341c7964ea930c64f0195c71fc9736a5989a2742b5be6251b289dfe478e824ad

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/11/2026, 00:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1/admin/main.html
Size 1KB
Sample261113-al4chax18p
SHA256 341c7964ea930c64f0195c71fc9736a5989a2742b5be6251b289dfe478e824ad
MD5 04c746c6b6dca53a0511087b63a2d006
SHA1 df522cfbd038480e4cfacae4256d0f97f998afb5
SHA512 ffbfabd81cbb7366eb3bd934c17954e095ff9061ff5d10171fd56f0e35321c610764294f080b65dba5261d8de3cd9913f053fc1deb929c897c8fda2c8e5ec887
TLSH
T11131320250CB39A7D99642F8B1713FD9DCF4458C63229E2835A3B2DBE2C05DC5A2F057
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4972	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{9E4FE317-5F2F-4DA3-A799-AAEC8EE9AA32}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
804	msedge.exe
804	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 628 wrote to memory of 2840	628	msedge.exe	85
PID 628 wrote to memory of 3100	628	msedge.exe	86
PID 628 wrote to memory of 4972	628	msedge.exe	87
PID 628 wrote to memory of 3100	628	msedge.exe	86
PID 628 wrote to memory of 3100	628	msedge.exe	86
PID 628 wrote to memory of 4820	628	msedge.exe	89
PID 628 wrote to memory of 4820	628	msedge.exe	89
PID 628 wrote to memory of 4896	628	msedge.exe	90
PID 628 wrote to memory of 4896	628	msedge.exe	90
PID 628 wrote to memory of 4896	628	msedge.exe	90
PID 628 wrote to memory of 3780	628	msedge.exe	91
PID 628 wrote to memory of 3780	628	msedge.exe	91
PID 628 wrote to memory of 3780	628	msedge.exe	91
PID 628 wrote to memory of 3900	628	msedge.exe	92
PID 628 wrote to memory of 3900	628	msedge.exe	92
PID 628 wrote to memory of 3900	628	msedge.exe	92
PID 628 wrote to memory of 2140	628	msedge.exe	93
PID 628 wrote to memory of 2140	628	msedge.exe	93
PID 628 wrote to memory of 2140	628	msedge.exe	93
PID 628 wrote to memory of 2244	628	msedge.exe	97
PID 628 wrote to memory of 2404	628	msedge.exe	98
PID 628 wrote to memory of 2244	628	msedge.exe	97
PID 628 wrote to memory of 2404	628	msedge.exe	98
PID 628 wrote to memory of 2416	628	msedge.exe	100
PID 628 wrote to memory of 1316	628	msedge.exe	109
PID 628 wrote to memory of 4220	628	msedge.exe	110
PID 628 wrote to memory of 2748	628	msedge.exe	111
PID 628 wrote to memory of 2988	628	msedge.exe	113
PID 628 wrote to memory of 2988	628	msedge.exe	113
PID 628 wrote to memory of 2288	628	msedge.exe	114
PID 628 wrote to memory of 2288	628	msedge.exe	114
PID 628 wrote to memory of 804	628	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\1\admin\main.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ffb55bec188,0x7ffb55bec194,0x7ffb55bec1a0
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1784,i,12695842159544857378,2670858158741714079,262144 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2008,i,1502874516638295844,16848601341037907617,524288 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,1028396530078052557,1476036269930019691,524288 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,6698006939032384210,8431253031324812288,2097152 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,3646393036678801201,15655491908546097920,2097152 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,12194457960441520034,8613911116477416802,2097152 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,510251706156804319,8897063001831711608,2097152 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:2
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3348,i,6055017609148764270,1159925938470424318,524288 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,18153403346815470046,11565154497467862987,524288 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,10404207899418010976,16995682920977301285,524288 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,10404207899418010976,16995682920977301285,524288 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,6269333862438957512,14520942137544372361,524288 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8
  2⤵
  PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,12907676360153185845,13539771690866330059,524288 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,6336521365610262977,18190502321727802257,524288 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2880,i,15379671219543575188,13947076382494709343,524288 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:8
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,8270800006579112616,16316201771294691629,524288 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:8
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5388,i,3717975925023617503,11796450880883419238,262144 --field-trial-handle=2280,i,16316253473782922333,10551041071969161767,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:804

