6ba372357efa26a04e1c8eb59f29e9867b04ed241c4665f06e78d1ebe6ab8e5b

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/10/2026, 17:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261001-1388025-xh4e6b.htm
Size 34KB
Sample261001-v6mkpsshkd
SHA256 6ba372357efa26a04e1c8eb59f29e9867b04ed241c4665f06e78d1ebe6ab8e5b
MD5 764f5df3b8d286714635f98cdaff2174
SHA1 6f65b07d81db9dcfdfe1482f1ba7a14977d87aa2
SHA512 323c8e03eabf4884fba35ca5253c79f370c09e0156bea23ca0e2c10d948e608a65b47dc8cca9450afb3a81a9c61ccb77d3ff7acd935d3658b61c415597cf2e13
SSDEEP 768:9srfAOHdia5Qe2E4rY0H1UeH+NypaNKiA9b:9QAOHdl5TkY0HeNVKJ
TLSH
T1DFF2D65356D19D37067396F4BCB8BE2C95CA8D0FC248AC04743CA90C5FE4EA06EA7679
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5272	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{76E1C010-4B18-4C96-926A-14DF0001A553}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5312	msedge.exe
5312	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4908 wrote to memory of 5508	4908	msedge.exe	90
PID 4908 wrote to memory of 3140	4908	msedge.exe	91
PID 4908 wrote to memory of 5272	4908	msedge.exe	92
PID 4908 wrote to memory of 3140	4908	msedge.exe	91
PID 4908 wrote to memory of 3140	4908	msedge.exe	91
PID 4908 wrote to memory of 2000	4908	msedge.exe	93
PID 4908 wrote to memory of 2000	4908	msedge.exe	93
PID 4908 wrote to memory of 3972	4908	msedge.exe	95
PID 4908 wrote to memory of 3972	4908	msedge.exe	95
PID 4908 wrote to memory of 3972	4908	msedge.exe	95
PID 4908 wrote to memory of 3432	4908	msedge.exe	96
PID 4908 wrote to memory of 3432	4908	msedge.exe	96
PID 4908 wrote to memory of 3432	4908	msedge.exe	96
PID 4908 wrote to memory of 3468	4908	msedge.exe	97
PID 4908 wrote to memory of 2524	4908	msedge.exe	98
PID 4908 wrote to memory of 3468	4908	msedge.exe	97
PID 4908 wrote to memory of 3468	4908	msedge.exe	97
PID 4908 wrote to memory of 2524	4908	msedge.exe	98
PID 4908 wrote to memory of 2524	4908	msedge.exe	98
PID 4908 wrote to memory of 3120	4908	msedge.exe	100
PID 4908 wrote to memory of 992	4908	msedge.exe	101
PID 4908 wrote to memory of 3120	4908	msedge.exe	100
PID 4908 wrote to memory of 992	4908	msedge.exe	101
PID 4908 wrote to memory of 3184	4908	msedge.exe	103
PID 4908 wrote to memory of 4588	4908	msedge.exe	108
PID 4908 wrote to memory of 5044	4908	msedge.exe	109
PID 4908 wrote to memory of 1364	4908	msedge.exe	110
PID 4908 wrote to memory of 6048	4908	msedge.exe	111
PID 4908 wrote to memory of 6048	4908	msedge.exe	111
PID 4908 wrote to memory of 5312	4908	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261001-1388025-xh4e6b.htm
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffb2424c188,0x7ffb2424c194,0x7ffb2424c1a0
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,17745936600838236412,15762879224515043286,262144 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:2
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,13959797585524487565,17235390141956938558,524288 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,15038436220902987826,3808171379420367484,524288 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:13
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,15178879980030096275,2395997130943662267,2097152 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3660,i,15075540565483370976,14212299102536106741,2097152 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,1402426034660911327,12594875525558156885,2097152 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4400,i,11247200233203168310,16834274745454511085,2097152 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:9
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,1167108359181494611,17488820419869468514,524288 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,907230271959221985,3569180273377579653,524288 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:14
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,2518845989532189986,4635615219939092925,524288 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,2518845989532189986,4635615219939092925,524288 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,1072964314293646611,5269983814854785288,524288 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:14
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,2125394888392503459,1128793660863024868,524288 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=172,i,1279611443785605497,1009652137952008083,524288 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:14
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6696,i,3874805068072718035,12571666648013129340,524288 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:14
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6280,i,8776669856427021793,7494387077455626379,262144 --field-trial-handle=2684,i,6891493454319123101,7186631781394894498,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5312

