ee7e8891d4f1b7ba2f3df2bce206f7b5e677c75207ab27f8d16f287f6a9e4eec

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 46KB
Sample261107-plefpsby2x
SHA256 ee7e8891d4f1b7ba2f3df2bce206f7b5e677c75207ab27f8d16f287f6a9e4eec
MD5 28b179e9c28c7c464ef6fbc2659c3ca3
SHA1 c0fdb64607c7c1bec375690ad1f5696a44edf801
SHA512 af48f8d398066231b92e6904758f4ba515fbf70a8d9c245d2abc5754625f3e82cffec82017e0eda27b120939b5ca842ef2792be3f51681773d4736f5de4636ce
SSDEEP 768:jPWHz/xXiK8FZFUvGgmykSke7l5oUinW0R/Q0olukrBrUZRBxbJXLIQmOK4ROE:7El0h40uTE
TLSH
T12B23D673658C603A322B8353A4E0B7ADF969C502CB334959F5BC77AA8FE7D425933214
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3188	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{63414270-B730-48FA-AED9-F1B12E69FD80}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
948	msedge.exe
948	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe
388	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 388 wrote to memory of 1732	388	msedge.exe	85
PID 388 wrote to memory of 4664	388	msedge.exe	86
PID 388 wrote to memory of 3188	388	msedge.exe	87
PID 388 wrote to memory of 4664	388	msedge.exe	86
PID 388 wrote to memory of 4664	388	msedge.exe	86
PID 388 wrote to memory of 4928	388	msedge.exe	88
PID 388 wrote to memory of 4928	388	msedge.exe	88
PID 388 wrote to memory of 1912	388	msedge.exe	90
PID 388 wrote to memory of 1936	388	msedge.exe	91
PID 388 wrote to memory of 1912	388	msedge.exe	90
PID 388 wrote to memory of 1912	388	msedge.exe	90
PID 388 wrote to memory of 1936	388	msedge.exe	91
PID 388 wrote to memory of 1936	388	msedge.exe	91
PID 388 wrote to memory of 1772	388	msedge.exe	92
PID 388 wrote to memory of 1772	388	msedge.exe	92
PID 388 wrote to memory of 1772	388	msedge.exe	92
PID 388 wrote to memory of 340	388	msedge.exe	93
PID 388 wrote to memory of 340	388	msedge.exe	93
PID 388 wrote to memory of 340	388	msedge.exe	93
PID 388 wrote to memory of 2168	388	msedge.exe	97
PID 388 wrote to memory of 3504	388	msedge.exe	98
PID 388 wrote to memory of 2168	388	msedge.exe	97
PID 388 wrote to memory of 3504	388	msedge.exe	98
PID 388 wrote to memory of 2356	388	msedge.exe	100
PID 388 wrote to memory of 3732	388	msedge.exe	109
PID 388 wrote to memory of 2748	388	msedge.exe	110
PID 388 wrote to memory of 1256	388	msedge.exe	111
PID 388 wrote to memory of 2896	388	msedge.exe	113
PID 388 wrote to memory of 2896	388	msedge.exe	113
PID 388 wrote to memory of 4608	388	msedge.exe	114
PID 388 wrote to memory of 4608	388	msedge.exe	114
PID 388 wrote to memory of 948	388	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x28c,0x7ff84cb6c188,0x7ff84cb6c194,0x7ff84cb6c1a0
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,15623727004297385350,12043902687086049821,262144 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,1056994863372562228,17570784004507425325,524288 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,15101271382617646242,11578551578531388273,524288 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,5191996039487179240,12466595291889125881,2097152 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,12633018852614228323,4292879804226298900,2097152 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,6168858612075081718,8424843776039184238,2097152 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:1
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,17163882384963889630,9637870519533761665,2097152 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:2
  2⤵
  PID:340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,2383792163996677695,4054024696690689131,524288 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,5027882333956908872,8346326722884518692,524288 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,11794017965341373979,14801806818715716141,524288 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,11794017965341373979,14801806818715716141,524288 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4740,i,5576215482460319861,3790617851806538795,524288 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,14300887273182290286,15247989271084066455,524288 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:8
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,3245839192454765098,18421102267835720900,524288 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4644,i,8611457819337748149,14192625961479644748,524288 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,14109858027024269274,13746489445353751740,524288 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6080,i,14211157999339094698,9844106153525281470,262144 --field-trial-handle=2104,i,2800523158346785302,2083965125533998950,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:948

