5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 09:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-2qoj5t.htm
Size 194B
Sample261002-lb1z6swtew
SHA256 5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b
MD5 0fe53cf75ee2569670f22b4df68cfdff
SHA1 c8ce77fbd6e13476239c598378c612a8b57685c0
SHA512 ee321ac4703144eafd3d4db7deefe08d8aef572e3c67fc9d4203f5349646173caadf91608fd10220a16ea91099657c4a8460e3ca09a781af646cb3a5282db660
TLSH
T121C0C0B7E400620CDB3078D500F172CC00F8819C9C82CA003D8018E8B39696AC9031D1
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3116	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{CE2DF214-BFA8-4855-BF5A-784113BC1ED8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4956 wrote to memory of 6012	4956	msedge.exe	89
PID 4956 wrote to memory of 3116	4956	msedge.exe	90
PID 4956 wrote to memory of 1236	4956	msedge.exe	91
PID 4956 wrote to memory of 780	4956	msedge.exe	92
PID 4956 wrote to memory of 1236	4956	msedge.exe	91
PID 4956 wrote to memory of 1236	4956	msedge.exe	91
PID 4956 wrote to memory of 780	4956	msedge.exe	92
PID 4956 wrote to memory of 3536	4956	msedge.exe	94
PID 4956 wrote to memory of 4144	4956	msedge.exe	95
PID 4956 wrote to memory of 3536	4956	msedge.exe	94
PID 4956 wrote to memory of 3536	4956	msedge.exe	94
PID 4956 wrote to memory of 4144	4956	msedge.exe	95
PID 4956 wrote to memory of 4144	4956	msedge.exe	95
PID 4956 wrote to memory of 916	4956	msedge.exe	96
PID 4956 wrote to memory of 5928	4956	msedge.exe	97
PID 4956 wrote to memory of 916	4956	msedge.exe	96
PID 4956 wrote to memory of 916	4956	msedge.exe	96
PID 4956 wrote to memory of 5928	4956	msedge.exe	97
PID 4956 wrote to memory of 5928	4956	msedge.exe	97
PID 4956 wrote to memory of 5400	4956	msedge.exe	99
PID 4956 wrote to memory of 2240	4956	msedge.exe	100
PID 4956 wrote to memory of 5400	4956	msedge.exe	99
PID 4956 wrote to memory of 2240	4956	msedge.exe	100
PID 4956 wrote to memory of 2540	4956	msedge.exe	102
PID 4956 wrote to memory of 1492	4956	msedge.exe	106
PID 4956 wrote to memory of 2060	4956	msedge.exe	107
PID 4956 wrote to memory of 4576	4956	msedge.exe	108
PID 4956 wrote to memory of 4940	4956	msedge.exe	109
PID 4956 wrote to memory of 4940	4956	msedge.exe	109
PID 4956 wrote to memory of 4700	4956	msedge.exe	111
PID 4956 wrote to memory of 4700	4956	msedge.exe	111
PID 4956 wrote to memory of 4400	4956	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-2qoj5t.htm
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffc0b54c188,0x7ffc0b54c194,0x7ffc0b54c1a0
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,18333715427032958175,18293989719165782916,524288 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,6580840018036851975,8901520316508978501,262144 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,10429261506703327097,10370897669013247981,524288 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:13
  2⤵
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,10176034561590034950,5944781515537544553,2097152 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,10229831346236969744,5242653065496794049,2097152 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,9674049401801378280,14013366150398998248,2097152 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4380,i,13992962944990419658,4462339046646209699,2097152 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:9
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,8688546858319071138,10082526150371183299,524288 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:14
  2⤵
  PID:5400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,4368772490130650882,4756980935488914808,524288 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,3395514771045505858,11216234960478473729,524288 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:14
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,3395514771045505858,11216234960478473729,524288 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:14
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,12248816456165285217,10600169495348519508,524288 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:14
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3776,i,1037561290177194935,9463242738432273848,524288 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:14
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,9639198012437821134,14501461999888141315,524288 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,8878541850919516748,10936217092628574730,524288 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:14
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=820,i,10643532870928619306,12501997375823778775,524288 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:14
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6468,i,7500460918944310202,613831272410465439,262144 --field-trial-handle=2204,i,4741553447026605272,18314135674113268037,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4400

