 6a14ba41a85c49e2defccfebea276501
SHA1 286e1f9b3ea621682de1ded20a52e18d71e11257
SHA512 c1f09525d090a6c618a05aaf4f14002a4298d968d6f864c3e327c1ed37455fd73f06a08e68b1b494f135cad4ba8bd3959a8aed2d60d2c7f42d0a91bc8ad2a1f2
SSDEEP 192:sxZXRXWq/fUsxcIdpdsHW6+WNGYRPnMLtIgrJ:sxZXMq/fUsxFuHbGm69
TLSH
T1F822A9116E28A97B8CCBD30DBA65BF53D6F9503251D51E48AAFC951C04EB6DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

891de63e-7218-490b-baf2-e33355ded5c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\891de63e-7218-490b-baf2-e33355ded5c3.tmp
Size 10KB
SHA256 30b823d3cfe162dd0bb05c981ed36b068cff1178f6380f45c65ce29aa06c9a58
MD5 5f97680ccc61999375f272db0386308c
SHA1 1f2d29d238cc560790ff252a9fa1179bcc69719b
SHA512 8d8c5f6472856dd9a5363ade9b617741679bbf9a6a3e13fb31a996a62a187dc7c44c7f709c38f901345b99d664e0efc4434cc0f7ba06c4ccae035283669ebade
SSDEEP 192:sxZXRXWq/fUsjcIdpdsHW6+WNGYRPFkLtIg5DJ:sxZXMq/fUsjFuHbGmoL
TLSH
T16822C9117E28A97B9CCBE20DBB55BF53E6F9503251951E48AAFCC61C05EB6CE230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 5f860324592630451162de7cc12240d2138fa13d049af269ebe9d4476d283c69
MD5 d42fbd4cf04765a5df1dd1ed5e924bee
SHA1 2014107651f0bdd66e973a8d24d09bf3792d96f9
SHA512 a8557297c789b079ec4e14b12a89bb410f360082133bd2db09ae90a10c522db53465eff45837b978c050abc61db5842938b4d6db21e1cc2bb0391f7933ee78a8
TLSH
T116E0268465CDCA2FB348A84701ECA38C82D1379B93C07A0E6F4CC98D7203440B3C6BB6
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 b187132cdffa2419372253c50171e98d8e68a3293fd1eedf6dd863e99e994b8d
MD5 c9f06a135075758beb55d7b5f191beb7
SHA1 7d757c107b5a5bde32964065bba55a5a6c957c52
SHA512 f95eec5f30200ce3cea8f007b78b19965018bc77b4d01fc0d2c9f2cf44faa384418562e9874699b8c199592e6a3d3fd03e6cc5e8497882df637144cdacc5e074
TLSH
T12D51B98585918065F7E8C17BA2FA1ACBBA3C678055836F1136EFFDFA9C7671AC108040
MD5 SHA1 SHA512 TLSH

Submit Download

773a0b3d-d39f-47d0-9850-1008d10f851b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\773a0b3d-d39f-47d0-9850-1008d10f851b.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

5bc3c293-4baa-4742-b361-55a5e107fb43.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5bc3c293-4baa-4742-b361-55a5e107fb43.tmp
Size 949B
SHA256 0f22ab430d06b1c3ecdfda5fef6999867064ae7b2b4794ed7877b3c35582aecf
MD5 a8c4ad459867047403bc2ef87a69fc5c
SHA1 c454ffc9041ed0c877f413a7e70f32f8ee6c0d1a
SHA512 3d6276e41c6e80c0af116f13fcfa5b1e6e3c21c91f41a875ee67597a6357c0355ce590ccda318252c6a2048204d4328afa4b049d9dcafe86aa4edbd3c0c90f28
TLSH
T17D117DF3C7D5856E891156F05A24AE1BDE1D0905421C7C1985D4EF27D3F3079E10255B
MD5 SHA1 SHA512 TLSH

