be7ea3234a829c4f34ace7ba4cff470f50ac34f9f0b553b5a83b51fcd5960e2f

Analysis

user interaction
yes
max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 03:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
njRAT-0.html
Size 171KB
Sample261110-dppv3acf23
SHA256 be7ea3234a829c4f34ace7ba4cff470f50ac34f9f0b553b5a83b51fcd5960e2f
MD5 acfa1025f046bb195680d1f6f25488b0
SHA1 0fb8e9658dd4790d90ac497bd4f59901bfae1761
SHA512 9a484cd02e616d49a976339457fccf74e01660020a645669ecc3b6fda6b10f7096a8505504d73029ed06c929028db1f580bb432898ecc206daf092928bd152c0
SSDEEP 3072:U3cdFvWUOapgFnlTE3t/n80NB4G9p+H2WSM4MgwB9WRmH/EeLfWI0tGcQpZN5Zuh:LOUOapgFnlTE3t/n80NB4G9p+H2WSM4P
TLSH
T1BA04B5B1B035A53E022F26C6E2B1671493E7E31BDA8966F5D52FC2B452C7CD8FA53048
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5000	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{894F3A46-1519-4A6D-86ED-234F41EA9B04}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3904	msedge.exe
3904	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4760 wrote to memory of 3136	4760	msedge.exe	85
PID 4760 wrote to memory of 2156	4760	msedge.exe	86
PID 4760 wrote to memory of 5000	4760	msedge.exe	87
PID 4760 wrote to memory of 2156	4760	msedge.exe	86
PID 4760 wrote to memory of 2156	4760	msedge.exe	86
PID 4760 wrote to memory of 4848	4760	msedge.exe	88
PID 4760 wrote to memory of 4848	4760	msedge.exe	88
PID 4760 wrote to memory of 4072	4760	msedge.exe	90
PID 4760 wrote to memory of 2024	4760	msedge.exe	89
PID 4760 wrote to memory of 4072	4760	msedge.exe	90
PID 4760 wrote to memory of 4072	4760	msedge.exe	90
PID 4760 wrote to memory of 2024	4760	msedge.exe	89
PID 4760 wrote to memory of 2024	4760	msedge.exe	89
PID 4760 wrote to memory of 1360	4760	msedge.exe	92
PID 4760 wrote to memory of 1360	4760	msedge.exe	92
PID 4760 wrote to memory of 1360	4760	msedge.exe	92
PID 4760 wrote to memory of 4852	4760	msedge.exe	93
PID 4760 wrote to memory of 4852	4760	msedge.exe	93
PID 4760 wrote to memory of 4852	4760	msedge.exe	93
PID 4760 wrote to memory of 2996	4760	msedge.exe	97
PID 4760 wrote to memory of 4140	4760	msedge.exe	98
PID 4760 wrote to memory of 2996	4760	msedge.exe	97
PID 4760 wrote to memory of 4140	4760	msedge.exe	98
PID 4760 wrote to memory of 2344	4760	msedge.exe	101
PID 4760 wrote to memory of 4940	4760	msedge.exe	112
PID 4760 wrote to memory of 4340	4760	msedge.exe	113
PID 4760 wrote to memory of 696	4760	msedge.exe	114
PID 4760 wrote to memory of 4068	4760	msedge.exe	116
PID 4760 wrote to memory of 4068	4760	msedge.exe	116
PID 4760 wrote to memory of 3904	4760	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\njRAT-0.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffb7be0c188,0x7ffb7be0c194,0x7ffb7be0c1a0
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1908,i,15281842721577972156,2949618648901905018,262144 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,3894365688805893842,1570671720862999735,524288 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=1996 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2536,i,17726442799414334633,5471009749202714602,524288 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,4007337255319430290,5215022527816881561,2097152 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,3246489637539799486,15714129488818858957,2097152 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,12650554960591308246,9320740798880959531,2097152 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,10535225820206924768,9354676198016465528,2097152 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,4038966498963772627,12299130897112088304,524288 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,11063285656968715971,11249706274956359797,524288 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,2387321763882656444,849257378777683729,524288 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,2387321763882656444,849257378777683729,524288 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,8668386843075079198,602247828540186801,524288 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,6616083708602229468,3691639476885482329,524288 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,2436171211304018518,8514021247857780102,524288 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,11750402174873591922,7856343382413308577,524288 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:8
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6176,i,2467318991143528006,3056992458008586154,262144 --field-trial-handle=2252,i,15589559772307558885,12455271927467826717,262144 --variations-seed-version --mojo-platform-channel-handle=2972 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3904