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4456

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2a78163b-94a8-460f-9ea3-dbcae4318307.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2a78163b-94a8-460f-9ea3-dbcae4318307.tmp
Size 21KB
SHA256 d8cf4cffdd61b8b120cd7093fd972e2dbe7c7707f933eff012b04dc3eab9b024
MD5 3c10afaa01aabf8a081c6a7e8f44fbe0
SHA1 48ea1e75f38f5ef8f82accea9d182b3353e27219
SHA512 a2c486f8d33e0ac15c6f8ac10ecfccfe66ac73a972e9759b5827a64e7dedb66782dd229c668290fb2fe54ca24c4562c928df97f4e79c3cb8dc089dc0410838b4
SSDEEP 384:SiFzQkUSvUzsNa8TUNTUlIljJbf19739zIGmQw+WUwJ7iG6H7vBEMXoIIlh:ZFdofwgHTD3h/wZT7iG6H75EMXoL/
TLSH
T1D2A26C779CA4DC3F9EB39A50E14A3A139EB581A7C9C5ABA0E6CC5E1D00DB28C130BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c84fe1b-6ca8-446b-9461-ba30b855b4f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2c84fe1b-6ca8-446b-9461-ba30b855b4f9.tmp
Size 18KB
SHA256 348cbb31476edccac5c738b27dc5a9b0bc88d61f1272c9475ddcee11b07e9a37
MD5 c66cca3c3e113c9c94e99558955ba7ff
SHA1 1d40c2bc9eeb0f79bcd760cade4fdf472664184c
SHA512 495daae56907ac621ef573e7bf9bcff71a3d6cf79a6a54f73fcb9c67632e396a35152ba82f8226643356208353329cb2602ac4951c1504e97741cc87f86a1bf2
SSDEEP 384:lQkUSv0sN5UmJbf19739zIGmQw+WUw+iG6H7vBEMXoIIlh:/0oTD3h/wZYiG6H75EMXoL/
TLSH
T13A827C76ACB4AC3B4EA39950E0463E13AEB89257DAC85F90D5DD5F1D00DB28C230F916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f42d502-3e12-4635-a802-44f14473e5dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2f42d502-3e12-4635-a802-44f14473e5dc.tmp
Size 18KB
SHA256 d121620243aa734dd57a5f1b3ab83bb60fff8698381e48b5e7f018381b8b8f95
MD5 b08eb2652969ab6c2f9a7bd33cd3b871
SHA1 166b782a7ac1f38a08d2edc3fa92079e81d7b852
SHA512 3c3ada380c5800236ab70092081abaee50788c89d7c072234ac01f7a82cd1dd1cc8399527fb2b976428b2f591ca17348de5a8f260e8fb8b7c7bb80cb2b1c21ee
SSDEEP 384:jQkUSv0sN5UjJbf19739zIGmQw+WUw+iG6H7vBEMXoIIlh:N0HTD3h/wZYiG6H75EMXoL/
TLSH
T1E8827C76ACB4AC3B5EA39950E0463E13AEB4D25BDAC85F90D5DD5F1D00DB28C230F916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

06a8bd8a-7155-469b-8f43-c4a070f04f1c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\06a8bd8a-7155-469b-8f43-c4a070f04f1c.tmp
Size 10KB
SHA256 b8dd7d4787acdea81bce2bb6c6dcb5daebcb35b1d62ef31485b4d308bed5e600
MD5 a9e52dbc2d91d01c2c9de57bb39a53bc
SHA1 d5b3bc0986dfa0c7cb7509589a615584fd51e60c
SHA512 23d225418fe9fc7faabd86c73abf582da76786bdbbf77b7bdd83052c55cea1eb1f8b79218334583830fa0cd5f513fa3c258052271c6f9916588a16fa817d501b
SSDEEP 192:sxZVRjWk/fysd50IdpHWHW6+WNGYapkwO+PIg5eJ:sxZVsk/fysd72HbGYQQ
TLSH
T18622C8566E28697B8CC7E21DBB55BF13E6F9507251D01E48E6FC8A1C08E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3a85a18e-cdb7-4052-90d9-0cf51ae2e466.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3a85a18e-cdb7-4052-90d9-0cf51ae2e466.tmp
Size 27KB
SHA256 32cafb8535e2f33bff2b5ccdf98d3f62cf3acf612ed34734f6734eaed9cb62e4
MD5 179e0ced309477fb3f51c849083546c1
SHA1 a30a8a365fd3ac870e2fe8ed917cc4c6a79142b6
SHA512 9434231d471c8675d6dc53ee973c0534baeadeff535d6dd00adc3113bf67c478e249020e275bcf1d908237142cba6932f3b55e92490a461d9c3304b1c2e9e63c
SSDEEP 768:5jWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy72ro40feg4mRE:5jWPcLKWvKeEeu1jaClLiF7N40Wg4mRE
TLSH
T125C2EB3F644CCB7E4FC01A9DDC5A6FA76E9802C79A644D4047FE984C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8548eb42-9dc0-494a-aa36-767c0ec93d4c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8548eb42-9dc0-494a-aa36-767c0ec93d4c.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