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3188

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:468

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

27e867c5-306c-494c-98a3-8f6155e4a11b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\27e867c5-306c-494c-98a3-8f6155e4a11b.tmp
Size 36KB
SHA256 53e538ec60548bf0eb03fbefef7e8da88eaaa165c5ac238eaaf020b95e36ce46
MD5 89b31316821e0d3fc0a8a26f4a22fa29
SHA1 1b3f531f5b3cd40b5191091f0e1254c3362b211d
SHA512 23a9391f2ad7955c140081921dc8de4990b4e942d761281606e56b209b8b3c31a645f3dfe8aa1853570a25dea88502edbb7e66069aa9723636fb68ac611eb340
SSDEEP 768:JFQq3AwgoaFc7fZrK+ktOHiap5XSwQs88uBkiT2d2s7ik:Iq3xftrdlC0ILNBw2s7ik
TLSH
T140F2BF37ACD489BBBCBB8785BA8A33029FF05147C4C94698C6DEA91D018769D134BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3a6cceae-3200-4169-8790-c15ed296e363.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3a6cceae-3200-4169-8790-c15ed296e363.tmp
Size 33KB
SHA256 47b76e5f527c630155569543b4357b15b0c6c52e39937591dbf694a42410d176
MD5 c753bd41d1299bf66b046966a6ab60ba
SHA1 29ac983f4ceeea6102e6d8277e4a8d3fbc1715a1
SHA512 27fe0404df4ad7c5d29396c3d2fb9b48e1c9aa2aec75b1f35ccf57b02b399f006e94f402d1d4e574527a4857bcc3526e0c91d3466d7f68abfc0e86bee2e91d5b
SSDEEP 768:zQ3TaFc7fZrK+ktOHJp5XSwQs88uBkiT2d2s7ik:zQ3TftrdlXILNBw2s7ik
TLSH
T13EF2BF3AECD048B7ACF79385768A33036FF09147D4C9079885EEA61E028776E574B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

