90841231ae7cb5280032b1b4910d9d66b71e45cee0fc4274e2a4b02d00956d5c

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PHPMailer-master/docs/extending.html
Size 3KB
Sample261107-pmwrdaeh32
SHA256 90841231ae7cb5280032b1b4910d9d66b71e45cee0fc4274e2a4b02d00956d5c
MD5 8a93870d6204cdc793eaadcb9310d052
SHA1 83610d92094a41481162ed52102138faefe69544
SHA512 47a07e2bdfeeadd528fceaa51a2b6201eeab881eff91f5d5eaf5df88dbb3d89f613e469f53e4ccc7dee87c32f4e3387871a9f951fe1fcc9d5d5f320bf477d518
TLSH
T11B71B714A9935AE525A7A56AB38D70827C0541073A10F9B078DE43D8CF41C17FF796ED
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1920	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{04A88218-2D55-4AFE-B0A8-69A6002806F3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3724	msedge.exe
3724	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 756 wrote to memory of 5100	756	msedge.exe	86
PID 756 wrote to memory of 1920	756	msedge.exe	87
PID 756 wrote to memory of 4928	756	msedge.exe	88
PID 756 wrote to memory of 3892	756	msedge.exe	89
PID 756 wrote to memory of 4928	756	msedge.exe	88
PID 756 wrote to memory of 4928	756	msedge.exe	88
PID 756 wrote to memory of 3892	756	msedge.exe	89
PID 756 wrote to memory of 1224	756	msedge.exe	90
PID 756 wrote to memory of 1224	756	msedge.exe	90
PID 756 wrote to memory of 1224	756	msedge.exe	90
PID 756 wrote to memory of 2864	756	msedge.exe	91
PID 756 wrote to memory of 2864	756	msedge.exe	91
PID 756 wrote to memory of 2864	756	msedge.exe	91
PID 756 wrote to memory of 3660	756	msedge.exe	92
PID 756 wrote to memory of 3660	756	msedge.exe	92
PID 756 wrote to memory of 3660	756	msedge.exe	92
PID 756 wrote to memory of 1892	756	msedge.exe	93
PID 756 wrote to memory of 1892	756	msedge.exe	93
PID 756 wrote to memory of 1892	756	msedge.exe	93
PID 756 wrote to memory of 4416	756	msedge.exe	100
PID 756 wrote to memory of 3928	756	msedge.exe	101
PID 756 wrote to memory of 4416	756	msedge.exe	100
PID 756 wrote to memory of 3928	756	msedge.exe	101
PID 756 wrote to memory of 2680	756	msedge.exe	103
PID 756 wrote to memory of 1132	756	msedge.exe	110
PID 756 wrote to memory of 1512	756	msedge.exe	111
PID 756 wrote to memory of 2272	756	msedge.exe	112
PID 756 wrote to memory of 2000	756	msedge.exe	114
PID 756 wrote to memory of 2000	756	msedge.exe	114
PID 756 wrote to memory of 3724	756	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\PHPMailer-master\docs\extending.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffc66c1c188,0x7ffc66c1c194,0x7ffc66c1c1a0
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,6470255573218888173,2434724478593035254,524288 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,13510365271769346038,2756044719214844465,262144 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:2
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,15705437121543974863,15485611871660319583,524288 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,2216887384709405739,17893930178827842751,2097152 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,350658651906843739,10701621629281419448,2097152 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,17474802148620023177,12652708614072817440,2097152 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:1
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,8032026506962366666,2043521535038936962,2097152 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:2
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,4790883076101737181,4571367124577913059,524288 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,3115556419548197091,10134046781002230888,524288 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,14783376055512688766,1811381680224559136,524288 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,14783376055512688766,1811381680224559136,524288 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,4555276477175632163,238293944338271015,524288 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:8
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,7844880613747097185,7703345798614621243,524288 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:8
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,8402670692865955142,9703887831448354392,524288 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:8
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,4916443933515796919,11749239496057238396,524288 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:8
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,9978983687380345577,15279223497505181129,262144 --field-trial-handle=2868,i,14901233905190657867,11743012691494416928,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3724

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1452

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2f1ef2f5-b1a1-425c-8315-0d4ce01550b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2f1ef2f5-b1a1-425c-8315-0d4ce01550b4.tmp
Size 18KB
SHA256 0fe0f6f33deea57d2b4499bd891e03c1bbd29815591c003d50d44f34dac2ad0b
MD5 0c72a40955573a70a3bf4eb2d04b789e
SHA1 5ed6a0fc1d21435018062ad55a296b4cdf9b879e
SHA512 496d623f00675549d34d59fbba6b6d5f08133204c94a86423a6c0748ab1a84c69c03cd2f2f0038f3ceb5590d4e919e20114974c5fca15bade6990d4154550f56
SSDEEP 384:SQkUSv0sN4wiGMbX95h//kTPMqrqH7vBEnM3QIIlJ:K0AjI3//qrqH75E5Lv
TLSH
T13E827C357C68AC3B5EE3A691F1463A13DE78806BEAD40F90E5DDAB2D01CA1D82347D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