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1084

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6700170e-3df8-436d-9520-16e53ff68b54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6700170e-3df8-436d-9520-16e53ff68b54.tmp
Size 18KB
SHA256 8d3aaf1ccdb011e227849fa2e22cf83a57c098dfa0c8fa57b866c7fba82d0b98
MD5 238e765074100a3f58aed12e5ede042b
SHA1 884042c6530d0d2660616be31f61b685c8e36033
SHA512 9ef18bbfad77c4fdf66b106e5cbda01c68105c88ef1291c007f0675ab9a4ac370d593053f0fbd6c16cba585b2faf73b59bee0bae6ca6dc4ed7509d418bb6fdfa
SSDEEP 384:AQkUSv0sNdUmyZJKRHX58EndrSBMaaqPH7vBEnzTIIls:o0l+laQQWqPH75EzTLW
TLSH
T10E827D31E8B8AD3B4AF2A505F1473A439FB4D05BE6C82F94E5DD9B1D01CE29D230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4e049300-18ce-4a6b-be7d-e5f9632d2bee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\4e049300-18ce-4a6b-be7d-e5f9632d2bee.tmp
Size 105KB
SHA256 66577e04ed9dc05f1bbd9e68e75cc41aec19afaf3ebea8acfe870bd36e3106d3
MD5 699f81963d83c997a12c0b5e6e155744
SHA1 ed659493a68518d7e51698aeadd058871ef5c5ff
SHA512 148a0f453c0b38c87181cce242127e41d1630844a2e2284d6fdb19794dea9e0c89770f50637e85031a59ed404d4e485747c49e1408f3b73e5fbe6ecc5999dd0d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7l:fwUQC5VwBIiElEd2K57P7l
TLSH
T1B6B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

1a5aa90c-c5a5-4164-bd37-b4a041c8f6ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1a5aa90c-c5a5-4164-bd37-b4a041c8f6ff.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

663b310a-0194-437b-9254-6a4a69db2952.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\663b310a-0194-437b-9254-6a4a69db2952.tmp
Size 27KB
SHA256 b09a0460407d7046b89912e32842914a3593501aa7b16b224994ae5fea8b7c71
MD5 ddf27730bd1bd0da62fdf03afcd17461
SHA1 67c6324eedcd519fee878435195ca1874cc25a5d
SHA512 757f83aa35371228b639b8b8ad173bd2dd9f6322d4840a4c392f60d5424a6cc04a8891bad2023087b9cbb31737ec37b6e6d5c62ddee3ede18fd0505b3a8c63a5
SSDEEP 768:lGy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbSroRqt:lGy4J/DWvbtBhu1jajiLm0bJ0t
TLSH
T18DC2FA3B684CCA7E4FC00A9DED5E6FDB3E9802C796948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

