0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7

Analysis

max time kernel
149s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/11/2026, 13:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/public/index.html
Size 383B
Sample261113-qmapkscs7j
SHA256 0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7
MD5 e582b9106fb430459c697d4c5a519c25
SHA1 418242c0ee36e592982e3569c6bbb78f7274546a
SHA512 dcc2c76bda2f6567f90161911ab49600cd7896ee5607a4bfb842439189745156941c20d32b09d64b2554f1184b413f0b9f7399ec10013452cd45b791a39c96a3
TLSH
T112E0DF43C0E18809D32182700CC1F15D4BA2F6DBA7CA6D49B98A20898FC0B90CED72E9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
548	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{D810C81E-B906-4D8E-9477-11F27DB83651}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4932	msedge.exe
4932	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4320 wrote to memory of 4216	4320	msedge.exe	83
PID 4320 wrote to memory of 736	4320	msedge.exe	84
PID 4320 wrote to memory of 548	4320	msedge.exe	85
PID 4320 wrote to memory of 736	4320	msedge.exe	84
PID 4320 wrote to memory of 736	4320	msedge.exe	84
PID 4320 wrote to memory of 1248	4320	msedge.exe	86
PID 4320 wrote to memory of 1248	4320	msedge.exe	86
PID 4320 wrote to memory of 3912	4320	msedge.exe	87
PID 4320 wrote to memory of 5076	4320	msedge.exe	88
PID 4320 wrote to memory of 3912	4320	msedge.exe	87
PID 4320 wrote to memory of 3912	4320	msedge.exe	87
PID 4320 wrote to memory of 5076	4320	msedge.exe	88
PID 4320 wrote to memory of 5076	4320	msedge.exe	88
PID 4320 wrote to memory of 4524	4320	msedge.exe	90
PID 4320 wrote to memory of 4524	4320	msedge.exe	90
PID 4320 wrote to memory of 4524	4320	msedge.exe	90
PID 4320 wrote to memory of 1752	4320	msedge.exe	91
PID 4320 wrote to memory of 1752	4320	msedge.exe	91
PID 4320 wrote to memory of 1752	4320	msedge.exe	91
PID 4320 wrote to memory of 1620	4320	msedge.exe	97
PID 4320 wrote to memory of 4932	4320	msedge.exe	98
PID 4320 wrote to memory of 1620	4320	msedge.exe	97
PID 4320 wrote to memory of 4932	4320	msedge.exe	98
PID 4320 wrote to memory of 2640	4320	msedge.exe	101
PID 4320 wrote to memory of 3952	4320	msedge.exe	109
PID 4320 wrote to memory of 3836	4320	msedge.exe	110
PID 4320 wrote to memory of 220	4320	msedge.exe	111
PID 4320 wrote to memory of 2836	4320	msedge.exe	112
PID 4320 wrote to memory of 2836	4320	msedge.exe	112
PID 4320 wrote to memory of 3288	4320	msedge.exe	113
PID 4320 wrote to memory of 3288	4320	msedge.exe	113
PID 4320 wrote to memory of 4932	4320	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\resources\public\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff95227c188,0x7ff95227c194,0x7ff95227c1a0
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,10689511090723051433,7580160426854206004,262144 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:2
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,13180857566812576240,16934016869408446358,524288 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:3
  2⤵
  - System Time Discovery
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,16008202136920552287,8320329518356264544,524288 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:8
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,5511188059296662406,13503701220618998077,2097152 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,5524973503486957328,10383526598634558009,2097152 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,6784602339981645291,10057037490093954496,2097152 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4160,i,5686989776987331137,5541627729697449591,2097152 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:2
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,12710174610420052778,7095608824313489104,524288 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,629727538067221709,15557213208109716135,524288 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,7605537150229773507,783576619481153476,524288 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,7605537150229773507,783576619481153476,524288 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4800,i,9532483970855679901,8126898343194250719,524288 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:8
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4804,i,16439224767345398394,10331697837103450168,524288 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:8
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4788,i,1066996620503010400,10990002969392332042,524288 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:8
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2036,i,4166831334437510817,9679396736437719043,524288 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:8
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2132,i,3989890923989793108,5587988069606439614,524288 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:8
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,4539348793021327230,13922415808872503999,262144 --field-trial-handle=2876,i,14358590789371528230,3282830888871875625,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4932