660f1d63-a4e4-4131-90a5-78674309423a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\660f1d63-a4e4-4131-90a5-78674309423a.tmp
Size 8KB
SHA256 0be8c2611ddf20acb1c3236b595efb633b483cee59ea3889f232a94cd1655eac
MD5 7ec4aaa22f30a9adbb374d09891be29a
SHA1 130a9427a0653496f0f9d6af57fd04587184f72d
SHA512 6e27ef2205e0ccf57a12713d77025ff0a1a93fa7b677f802c3e5c87af77cca65c6203df842185ff5a8d63dbe866844b5577d059b5d71d4c6e2f2eedc5ee21571
SSDEEP 192:TON56JUxQmiUyn4E7o//gywTPAMNxxqZrqU6:TON56+Pa7o//kTP3qrqU6
TLSH
T163120935BC64EC7B5DE2A595F08336239E644067AB896F90D6DC2B2D02EF5AC6306C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91a5d7c6-6e84-48c6-a2e7-5724942bcbbd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\91a5d7c6-6e84-48c6-a2e7-5724942bcbbd.tmp
Size 18KB
SHA256 031ed64362b8de20a821743578b849158ec5cd68bb92e77d65794453b7d55e17
MD5 37c9f00ffb5c331579c6a00d0af9be53
SHA1 a85012523fef1efbd7edd501d9a1f494786239b6
SHA512 199270c63bb4886b017a99135a2c0a5834090c250cb55c1cddd315d3139b9bc42664603054a17ee808582e71725bfe9251e4fe4ecb0ae4f820e75e40ac848142
SSDEEP 384:vQkUSv0sN4biGMbX95h//kTPMqrqH7vBEnM3QIIlJ:x0LjI3//qrqH75E5Lv
TLSH
T115827C35BC68AC3B5EE3A691F1473A13DE78806BEAD40F90D5DDAB2D01CA1D82347D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d161083-de7d-4203-a4f8-0d26d82533f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9d161083-de7d-4203-a4f8-0d26d82533f9.tmp
Size 8KB
SHA256 d505034fd635954bf0f7bae1eb88e446f5191610194cff70282d6dcbb9836f22
MD5 92dcb80f38fb3275e4de681e9d2b29cb
SHA1 c0db23792fd67ce98fb9dd258c3cd35941e7925e
SHA512 f7a0cbc4aaa4e58f67ad4ab4bd7063b11c46e4cd5f193befd4e653ea8a3a326592cbbf8799663b971b3ca773434b0d4ccae5c8f250822393d5a5ead268b5e3c9
SSDEEP 96:KqONk0QsjpfbUmjH5ih/cIPURHl8h4otop5CaD4gBKP4v+Y1xf//ojdixHeYMywT:BONU6JUm0QmiUyv4Eso//gyw3BCU3U6
TLSH
T19D02D839BC28BC7B9EE2AE45F04777239FA4107BA6951F80DAD81E2D01D715C1342C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

657bda46-c077-43fe-8495-e7418b16caa2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\657bda46-c077-43fe-8495-e7418b16caa2.tmp
Size 105KB
SHA256 66577e04ed9dc05f1bbd9e68e75cc41aec19afaf3ebea8acfe870bd36e3106d3
MD5 699f81963d83c997a12c0b5e6e155744
SHA1 ed659493a68518d7e51698aeadd058871ef5c5ff
SHA512 148a0f453c0b38c87181cce242127e41d1630844a2e2284d6fdb19794dea9e0c89770f50637e85031a59ed404d4e485747c49e1408f3b73e5fbe6ecc5999dd0d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7l:fwUQC5VwBIiElEd2K57P7l
TLSH
T1B6B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

04a1ef0d-1d89-4a34-8836-5d313604a5b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\04a1ef0d-1d89-4a34-8836-5d313604a5b0.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