916ae9ee-7bba-428e-8cb0-ebae1c104bb2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\916ae9ee-7bba-428e-8cb0-ebae1c104bb2.tmp
Size 10KB
SHA256 d0c060ae55ff52068a5d4bb65ad051048f118b1b39a1858fe3eed43526786059
MD5 6f1179f7efabfd710e125cd5c1efbaa5
SHA1 083c086b192f92b07adf485390f4c39b24b58998
SHA512 a8e5b76b2c9f0bb991de20f9a72e0943a4d3e89e1f554f08d9dedd2099b80e58bec1cb4f2fa1a5f38b809c85c0e55d45fe56f9e367a338be9654668c56863940
SSDEEP 192:sxZ9ROWD/fSsxtIdpdNHW6+WNGYrGiq+CnIg5tJ:sxZ9XD/fSsxOTHbGNbB
TLSH
T1AA22C9526E28A97BCCC7E20DBB55BF53E6F9503251D41E48A6FC861C05EBACD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 ee7feb874fdedfd463bb90651fdc5188fd9e844e6fdbae7c5d66957b1d466d65
MD5 cabe6e8fc5c3ab9fbcf989a63bd26041
SHA1 b1f8b144df80801a2db78f6614f9e7202352fdfd
SHA512 8ab5484641618e0479c533c6c7c57b129e62bf093fdeaec5155699e87c9495d1733b551f2a718bdae742b32c9bfa83e0d8da748d7dff5dceefa4772bb7395ab3
TLSH
T175E026C459ECCA2EB31C644B41B9774C83CD365BD3D87A8E578CC889B646848E3C6AA0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 c665c4013ffeb771e4153c6fa10863e67e31a9a4592110684f8c981f86f9dea5
MD5 80fcdbeec3886974c3e09d448acd56ef
SHA1 bc1f60150cd8f1cbe7274a947f94fb149bbc8a46
SHA512 cd30b4aff022dbcfae31533d6ec6b34a171e8bc82db527aebb8481bc66f9252571e75b8a9e92795c0729693e1161e4b2498d78d273cb9adf6a5fb29b8e9362f7
TLSH
T143614C834BD04024D35B4EB4C7E2268739F38EB04293BE3209E4C4FB4BA73656B34208
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 71715de7248ea61a59c6f804233eaefa569ec6d0f2f3726d13522c08c68c3252
MD5 56af8003df82e63b02cb7d06a3b58bf3
SHA1 b75ba65ed8a7ce756c289d90a4c8596e5c5d61a6
SHA512 bf816920757ee61fb1f2dfa26edcda7717abef729d57614ed5429e7767c54e8fde439cbc60c2d4c26b6208173c161ea8344cca37c18cd34adb27b48da5f3ddad
TLSH
T138613D834BD14064D35B4EB4C7E6268739F78EB44297BE3209E4C4FB4BA73656B39208
MD5 SHA1 SHA512 TLSH

Submit Download

b43b2207-6bb0-43c2-be95-37cc531b6581.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b43b2207-6bb0-43c2-be95-37cc531b6581.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0578fec1-6dcb-4ebb-a127-9392f5f73e2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0578fec1-6dcb-4ebb-a127-9392f5f73e2b.tmp
Size 1KB
SHA256 efa9a00b7bb85544642662963038c40057c78fbe0bdf6b6691611dbf109b621d
MD5 5368e0ea234543229ec1b2740f677e28
SHA1 ad3b9c0ecf50414184eb360bbb57ee4caa9c2767
SHA512 879d1261a7c6c34ab06e965528d45e723cb715d466415a4ccb2814125c49238e5bd68d44f766354475ce877739e5d80933be013937c51ee05b253457861e7f64
TLSH
T11A318FB7C7D4866EC95516F06A24BE2ADE1D0646423C3C1AC9E8EF1FA7F2071D10269F
MD5 SHA1 SHA512 TLSH

Submit Download

6118ef97-768f-466b-9237-705f68f83fda.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6118ef97-768f-466b-9237-705f68f83fda.tmp
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

ba84a379-e2cf-4f4a-b87a-ccdbf5e30cf3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ba84a379-e2cf-4f4a-b87a-ccdbf5e30cf3.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 15bab4fb6ecea51cf764bb1cb916bc8e7c047e9c15fac1b434d5cb29b224c96a
MD5 316a102f8770e30f7b6b195d88ca7907
SHA1 1b282a78348c94240aa3646f6ca45d5f133d0697
SHA512 14c517f2c7720a5294ce36cf460000e09441186ebdc386397b91564935ac503e1d29718f068ebaabb949736d2c9b9341b3927519a7a3918360dfda3830e70560
SSDEEP 48:KIDI1Ks04jyL98xN/rvQbjWDISFQK9F1nQxVAYGH99yLHqTnpJZybRcBIS3yK93G:KIDCKs0+SC0KraqakAKNyl
TLSH
T18C91F15670BB064038BE3A988075D72A128236B37119EA7BFFBC40654E6FE085DFD4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a8b40446-28a5-4ffb-91f9-012c2ea078f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a8b40446-28a5-4ffb-91f9-012c2ea078f7.tmp
Size 10KB
SHA256 24ae32bad8eb23e136a1b07ca7763528eb7691358f656157286d0515cb761113
MD5 ae6da16d7add2b54b2b45fc2eb0cc2ab
SHA1 3249a5f3a40105956d12b2c4815146d9bb60eee3
SHA512 49e8078c907ab3ad6806a8cb6ad1366a83cf7f7a88c074a2f420c77254a546e3b8f42995517da2efef2e95cf64bd4b29f31289a33580cf05b3f72c3147773d19
SSDEEP 192:sxZ9ROWD/fSsxtIdpHNHW6+WNGYrnpq+CnIg5tJ:sxZ9XD/fSsxOtHbGbbB
TLSH
T1C722C9526E28A97BCCC7E20DBB55BF53E6F9503251D41E48AAFC861C05EBACD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7daf5df-6e0a-4424-9366-3bb472878d61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e7daf5df-6e0a-4424-9366-3bb472878d61.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