3638ef4b-ffa4-46a8-adbc-ce947dbe5d07.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3638ef4b-ffa4-46a8-adbc-ce947dbe5d07.tmp
Size 23KB
SHA256 dc452be6fbd8b91ac43e75aa9ceefed8533891026690ea90348e516fab05a694
MD5 cd4081b6f5edd95e8698407bed79fc5a
SHA1 01064093134d0a005a29b2a0f2de20226190883d
SHA512 854a0e5588236ac2d2b5ec6bb9b71d3546367dcbe27117abc1f09d28a369a341c92a672b57db42ed4733ec1bfe73ddd53a6b7514caddc86ea8d45a33941b5a58
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXhroJez:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0Vs
TLSH
T14AB2C92B640CCB7F4FC04A9EA8196FD77D9802CB9A588D4047FE995C02C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4bee05a3-a092-4dd4-9d3b-90be2dd13965.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4bee05a3-a092-4dd4-9d3b-90be2dd13965.tmp
Size 11KB
SHA256 72f6f269dc6e53365822f89df8acd821a16cf0d2eb643353c6cc74265daefff7
MD5 3227c238e45776f2101bf0bb3148fd51
SHA1 9cb99defac8b945f26a797d044e29faaedca1fba
SHA512 5dcde75db09963889c2329ffd6415e33e09105cab5c9d3709e30c5cd9ae895a459b19a6200ef5301a63b53a85c46f5794843adf660c04b38dcfa70407894b2d0
SSDEEP 192:sxRfRSbe/fWsBfHRQ1KzoA8p4z/g6+WNIYEIIGGIgDxJ:sxRfOe/fWshWy/5I1n
TLSH
T17932C815AE64A97B8CCBD20DFB657F63D7F95032A0911E48B6FC8A1C04E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7248cf39-3fe0-4052-a23e-e1ca23925c87.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7248cf39-3fe0-4052-a23e-e1ca23925c87.tmp
Size 11KB
SHA256 d359f1ab6a19833e0abe52b6b04a3524987482fb19fe04474431dc64e385fb59
MD5 4dd25980195f150d9dc6ea3e4714a857
SHA1 3079962042590d83051439e8a985e02f83ea5728
SHA512 ed5e2016e132b01cc95d8ed3ce6df1713b07066c6be05441229331083aa4963b324be9c8c8bb361a7158735356bad59ad37365b4f7af6b624cb1e92d3450cbe9
SSDEEP 192:sxRgRSbe/fWsQfHRQ1KzoA8p4z/g6+WNIYEIIGGIgIJ:sxRgOe/fWseWy/5I1s
TLSH
T1A932C815AE64A97B8CCBD20DFB657F63D7F95032A0911E48B6FC8A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e0590fd-498c-4517-bd97-be260cf0a321.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8e0590fd-498c-4517-bd97-be260cf0a321.tmp
Size 11KB
SHA256 28962183dd7848d12305051f5db3d1bd577a85af816469be54ab3b366a762c97
MD5 afe31987217155f4e71b413303b29b79
SHA1 62ff20eeb403d5d831a02ec33ea5c70b00b38cc8
SHA512 830a382b9282d42f96ba2939d6be467310ba1ef1e33401f016f25ffea5643ab2c994cea4654a2d18f51fc90ec531c68d81bd70e2bb7a372e63e786bf89e68a8d
SSDEEP 192:sxRfRSbe/fWsxfHRQ1KzoA8p4z/g6+WNIYE7IGGIgDHJ:sxRfOe/fWsRWy/5ICl
TLSH
T1C242B715AE64A97B8CCBD24DBB657F63D3F95032A0911E48B6FC8A1C14E76CE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 4d00eb7329182d2aec8fac21995a9c6e4559f45b60fcd8eea5deee8c6c75bb10
MD5 57a82508d7cbf213404ed7a1cf79b226
SHA1 18579fe6c6bf8fb546d947db08170bb0dcff7494
SHA512 2bf970a3c2a597b32fabe40226a0cdbeb445a520b2c29e47a17493ea0e3aea8a0c4b83106998c87056bd5e64c5f996b7f348fef64f6bbfabbf787fd79cabc9fa
TLSH
T14421EB83CAA81086F784B634C7C537733AF4F99E95431E410964C8B5BA4679C7054F7C
MD5 SHA1 SHA512 TLSH

Submit Download

023b0493-7817-4248-988c-b6f8e4a1665b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\023b0493-7817-4248-988c-b6f8e4a1665b.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2858edc3-f3c9-4226-afff-2b1cdc8b9c5c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2858edc3-f3c9-4226-afff-2b1cdc8b9c5c.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

5cb54fef-54f2-40ee-a9eb-39867635a779.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5cb54fef-54f2-40ee-a9eb-39867635a779.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

