749e998df02b426772dd42e77af79690dd8e52ac52fcbed28bdae257359dfd7e

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2025/05.html
Size 770B
Sample261107-phackscz4m
SHA256 749e998df02b426772dd42e77af79690dd8e52ac52fcbed28bdae257359dfd7e
MD5 4c6db0ec2ecd72020ed67c8572e85f07
SHA1 a1912e1f9475e70c18987b02ef76b410511f9ab7
SHA512 5dd66ad533c4f5d65f0993f597bc5ea519ebe052a7fc5e7f30d5385dd326fabee37a14709eee5f46b307a79fb375488fb160012065fd99d69cbaea76e00266c6
TLSH
T17601F1EE699DA2123321E268CDECBF40627302AED600DC8290054CAC51A055785CED7B
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4256	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{14321065-0115-43F1-A747-B55D094502B3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4100	msedge.exe
4100	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4360 wrote to memory of 1280	4360	msedge.exe	85
PID 4360 wrote to memory of 4256	4360	msedge.exe	87
PID 4360 wrote to memory of 4872	4360	msedge.exe	88
PID 4360 wrote to memory of 4872	4360	msedge.exe	88
PID 4360 wrote to memory of 4872	4360	msedge.exe	88
PID 4360 wrote to memory of 3080	4360	msedge.exe	89
PID 4360 wrote to memory of 3080	4360	msedge.exe	89
PID 4360 wrote to memory of 3572	4360	msedge.exe	90
PID 4360 wrote to memory of 2728	4360	msedge.exe	91
PID 4360 wrote to memory of 3572	4360	msedge.exe	90
PID 4360 wrote to memory of 3572	4360	msedge.exe	90
PID 4360 wrote to memory of 2728	4360	msedge.exe	91
PID 4360 wrote to memory of 2728	4360	msedge.exe	91
PID 4360 wrote to memory of 3932	4360	msedge.exe	92
PID 4360 wrote to memory of 3932	4360	msedge.exe	92
PID 4360 wrote to memory of 3932	4360	msedge.exe	92
PID 4360 wrote to memory of 4336	4360	msedge.exe	93
PID 4360 wrote to memory of 4336	4360	msedge.exe	93
PID 4360 wrote to memory of 4336	4360	msedge.exe	93
PID 4360 wrote to memory of 1468	4360	msedge.exe	97
PID 4360 wrote to memory of 1944	4360	msedge.exe	98
PID 4360 wrote to memory of 1468	4360	msedge.exe	97
PID 4360 wrote to memory of 1944	4360	msedge.exe	98
PID 4360 wrote to memory of 3880	4360	msedge.exe	100
PID 4360 wrote to memory of 3204	4360	msedge.exe	109
PID 4360 wrote to memory of 1672	4360	msedge.exe	110
PID 4360 wrote to memory of 2452	4360	msedge.exe	111
PID 4360 wrote to memory of 4780	4360	msedge.exe	113
PID 4360 wrote to memory of 4780	4360	msedge.exe	113
PID 4360 wrote to memory of 4100	4360	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\2025\05.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffe32adc188,0x7ffe32adc194,0x7ffe32adc1a0
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,487206192557943352,8277247859845491564,524288 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1884,i,14725150987006594385,15188864719553101770,262144 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,9740057506939045502,7638985151438300404,524288 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:8
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,14804960040699412763,2100244926986429155,2097152 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,17389906672944125819,4571415305014441766,2097152 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,16562443176476882258,1409392325182573947,2097152 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,8766337817144833084,12128020268903344531,2097152 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,3708853229196031451,14318818467738254990,524288 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,3250324381232896144,834553667632751300,524288 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,18426440177353239563,9272334309145318327,524288 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,18426440177353239563,9272334309145318327,524288 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,290822225771130908,13898105492733501861,524288 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,16692533505749943680,493683781251070723,524288 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4880,i,15786378798962549470,2366257711223878101,524288 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:8
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,10191301387281671356,9146668174000453168,524288 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5872,i,18132508762909355687,8072577627834539427,262144 --field-trial-handle=2260,i,11297340536653001327,7211819610922367466,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4100

