af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20

Analysis

max time kernel
148s
max time network
137s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 04:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-143791-94gb0r.html
Size 214KB
Sample261002-e7d2ysxze1
SHA256 af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20
MD5 ca2c96be8ad4c1b27afc858a639eb1f4
SHA1 34bcbb32e3946883cf26447531ab98af52bcab62
SHA512 3437202655e3eb3621e7f896424eace53f0c5f24acf844be2b9d563d88009e6cf5a37bcddba9c2cbaba921fa3f1b6b8b256eb36e35e548489e0a5a04be7cb99c
SSDEEP 3072:opm0WkXwgEweVFmk0RHyEoCmetxWnm6t6b9U9QfyA7cxGTdTbLayQsH:oglIYWRHyrCunm6t6i947gGTx3pQ4
TLSH
T13024023459202B0E3B9246B4B26575A40EF90CB3E95F96227BC801F5EFED1F29049CE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6108	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714045687-1127350534-2056456672-1000\{BE10B1DD-2C42-43AC-BD84-491310CF821C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
716	msedge.exe
716	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe
4716	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4716 wrote to memory of 1048	4716	msedge.exe	90
PID 4716 wrote to memory of 6108	4716	msedge.exe	91
PID 4716 wrote to memory of 4344	4716	msedge.exe	92
PID 4716 wrote to memory of 4344	4716	msedge.exe	92
PID 4716 wrote to memory of 4344	4716	msedge.exe	92
PID 4716 wrote to memory of 1480	4716	msedge.exe	93
PID 4716 wrote to memory of 1480	4716	msedge.exe	93
PID 4716 wrote to memory of 988	4716	msedge.exe	95
PID 4716 wrote to memory of 4772	4716	msedge.exe	96
PID 4716 wrote to memory of 988	4716	msedge.exe	95
PID 4716 wrote to memory of 988	4716	msedge.exe	95
PID 4716 wrote to memory of 4772	4716	msedge.exe	96
PID 4716 wrote to memory of 4772	4716	msedge.exe	96
PID 4716 wrote to memory of 4828	4716	msedge.exe	97
PID 4716 wrote to memory of 5048	4716	msedge.exe	98
PID 4716 wrote to memory of 4828	4716	msedge.exe	97
PID 4716 wrote to memory of 4828	4716	msedge.exe	97
PID 4716 wrote to memory of 5048	4716	msedge.exe	98
PID 4716 wrote to memory of 5048	4716	msedge.exe	98
PID 4716 wrote to memory of 1120	4716	msedge.exe	100
PID 4716 wrote to memory of 1120	4716	msedge.exe	100
PID 4716 wrote to memory of 3940	4716	msedge.exe	101
PID 4716 wrote to memory of 3940	4716	msedge.exe	101
PID 4716 wrote to memory of 820	4716	msedge.exe	103
PID 4716 wrote to memory of 4584	4716	msedge.exe	107
PID 4716 wrote to memory of 2256	4716	msedge.exe	108
PID 4716 wrote to memory of 3244	4716	msedge.exe	109
PID 4716 wrote to memory of 3000	4716	msedge.exe	110
PID 4716 wrote to memory of 3000	4716	msedge.exe	110
PID 4716 wrote to memory of 1916	4716	msedge.exe	112
PID 4716 wrote to memory of 1916	4716	msedge.exe	112
PID 4716 wrote to memory of 716	4716	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-143791-94gb0r.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d0,0x7ffd16a2c188,0x7ffd16a2c194,0x7ffd16a2c1a0
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,9848596867758114561,15588321366972330252,524288 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1584,i,9612414911966129852,3574432841894466994,262144 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:2
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2168,i,2777864953156761392,12188784969997103935,524288 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:13
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,5998471071284390662,11895951074842857788,2097152 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,562420239975709976,15867691895145664242,2097152 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,15660897996921327488,8388407860704253736,2097152 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,13854507395745641307,2395385295777038918,2097152 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:9
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,16911013959540525864,1862644513115293905,524288 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,13132921902969743337,17103341947171658408,524288 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,18399823571181345596,285452240359471499,524288 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:14
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,18399823571181345596,285452240359471499,524288 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:14
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,15065854740162118776,10975226732457755646,524288 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:14
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,14596373074484613351,10976285152126982489,524288 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,12265851729807623649,11656801971881570191,524288 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:14
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,12755707471305018826,13681809297139025808,524288 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:14
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=812,i,7523005019094184299,12445075211225646250,524288 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:14
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6532,i,10552345104491688858,7652432470519932883,262144 --field-trial-handle=2468,i,2429173153985079265,7859355389761974112,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:716