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2576

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5852

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

041ed959-48e9-42cb-87c5-07ef766da13e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\041ed959-48e9-42cb-87c5-07ef766da13e.tmp
Size 37KB
SHA256 30792832fb59cdd6c78dfdbfaf74f15ba9f1dc5cf193b462a3100afe0e5543e3
MD5 8d772469715d096b73c4fd32e26416cb
SHA1 d4f6a9c44b4bc347e54340f08405ce2fecfa9368
SHA512 73bba6f797e29f1c10ba94b98c39de96c8f7c1edf520accd6a7e9f55c97d3ead28a9a6ab740b1fa3de9625ee27397b54e3c89301047faa5b7a18d91503a52d97
SSDEEP 768:DFQj3pwgyJ+gm1B9c8DmGA5b65Q92RQMPbqRs2xgd:mj36AAF65dQJRsigd
TLSH
T15403BE33DCA0DEB7ACBE96C17647B202AFB84163C5C9C29096D9AE1C01875DD030BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

329cfee9-638a-474d-8577-f0ac688aabb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\329cfee9-638a-474d-8577-f0ac688aabb1.tmp
Size 11KB
SHA256 8b211be8d49a5262affa54c8dc7b7bb3af2f3017b4c796696bb4c0a4f036003d
MD5 9436ba6d1abb5c93f47146a963c6f9b8
SHA1 4f434a5e5a2f55f62d73b5df8b5856ebc11d4321
SHA512 7604715dce5104f02d57bf86c268c31ce0502dc1549b7df0a6ef038b1843bb183144218761b35a5f883be2b13f156ed906f1e4eabb37fe255b026f748f110f0d
SSDEEP 192:sxRhrRRbC/fsFfsByYh+izoA8p4m/g6+WNIY28ciGmIgIJ:sxRhrDC/fsFfsBb+vP/5IPgs
TLSH
T18632A615AE28A93B4CCBD21DFB657F53D6FD5032A4911E4CA6FC9A2C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

673f34b2-ae6a-42f0-817a-bbd4d22593ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\673f34b2-ae6a-42f0-817a-bbd4d22593ee.tmp
Size 11KB
SHA256 46bad5046604fc0c1ad20ce82ad4d8ce23609c823dac45a0510571983ae6105c
MD5 6c5845b290b3bdea3ea3a4df1a186db7
SHA1 097e2e364b6ef7fabb431dcd3dd8cb7726eae79d
SHA512 fd9f3859f54222d144b10a6961a4931a0c25c4b0dc145a273fc9a7063da8e8504438753aebacec31c9acbdb54359cf8a1e7bf70f284ab5e24d7f45751a5302fb
SSDEEP 192:sxRhMRRbC/fsFfsvyYh+izoA8p4m/g6+WNIY2hciGmIgD7J:sxRhMDC/fsFfsvb+vP/5Ikgx
TLSH
T16B32B615AD28A93B4CCBD20DFB657F53D6FD5032A0911E4CA6FC9A2C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70992016-5126-4511-8a64-58d04dea8c24.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\70992016-5126-4511-8a64-58d04dea8c24.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