Submit Download

8e3bc4a3-6773-4ff0-a3ab-4d8f744f5c0a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8e3bc4a3-6773-4ff0-a3ab-4d8f744f5c0a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

98488f35-14c7-4baf-8388-1e13ef184faa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\98488f35-14c7-4baf-8388-1e13ef184faa.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1098f974bba74e5976c376ddce78ad26a0295da59bb12362b5239a079cfd715c
MD5 6de9294de72d753eb0db57e1e54a252e
SHA1 59ca3bcf2c0033b5dbef798bf77a7f72d1338478
SHA512 ff6db3c975333475899fe69d0a538efc042ef70f73f7205935c794c204b426ccca5063adbe266c7fbb670ec54cbb8cec8e85e81247a0c99ae62a2e4d246dbfe7
SSDEEP 768:EWK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Lroa+w4Q:EWK9uzYWvcQWsu1ja0HL7Q34a+w4Q
TLSH
T1E5C20A3F640CCB7E4FC01A9DDC5A6F973E9802D7A6684D5047FA984C02C73EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 433c4409ee70c47ffc3eee6aa228f0c96119547f10f830524192836a899c17e6
MD5 6baac2bba05c957c27d03e34747cd9a5
SHA1 322fc3e2052f2e026ac0210fc9cdc948420b118d
SHA512 bacf24a182cf4e1c3f73ee668a6c2362f6c3713a913d41855917e074c59148dbff8509fa3e9c5cbe0a67da31938498395f1309b305de040ca64e89157d50c229
SSDEEP 96:K0mgeNiOw8YEI83viWEK6hi4EmuOXwuZPJoPTBDvjI/OSibjK66i9jm5xmHWhKKp:zlXeM
TLSH
T11391D74570BB02443DBD694884F59A2B568232B73018F52F7FBC44B59EABE045EFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c3f0a816-a93e-4f1a-98b0-7912c5632c4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c3f0a816-a93e-4f1a-98b0-7912c5632c4b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f820169c-15c3-4dd3-a540-955d2fc785a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f820169c-15c3-4dd3-a540-955d2fc785a4.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

ae852765-4c09-4ba8-9c7f-f64a91688499.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ae852765-4c09-4ba8-9c7f-f64a91688499.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

add81bf5-843f-4af5-800f-7c82c6c2dbb0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\add81bf5-843f-4af5-800f-7c82c6c2dbb0.tmp
Size 8KB
SHA256 9548e53fc43652ee48c4d61aedcdd710f2e8c9527f2f7d79c094bb1dbe0627a7
MD5 6a00e6e842587e0d7e09853c51b207fe
SHA1 a859d565330dc5f72010ab7b3ca68cc56292a5d8
SHA512 847551866b33d1b95fc1c4918d03a11f86fbe83ff15a09b2174a36478fa73c326beddc6df8e2f480c40f58186fd7b47e2aa094e088aa880855433eb8a6b8d1f4
SSDEEP 192:SONY6ygpQmiUyg8tOCTVg10OQm4zPI0VU6:SONY6lH2tOCTVi0O8lU6
TLSH
T11E02E734BC783CB78EB3AE49F58B27179FA4116BDA522B84D9E81E1C01D765C2307936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2cc0aea0-5078-4682-9aa5-e26898b98569.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2cc0aea0-5078-4682-9aa5-e26898b98569.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 77bc46e665e413ed3f14bb98209ba60ef6a4a6cce112a56f7013ee95452e9d9c
MD5 a8ada80c3f6ebc98d7d5fab993cb1a8a
SHA1 e75c471b1e39ca49eac73211d7d26f0976af0b78
SHA512 2f614238f5cbc560d3435735dcce163d375dbd10c1441b5263023004091817234f0f422b1a7f84e771bbc3e71c0b1a101da3f8cf6032da7188bb788367fc1b6e
TLSH
T14941D759A6E92148B3B76F5AABF6A96D98BB78373E0AC45D10110E4E0623B40CC71737
MD5 SHA1 SHA512 TLSH

Submit Download