8a528dcc-ba13-41b3-ac05-1ca0c4c988a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8a528dcc-ba13-41b3-ac05-1ca0c4c988a5.tmp
Size 9KB
SHA256 ae8d1d019fd3f68c1c71998e1768b9707214a10e73f29967e0094d43c9db5a26
MD5 4be8f4b6a679ff6cdb6f908a6ae145ea
SHA1 635980260e00f6f562bc0d884edfaca4568c7cbc
SHA512 78a90c6244825b939cd07fed3d3d5359245b08fd79283bf21d2ea0ddd71a09c260b2464e1c34a582a69d426b0a35ee06930f3e7b824d291eaa5a4cca8caf6434
SSDEEP 192:sxZVRjWk/fysd50IdpdWHW6+WNGYaplZO+PIgrJ:sxZVsk/fysd7gHbGcQ9
TLSH
T14722B8566E28A93B8CC7D21DBB65BF13D6F9507291D41E48EAFC851C08E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8f55e729-9816-4cfa-9cdb-de178b5b40f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8f55e729-9816-4cfa-9cdb-de178b5b40f8.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 d5a9654fa8cc85713ca0814d66c3899e62a101d2bc7807ebcd62033bc51ac191
MD5 32ad74d0fe16378e64930ecdb79f73d1
SHA1 0ea15c7b454c5163617ac110be15ee55a96be072
SHA512 f42ffa634392169528a23237d59eb862ec92cd0d12f43bfd56c9dc9e99d833c178fedb9c3729110350ef60510a5847e7fee319aef64713a542508405f1db719e
TLSH
T165E0268805CED22EB30C698B01FC670C82803A5FA3C469CE3B48C4C8B081388F797AA1
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 ee37e6553556b17d353ae8e96157a039e981a01c0429abe96d364eff15e743ab
MD5 706e829fc8d1e81536a87f4644ae5c3a
SHA1 9daa8d29c28de0c72f92c7334826d013d5442b60
SHA512 e79ef8065eeb3491ab658e2886bdc6bbbc041c66da1fe512fa1418167b7c7749ca3ed0e7a8239d97a6811b5ede24900cdce5dde2f2f1a3dc4cca2a258ed76710
TLSH
T1D23141889D940471FFAFF53D88D6228F3F316A80BD931E123DAACC79E88A357D025204
MD5 SHA1 SHA512 TLSH

Submit Download

e390d440-e542-4141-8284-40997ee117bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e390d440-e542-4141-8284-40997ee117bf.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

a4848796-72af-4463-8038-419dbde29458.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a4848796-72af-4463-8038-419dbde29458.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