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4804

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

75e3c2f5-ef6a-453e-96b4-75783f59da56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\75e3c2f5-ef6a-453e-96b4-75783f59da56.tmp
Size 8KB
SHA256 1e755b726954b0eff621a1db5d08e8c9749f4f9dc35c459b6c106a56ed676d14
MD5 25d21bf8c88c47f31d1e6435e3ca6e82
SHA1 2ac3af6207df1450cb15aba433e0ca142632798e
SHA512 e6525905b93484754da851e89f530f3ff845a4afddd2b1fe8afabb9b68a2a37be2f5e2c1ec313dfa98c58f882c9b43611e9456700130f49cee3c3d1bfdcfbeb8
SSDEEP 192:LJONC6DphmqQmiUyALq8wGYX59ezHC6mEkk7uaU6:lONC619bRwGYX5EG65U6
TLSH
T16F02D939EC787C7B4DE3AE45B58B3B135F98212BAA916F84D6E81A1D00D764C2307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

78b1dd16-9380-45a3-bdf8-33f97e765a9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\78b1dd16-9380-45a3-bdf8-33f97e765a9c.tmp
Size 8KB
SHA256 0d93dfd65a36b132229aa14b989c5528a553ca1a39aed85a583d1bccfa458645
MD5 13e1b99fb55f8e12ebb02ca07f02c872
SHA1 a504e0ac75250f5e481be3221e99f7f60b309e27
SHA512 2d85149af57072c953761d25e41467f1de479b3e283d48a0ed5cf63c44091a1b8db2e0ecd24078f73811c9b54937a5410ee16035e58fcb175f2d532215415e8f
SSDEEP 192:uONC6DphWqQmiUyBLywGYX59ezHC6m4Une+okIIAq5NtU6:uONC61lcywGYX5EGQUFxltU6
TLSH
T1C8120A3598B8BC6B4DD3A451B48B39135FA81227EB857F8495DC1A1C01EF19C230B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

29801a1f-bc1b-4206-9d06-e06b10646349.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\29801a1f-bc1b-4206-9d06-e06b10646349.tmp
Size 10KB
SHA256 1cb4deb73bdc31039f00bd04b71e9478c9a77185e50095284d776046f02195b9
MD5 40962b55e7ca97f325466df1da8c2f9a
SHA1 a4d75f64951b3d9986069402072d2c6be1fcc296
SHA512 4e399e67bcc3f85d0fc6346158288595f2c66820bd00dfa67768cf1834aedbe811f1acd2e44fd41777189ac9e2b41ba1ac4aee91c8a19bb5393ab5de7835d52b
SSDEEP 192:sxZmRRWX/fksEoIdpdQHW6+WNGYgWF0MIg5tJ:sxZmCX/fksEZ2HbGet
TLSH
T11822B8556E68697B8CC7D20DBB15BF53E6F9603251D11E88A6FCCA1C05E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33dc8505-9e14-4183-84d7-b1b3f849ae6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\33dc8505-9e14-4183-84d7-b1b3f849ae6e.tmp
Size 27KB
SHA256 5149770168381d5b6efa5ecd9e2aedda9fe1d9c2129d609bd73d222d221437ce
MD5 24852a0c1f75b8a508437941e5fbf490
SHA1 6087922bd937ded25326feb0c28e1464204d4bbb
SHA512 211dc3b2f06a3b2511d51bc76ccc342798e8fc54f7a1659d2ce7f02635af52ee44434a31b8e0f9b048b4e10b58e601650738497f2356f45e42050d8190b0a88b
SSDEEP 768:EJichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzrroeP3:EJichfPWvPZplu1jan+LKgzYQ3
TLSH
T1D8C2FA3B644CCB7E4FC01E9DDD1A6F9A7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6938c31f-8924-4950-9ecf-4bea44cc0052.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6938c31f-8924-4950-9ecf-4bea44cc0052.tmp
Size 9KB
SHA256 572ef2bcf01689c0103d1385e8c7271055013051e5929d5fbeb09f13d572e02d
MD5 f668f1571ca4c26c40c7be2eef8152e9
SHA1 984b4534d558b43c9dc9d9aac3ec94b7b39a8af7
SHA512 b51bb4b9f0f96bfa47838b1a1129877cccbd94d0c991a704ac2ad9f76bbb623eddde7f79271d47f93dcdea7ea9bc3852dab2345dd0e1352bd5b534696d85a8c0
SSDEEP 192:sxZmRRWX/fksxoIdpdQHW6+WNGYgd30MIg5PJ:sxZmCX/fksxZ2HbGhr
TLSH
T1A522B8556E68A97B8CC7D20DBB15BF53D6F9603291D01E98AAFCCA1C04E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

