f2026d191a05d518e2947be708352ec2d57f9ff70f5ad3d950bf72d7f9abd2dc

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sqhe5er.html
Size 9KB
Sample261110-pmwflstvas
SHA256 f2026d191a05d518e2947be708352ec2d57f9ff70f5ad3d950bf72d7f9abd2dc
MD5 21cbd7c99503786ca6f8981822461c70
SHA1 f2dde3af5fe0fcae8902a9dfe550c9eb45db7b2b
SHA512 a8468a53c1b5e2cce75d8fbad033fefb250a7d8ec18467a1f9bf5eb377eb097097e49958c0da220dc582ebf48df3e05fff5feee06ccf48d8986222a72102d480
SSDEEP 192:GTiurAlAfYCZhURmekOroI2SQdoZSI2FoxcCi/u+QepqqLXo1pfDKytzOPgj:GTi0YCNIhZSIfcCi/u+QepqqLY1p7Kyl
TLSH
T1B6226651745EC93B96E301C7E076E250F8BFEEA2C3504095B4A853B3A7D2E78BA33195
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4464	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{5CEEE902-C7EB-4C85-8D83-029E2ED0DBBA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3612	msedge.exe
3612	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe
2188	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2188 wrote to memory of 4556	2188	msedge.exe	84
PID 2188 wrote to memory of 2324	2188	msedge.exe	85
PID 2188 wrote to memory of 4464	2188	msedge.exe	86
PID 2188 wrote to memory of 2324	2188	msedge.exe	85
PID 2188 wrote to memory of 2324	2188	msedge.exe	85
PID 2188 wrote to memory of 4516	2188	msedge.exe	87
PID 2188 wrote to memory of 4516	2188	msedge.exe	87
PID 2188 wrote to memory of 4912	2188	msedge.exe	89
PID 2188 wrote to memory of 4912	2188	msedge.exe	89
PID 2188 wrote to memory of 4912	2188	msedge.exe	89
PID 2188 wrote to memory of 4972	2188	msedge.exe	90
PID 2188 wrote to memory of 4972	2188	msedge.exe	90
PID 2188 wrote to memory of 4972	2188	msedge.exe	90
PID 2188 wrote to memory of 1284	2188	msedge.exe	91
PID 2188 wrote to memory of 1052	2188	msedge.exe	92
PID 2188 wrote to memory of 1284	2188	msedge.exe	91
PID 2188 wrote to memory of 1284	2188	msedge.exe	91
PID 2188 wrote to memory of 1052	2188	msedge.exe	92
PID 2188 wrote to memory of 1052	2188	msedge.exe	92
PID 2188 wrote to memory of 3044	2188	msedge.exe	97
PID 2188 wrote to memory of 540	2188	msedge.exe	98
PID 2188 wrote to memory of 3044	2188	msedge.exe	97
PID 2188 wrote to memory of 540	2188	msedge.exe	98
PID 2188 wrote to memory of 3812	2188	msedge.exe	100
PID 2188 wrote to memory of 3012	2188	msedge.exe	109
PID 2188 wrote to memory of 2416	2188	msedge.exe	110
PID 2188 wrote to memory of 876	2188	msedge.exe	111
PID 2188 wrote to memory of 4068	2188	msedge.exe	113
PID 2188 wrote to memory of 4068	2188	msedge.exe	113
PID 2188 wrote to memory of 4192	2188	msedge.exe	114
PID 2188 wrote to memory of 4192	2188	msedge.exe	114
PID 2188 wrote to memory of 3612	2188	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sqhe5er.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ffad96cc188,0x7ffad96cc194,0x7ffad96cc1a0
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1820,i,8227845606040337136,8743442133286618576,262144 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,7722869293747927691,7151425998532886774,524288 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,11659802872927620113,3616689148725750740,524288 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,13789753055554731100,14510581353431653648,2097152 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,6504828479328682993,17009665000189725573,2097152 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,16333507110325548663,8476697687291822043,2097152 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,8999795797174259624,2271178499598296722,2097152 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,3850338979670003826,2484295988815577770,524288 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,11562529620460810337,15423056929387313662,524288 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,3453647520933122092,14112407032296743472,524288 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,3453647520933122092,14112407032296743472,524288 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,12699881401885605962,3501680834378658066,524288 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,1667520794739931131,797356161791801391,524288 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,16030216964641269501,505960130633137629,524288 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,17665010914861933426,678497606860606427,524288 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,6309835547490734274,6992315052769318671,524288 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4472,i,15357872499352393530,13965118418250061277,262144 --field-trial-handle=2240,i,15006858116718225218,8956977936621581580,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3612