954df0b4-4255-4a25-8523-8e0885a03dd5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\954df0b4-4255-4a25-8523-8e0885a03dd5.tmp
Size 23KB
SHA256 185e99ab0b6b0f52a3ba742fc5f69470f083ea610c7cd0e0af6e0dbd151ba16a
MD5 73aa83afd8c6c68c7696f4692da80fe5
SHA1 6287cae14c8d1834dba987f5ad591eca03fe6609
SHA512 a1ee468db60986289125e60033a0f9a8a4222405c10991ff34ab884a1cc7e4fea6c1df42091d33b9f39f01e261ccda2c091dd640617dee648959688ea3468489
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWUroHrJ:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0Vr
TLSH
T15EB2DA2F644CCB7E8FD00A9DAC596F976E9802C796588D4047FE984C02C7BEA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 e61709c50f6d58cc6b8561a67b02077960324dbe2462ba181bedc7003d3802c8
MD5 c9c433c9b23ea49eb44dca3337dea42a
SHA1 5b24a7974ef50de98c030bf62785299237aea1bc
SHA512 44192a64993b2be6e2ab5134e1a1ce62f2e34eee8647329f03fd797c414def2c27f1325e5fa28d5b6c95efecbc6f4ee22cbcd2f577c43816e4820b5b38327dd7
TLSH
T11BE020D465C5C63F510474974278B74C8790761B93D0BA5D3740C585B8054806E86974
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 578ede15609381a1a6b8224599be0325ee1e22c0412af442792848bbecc844f3
MD5 ff44e2294cb5690430e2e01fd4563514
SHA1 c85bd64329a0cd271967ed234a7786e871c4f8cb
SHA512 887eae7784e7db663d4eeadbd1a5cee7c04d0f7bcdf300e93a0d178f875dc6dcc345502c2afea9b54ccb49dda881cad9b9b3db8747f2796698cbf6788be5050e
TLSH
T1535154A2B9A972D4FB6561B0CFE05DC37E36CD71EC839E0715A4C5F84B463D8808C258
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 28eaa7c824b912178db565942224a0953a8273e1f15b59e6bdcc3251ac386ddb
MD5 ecf51701d4a2c5820838f8e127f27cf2
SHA1 aca60708f918c4730c10c33730131a3200d5b3fc
SHA512 fd24304810050ef7539928c6cc6bbf199fe559bfa7f4d52e8a522e5a24fe686a227ba9cb031af6dd4bf425aadea7fbf0c0bff4d6ebd80e1aa051a92a339b7cc7
TLSH
T1405154A2B9A972D4FB6561B0CFE05DC37E36CD71EC839E0715A4C5F84B463D8818C258
MD5 SHA1 SHA512 TLSH

Submit Download

753c2d0b-8b1a-4872-979f-f152719db717.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\753c2d0b-8b1a-4872-979f-f152719db717.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0ee231c3-2937-4600-bd2e-bd60c4a2a0a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0ee231c3-2937-4600-bd2e-bd60c4a2a0a8.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

3ffb623b-f5c8-44f1-84b9-d2c9fd462804.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3ffb623b-f5c8-44f1-84b9-d2c9fd462804.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

9d6e180a-e6c0-4df0-916e-db0dacc83092.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9d6e180a-e6c0-4df0-916e-db0dacc83092.tmp
Size 2KB
SHA256 ddee22e89f9ff2fe1af6b11509a48a043302f3c91737430ddcc520d290c254af
MD5 b93fb82474c3f7e0f570cc30de7d5cd2
SHA1 eec9aba44817730c0dda9252fa189dc68e29fa63
SHA512 0f5070ad542c73e2d2d7e439be68d096d38388ad58a53c2091efd5467b9023fa257c62258cd10ddceaea1f4d2c4d94a48c51d0f0a0e1ab1a940f5e264c99d6c6
TLSH
T16841AFF3C3E8867D890156F4AB186E1BCE1D0915532C3C5AC9D4DE2BA7E34B1E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 20d089157622104daa1132b5e8ede28029c9b0d7306472e98e5ba5ac7f99443a
MD5 1fcbab054cdd8f6ba0e90e1c383b4dde
SHA1 d8b4f88da378b0b84ba19d1eba0fd0a76948fe77
SHA512 599afc4bc6ec379003c64ceb24eab2afc1ddec5ab5b43f804bb6bb9428e70ab2411eaf573fe868197b40297ea05812bf1cedbec8bc438df91c2ea23dbb9ddbdc
SSDEEP 48:KwVIZKGEkDyjLYnrN1T9IdKOgY/ylRI5KCEEB:KwVCKGEi59iKOgCOReKCEg
TLSH
T1ED919D51747F1251387D690842E8E51B424231B63068E5BF7FBD51B38EAAE009CBEECD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