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3fd23bff-fa63-4764-aaab-5974bf65cbeb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3fd23bff-fa63-4764-aaab-5974bf65cbeb.tmp
Size 18KB
SHA256 d4cf411eacef4476a455af8c40e2c90c18d5d4806391f579544930de21e36a42
MD5 97e34b5186b62ce0d2370befe0b047de
SHA1 8c2175c4bd4198bb36f41b9ff43e687ffd58342a
SHA512 93912aadbf1303b3c7a44cb071fe3dd172565d67b4182e1dc3c9edee8f8ba8dc1cac3ba0893e18fd8b2c3b42f9ee535ae9cef7035ed4c253755bf1b10bb3a2ac
SSDEEP 384:+QkUSv0sN0lEZrS0yHX58EV8GAqXHJrCNH7vBEnmt6IIlb:u0yI0Ua2HhCNH75E46LJ
TLSH
T10F827C36A4686D3B49F2E648F14A3603DFF8D117DBD91B90D6EDAB2C01CA69C134BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

593fca07-1030-416d-a712-d8cf0daff8f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\593fca07-1030-416d-a712-d8cf0daff8f1.tmp
Size 21KB
SHA256 869280326852faf10d8f98042700b70f85e618f66d6391a96a994dc262c25d19
MD5 947cabd1fd2815e0be11252166f8458a
SHA1 b3610e7106ffd66f4f9060f1ebdf04851846ab1b
SHA512 107adce34b9e0bfc39362c690e58de3816260b89a02b346bf81d057b83a95c8dcaebc33ed5d7a0562c14006ad30a15beeb098d33643fd1a68850cf15a5f504d3
SSDEEP 384:+iFzQkUSv8zsN88TUNTUlIlKEZrS0yHX58EV8GAqXHJrZNH7vBEnmt6IIlb:VFdAdwgLI0Ua2HhZNH75E46LJ
TLSH
T110A25C7298989D3F9EF2EA48F64A3213DFF48167CAD56B90E7DD9A1C00CA19C134BD11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c354193-3d86-48b6-9032-6de556d71329.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8c354193-3d86-48b6-9032-6de556d71329.tmp
Size 18KB
SHA256 0cdc4123f75edbb4deb09783ffb63b17eb66b084702bdfc2449b2695c579a005
MD5 eb8850bd25684c8a39e7f4b7fc8941a0
SHA1 167069d3f2410e9bf726a0e76b6cb87d3d8c5e48
SHA512 835c63872a0a3317ca312fda9d8a82b84dd1219ade0b7bb8b2ea368d45be6f01a128819a88c43bcf44c17f5b8f915e32490e1868d7f37f0564c85e8ca72320b8
SSDEEP 384:ZQkUSv0sN0KEZrS0yHX58EV8GAqXHJrCNH7vBEnmt6IIlb:701I0Ua2HhCNH75E46LJ
TLSH
T1D3826C75A4686D2B49F2E648F24A3603EFF8D017DBD91B90D6ED9B2C00CA69C134BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90d48560-7fda-4940-b5c4-2dc15d4b540c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\90d48560-7fda-4940-b5c4-2dc15d4b540c.tmp
Size 8KB
SHA256 01acfd54293b90905cd80e6d3dc74ff8d33825776080ac59bf5efee693d1523e
MD5 9584b3912a274113cb190046e71ba969
SHA1 9da48e13a79ee676ccd9828caa02f307a5be954c
SHA512 451f2c209c643d62e90d3ef6005e1c527ff50d2ffa6c4f7e5b05e3ffe6791026810ced76e61321f51131b796002fcfadc02493f813f3a8b352d1657d93ce1a76
SSDEEP 192:1ONCq6wlDgQmiUyWGW4X58gZ5jzorGArDlJ0U6:1ONp6kgUW4X58EV8GANyU6
TLSH
T1BB02F935F8687C7B8EF2AE49B58B26139FE5102BE6952F44CAEC1A2D00D765C1347923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