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

09a67c95-aa53-4697-adb3-988f49057ffe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\09a67c95-aa53-4697-adb3-988f49057ffe.tmp
Size 18KB
SHA256 0f442d957343e2a4c3a006b7b51a147d4059cbda371dba6dc5576e6b3d4dbf61
MD5 c3644ad17c97bdbaaf06b25db91332ba
SHA1 a765cc527bf17a19dfe8414d0e7da417426f4743
SHA512 e3d22d3d525c071da9bea9b1c903481fcada3b33947c25e5acd9abfbcdd346c96a4c20e4d6c384d59c489fbb401999eb2a0edaacaa49aa11b706d3a1c4d93c25
SSDEEP 384:0QkUSv0sNEGvXU1mzwzIGmf9wa6iQqvaTZciIIlb:k0SUYiAuXiQqvaTZciLd
TLSH
T10E827C31E8787C775EB3E550E58B3A079EB08267DAC42F94D5D99B1C00DF348234BA15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1aeefd73-2f76-488e-901f-24a33f6aa1e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1aeefd73-2f76-488e-901f-24a33f6aa1e3.tmp
Size 8KB
SHA256 0211d6b92ace8f18e62865911aa4a860bcdef7616ecba1079f3237e6d700ff02
MD5 b9e1bc14a795fef2ae5682a7bea55c43
SHA1 9eae3a293d7d49ece88cee2eff2bd8d86ef6d0af
SHA512 2e3da229420fa38a5f36f98aedb4e6e0a21b63e7e6141ed1435d1b002906352065fc5e97ebf3170dcc261b72f7c1dddad5d7ac3c33c09305ac237ed87d84f15a
SSDEEP 192:zONt6IE9QmiUywDTwuIGmfpL5iaH27HQqqyU6:zONt6D7TwuIGmf9wakHQqU6
TLSH
T13112F936E8B8BC67AEA3A844F4873A175EB54227D7887F94D5EC1A0C00DF25C530B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2b328a41-1605-4b5d-a959-b9082c47e21e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2b328a41-1605-4b5d-a959-b9082c47e21e.tmp
Size 8KB
SHA256 2d6735cb9e530ec7b6a0f6c6b9d489f8b6eeaedf279c3a4efc4caaa94334599c
MD5 a300da202081a23ce15c3829d0d355bc
SHA1 a9d4ad2ab671843df7fa80eaea2d802a4d10f8bb
SHA512 1f2649e236d5f73fc0455e218a8e4c1e22f02b6b90a7305bbec70dd322a08124d2b65c8bca701b7badc3e71837d7be29c915d3b9f08bc45871614450897d349a
SSDEEP 192:aONU6IE7QmiUymDTPuIGmfpL5DC7sQYAU6:aONU6DtrPuIGmf96sQ9U6
TLSH
T10B02E739EC787C7B9EF3AD48F4876B236EA5112BA5952F84D9E85A0D00DB34C1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

549bea73-9f17-4beb-abac-d4d623c7b282.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\549bea73-9f17-4beb-abac-d4d623c7b282.tmp
Size 21KB
SHA256 e2379fc2e84201a70cf890dbfa408d55d404f2c784a4d820bb29463f5a714104
MD5 428d15b4fcf281a786d7c3c47c1c2e57
SHA1 5094a0ee76614279dd359baa26464d1bf076bfbc
SHA512 12ab8fd7e3165273b72c3aee114ff7b5c3d7464c899bb4ff9df63577b8ea03dd40e973d452e8e5cbe8a42c13af7cf7ae705f6dc252a3d26b0fbab66e678d4e13
SSDEEP 384:niFzQkUSvV7zsNM8TUNTUlIlGvXU1mzwzIGmf9wanNiQqvaTZciIIlb:iFdVvhwgwUYiAucNiQqvaTZciLd
TLSH
T165A26C33DCA8AC7B9EB7DA40E58B3617DEB14167CAC46B90E6C99A1C00DF28C134BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7f67e2f8-a48d-4f55-8527-c6faec194ec6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7f67e2f8-a48d-4f55-8527-c6faec194ec6.tmp
Size 18KB
SHA256 6226f9aa04b98903d69733878f554bb188b69498e73bccaa16874e66e5efa177
MD5 07f89c179a37e8b09c8e3cdc5a0031e4
SHA1 9366916b8d53e4d3fb0072fddb135164b039613a
SHA512 b717ea2a5c3ef139456d8f32ae2a8c7b0f23b9113ee1f3350ce954e558296cfe4265b1f7fe240e4f070ef9ceac2e05814d389e45109324abe1f6124603730baf
SSDEEP 384:WQkUSv0sNEJvXU1mzwzIGmf9wa6iQqvaTZciIIlb:20VUYiAuXiQqvaTZciLd
TLSH
T1E1827C31E8787C775EB3E550E58B3A079EB08267DAC42F94D5D9AB1C00DF348234A915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