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4f1f41d2-59d3-473a-a3e5-bcf9e9ee0a2f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4f1f41d2-59d3-473a-a3e5-bcf9e9ee0a2f.tmp
Size 18KB
SHA256 28d5ac8750a8a8145f26cb749620cccb6676cee6c95208ac94295954628b652d
MD5 5593e7c86be3e657883ad7e6345de1c2
SHA1 5916e608593acc31c187e157a197323a2a8422b6
SHA512 9e0eed05167e764919161d2644aae56ea732795d9e6e13030da717eaff0003e34f84a801f285b9ee2c457a64fbed0a5735af16ccb16e1741316d17cc8fa88ca5
SSDEEP 384:yQkUSv0sN3Xw1TR0/9uXOjTV+cO+nFCjl+2lDevaTZcsHXIIli:q0RTDenhOsIjllRevaTZcsHXL0
TLSH
T150827C3668786C375EA29150F98B324BCEB49067D9C52B90E5DDAF1C01CF6AC334BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5620d05d-0618-48ab-8765-e4bc70d469e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5620d05d-0618-48ab-8765-e4bc70d469e7.tmp
Size 8KB
SHA256 f09f83e5a949fc6a748a9d8597eccf20588b6853283f5a091c878026f739b5d7
MD5 1eef4972eedb2c9f5b13abc961395381
SHA1 d64445c3ef400b8de207eae90116553c44599316
SHA512 15f68eacaf587b750af45b0adb10b1f5ae35e8d635c712c7edda675481a18c37d7dec3d4a5e9616bb3066b24ec034af2b9dcd659dbcc129a56a6895f26344eb5
SSDEEP 192:SONJ6ygpQmiUylltOCTVghcO+njzP7sU6:SONJ6lHStOCTV+cO+n34U6
TLSH
T18C02E634BC787CB78EB26E45F58A23179FA8117BE9512B80D9E81E0C01D76AC2307C32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69233904-e45d-47df-8f27-11f855f9a03f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\69233904-e45d-47df-8f27-11f855f9a03f.tmp
Size 18KB
SHA256 af833356ed65efe3fee1c7e72513df178b13cfbc8e71112bd94328482ff7136c
MD5 1e99d688cb69c46b483cec8f35f77c09
SHA1 b8070b9f06133b926a9655976fc9da472252a30c
SHA512 ad4bcbc28d6969bab77ff8d334e22b632dc5006455c8a130f3d59a21ed2b4210efe6825cb320035503602dd4f768114698bf32975fe033e0dd104088d7532b15
SSDEEP 384:RQkUSv0sN3Sw1TR0/9uXOjTV+cO+nFCjl+2lDevaTZcsHXIIli:D0gTDenhOsIjllRevaTZcsHXL0
TLSH
T127827D3668786C375EA29150E58B3247CEB49067D9C52BD0E4DDAF1C01CE6AC334BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

679a24f8-583d-4bae-96bc-7ab3a94e5d74.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\679a24f8-583d-4bae-96bc-7ab3a94e5d74.tmp
Size 105KB
SHA256 f177a9ca2ff22dbc463fdac60c9dddb266a340db1e1d3fae8f0d915baa7c0b70
MD5 3e0bcbe3e53357294b3c897458db4b90
SHA1 0d306ace9c82f16f6fa4f75eb52ad1c738a013ce
SHA512 488de48186b8b77ac8d4750db93a2b93bf0dfeea523717d10c7e0eef9902eb9ee2db3f0bd5edde32a4e252219ee3d7290532c43a320be0f9bd6d4bb0aca81964
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7l:fwUQC5VwBIiElEd2K57P7l
TLSH
T17CB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