ed4c4915-defa-484c-aba1-24166126347b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ed4c4915-defa-484c-aba1-24166126347b.tmp
Size 9KB
SHA256 d420d40f976db0afebdad65dad7dd70562497cdc187a83302f1961b27660fc6c
MD5 0e06a2726259bcbe5277fbac6b20a42a
SHA1 a136c6b77227dd478dd6486a1ff4d9d439631c6b
SHA512 84e4ab54b3dffe56607e0ded16c0f1206a07a52e2ca105b3b462a6cde45d3609bab394c4ad5c62cbb38130da5d00b2ecf12f5a969bfbb85ebb5f41c19c8dca51
SSDEEP 192:sxZ9ROWD/fSsCtIdpdNHW6+WNGYrvyq+CnIgrJ:sxZ9XD/fSsCOTHbGGb9
TLSH
T1C322B8526E28A97B8CC7D20DBB15BF53E6F9503251D41E58EAFC861C05EBADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eda27dea-2332-4175-84ca-f3e5262ecce1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eda27dea-2332-4175-84ca-f3e5262ecce1.tmp
Size 9KB
SHA256 8c058b24494cb72bd6b23b29d6c902a99491463ef2671f62214887bb28e48c3f
MD5 f44992a0a0c9a702f43ddc1c10d58e33
SHA1 f0f64400f8605bf0ee6710f1895c2545505fab4d
SHA512 5018488e9ab8a9c8711414eea20b29fa177cf8132dd9c30abb0af4e52a489a7114184e8023280e00aab7082cf4aaf2a9a36998c83f95c91b8e0d7517442b22d6
SSDEEP 192:sxZ9ROWD/fSsZtIdpdNHW6+WNGYrvyq+CnIg5PJ:sxZ9XD/fSsZOTHbGGb/
TLSH
T19F22C8526E28A97B8CC7D20DBB55BF53E6F9503251D41E48EAFC961C04EBACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 443ecb3bdaf3007c43f3881c8dbc6623a63d269437ce0697f008d91e042d8370
MD5 9ae82583109cdb00d2367c3b2216ceb0
SHA1 d8486bff89fa7ca5999805da3900e9fb84cad99b
SHA512 7a467749c6ae4334381cbcb7cdfcd136fa26a21a56f93e12c2ada89ad1d0bfa24a378f68fc154dc91a9cc48dabd3e63781a52df8f17e4ff0927903ae693954f6
TLSH
T1D42144C1F2AE90C56F89B981823D64039EE67BAD120E58F9231DC8F55F48C250B6E921
MD5 SHA1 SHA512 TLSH