1a8d4679-c1be-4472-bbf4-6e20da0faca5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1a8d4679-c1be-4472-bbf4-6e20da0faca5.tmp
Size 10KB
SHA256 8b4535bfb3db4eb59c7920837dd82eb283118ec519c81bb28ba381d82237a297
MD5 0c550ca2e86659b8fa84a8b8a8b3d9ec
SHA1 d3aa4ba28516546a8b8be04a2e652848aa5fa4ee
SHA512 cf142922299a01286898d5d53d9c8565eb1dfb33e8b1ab934ebe6d894651f6c4c6180512a91aa328e1f60b8aab29cb3404a98ad9c14c12839a7a51e8bbb72c0b
SSDEEP 192:sxZaR9W+/f9saxlIdpHFHW6+WNGY36641wIg5KJ:sxZa6+/f9s+WlHbGXso
TLSH
T19922C7526E28697B9CC7E24DBA15BF53E6F95032A1D01E48AAFCC61C05EB6CD134780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c647d11-44e6-476e-8b67-9e7cc918e2dd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8c647d11-44e6-476e-8b67-9e7cc918e2dd.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9cfbe9d4-69f1-4279-af7d-cfef92734a0a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9cfbe9d4-69f1-4279-af7d-cfef92734a0a.tmp
Size 10KB
SHA256 3d1da851438a33052c7d3a852cef9f1fc3aa8a4317b3ce764b718c0ea4fb5623
MD5 faebbc28495eb5588321009bdaafaae7
SHA1 a363abcf335b754d8c915d5cac152e18a73d39a2
SHA512 184dcb7c208ff174566770131413676cb35def62f3c0cd939ed3c56c6c578e808e0f1ec901662f8eab8433761af4350bbbcebe8abaa6a5c6ef5bf97c1ebc1693
SSDEEP 192:sxZaR9W+/f9saxlIdpdFHW6+WNGY36Xn1wIg5KJ:sxZa6+/f9s+WjHbGXGo
TLSH
T13922C8526E28697B9CC7E24DBA15BF53E6F9503261D01E48A6FCC61C05EB6CD134780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e44dcd9c17be351645bea3fbb5060c1c357328ada0bc92589f1b7843c65b2ba4
MD5 e356126b43fbd4ef6adfae1c39dbdb51
SHA1 49fbb3c59ca405e309593e7afb608aba7c813c7e
SHA512 35ba75b45869a106d0e09361598178c9e335704ee368cd815255faecb8dcb97773d7d4ed9f81fb2c1418f06196150f9c26d38860a1a56d77cb66ac71b58542af
TLSH
T1C7613E8050E4C0A7DBA89670F1F2528F3928657145CFAD5A20E6C5BF4B0FB5CD3D50A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 39ef25e37895675c351c9bc0203c9036ceda2e98fa4b177c41e296c871fea8de
MD5 b8a93d3ce90b0de25d390ab1d6e6011a
SHA1 73b6777b9c228b949bb404e3512d9df7228f791e
SHA512 62b28a93261a8d585e23543732e899f9daeb6ca5cb5011bfd0f821f1d70e97e320aa2db1114409de65643caad3119c0f64988e3169e15b11ef24a713a816de23
TLSH
T157613D8051E0C0A6EBA8D671F1F6928F3928A57145CFAD5A20E6C9BF4B4FB5CD3D50A0
MD5 SHA1 SHA512 TLSH

Submit Download

8d8e89f5-c441-4014-9877-f62d0c880af9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\8d8e89f5-c441-4014-9877-f62d0c880af9.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

42a4b557-70eb-4959-9769-f4d26a5f57b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\42a4b557-70eb-4959-9769-f4d26a5f57b2.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

649ccfff-d247-4157-a602-b94956afc76b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\649ccfff-d247-4157-a602-b94956afc76b.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