85431336-bd68-463b-ae60-717e93b03aab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\85431336-bd68-463b-ae60-717e93b03aab.tmp
Size 9KB
SHA256 3bc25918a0e65d97c7e315d9681cd6cfd969f905b08e6830f86ec15b893f3052
MD5 e5aeee10725c32479a01b32cfe9c0c20
SHA1 bbd0b474d86eb7e42eeb68b7b13058c291f89858
SHA512 d2fc98125845f419014debdcdc003451e2028b3408c1c358366aec359210fbd438e1f0f42e17ebe1c2df7ab4001358d02f844a74f189d9b226fe0cff6e766cff
SSDEEP 192:sxZmRRWX/fks8oIdpdQHW6+WNGYgd30MIgrJ:sxZmCX/fks8Z2HbGh9
TLSH
T11422B8556E68A97B8CC7D20DBB15BF53E6F9603291D01E98AAFCC61C04E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 33B
SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
MD5 f27314dd366903bbc6141eae524b0fde
SHA1 4714d4a11c53cf4258c3a0246b98e5f5a01fbc12
SHA512 07a0d529d9458de5e46385f2a9d77e0987567ba908b53ddb1f83d40d99a72e6b2e3586b9f79c2264a83422c4e7fc6559cac029a6f969f793f7407212bb3ecd51
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 0f0d7ee772e187172ccc539cec07b68c72e3b8f7b9b34eaffb747455bc436bad
MD5 0065533552e78ab51a618ee6948f8596
SHA1 6b54d6349ec6d3cddd822a493f99f83d20d548d5
SHA512 ac28fccaa73336beef21a0dbd6bd2ca48513bc616c284b5571a425aaefd19c3992a5d9e38ab1c7ad6f4d5c92241ecb4e56f7356d42d1ee348a8289cb5a661357
TLSH
T10161D580228783BEFBB3607481CE11CF3E3458C9188B2F22C0E5E578B88F765A31811B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c56f8004f26a9624b6e691c209fc1a2703c6730da48d5108206669403c225189
MD5 d8b170c8ae3f3e13e364fde13a249ea0
SHA1 9c1d0586e6d8ec10fef167ef3e5edb0066e88995
SHA512 d5601e1270ea061e5b10017216f86a60b607ca5e590d1fc5debcc8e12aa7b66591f7c3fd2060825fb154a1d3a1ae13d9cbb9e65c1a987188d97a9dc1f98664c4
TLSH
T14F61C5802287837EF7B3607481DE11CF3E3458C9188B2F22C0E5E578B88F755A31811B
MD5 SHA1 SHA512 TLSH

Submit Download

870d4acd-98b8-4a89-865d-f674b66ecf75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\870d4acd-98b8-4a89-865d-f674b66ecf75.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0ee26809-cec8-4929-acf8-c7109c0851b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0ee26809-cec8-4929-acf8-c7109c0851b7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

8f86cdcc-d6ab-4c2a-bf7c-07b5829237ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8f86cdcc-d6ab-4c2a-bf7c-07b5829237ed.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

ed78ff88-51d4-4a68-bc6c-b9eab6d7acec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ed78ff88-51d4-4a68-bc6c-b9eab6d7acec.tmp
Size 949B
SHA256 96d64b2d5e01638f940e9ddca25f619757899a6ae094c16ca942a285e0b85422
MD5 c4fc6507fb5cac6d531a29e37474968a
SHA1 779e5e5990134657d9d5d0c5572247d36852d6ef
SHA512 4c518bab1c48bb6ab07fda4d87769b38e937fa73e88cf40ba101909983d740228caab0c5887b599a8d265b3b64e4bd9e40a5995d242fe8070a31f0ec8b6fcd87
TLSH
T14F117DB3C3D5956E8D0517F05A28BE2BCE2D0605821C7C1A85D4EF6B93E3075E10196F
MD5 SHA1 SHA512 TLSH