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2976

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

36d19996-40cb-4c0c-b7ff-d1e233b6e1e4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\36d19996-40cb-4c0c-b7ff-d1e233b6e1e4.tmp
Size 39KB
SHA256 f790872cb9d375271ba36d5bf6183d6bb31b4520f5f745b40a468e5eba1aaaa5
MD5 50d9b2151fa2a24849ec3d064ac36bd4
SHA1 a370fe2bd9d9e788b5bc05154fd0d4abf933c561
SHA512 65281df67ea3b03f232ef7e3eadb38ec60c15410914142f4ff3a0cb66f016d7c64de0fe2afc6730cb013a3baa3b7ac004cf1ac4f43c58e6c2e903d2a3cfd06a7
SSDEEP 768:b/UxvxjgC+73jnKnJxY5xDc9bsMSJz/Fn/Cd2G:OZj3+73GnOVQbs7JT0kG
TLSH
T1CD03CF76AC905CA7CCF7A7807A8A6653BFF80943D5C9699849DD2E0D07C73AC134B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

387673bc-c101-4a13-a6f7-487c037ac872.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\387673bc-c101-4a13-a6f7-487c037ac872.tmp
Size 37KB
SHA256 b18465afb34437c8f3a4162a415492b1fc958529898ba953b55339914a745e37
MD5 17412b181b08b33300eefbe2505812b3
SHA1 79a4e5631a21c117e506993a81295e91b7af24fe
SHA512 982ed00d45f0e76c1c059413edd8ff333280ee746ae253f55a510f94765027142b4ff26cab623a79f010c9622f90f6e4b7d78e771ebb3f7706337a6bf6e1d0fe
SSDEEP 768:z/UxvxjgC+U3x9KnJxYZxDc9bsMSJz/FnncSHXPyK/:GZj3+U3SncVQbs7JTiSb/
TLSH
T1FB03CF3AEC9058A7CDF767803A8AA647BFF84993D5C5299849DD7E0C07CB3AC1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66c6fb7b-0e9f-400e-afc6-8a43bee82d77.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\66c6fb7b-0e9f-400e-afc6-8a43bee82d77.tmp
Size 34KB
SHA256 f30d9539cb2c52968d096fb7fd6985de140149f07ebe48932be6ce964a39eb4f
MD5 185b3208d36e5cdb29254cbdc0bb27ea
SHA1 9ece2540d95c6ff92dfd6f3831f45d27b5d8b98f
SHA512 0162bd0b9ccd5f08dbe18d6e7372e850eda7c68b27ec577ca4a2eaf2610c39ecaaea7a022fbfd8ccd987da39326f3075c0d76c789925018148f74d2da4d3113b
SSDEEP 384:/ZcI638N6v32++un199fw7DJxYzzdvLcN9YkWwJJhoMSboCzfnFLj/CigOIwZOyD:X63DnKnJxYzxDc9bsMSJz/Fn/C2sFA
TLSH
T18DF2BFB6DCA04DE7DCEB97807A8A76036FF84543D5C96A4894DE7F0C06872AD134B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9b53ce4c-2195-4a7a-8a3e-9334565c890d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9b53ce4c-2195-4a7a-8a3e-9334565c890d.tmp
Size 36KB
SHA256 79eeedcce9aa0704c3a151507af10ce5d5de2e782776781fa90281a2e1094bfc
MD5 f4e65a41d69f1d977554e775b44dcc58
SHA1 758e588380ea52aab267fc7280030fe14accfaae
SHA512 813d06d8fb42bff775b2a29aeb9fce6ac75a267be372cbbff4a8bb36d1102451268b4eb1e1e8bb5612ffa16b1ccc7f4d67092cd20a5d12d80cb4acee63b0503f
SSDEEP 768:aFQ23xwgSnKnJxYNxDc9bsMSJz/Fn/C2sFA:B233n0VQbs7JT02sFA
TLSH
T1B403AF739C9089FBDDFB9B80BA8A76136FF44153D589AA44A5CD6E0C02971EC134BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 355a29997d085f70c135b61fb8e48fe3b3d9b6030190662c9d930bd533b88c78
MD5 5121c8953b32388eb96bb70d0d12fd00
SHA1 e62d74f75b188deb1ec8b8dabcff7c16e7ba9ba5
SHA512 c8f0ff682c9ed7e02559e599a97078b0a2e39f928b301598e0196d5d9dd6ffac13da9bd34262b0120793cb2472ac6c7a93a178d4abcd0a5a2c6df1e9a193de10
TLSH
T13CD02BF4528C9C63C4CA30740425458100263401B948D2903501478849401B914433E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 97f58c0ff1008d9a744980b06de74b1bc42fdd2408c0871566ecacc80738c498
MD5 ffa34db42a6c31e411546fdfd8772d96
SHA1 cd3fa45407492f90d8b070cf009147d20a8b4151
SHA512 72fd2a1188869d257eaee37d23569752bb0744ad1a5cad19b6a4b2e60f4d5f74f1ccf0a0b24a6e31d4d512e939f7b384fb86433ec7496296acb712e8334d5e32
TLSH
T18BD02BF0529C9C63C4CA307804264581001634017548D2903601878849401B914423D3
MD5 SHA1 SHA512 TLSH