1c8e6aeb-5250-4427-819c-7abcccd5ae5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1c8e6aeb-5250-4427-819c-7abcccd5ae5f.tmp
Size 10KB
SHA256 a2c18dc6453184bff6a8cf5459be050a2718631041a091715437a4187782c23b
MD5 d699c89583db9fac74f1e833b65ee364
SHA1 c45ad476397c6c71b8a87ac788e93bfd7375cac4
SHA512 a88be1a087ab7b54198b5678c225d80f2c947cca9700fc9bf711234c5873207b02dcde70c220f7a1b1c6ec9830cca01b9d153845c7a28d24099dc38b32b65610
SSDEEP 192:sxZyRQWg/fdsn1HIdpHfHW6+WNGYRPYaKUIg5oJ:sxZyNg/fds1I/HbGmvO
TLSH
T16422C9156E38687B9CCBD20DBE55BF53D6F9503251901E88AAFCC61C05E76CE234781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2878c7a5-422f-49bd-a479-f2fcb67d3fef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2878c7a5-422f-49bd-a479-f2fcb67d3fef.tmp
Size 9KB
SHA256 3eff4066654c5a44a05df3a0dd5cb3f83459680c47a6bb9437fb6673d040c573
MD5 842e804585fa735f30323a634eea11e9
SHA1 ebc59dc58e41dee8e0d8592af50c71887cc19b76
SHA512 d868b318077190dd139f00d5f6357f264bb597f0b89dbeb70ed2f9389dd921dbed1dcc5c83d6f1e89336bfad5823b64d25fc8dce72a369ebf8448d8ed3c780ca
SSDEEP 192:sxZyRQWg/fdsn2HIdpdfHW6+WNGYRPnr7UIg5CJ:sxZyNg/fds2IpHbGmgk
TLSH
T19A22C8116E38B87B8CCBD20DBA55BF53D6F95032A1941E88AAFC861C05E76CE134780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2b293c63-fe11-4021-8f0e-b0ef21f6d33a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2b293c63-fe11-4021-8f0e-b0ef21f6d33a.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d9d52b3-9cfd-49f0-81ed-40c6b9d343e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5d9d52b3-9cfd-49f0-81ed-40c6b9d343e0.tmp
Size 10KB
SHA256 44d3b241b3db6acf31583a489eddfb223e77ac5a5d82b7624c159a627b03a863
MD5 076af546a99e0ed46dced3ef5ade2ea7
SHA1 6c57b4d7106841314c8b332d507eb7643d35cbac
SHA512 044f0cd703d627fbbffbe395d3a0dd89b3b10431c137e21d84b57a70523aa67497e7c616fda6cb730681cb3136891fb2f1fe1b508fcd3a7ce83300bc82395fa4
SSDEEP 192:sxZyRQWg/fdsn1HIdpdfHW6+WNGYRPNF7UIg5oJ:sxZyNg/fds1IpHbGmIO
TLSH
T19222D8156E28787B9CCBE20DBA557F13E6F9503251951E88AAFCC61C05E76CE134780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ac3a491-e4e6-4368-b161-c8b1edea3bb4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7ac3a491-e4e6-4368-b161-c8b1edea3bb4.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

804142fc-4143-4e34-9c61-7edf6b9f90f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\804142fc-4143-4e34-9c61-7edf6b9f90f9.tmp
Size 27KB
SHA256 c9719edfd8cfe1c613da244a662d272b9b9b1f85948f2209aa8553f6392beb1a
MD5 d83e1d1f5c059610de939e0d915a2385
SHA1 e51d51a02404a512a800d248b31f2b8347af9d85
SHA512 e867f95c7c696acc06dc923acff12a83d7d49359dfd91217f0548201564636f76624155d8964b58d3ca1465061e1643021123b7b75a28bd8fc4cf27ba877fa31
SSDEEP 768:mUK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Zrod+Vs:mUK9uzYWvcQWsu1ja0HL7Q3Sd+Vs
TLSH
T1D6C2F93F640CCB7E5FC01AADDC5A6F973E9802D796588D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 b9d0b586999297fb178af82151458376a6f99e5d98a82a16f13f1d89ec0708d1
MD5 077c255f794318792698d0c8d3070c52
SHA1 f891ce95b4312a885155cd1611cc7be15b9ae830
SHA512 4f486ee1eb8c29e8342f220505cbda9d1ca62e92d5d1aeac3d88f440d0d0487f8bfbf7dd8b07e83d5bc17e0eebaf29dcc5666a65ff90c2071b9a98c9026890b3
TLSH
T1EC5193C8BD8144AEF7A8097189D73D873E76818B59731D7624B8F8BE44CAB95FD1C050
MD5 SHA1 SHA512 TLSH

Submit Download

d0ca9c60-e4c1-4b45-ad97-b2dde705049c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d0ca9c60-e4c1-4b45-ad97-b2dde705049c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\file__0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

2c7b3fc4-aa21-46a7-8fa9-fdee9a6bad36.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2c7b3fc4-aa21-46a7-8fa9-fdee9a6bad36.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