1f08f54e-88e4-4901-8217-0c8d16c8ce6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1f08f54e-88e4-4901-8217-0c8d16c8ce6a.tmp
Size 27KB
SHA256 61c2e804152915bb5f6a502a491d5455188b4d577ff66a6f75a175072fef8c94
MD5 6097f9595f865a4bc3a8383456df5861
SHA1 e6288494e00cfec16a21d4eafb5539d547339b2d
SHA512 ed94d00304e4cdf35c08e9a64d9ce0506f15e571e4f9bb4aee54364ad1aefe80063a96b46e59976409ff887851aaefd7dfc1ecba4bdefd812b9a0d307155e304
SSDEEP 768:M8WPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7jro4sfeimRc:M8WPcLKWvKeEeu1jaClLiF7Q4sWimRc
TLSH
T17BC2FA3B644CCB7E5FC01E9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

480c1e4d-8264-4f67-b4ff-5ecfecd1902c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\480c1e4d-8264-4f67-b4ff-5ecfecd1902c.tmp
Size 10KB
SHA256 b77c8283d880f2c8b5bee2d01ccc5d2b03bd32c5020338954551f29d314132aa
MD5 6886be64a0f7b8ff1208ba875084d499
SHA1 2406726cd2761452a1d3105f109df47c9512e20a
SHA512 68e9a61ac956a957be2087e7e156367f769bd473807186380e005acf4dee064b93cf47c25af61c80ce95496cd8a201e7c439ae0ed07b4f60653883c333518687
SSDEEP 192:sxZ+RkWV/f6sCrRIdpdxHW6+WNGYapYZZPIg5HjJ:sxZ+xV/f6sCWnHbG4VV
TLSH
T1D022B852AF28697B9CC7E20DBB55BF13E6F9503251941E48E6FC861C04EB7DD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4e58d3b2-62b1-4c68-abca-784d0051c4a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4e58d3b2-62b1-4c68-abca-784d0051c4a9.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a23a8d5-bf59-4126-b6c9-5d66e98d4d04.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7a23a8d5-bf59-4126-b6c9-5d66e98d4d04.tmp
Size 9KB
SHA256 84cfa4a479d125969bf4c96e928c7407e18d4c42df34ec44497d704030c92814
MD5 ccd6383f9607ebdaed1d1d52f0fdd7ab
SHA1 4091e8061e1004c52471a42a897ff58a5c9184ec
SHA512 6c07aaeeea9e3467a3e186fc18f472a1d21aa54a0e674f9cd9287a5ed0f56e8e405778630e71b7abc06b4b26c538f0cf4d719872291035f2c45695bf2b2fa735
SSDEEP 192:sxZ+RkWV/f6szrRIdpdxHW6+WNGYaplnZPIgrJ:sxZ+xV/f6szWnHbGt9
TLSH
T15F22A752AF28A97B8CC7D21DBB55BF13E6F9503251941E48EAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98dee355-13d1-4558-9e88-fbc09a992fce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\98dee355-13d1-4558-9e88-fbc09a992fce.tmp
Size 10KB
SHA256 e552d8b190f4d798788956a05026f55601db6251cd435203f490375d5c1ee189
MD5 be05a3bb036d601644c6bded9d686bd6
SHA1 c5c97e069da0bfc9bd4d063b0bf3a1fb5321aebe
SHA512 b667514c66c334ce7c950df4f4db3ac42b72b2665c77efe34c144406fc93d7b1e92ea1c16c875e109153d3338f680f1c64527127d3833199b336060df2320942
SSDEEP 192:sxZ+RkWV/f6sCrRIdpHxHW6+WNGYapWqZPIg5HjJ:sxZ+xV/f6sCWRHbGHVV
TLSH
T15322C852AE38697B8CC7E21DBB55BF13E6F9503251901E48EAFC861C04EB7DD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 0e2636c5051a7fae8f94cb0632aab7efd31f0314fac47575d4efb43c45bce648
MD5 5e2c1072730710746ed6faab726775af
SHA1 e871355bd85a9cdb520b048f9289f21a1c14445e
SHA512 8951bd7c55248bbdff0ccea1abadac6788d20729c5391cda8522496fddabf83e42baac471369035e26c13382e7414c001c345e5d762dd7f6224c13a0da7b2d93
TLSH
T16BE020C594C4C63DD345A68702B4534C8580371BE3C86D0D2748C8C471425406BB3B68
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 073b4c5b94a62754a2223f55cb47ab6d73255bea4efe67b3f8e889d837343c81
MD5 d6100cd5abdae01737d08c8590bbb018
SHA1 047ca1b96b822923a87f6f512bd30e6a0fccc498
SHA512 7f7f5b8197560e1810a860813d2989aae6215856d71aaf9213531451676ec337a251c4e46c4ad8fb092a78a541eb9a0490ca2439ccd69440997e191c155df800
TLSH
T12451008BAE604C51FF671332B2D53383B63891A53E930E420FA1D7FB8D16775591806B
MD5 SHA1 SHA512 TLSH