Submit Download

b09bc3a7-b16d-4a1a-b667-333d2209c028.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b09bc3a7-b16d-4a1a-b667-333d2209c028.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cacd9c2c-5ca8-4814-8b5e-650dddbee775.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cacd9c2c-5ca8-4814-8b5e-650dddbee775.tmp
Size 10KB
SHA256 b11a149da7efe41cebd4db319d9e6a000fab1bdbf3f1332b49fe42eccabad32f
MD5 f614cce5d315737c79b5ef1027aca2cc
SHA1 2181b0d90f26c2307c43d7e48859385a48b5bb60
SHA512 a46cda3c98dba768b496aa542ab0c109315cc10e80566bf0ee2c32a8ad70377c42729ba608a853e8c32429022b8d98d9547a5a6ea1eac35159f89e9c37a8c1b1
SSDEEP 192:sxZmRRWX/fksEoIdpHQHW6+WNGYgRS0MIg5tJ:sxZmCX/fksEZwHbGCt
TLSH
T13622B7566E68697B8CC7D20DBB15BF53E6F9603251D11E88AAFCCA1C05E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8aacda3f-047f-4c10-aaac-e0b454113395.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\8aacda3f-047f-4c10-aaac-e0b454113395.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c01c9d65-1096-457d-bd2e-635f12f7d3d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c01c9d65-1096-457d-bd2e-635f12f7d3d2.tmp
Size 18KB
SHA256 d589ebcbcc95fb8e09b5d7b3faed6b27dd04e614a436dc106c63b3347a61d834
MD5 419917c5efdbe89a1aeba854eea6897d
SHA1 1e0fd1cec970cf6949f94ed66f6a2cdd3f7063b5
SHA512 314c519be396eac1493293217e445d2506e83f3e8d1acdf3f02ac958d1d64a10fe78b97f215a026ad895f1b25bfa7a781614ca094d122fc506fe46f6c67c5f14
SSDEEP 384:aQkUSv0sNXn6D5AFmBGYX5EGQUF5ltH7vBE5tIIlB:C0xqgGYuGQ8LH75E5tLL
TLSH
T105826D7598B46C3B4DE39551F14A3E439FB4912BDBD42B90D5ED5F1C01CB2C8230B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c3233368-54a6-43ee-91fa-5cb5c21110a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c3233368-54a6-43ee-91fa-5cb5c21110a9.tmp
Size 21KB
SHA256 bcb246d8c08aa22c0013e48d9fcc4d675d4c68787a973d6dd400e4d5a4c7f820
MD5 b7a12004500a703a072d849f43d13037
SHA1 5ccb14c7080ac820548ca784d5e7d96540db36fb
SHA512 2e293569b299acd982e077e0a451d40b5a66fcd7cc15dc84388f242490b446518ae8559acad84e2ec7d759777e2375def1d868b3686800eeb30e557b8c6bb63d
SSDEEP 384:6iFzQkUSvFzsNp8TUNTUlIly6D5AFmBGYX5EGQUFnltH7vBE5tIIlB:xFd9owgZqgGYuGQULH75E5tLL
TLSH
T1BDA25B7698E4A83F4DE39A51F24A3A039FB49067DAD5AB90E6DD5E1C00DB1CC230BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6fcc52b-e142-4d0b-a3db-c67772891879.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c6fcc52b-e142-4d0b-a3db-c67772891879.tmp
Size 18KB
SHA256 cc2076b389b289e15aab8c81589a34a2cfc6b46a851c20d1d95540c24065e057
MD5 038185257bb39ffcc9ce6f0486a5bdd3
SHA1 4383372ad10a2dbb1ad32ba2dd8911bf178fe5c1
SHA512 20e05dcc0d597e103fc4277df0bce0c5564f6a20e407fcc78e24ccd0bdb4a322254defcd053f7f233c6e782222d738a618cb1c2bf71a608c50ecb1bb04faeb62
SSDEEP 384:/QkUSv0sNXy6D5AFmBGYX5EGQUF5ltH7vBE5tIIlB:B0OqgGYuGQ8LH75E5tLL
TLSH
T1C1826C75A8B46C3B49E3A551F24A3A439FB4912BDBD82B90D5ED5F1C01CB2C8230B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1c1777ae-b249-4e81-b7a4-7aa1aeca9204.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1c1777ae-b249-4e81-b7a4-7aa1aeca9204.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 509abd0badf6fa59df42600e0a01d366ad9517cb3f51a8f0226785e7f9a22966
MD5 0c30b3dec76749a18dcbba35de2de412
SHA1 d1fa5ecd68b14677994001a68ddd603dafd3668a
SHA512 a57aabb3c2e2e7b77e91cc972e03c96059c61297b5875ee285ebde412159a577551df1735a7c578a197e25a76186d4136baa2ea9034ff1d5f95ba33d41f1781a
TLSH
T1AC413958A6F91108B3B76F5AAFF6A96E487EBC772E0B809D10110D4F0622A40D872733
MD5 SHA1 SHA512 TLSH

Submit Download