Submit Download

75b6ae92-aefd-41d4-851a-6c4b4d377a7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\75b6ae92-aefd-41d4-851a-6c4b4d377a7a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a59e2ffb-343e-49c3-9750-5df8fa53f84e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a59e2ffb-343e-49c3-9750-5df8fa53f84e.tmp
Size 18KB
SHA256 be36a89064e5f6d6954058f68eaf774235c1e7396eb84e2272e6c2a344b0b84a
MD5 6f4b5ed58eb3872615be75f535bfea6e
SHA1 dc29968913993211529bac01b00269692aa3e1d8
SHA512 6e74c994c1f9570cdcc85e0eae85d0be2a37673886ad0866c22e8812dccbae013225a1db493a3accd63d11227602df1b3cabb240341a162da14dbe84dc1f9774
SSDEEP 384:gQkUSv0sNdUDyZJKRHX58EndrSBMaaqPH7vBEnzTIIls:I0E+laQQWqPH75EzTLW
TLSH
T191827D31E868AD3B49F2E505F1473A439FB4D01BEAC82F94E5DD9B1D01CE29D230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b2b30d14-63e5-4b54-ae30-c93c9123d855.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b2b30d14-63e5-4b54-ae30-c93c9123d855.tmp
Size 8KB
SHA256 fc338873a5c2fa0c87f41b50aee4e904ba75cefc04dca10e040c70ced480267a
MD5 5e8465b55d44e98950c8f338f0cf33dc
SHA1 d5cfe17fb63f2269f0c8b857030f076bc9d120b1
SHA512 05478ae7d64b9e602f01ad6d3106e6a4b65657b6ad003698f7f0713a7dc43f403fcde0cf3effd1eac6bb5d4314572fa3586edd860b50b392fd7ef772cb6c3cd5
SSDEEP 192:1ON76wlDgQmiUyksW4X58gZs+Fdrva2DlLmU6:1ON76kgIW4X58EndrS+SU6
TLSH
T1C302E935E9787C7B8EF2AE09F4872A139FE4112BE6952F84D6E81A1D00D775C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d45b020b-7dec-4a46-a8c6-a2ac75b2dcd0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d45b020b-7dec-4a46-a8c6-a2ac75b2dcd0.tmp
Size 21KB
SHA256 e7f1f296d0d9eb771c597bcf65a2ae4421c81f7ad034bb372884d98a9d428cb7
MD5 8aeb9af6b16b18415dd4fafdb1e4ce19
SHA1 75dd868843f41d8e1979395950ee6da0052826fb
SHA512 f10a6730611eb8120226ef60295450fcd79d2999d928fdf576e1d5fd39377be640fb0faced23206886b5379f96c71910d274b73a722d01b42582f47039473d37
SSDEEP 384:diFzQkUSvEzsNO8TUNTUlIlDyZJKRHX58EndrSBMafqPH7vBEnzTIIls:UFd4PwgU+laQQTqPH75EzTLW
TLSH
T1A1A26D32A8949D3F9EF29A45F14A3603DFB49057D9D8AB90E6CD9A1D00DB2DC134BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ec01fe7a-1a9c-48ce-aa35-e24867096d60.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ec01fe7a-1a9c-48ce-aa35-e24867096d60.tmp
Size 8KB
SHA256 8f6dacb096619d33c7a0a1a937ebec6174e23cf71160efb96fe81dfd4be7ad9f
MD5 d193da1268b25baa2a4a1f7ec960ba17
SHA1 15eb29a1fadc384781e5fef0625a4ecd347d19e1
SHA512 5fc7de6c22e1cae88c10b0b809e5fc981d938e25975926a259855328d6ec4dfc86f7541b6ef433e36f0ea9fed3f6925522ade8da183a82a1276b28ff7136ef6d
SSDEEP 192:OONP6wlDnQmiUySsj4X58gZs+Fdrva+KMakveTqFPU6:OONP6kJ8j4X58EndrSBMaPqPU6
TLSH
T1BC120A35F868AC2B9DE2A545F08735139FF59117EB897F94D6EC1A1C01DE26C130AC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

084b318a-4fa9-43e1-be8f-a27a5f553dc9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\084b318a-4fa9-43e1-be8f-a27a5f553dc9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 49c6ad6b52b64347dba82ed76c9b31650cfec9293529f407a4fa5c5a3da9c7a6
MD5 ab8e02cbac0fbd6d8968c123902e51f3
SHA1 ab7089be3e7712eba3c288861b270e0ed20183e7
SHA512 2ab24c54b0056f2ffe44c2d2ac9c1cf27617ce76c89817b4b13f740f4e4d059172c2f3bc5e731fbf7db24011c1a42323e01f7297f1c200faadae01f26fce978a
TLSH
T16C410758BAF91109B3B77F599BF7A96D887FBC372E06D05D00110D4F0622A40C8A2737
MD5 SHA1 SHA512 TLSH

Submit Download