a1f83da5-3e91-4ecf-9664-492ebbaff57e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a1f83da5-3e91-4ecf-9664-492ebbaff57e.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a2727a17-0788-4cdb-8648-1b4df7d2c0ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a2727a17-0788-4cdb-8648-1b4df7d2c0ae.tmp
Size 1KB
SHA256 9148a7ec3082e71c308bf32aaa85a94411b5ecb0c4314a6295f2e57b80c1a6b6
MD5 d92b6212829c94f69bce495bb779a903
SHA1 3acdc8062226c8ca8be12db61a6113516c0a7f07
SHA512 41ab279a2f44e119f6354c2f603766ca824ef3fd8da8d02ae74cd0992b839bf257c73f95d5e6a84549e069f6e810e4184f531b96ec7bf0891b9c2128cbc6f8cb
TLSH
T19031AFF783E0466E8A0156F09B14AE2ACE2D0517832C7C1989F5AF1BE3F2471D14165F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5fc065abe533731b712f3571606181abef9c543ca2ba7b806642b7ed7a0e5845
MD5 3d3a8e6781686c1d3b407533e6187d01
SHA1 42b59e1ca1bf4c087884bfc7495ca0e29b245cdd
SHA512 415b3ee787f11d326db515fbe030f1d6a24ba848b39f41a721a8065f453005a4e6a1f9e5751cc2b019e29a2f64254fd31ec8e47432b6f49c9dfc085daf15aa4e
SSDEEP 96:K0m79EZtr/jkz/qP5lkKhB5DkVNtKrN5WXyKMYKKQQKRy8:NH9hfn
TLSH
T153A1C295307B020178BD654981B5872A124235B3305CF7BBFFBD40A65EAAE544DFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f5e7b1c8-6f9c-4ab5-8343-bd8c136f8466.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f5e7b1c8-6f9c-4ab5-8343-bd8c136f8466.tmp
Size 9KB
SHA256 72b53197afa4b2587342e079d34eb619e6d60939fd239eeada751b75ce948698
MD5 673524def11499c27e72387f9787be2e
SHA1 fa5860fded99fcebc11d6722f8455e0431497110
SHA512 47cd2fe2a337bc9bfee4085cb0a0cac07012c2c39420c21c71aa5c844793ae1054b25f8cfe6165ec3098720231501315632f5ebcfbb4d2fc3799b669174592b3
SSDEEP 192:sxZyRQWg/fdsv2HIdpdfHW6+WNGYRPnr7UIgrJ:sxZyNg/fdsuIpHbGmg9
TLSH
T1A722B8116E38B47B8CCBD209BA65BF53D6F9503261941E88AAFC861C05E76DE134780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

34cce21c-79d0-40a5-93c8-5d2b850b3d62.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\34cce21c-79d0-40a5-93c8-5d2b850b3d62.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8b6f69a-8b55-4f2f-920c-b14049885089.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b8b6f69a-8b55-4f2f-920c-b14049885089.tmp
Size 21KB
SHA256 ce71b1ae7c61349e40bd7a014de97bcbda0f7d988e5508968ec49066e3d6d424
MD5 1654f43d75ef646c2faeaea909b80000
SHA1 dab0bda389f228c03366e92504dda8f206d925e9
SHA512 cecc64a4df91137bc6ec30d62a57a2217f576e6b540521843ea6163d220802c75ef151e5936fcde651dc1d5bb53659b1707f973cf6f965c1fcf1017776d3bfa0
SSDEEP 384:JiFzQkUSvFzsNJ8TUNTUlIlXw1TR0/9uXOjTV+cO+nFCjl+2lJevaTZcsHXIIli:gFd9gwgATDenhOsIjllbevaTZcsHXL0
TLSH
T103A26D3358689C3BAEA69A40F94F3207CEB151B7C9956B90E6CD9E1C01DB1DC234BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7050f4b-6f4a-42b9-84ca-1e3de6c422b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e7050f4b-6f4a-42b9-84ca-1e3de6c422b6.tmp
Size 8KB
SHA256 86bad7caadaac37d1606de46e38f78a222845ecdaa3fb4cda754416f0b1e50ed
MD5 7859ba38af50b0b45a9891ac6c5cea50
SHA1 59b32743384100990163136b0653dc298f36c9f1
SHA512 9452b7c29676d954ef153f33565b790e7eb6de88f5ff6415ee6cc250eecfae5a6fa66402696d93be19874ab756e180ef3d53ce1f5baa81957f6fb04eeb2e7aa4
SSDEEP 192:TONC6yQQmiUycl4uOCTVghcO+nFCjl+2lq3UtqXU6:TONC6TRlOCTV+cO+nFCjl+2lDeU6
TLSH
T186120935B8786C776DD2A544F88B32179EB95167EA466F80D0DC2E1C01DF6AC234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f893b2a-ed4d-4b3a-88c2-5bbadf6b832e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5f893b2a-ed4d-4b3a-88c2-5bbadf6b832e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7d255aeb17c92aed5aa7ccf8995fd82eaef8efc32c31d1ce3941759f74b79d6a
MD5 1d5336b1a8910336159b06ae85a70a9c
SHA1 24281f9a9c92715549c581fb46db28971f9bda11
SHA512 f40afa2a1b0708a85480d5ff419c7b8aadfb52fc0f2f77f20b6191614a96e82c93a6aa8198616391a31322ad0d89fa808207167e33e9cae8faa5b10b5058ec3e
TLSH
T132410758BAE91149B3B72E569BFA78AD487F78773E47C49D00110E4E0A63A40C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download