Submit Download

0514b496-0e4c-44b0-b10b-b6fe58daa505.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0514b496-0e4c-44b0-b10b-b6fe58daa505.tmp
Size 10KB
SHA256 d7f049113d4e8000780d23be9839fe37db66877f13a5aae27b7851bf9e02da66
MD5 785d4f3f99281f493ccd77a5cd440109
SHA1 ea8f1147a2a14d8c55c7c0058f766aa3baa4e14d
SHA512 fba39c5cc0bb7b7dac10e81b9181845642c19a4d07a359865255143d72b46a6522caeb7a758c67164948b1bd8af359631acceb75df6568482274173e32d5c6e3
SSDEEP 192:sxRcRCbx/fpsP4zoA8p4Tg/g6+WNIYtfYGaIgDEJ:sxRcyx/fpsPBog/5IPU
TLSH
T1B332A616AE28A97B8CCBD21DFB59BF53D6F96032A1911E4CB6FC861C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6199921b-c9d0-45a2-9033-d43f6dd55230.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6199921b-c9d0-45a2-9033-d43f6dd55230.tmp
Size 23KB
SHA256 d4adf57a3e56cab9e92555d70060be8ac4a481166a72ac24de95f48a318d657b
MD5 1213dd887e4e194626dad413aa7a326a
SHA1 9815f5eace231a71d06939a64ec8913ee85beb87
SHA512 4303c463809da0ed530169be1c0cf60f1e166447572cbc053f36fd9da5eace670ee2b5bec19b9102ad5a70d8925cf6457030ba6e2c154bc110cbfec889af809f
SSDEEP 384:dFIGx9efCtgmkFfk6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV6W9G+RhGromLf:dmGx9sWgmMfk68F1+UoAYDCx9Tuqh0VJ
TLSH
T1E8B2DA3B640CCB7E9FC00A9DAD196F976DA802C796588D4047FE984C03C77EB911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70cce42e-f037-4ad2-965c-0332cbeec559.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\70cce42e-f037-4ad2-965c-0332cbeec559.tmp
Size 10KB
SHA256 a295898320c33c9b061dda95828ff14d413a361cef157d97f24715da74c3ed8e
MD5 6526c04297d5180a4aa7aa3a998cd2d6
SHA1 38f33fb2f0bf66ea76f49772c37a6545eb3778c1
SHA512 7441a84ca236043bd511b45a4ed75f336ccc6ec59064674c86eed1ebe51769b5958263726bc4b1416fdf0042d8780f723f91aa6c484a03ecbcb923d8909e3e75
SSDEEP 192:sxRcRCbx/fpsF4zoA8p4Tg/g6+WNIYtGYGaIgD2J:sxRcyx/fpsFBog/5I6u
TLSH
T1CD329616AE28A97B8CCBE20DFB55BF53D2F95032A1911E4CA6FC8A1C14E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ec70f22-cedb-416f-bd02-9d7773bb596f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9ec70f22-cedb-416f-bd02-9d7773bb596f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 cca273ccdc9c20b750c20fc3d5858d068f1a84344bbdb8867d385651a6675d37
MD5 d7c7db319662c5da618852ea7be80112
SHA1 12571239ae278a75a3c4598aaeb386fef4eb4d26
SHA512 d7dc55f06a3a8c3c7a00d28a1d6b7f1a650632d335bfbd4806b0f8ec603074029a991bab81c8dab97d83cd2b45b8b76ebde092424452a8d4868f4a7e9774a14c
TLSH
T1BAE026F40ACAC22EE778784702AC474CC381371BD7C8A90E1710C98A7547494A3DAFA0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 28215dcd725fb1036ada9a7b68a5d46d105a780d6db44ba9f4367738324a318a
MD5 c9d7826a58ac78ced42c92673eccc54c
SHA1 752a8fc834984948689fdf3ef8844b9d27c67d26
SHA512 3bc023f0417f0d0ccc472b159f47c6461314280f5d9241868512808eec8e6df6b1632608e16b9546c6f41d7c1b7b5abb1479b8585af5c4074d8700c39f451768
TLSH
T126612D744EDD856CFF48027C96D10C863E76B1CF5983ED590A6CC578781A3E3606C1A7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 576b8530ddbee89434c09aa9171927fa7d50716d4ff4471d6bd78fde6b66c16a
MD5 0b5e3016265d2abd387c176ed6c66a91
SHA1 2be67e4c3caf162c9c64aa330dffe445741d9089
SHA512 818509f88f5b84cbbb9aeda2dfee67774a721f1f7a37aee08303ed9985b253f57877d914aa9b2b8d20c9296d64a165237d394dd9f778ef1f9956cc10f7b15d1b
TLSH
T1E8612D744ECC855CFF48427C96D10D863E76B1CF9983ED5A0A6CC578781A3E3616C197
MD5 SHA1 SHA512 TLSH