45fe0079-c583-4f9d-9499-1679c7cb4a44.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\45fe0079-c583-4f9d-9499-1679c7cb4a44.tmp
Size 10KB
SHA256 45488c8c5d47ca167f211f72c04fc3c5cf0c77d7b4273441263594d00b1c5955
MD5 1bfe5c35656688a4e1a88ac6a1f88704
SHA1 6916f9f134dbba8846e6c57f440ed74ead207cbc
SHA512 8f7cfa2983c02169062eaf9f674e9c6e634fe03f964556a3a6a1eeb789fcf685f7eb662af2861bb17fb3a13783d98f5ea481e01f942e08952d7e97e6afed90e7
SSDEEP 192:sxZ7RCWW/f/s/uIdpd3HW6+WNGYrbn5LIg57AJ:sxZ7LW/f/s//dHbGMW
TLSH
T1DE22C8527E28A97B8CC7D20DBB55BF53E6F9503251951E48A6FCC61C05E7ACE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4e31166b-dfa0-4531-9953-491af029e579.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4e31166b-dfa0-4531-9953-491af029e579.tmp
Size 10KB
SHA256 38d778f6b6799fe8aad24aa4f08042d72143aff1bffc417f45c589d2f2582a0b
MD5 e602150244e35a00f509ca298c1fec2e
SHA1 d22972a68b4f877025ba2d724e7691726969e0a6
SHA512 80184d5509cf123ee1ff154532ae848e946d0bdfbcffcb6cdeaa123812dd0ff6409b917fd5b04d5cc0e63255731ae25dbefc620e8776c3bcf1c308e8e2a61ee2
SSDEEP 192:sxZ7RCWW/f/s/uIdpH3HW6+WNGYrMUQLIg57AJ:sxZ7LW/f/s//XHbG/W
TLSH
T11722C8526E28697BCCC7D20DBB55BF53E6F9503251941E88A6FCC61C05E7ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6402077f-24cb-437a-8519-41a961f17539.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6402077f-24cb-437a-8519-41a961f17539.tmp
Size 9KB
SHA256 c55e6ff0ebca342fc2432656f523108c603a523c095f9eff067be2e21efe361b
MD5 537b1b474617e10c0ce9aec67245dc63
SHA1 d4bb26710573d1bb14233e956b10b4668c0dbeeb
SHA512 5016f11e693d4541b4e6688752fa314a02e95f01eb9a4562ec077bc518ff4b3c0ea97bf3b7e51219553e817f6283159fa6b8ebf980f38e400880054f808d4683
SSDEEP 192:sxZ7RCWW/f/sGuIdpd3HW6+WNGYrv15LIgrJ:sxZ7LW/f/sG/dHbGy9
TLSH
T19822B8526E28A97B8CC7D30DBB29BF53D6F9503251941E48EAFC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

72599a2a-19e6-4903-8009-4b98698797ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\72599a2a-19e6-4903-8009-4b98698797ff.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

8b569d14-6f19-4ad5-9105-279c29ee7ceb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8b569d14-6f19-4ad5-9105-279c29ee7ceb.tmp
Size 27KB
SHA256 cb75bf1ed14bb24fac3fad230f236b89c7d6d058d8c27eefe0d7e0e055a47873
MD5 e424742b1baf8b5501185e1644a901de
SHA1 4c9045344a66309e3f201e4afad9ddce39d30271
SHA512 cc91cd1fca92a0f32f799d71a89c0b05d5a0cea46f8cb85b41611734257f1827c47d9a2618f1bc20a8f6066a9218897fd11e5c2549e35e9d125c34ffee55e0c7
SSDEEP 768:+Dy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbZroRbk:+Dy4J/DWvbtBhu1jajiLm0bS9k
TLSH
T12CC2FB3B644CCA7E4FC01A9DED5E6FDB3E9802C796948D4047FA994C02C77EA51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

936312f7-c3dd-4d73-9dc7-de6e21619a12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\936312f7-c3dd-4d73-9dc7-de6e21619a12.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 d3d50e8a8d33b7fd3199d8269c59fff8a15059c1e429033f0b36852e3b2318ab
MD5 8e4dc7cae7b77481180181bed681dcb0
SHA1 32ae8d6c91ca9998dc4121402700f9431435f925
SHA512 e64f512aa2bf2d54a815ace926c4e8dbf89a97a2f7620c78962ae75d29bc37d05f3b5b02ea3610cb92f0241aacbe86a5623421fc19f430ceb892e0844567d842
TLSH
T1C05192A4C64193DDFBE4037867C52F973638B484A5873E8200A7FDBB580A71C7143474
MD5 SHA1 SHA512 TLSH

Submit Download

fd9df46b-d01c-477f-a5e4-ae7ce7d685d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\fd9df46b-d01c-477f-a5e4-ae7ce7d685d1.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