Submit Download

fe7041fd-cd8d-420e-875f-9c58be7dacd8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\fe7041fd-cd8d-420e-875f-9c58be7dacd8.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

5bc377b7-bb83-4b45-ab28-9f18b5ab685e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5bc377b7-bb83-4b45-ab28-9f18b5ab685e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b2d5814f-8f5f-46b9-aa9f-34a64ad2899b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b2d5814f-8f5f-46b9-aa9f-34a64ad2899b.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

fd19dfa5-42be-4854-af60-c35f39b94bf5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fd19dfa5-42be-4854-af60-c35f39b94bf5.tmp
Size 1KB
SHA256 832fb367cd0641778c1b0c2690991101dd47698a41aa71f57753c80f528fd2ee
MD5 eca7f16ad06d9b78dd941f879356dc3f
SHA1 ba4d1d0b6644bbe568965a7f5acae23c399533b6
SHA512 0bdfe2a01d95344ae6dfad29936d3e5997fe2eb4d563b6ef527b32aaa23b001078969fd37fd6e49c260a3a983dac60e004cb938dfd3eb8c907d811069f99ef4f
TLSH
T1D22190F7C3E4866E891156F0AA24AE1BCE1D0506422C7C56C9E4EF2B93F3475E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1dc236fdb6c92f09116c00cb6fe9b640a98a84a118e0830c3e70a713db69bec2
MD5 c3e058a884130ada1155db67fd314300
SHA1 62b18891ede9b6526557f39e80de0b67436a6216
SHA512 c62e61b30f698c65e7c3dc4de8295b853443fc1a69e7d48f3fde4e2908300f457d650ade99c5414226f8fbdeb2fa7a06ec9301718de5add1fa00a9cb1f3aa17a
SSDEEP 48:K0Ujiu8+SbbiRqISGbK9i1wbxULY5ayoyLwfWaAqefbWt2ISyfK9O1UfxoPYVGeI:KYj+KwciOv6KcgfYwKl2KPHSxNH6
TLSH
T194913E41727B020139BD384952748B2F465235B33469E56B7BBD85EA8A3FE140EFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a49b708e-8e16-48e5-87c1-7888f7ba8439.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a49b708e-8e16-48e5-87c1-7888f7ba8439.tmp
Size 9KB
SHA256 ee2d8a5d13a7fb8efe3397e89efd8e93b133e1d50e2c0ae8d763b6f78ede4657
MD5 7be4e1a728792c8197faa953a971abb1
SHA1 f0543495d58fa77268640038dc5e9497809eb4a4
SHA512 3662ffb6ca43ff64d6a4a53d012a44ba34643baf5c5dc98f18116d0764ef78736945ef16e527732b882a47283f0ef19a4326c11dfc406a5d96e8f0127a946749
SSDEEP 192:sxZ+RkWV/f6szrRIdpdxHW6+WNGYaplnZPIg5H5J:sxZ+xV/f6szWnHbGtVj
TLSH
T16822A752AF28A97B8CC7D21DBB55BF13E6F9503251941E48EAFC861C04EB7DD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f4a4ae7e-f851-44ef-a5b8-7604031c6a79.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f4a4ae7e-f851-44ef-a5b8-7604031c6a79.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

cde9733d-0040-4a1d-aafe-1129b7db0aa0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\cde9733d-0040-4a1d-aafe-1129b7db0aa0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c16de0a-afe0-47f4-bb1e-3da3d7cf2038.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2c16de0a-afe0-47f4-bb1e-3da3d7cf2038.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0edf8cccd1dee63869c05c8db26cdb860ec7a96047adab83b0555a4325dae7a3
MD5 60d01fd151067e8c172e8a0c5acdd845
SHA1 4b1cd1a94b236597433770f6a09fd130ea5241e7
SHA512 2f47c7cee4f0b323510c531265eaca3e0721ea1cfff4fafaf5f59afd2df97d78b241f4281328154aeac2c3028efe9dcf78f650b1bacdeed0e321cc53e4c93411
TLSH
T1DF41F858A6F91148B3B7AF0AABF6A86D487EBD372F46C59D00010D4F0967A80DC71B37
MD5 SHA1 SHA512 TLSH

Submit Download