d26ff27b-f830-48c4-9aba-4a1adfcf289e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d26ff27b-f830-48c4-9aba-4a1adfcf289e.tmp
Size 949B
SHA256 43e9bc441c6d885768dd35c8878a446bd0cf0f54abec5c7683f9e440113c8ae1
MD5 e2a312051a2030ade4b8c580458e9f5b
SHA1 74763ce77fc6e6237a0dd2e3862eb63800ae87df
SHA512 1a4b1ae5a5b37e642dd21ddb4dcd3ace7c9bbc693a8bfad695b10bdac4845f6e3fdcda00867f0829c235854673a04a11a22eec49de72b7bc7178e9a900b8fd7d
TLSH
T139117AB3C7D5856E891156F05A24EE2BCE2D0606831C7C198AD4EF6BD3E3079E10299B
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f08f2778f8b3614254b12e0f9209987cac5fb497aa212ad9912fcd4cd7af8a04
MD5 fb71e4c9f260d84c8d615ce176a3a9be
SHA1 24534e4ee18ec28b1e57cb279478f1e7c70b877c
SHA512 0ee175c5bb4877987aa4f002971dfdaac2a66a2f5d58e72b70daa44afcf4f1fb718ec408fc9d7c30cc343fa3fdfe10dee0b8aa9ed28e3c012caf6f4657b54fd5
SSDEEP 48:K098xN/rvQbjWDISFQK9F1nQxVAYGH99yLFk51Hznob7+7ISNoK9t1foxt4Yufzk:KMWEKbKmKSMKjCkikKrqKp
TLSH
T1D9913945707F0280397D354843B4971A464272B3306AE56FFFBC84598EABE194EFE9CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b884dcf5-19cf-4ba2-8a0f-9e05bd74c1f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b884dcf5-19cf-4ba2-8a0f-9e05bd74c1f0.tmp
Size 27KB
SHA256 67e596035d73c5bc0577468e1fe4e5b538b0b162a5060d8cb8d2ace399c7cb9d
MD5 8914d359b45eadfd946f2b35250ec912
SHA1 36764f89f636388eb98ad4e1285ab2cc594bda44
SHA512 c54fc3bf13f4a264e88d0929dc1a97954e43d5c619c79e86745c03c3239deebe6f095b27a3f8f8bbb9fd787cab927b27fd7096ecca619655138005da4c94f99e
SSDEEP 768:Z9Klm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/droId:Z9Klm7QWvUYe0u1ja8/L/E/WId
TLSH
T103C2FB3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f222865e-5af8-4a9f-bcb6-809297cd54de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f222865e-5af8-4a9f-bcb6-809297cd54de.tmp
Size 9KB
SHA256 ae9d73384f2a895a3cafe3f4dc6ba7a4ef8d60985c636554579301f171e50b27
MD5 34d5eb7b2c41acf39a453bc6065147f9
SHA1 1b7311a7325774f21b78ca5cca18bc15d127a83c
SHA512 2b22b4f4628d65e3faca8de82b31e785c7f2eedde5fae2ba685da9c60deb89ab9270562d1b00b90676901cf98b8c86a3605b522e2c99e480f3a3d851b42329e4
SSDEEP 192:sxZaR9W+/f9sa/lIdpdFHW6+WNGY36WD1wIg5oJ:sxZa6+/f9sUWjHbGXba
TLSH
T15722B7126E38A97B8CCBD24DBA15BF53D6F95032A1D01E48AAFC861C05EB6DD134780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ff6caa03-46c2-4a19-819f-e9145053ae3d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ff6caa03-46c2-4a19-819f-e9145053ae3d.tmp
Size 9KB
SHA256 d05b13f6dcdae7a9b49ba2e4cf2907e4847bc9d30c808971df2a7a8fa50c3d17
MD5 b65d6d24dee791389b0546a6089c0b9a
SHA1 40ab34ce6cea04931a0076096a18aaba1dfad8fa
SHA512 0ecb1624d3245a1c378ca25eca0aa1aea8e6cfc5c4528e1d07360d58ebecb36558defb178c470f53cafa6d4d8d997ea868fc9733ec9ae3e5548baf8ca977f0d2
SSDEEP 192:sxZaR9W+/f9sm/lIdpdFHW6+WNGY36WD1wIgrJ:sxZa6+/f9sAWjHbGXb9
TLSH
T1C622A7526E38A97B8CC7D24DBA25BF53D6F95032A1D01E48AAFCD61C05EA6DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

17f0874b-b8ea-43df-99a2-5a79c71193cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\17f0874b-b8ea-43df-99a2-5a79c71193cf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

bbd47fb1-4ec1-461d-a9c4-e4449f4f432a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bbd47fb1-4ec1-461d-a9c4-e4449f4f432a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f406512e-d361-4618-a076-878e8627ad69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f406512e-d361-4618-a076-878e8627ad69.tmp
Size 21KB
SHA256 7e717c1c7cb94f11d9ec24383188a0cd0ec26935a1565b6f7ae675973118e245
MD5 aa15493a5a526bf3ecca9e19a6793357
SHA1 6798c649235db46da3c2835e5a62bf83f679dc8a
SHA512 4eb24bd981208c078db794659e0264232171b26769bb9890ecf6dee9395eab0204f25839ea55837820a07cd0b9b51b70f35f9bfab36eb48b14a9dda30d54610a
SSDEEP 384:IiFzQkUSvAzsNo8TUNTUlIlwiGMbX95h//kTPqqrqH7vBEnM3QIIlJ:TFdcJwg+jI3/XqrqH75E5Lv
TLSH
T1ECA26C72AC94DC3BAEF39B81F14A3613CEB480A7D9D59A90E6CDAA1D01DB1DC2347D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8e48b3997786dd04408aa1b5728c9784a040523b8ccb61d9cdfef2a24972e166
MD5 ca25b4162a5d3006126e1fb912ccd4ce
SHA1 bc219eade1c9fb010bfc0c201308d5ea53c59d75
SHA512 3de63f55494f06e9078c12d62e192c3d478cd9f1a8ba00da26af9b5413c60d0af7f9246a1b0f296402d1e7e0891324d203e6104f92ea60dd8ed621a9e4b997b7
TLSH
T1D241F858A6E91108B3B76E1A9FF6A86D487EBD772F06D45D00110E4E0A63B40C8B1733
MD5 SHA1 SHA512 TLSH

Submit Download