Submit Download

cf901b4a-dba5-4b05-affc-52b35d65dbe3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\cf901b4a-dba5-4b05-affc-52b35d65dbe3.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2c48a538-546a-433c-908e-d7ccc97848d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2c48a538-546a-433c-908e-d7ccc97848d5.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

968ae36d-9b76-4685-ba17-f0ccd40e701e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\968ae36d-9b76-4685-ba17-f0ccd40e701e.tmp
Size 1KB
SHA256 2dec2aac3af75d75bee7574c2c1feea76a9e5744bfea2ce8c83cfc5f89f3c042
MD5 a2e9c021215375fc4392de94ccc3e2fa
SHA1 02e8ffb47b21f18f0580aabb7953b27c509714b0
SHA512 bf65aa7fd2375f92fe83544e64e40cf5980e02f4fe8efe0ff1926b005d93b5a70540632f385518cf941e55bfec109b0f7b3226a5072cdfebdcc80ef55f69e492
TLSH
T174317CF3C3E4967E890156F4AA146E1BCE2D0915931C3C5AC9E49E1B93F34B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

ebbb7927-f60a-45dd-9a10-d553ac2dd6fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ebbb7927-f60a-45dd-9a10-d553ac2dd6fc.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

beac51e5-8b77-485e-85ca-165886630dd2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\beac51e5-8b77-485e-85ca-165886630dd2.tmp
Size 10KB
SHA256 61ce850729fdf77d61d70964bc76ce9c13139b2c2b144e525b887f43d5df0708
MD5 5d80029cbe42d0c3b88cd16f3c196ec4
SHA1 afdd23aad21d59782393a2d84168208ea81b9f39
SHA512 2a53600cb5404e27c4e94885f8a4e964a91cc8d3a6a21045f35bd5c2165a9fef12a9d83498a4c41114a92ff5547ae84530486a04bdeb0108a296e61b796533c9
SSDEEP 192:sxRnRCbx/fpsO4zoA8p4Tg/g6+WNIYtfYGaIgIJ:sxRnyx/fpsOBog/5IPs
TLSH
T16D2296166E28A97B8CCBD20DFB69BF53D2F96032A1911E4CB6FC861C14E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4dc6e236-af73-4ff5-8ba5-6dbdabd97faf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4dc6e236-af73-4ff5-8ba5-6dbdabd97faf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6a1cf65-7b05-43b0-a45c-ae068b6a1567.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c6a1cf65-7b05-43b0-a45c-ae068b6a1567.tmp
Size 34KB
SHA256 5c2c8ae3fca492ddef832d5a2dee28eb0d3c1cead6b4bb98b9a56eaa45fa32be
MD5 3b4159ea7ea9c2a21f10a1f0ffcd8562
SHA1 5eb5a812f37eabecee42fae6b0f680f49b9f1985
SHA512 abf2b5800e84c3f66ba49a15cbe263fcb05e5cd213fed24b1caaa248d9b565f4d933599d82429e80fc06d6f6f55fa421ef82ca26313fe284ceab974ba5fb35ce
SSDEEP 384:ZZcI638N6232++un199fw7DJxYzzdvLcN9YkWwJJhoMSboCzfnFLj/CigOIwZOyD:x63cnKnJxYzxDc9bsMSJz/Fn/C2sFA
TLSH
T150F2BFB6DCA04DE79CEB97807A8A76037FF84543D5C96A4894DE7F0C06872AD134B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0b5825b1-4bff-4c13-b4d4-5a6b5278cbf5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0b5825b1-4bff-4c13-b4d4-5a6b5278cbf5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download