7762d714-12ae-45c7-9faa-8a7834949cbf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7762d714-12ae-45c7-9faa-8a7834949cbf.tmp
Size 949B
SHA256 9ab8847845c58cec61b9dbf70badb1c121add09108914f4b48900908069fb59a
MD5 5205354386fcb72490a9828480975ed8
SHA1 f69db2d868e774608fdc0796d26739a4a4ac9829
SHA512 35f75a6c3055e04b74178eca0200d6761ece3452cc86b2b77fb02e31d06b8e7560b3099a9da739b32b7ffba9181acd9f2076fe3b1866a8ca62ea6b25ab02aae1
TLSH
T16C117DF3C7D5956EC90156F05A24AE2BCE1D0A05821C7C1A89D4EF27D3E3075E002A5B
MD5 SHA1 SHA512 TLSH

Submit Download

9f99b407-7231-480d-b620-453e1fa2b67a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9f99b407-7231-480d-b620-453e1fa2b67a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

e496252e-32f5-49d6-9558-eebc42b9d190.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e496252e-32f5-49d6-9558-eebc42b9d190.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a238d5dc1bd8511fefb2974ba961750dc418c29bd80245e082ff1cc4cb683410
MD5 e03e2ca31eeb182f4252ae8aea36346b
SHA1 d86324e0a831f5580504e25b39ea900794cf54fa
SHA512 4a36ee06ca59fa67a0ac98218295bb4b3f93a035a02a3ae763b9b7edd90ab40ba05153902f5168be28f2b7e9a796d664b67b49e0897c5e96e71fe313edce8fff
SSDEEP 48:KIDI1Ks04jyLbef70DCOcey7bCxKISm7K9C1Q8xhsYarhhyLEzy+suCLbyB6ISWH:KIDCKs0+r7GKIXq+T2Kg04
TLSH
T1FF91544535BB065138BD258C82B5871FA28232737118EA2B7FBC50A69F6BE040DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c1a692c2-db09-44b3-baeb-115b62bd6b69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c1a692c2-db09-44b3-baeb-115b62bd6b69.tmp
Size 10KB
SHA256 b27d248ba529794351d6d443f2d8cfcf2ff4cc2105519d0ba1e82fb7ba6dd3bd
MD5 49756449d75e733148213b98fe173f11
SHA1 5f52c8f67a20902775c089d7a37aa2c18639aacc
SHA512 87d4d2e0eccedc79dde176082aa73e804823b61e9ade36189f2815f1f83acbfecf5f0311d47cf2ff4520ea2b9ab7ed3ce3a287dcac394399fb4e02c66e26d15d
SSDEEP 192:sxZ7RCWW/f/s2uIdpd3HW6+WNGYrv15LIg57qJ:sxZ7LW/f/s2/dHbGyc
TLSH
T1E122B7527E28A97B8CC7D20DBB59BF53D6F9503251941E88AAFC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

e1e8b4ba-2d3a-4c00-a072-c1702a7e705e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e1e8b4ba-2d3a-4c00-a072-c1702a7e705e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e86f9834-e684-4755-a05a-3761ba843b10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e86f9834-e684-4755-a05a-3761ba843b10.tmp
Size 8KB
SHA256 57726a5dfe0d8e53e32066a5d22b32cce07c4fecacdaad10ef0e51b457835b52
MD5 7677b3be8e280e4ebf126a976361f512
SHA1 180efbbee9077fae13a91b20fe1f5e0c6b06dec5
SHA512 ad9e04533032d24a337149251e920d176f1cd340771ee4ccd647c07671a1faaa4655bf79ee841995ea1965e1756cd9279773bb6ac282acc582a396ea24925c69
SSDEEP 192:tON96wlDHQmiUyOYGu4X58gZ5jzorGAqXgSJrpvexqkU6:tON96kpB1u4X58EV8GAqXHJroNU6
TLSH
T1B9120A35B568AC2B5DE2E588F48B31139FE85117EB896F90C6EC2E2C01DF66C134AD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ae49b04e-23cc-4115-8bd9-5ac37b70351b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ae49b04e-23cc-4115-8bd9-5ac37b70351b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bc6f257684b556cdde7c05c2fe4aea86c083d9b779fe59afcc742bb742f99556
MD5 4c7024a261864c1bdc5aec30447fa9aa
SHA1 248489c62b7c1d430bd78500a20c054cc482dbf1
SHA512 2a919f31df7b44cee1fad8ccd7d58ba2870aa6ea3f00669bf1ecdada174b8b398a361af54c2bb9197ad52bda4d47a2e14cd21cf93a2a766af3fb68c53d4c385d
TLSH
T10C41F45CB6E91148B3B7BE56AFF7A8AD887BBC362E16D45E00010D4F0A62B40D961737
MD5 SHA1 SHA512 TLSH

Submit Download