e28d79a8-254a-4a2e-8046-dacf689c47fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e28d79a8-254a-4a2e-8046-dacf689c47fb.tmp
Size 11KB
SHA256 52828ca73cf1042bbbac69689b5daba5c75323f570eb68481b0f82df18077ecf
MD5 06bb8ddc5bdbdaf9f51e2845a4eaaaac
SHA1 835b0ecb7e7f0ade465e580ef54bc55d345a1e92
SHA512 dd0fca7a3e4465a695370e1d331cc7e796c75211ac1c064da24db6ec99835e436981ee88b77af1d5e85c65dd051469c8d8a1354cf8ca9b633a43b1b37814d265
SSDEEP 192:sxRhMRRbC/fsFfsnyYh+izoA8p4m/g6+WNIY28ciGmIgD1J:sxRhMDC/fsFfsnb+vP/5IPgz
TLSH
T19332B715AE28A93B4CCBD21DFB657F53D6FD5032A4911E4CA6FC9A2C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d535a809-ca98-41f4-954e-4edc65d166a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d535a809-ca98-41f4-954e-4edc65d166a8.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a613d478-4c1d-4da8-afbf-9dd7697418f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a613d478-4c1d-4da8-afbf-9dd7697418f1.tmp
Size 41KB
SHA256 d9b5b3fb3826b40692f39d5640b1acfb19140d83a761e3299aeb7fc04d0dd14a
MD5 16cbe468257bf5d5756bd67b54c13628
SHA1 1ef00f0cbe3adca728b7f98ea5485a79d62d2adb
SHA512 a3f094fe71b432a0cd3a63809cb431031abd927de40670b6385b146845a3d7f1b30b15c4b8762b3b4766d9bb88b094554da859b7c180b29f50835f4c58fbf022
SSDEEP 768:6/UxvxjgC+y3p+Z+gm1B9cfXDmGA5b65Q92RQMPbqRs2Zn:/Zj3+y3gLRAF65dQJRsmn
TLSH
T14413C036ECA4AEB39CBAA180334BB347BFB54533D1C956A409E96F0C06C76DD430B956
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc4154c4-bc69-4cfc-b297-a36e6af04345.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bc4154c4-bc69-4cfc-b297-a36e6af04345.tmp
Size 35KB
SHA256 f294dd4221b21201c44778d384e85f085c8550bb343f8b445265e43b37ebd636
MD5 3e4a33d998acf67fbdc353b78b357522
SHA1 69eda4a582047976c74f9f5e121af1328afcde39
SHA512 d8994fe88c0e584b1ec3335c000cfe7246aa33cb4aeec275e6c54baa8c1818a9590e7a22bfe9db5ffd59cc3f0bcb7241c0e4d57da0155142f0369d65c3876249
SSDEEP 768:6r3fJ+gm1B9cf5DmGA5b65Q92RQMPbqRs2xgd:6r3f7rAF65dQJRsigd
TLSH
T15EF2BF72DCA0EEB35CB991C13647B2067FB94123D5CD869458E9BF1D05C7A9E030B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0b70a2d-601b-4388-aac3-ebf92c088efa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c0b70a2d-601b-4388-aac3-ebf92c088efa.tmp
Size 35KB
SHA256 984b04b4c56ea187142a99d124392a32f97bf73200d372c7be2451c21e26cde8
MD5 ed165cd925144680d206447e53d42c9c
SHA1 ab8198b2b515f6c536eba328d64a63b5fbf91241
SHA512 f29a03eb95e4f5c83bf09e2d911762a9a55c2571851d8d804c3fd99e975fd0fef00c80d9a59ae6c537ab48235298b3a2350d7d908c59fd9c2c2298a0eb1941f8
SSDEEP 768:gr3oJ+gm1B9cf5DmGA5b65Q92RQMPbqRs2xgd:gr3o7rAF65dQJRsigd
TLSH
T12CF2BF72DCA1EEB35CB9A1C13647B2067FB84123D5CD869458E9BF1D05C7A9E030B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d379b92d-8d03-4fdb-af75-8bacbabde61a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d379b92d-8d03-4fdb-af75-8bacbabde61a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f18eac11-309e-46f0-8350-5004d78641b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f18eac11-309e-46f0-8350-5004d78641b1.tmp
Size 39KB
SHA256 e7e74058f8fad40e518ee94fec95f36366519dc01a698fdb0a84f99ae695b79d
MD5 2c0f59d2688f9c77240e7b932d03a046
SHA1 f6a478a190826d6bab4e3db2777056d935b693f0
SHA512 5bcf9b86cd2067f45668a0ab1066716df6a4198c21554c046ab3dc34f2140c0d8a69ae4ba1a019a23f6a8bf5b00bd5b59dea4e1e06c89d6f1c63f42a17bf9eeb
SSDEEP 768:U/UxvxjgC+B3nfuSgm1BTtDmGA5b65Q92RQMPbSFj0O:BZj3+B3fT3AF65dQJFQO
TLSH
T1A403C036ECA4AEB3DCF96180374BB35AAFB84573C1C955A049E96E1D06C768C430B85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download