b863ce9c-8e4d-466c-8243-b0dfbb977f6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b863ce9c-8e4d-466c-8243-b0dfbb977f6e.tmp
Size 733B
SHA256 bb5d3c5e76e80131357b296b716c21feb1c1429d237072676fdd9702458fcbea
MD5 3990d0265a97a8ce590e414b7ca3b48a
SHA1 a753a0451665a2d2f817941ba63f026ac68b3d69
SHA512 13ae495c8daa69897c1f37158e853cd72d687d6ed75b79a190c06ce0a59f3afb1ad848ecd289a6d398d5f6478f88b9ba792b583ffcd36a70e2ba7e70b666d01c
TLSH
T1EB019CF7C3E4956E8A0152F06A18AF1BCE2D0502431C7C1AC5E4AE2BD3F34B5E50199F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 28bd7a14d9ec6d5bb91236e6d4ed4d15728967299d054867b5f8ebbb34c97b5e
MD5 ce6bb148aa7a4c704c5a02cba745e00e
SHA1 0ac21dfeffb60a12f670bb037f27e2b0f35087b7
SHA512 c5e5b7241f1bc0e8134d1a90fe98e4b96dbde8a3206cafb300e8f763dd8db0cebeb94658563b982ed44f1eaaa722b74d1fb33283895c0b6985ef6c33478c64fc
SSDEEP 48:K0Q/26gK+/b2NWISS/K9u10/xIvY1mOUyLtMBdvbfAbzGTISVAK9V13AxFQYWXD+:KgvaK0w6im0KjSkC8KfaOP
TLSH
T16E91310071BF120079BE754C54B59B1B42823173B058F5AFBFA98196C96AE150EFF8EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5e7e057-d659-4b8f-b1d3-423d7862dc7c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d5e7e057-d659-4b8f-b1d3-423d7862dc7c.tmp
Size 9KB
SHA256 2876635086b5b084780f8c5c08678541d96cb62592924f607c26848d95bbc699
MD5 e90d12ef8071689aa841af03c1be8e68
SHA1 7d7ce10f577e1da97545a7a71a39587841e855be
SHA512 786abd7f3225b7e5a169ef80a6b911b987e9fe94bb6de33d0ae44be792a7d9dd7ced78770c81ec8e5338f795b7abb7ec300318385ff478406772633ac83bbf1e
SSDEEP 192:sxZVRjWk/fysF50IdpdWHW6+WNGYaplZO+PIg5sJ:sxZVsk/fysF7gHbGcQS
TLSH
T19222C7166E28A97B8CC7D21DBB55BF13D6FA507291D41E48EAFC8A1C08E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d741d68a-35a6-4d4d-a0d8-a49e171978e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d741d68a-35a6-4d4d-a0d8-a49e171978e0.tmp
Size 10KB
SHA256 16ea0470d692f4869799bb140856c43df7e9eee0f2e381619e11805e97e9d418
MD5 b38c8a48d49fa9472110456c0d4648b8
SHA1 3bd0bdf7af898780f516710a7952890cf86e9dda
SHA512 23de914dd295bac086038b32a09aff0d0aea33e71fba69c7f3b49c36e23ab11a27b0adcb2bf238277398195e46dcd3e561e62e005329d10bf717b6850bc3bed1
SSDEEP 192:sxZVRjWk/fysd50IdpdWHW6+WNGYapxPO+PIg5eJ:sxZVsk/fysd7gHbG+QQ
TLSH
T14722C9566E28697B8CC7E21DBB55BF13E6FA507251D01E48E6FC8A1C08E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9dc1e36a-ddef-4525-a220-10b2881c4262.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9dc1e36a-ddef-4525-a220-10b2881c4262.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cfeda07d-7930-47e2-8635-e2dcc38f809d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cfeda07d-7930-47e2-8635-e2dcc38f809d.tmp
Size 8KB
SHA256 58a128d78a7d2169e9419a654b525e14e45de39f12350cb9f7dc0df69ac63b8e
MD5 c88f969ce30948248c136b040e9890ff
SHA1 81681795fb6738ad84f7399524e9332674d24b18
SHA512 fa2c58f3c669ff5e67a75ca73697d7c8a536bb39169ed9abd8ef04870b8ea146a4a4c211cb54ee80058273287944401e39cb21dca6a2424c3ed8cea2a61e8380
SSDEEP 192:aONj6IE7QmiUywdTPuIGmQw+fC7sGW7U6:aONj6DtzPuIGmQw+YsGcU6
TLSH
T1CF02F839ACB87CBB9EF36E05F4877E235EA5112BE5952F84D9E81A1D00DB24C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e37476fb-bc73-4f4b-852a-3ced2d4b5998.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e37476fb-bc73-4f4b-852a-3ced2d4b5998.tmp
Size 8KB
SHA256 a48a27cc9e99b55e9694cfd4d5b2ce8f988240b177e1da45a4a709a716a1519e
MD5 996034cd18ede2dd70d42bb85697c50c
SHA1 f378cdd04250bbc36b8fe236ec4d9ef1e46eb32d
SHA512 22a57094743d2dba7aa448a847c5b5293f5f96ccb81da1ac14d3c788619c3d998b6a57bbee77b00a5388485f04b46a73e12f1b7378f506fb651db48c9fb69a26
SSDEEP 192:jONz6IE7QmiUyAdTvuIGmQw+WUwFJR27HGtq3U6:jONz6DtVvuIGmQw+WUwqHG6U6
TLSH
T185122A36AC78BC7B5EA35844F4833D235EA54227DA896F84D5DC1E0C00EF25C130E917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

920c8b17-8c16-47b3-a8ff-e706ca621768.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\920c8b17-8c16-47b3-a8ff-e706ca621768.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 95f72962bde5efbd47ec3f4351ae5e2f24280a86a1383d0706a2f6136feefa71
MD5 ca40156c21c063e9098ac7b8fa46eb2d
SHA1 a2ebe55722f23c7ca9dc228c5aaa869314a36cd1
SHA512 dcf7b2fc45a6da206e5ec7a4134e8511b19e24da9e9cd3ab76f0be293594a1bfde20b46e55a2d64c7c34cae7ec3dd8b4467324fc72d685b9db7269c24e9e47f7
TLSH
T10A413A58B6EE1108B3B76F5A5BF6B86E487FB8332E06D59D10110E4E4672A40CCB1737
MD5 SHA1 SHA512 TLSH

Submit Download