dba4d74a-43aa-4081-bd72-71cc8b94539c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dba4d74a-43aa-4081-bd72-71cc8b94539c.tmp
Size 2KB
SHA256 2142c8ca42f978e9a6b9c2d7b4c7a6a07f4b8264e4bf5f409056c2a61965b831
MD5 1eda51f23f726e25a108364ffa79ea7c
SHA1 475a416703828362da686a754433a725146371ce
SHA512 9cbe61bff682cfab19e6fddcc402a37e87b52590cb948acb8836ffe2395dd916bb8bd72f1c494a78b1922cf300992cc3227d13a33d9bd9fe8baeeffe51bb7296
TLSH
T1DB41A2F3C3E8867D8D0156F4AB187E1BCE1D0915432C7D56C5E49E1B93E28B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 467e0da48595ec22dd7b09ef6e6a55b4866721b499b5c39f058e7e4f6baa0d38
MD5 42def49f38cf3acf5c80a6c30cf832ec
SHA1 cc5e9a1283ceeba142b5bceb6de9c4e5ccd6a93c
SHA512 544de47d63eea00ccacb5449648376f099e40e2afdd0a576f9ce366880b5e68b2d1386a197e957bc61454941f605a21bdeb93868fdb863f288790504bab0124d
SSDEEP 48:KQrIBK4w0byp2IXKrasPy9dIhK+ckCQpmKIM:KQrKK4wK62YKraOedOK+chQpmKIM
TLSH
T15891B110317E031139BD29CA9075872A514536F370A8E67E3EBE41E6896FE156EFCCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c326b496-2446-4912-805a-3904867033f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c326b496-2446-4912-805a-3904867033f1.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

5cf08d25-41c4-44bc-b50b-f871af071bd9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5cf08d25-41c4-44bc-b50b-f871af071bd9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

aaed34c4-38e2-4086-a43c-e03bb77a963d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\aaed34c4-38e2-4086-a43c-e03bb77a963d.tmp
Size 37KB
SHA256 9d0b52ea0eddab15e06988e1157caa0cdd0fb7abbf006627f61f5fe2dcf72e9c
MD5 d96a8ae867a26e197903bee36cabf423
SHA1 bf87c39013288c7c3b5a30a32b2394867dd93595
SHA512 85d02cf51e3cd493666b5dfa7ccdd7e1c8cdd745a8792743b1fff94696f5a4ec329ce0a3db794765a5f2876e14b8861da1f9b8bb07be3a76a7485fcc58937194
SSDEEP 768:R/UxvxjgC+W3Tjoc7fZrK+ktZp5XSwQs88uBkiTCs/P84g:kZj3+W3TXtrdIILNBRHg
TLSH
T1DC03D039E8D45873ECB39381365A274BAFF06153C0C40BA889EE7A1E028B75D6707C87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d021ac07-4b46-4951-9635-700407934080.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d021ac07-4b46-4951-9635-700407934080.tmp
Size 33KB
SHA256 1b01a14ebd462d3db2ab7daae3bec3a2c3e37343dc7d2d4aa30a42c741bbc03c
MD5 1847b069f9ff14010812538074c052d5
SHA1 d3efca428075438670023a81576cf143cf3731c4
SHA512 39fbc2582b5fbb06060d38bf3341a2abe0b4cb95812ff92132167bfae88f823d32141bab025eac947e4def831deed05e513692f09a9a7be125ab8bc65d58979d
SSDEEP 768:qQ3CaFc7fZrK+ktOHJp5XSwQs88uBkiT2d2s7ik:qQ3CftrdlXILNBw2s7ik
TLSH
T1C9F2BF3AEC9048B7ACF79385768A33036FF09147D4C9079885EE661E028776E574B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c549c7a0-ca97-4f8b-98a7-97afec056fbf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c549c7a0-ca97-4f8b-98a7-97afec056fbf.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fda12b54-e424-4e26-aef1-cc88bb648693.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fda12b54-e424-4e26-aef1-cc88bb648693.tmp
Size 40KB
SHA256 4f52ca6a8849fb9a5c51868598f04ad2b8c35d622311b31296597e529908fdbe
MD5 0bf6b52a063c5b93c172c665207ee5e3
SHA1 448fc60326e2f5c273c2edd1ba5537037fdacdb5
SHA512 e4560e0b6fc66235e230b77d36517baa4685d82553e6e71331d975f5e524075b7a9b90f600d5aca42ca5174b7d1280d4fdacd89130a315b949357dfdada62be3
SSDEEP 768:q/UxvxjgC+B3lxFc7fZrK+ktOHJp5XSwQs88uBkiT2d2s7He:vZj3+B3lktrdlXILNBw2s7He
TLSH
T1B703CF3AFC945C63ACF79381368F2307AFF05147D4C50AA849EE6A1E028B7AD574B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download