5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 12:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-sfqvei.htm
Size 194B
Sample261002-pt6vxssdrd
SHA256 5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b
MD5 0fe53cf75ee2569670f22b4df68cfdff
SHA1 c8ce77fbd6e13476239c598378c612a8b57685c0
SHA512 ee321ac4703144eafd3d4db7deefe08d8aef572e3c67fc9d4203f5349646173caadf91608fd10220a16ea91099657c4a8460e3ca09a781af646cb3a5282db660
TLSH
T121C0C0B7E400620CDB3078D500F172CC00F8819C9C82CA003D8018E8B39696AC9031D1
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3056	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2304238888-3968896904-642854331-1000\{0DCF4CB7-5A4C-483F-A6E2-C352DF792957}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4420	msedge.exe
4420	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4640 wrote to memory of 4100	4640	msedge.exe	89
PID 4640 wrote to memory of 2172	4640	msedge.exe	91
PID 4640 wrote to memory of 3056	4640	msedge.exe	92
PID 4640 wrote to memory of 2172	4640	msedge.exe	91
PID 4640 wrote to memory of 2172	4640	msedge.exe	91
PID 4640 wrote to memory of 4968	4640	msedge.exe	93
PID 4640 wrote to memory of 4968	4640	msedge.exe	93
PID 4640 wrote to memory of 4780	4640	msedge.exe	94
PID 4640 wrote to memory of 5140	4640	msedge.exe	95
PID 4640 wrote to memory of 4780	4640	msedge.exe	94
PID 4640 wrote to memory of 4780	4640	msedge.exe	94
PID 4640 wrote to memory of 5140	4640	msedge.exe	95
PID 4640 wrote to memory of 5140	4640	msedge.exe	95
PID 4640 wrote to memory of 3192	4640	msedge.exe	96
PID 4640 wrote to memory of 2176	4640	msedge.exe	97
PID 4640 wrote to memory of 3192	4640	msedge.exe	96
PID 4640 wrote to memory of 3192	4640	msedge.exe	96
PID 4640 wrote to memory of 2176	4640	msedge.exe	97
PID 4640 wrote to memory of 2176	4640	msedge.exe	97
PID 4640 wrote to memory of 1920	4640	msedge.exe	100
PID 4640 wrote to memory of 6004	4640	msedge.exe	99
PID 4640 wrote to memory of 1920	4640	msedge.exe	100
PID 4640 wrote to memory of 6004	4640	msedge.exe	99
PID 4640 wrote to memory of 1064	4640	msedge.exe	102
PID 4640 wrote to memory of 980	4640	msedge.exe	106
PID 4640 wrote to memory of 2252	4640	msedge.exe	107
PID 4640 wrote to memory of 2296	4640	msedge.exe	108
PID 4640 wrote to memory of 3348	4640	msedge.exe	109
PID 4640 wrote to memory of 3348	4640	msedge.exe	109
PID 4640 wrote to memory of 4420	4640	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-sfqvei.htm
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ff9617cc188,0x7ff9617cc194,0x7ff9617cc1a0
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,13744854051771710470,12572128958536137038,262144 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:2
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1744,i,3417154588426471933,17155526604716080292,524288 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=3088 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2360,i,10284366794936530821,15684376948740946001,524288 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=3340 /prefetch:13
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3656,i,10434587410371625993,6268449775066027471,2097152 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3660,i,14172216247085218956,4607766559260052974,2097152 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:1
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,4170928786610944687,12125184137741694298,2097152 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:9
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4384,i,12841251985716932965,11047866542530407972,2097152 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:1
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3260,i,14767672377812635580,13270823009484644131,524288 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3816,i,10392889900363825472,3080492410155753262,524288 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,14076351425590987432,15839962652283665439,524288 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,14076351425590987432,15839962652283665439,524288 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4712,i,7485371013942769080,9592652688872528330,524288 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:14
  2⤵
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3780,i,296756593648369267,15668131791629429859,524288 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3872,i,14169961525609187527,12893766610794236387,524288 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:14
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,1209762485328932453,3528768105455745537,524288 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:14
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6440,i,9224357846268931186,166311102349292041,262144 --field-trial-handle=2744,i,18253338445000769796,17029922088604705613,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4420

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2520

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2676

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

8840ef71-d53d-4da1-adcb-b7baf3e348bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8840ef71-d53d-4da1-adcb-b7baf3e348bd.tmp
Size 34KB
SHA256 eff97fba5cc9a7db11d67d7b766cc2f75d0defabb92ab96ad68c3b0711667175
MD5 b7a5e622e58cc2058ba20a06058357fa
SHA1 8378da481373481b8b79241f984dd65c34a3ff7b
SHA512 544c081ac1ebde4d400379ba3a6df7b8adf2a7164ff5a5b12aa9a42bb4e17735bab53e9b96baaeb29637ac85b5ad8fedde4a85590c3e5aeaa3d6b39d41ff07a1
SSDEEP 768:5Pj3dGSO5p1j81I2MIYNa8S5oYklnA+N2sRXF:Bj3QpB8ucTWRdAq2s5F
TLSH
T180F2BF36A9A4ADB39CFA53C5B30673026EE45223E1849FE499ED1B5D06C76BF0303825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8d737847-81bc-4c5c-aa1e-befa6b73e899.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8d737847-81bc-4c5c-aa1e-befa6b73e899.tmp
Size 34KB
SHA256 0e18944fea7fc47d74f10e5fe4c3e490ba00a4d4efdd8b7bda5f03621553553d
MD5 52e8d2c5da48f350ba5c01109e2d6234
SHA1 2ea589e8bc4cdc72f47a2f2e5ae17dee7a594518
SHA512 1da06d99d770452fd5657d09321bc467aa882da29889bba50a4ce46510e98105bd458a4fbcd17bb2c1cd922cf11074045794c023588fa140defb8746edc3da10
SSDEEP 768:Mj3QGSO5p1j81I2MIYNa8S5oYklnA+N2sRXF:Mj3RpB8ucTWRdAq2s5F
TLSH
T116F2B03699B4ADB39CEA63C5B30673026EE45223D1889FD4D9ED1B5D06C76BF0303825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 84d025c8484a1ba1eae075fe4fb60ee1013d5e3c0fe4757f9d23c77a5ecf4bff
MD5 40a03f8f45ceb83458e7ff6718e8114c
SHA1 3aee2deed85e7e1b8a1a9090347606288ce5f90c
SHA512 011f7c1ff606c9271e176c099ac19361c51f6a3eb7ee8dae4e0bead781595a3fa38a006247688a203ba11818d1de1b9066033932d5d22ba79d5a19f921cf6159
TLSH
T164D02B316CDD4D23C08CA27C0056004117617400FE10404011211048080824142823AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 72a43fbaed1cd4a89462ff759b5bb2f6f6d1a7a9c08002937c809c101fc685e4
MD5 b04c9bc22d86d65999036cf784bd7a42
SHA1 74f3b96e34181e491a9fd238877d82f72fce321d
SHA512 9bbf9224f5546df81a26e79932518e2c3bea2fc0e37127e4af1f02d1a5543680b5d9370365c28b8bb5427b3bb4f27eb12737d158490216ff77859483f95a6b00
TLSH
T189D02B316CED4C23C08CA27C0057004117517400EA1040401221504808082414281399
MD5 SHA1 SHA512 TLSH

Submit Download

1ae31a0f-a6f8-4693-8725-f1a88908fc8b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1ae31a0f-a6f8-4693-8725-f1a88908fc8b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3a37c521-7d78-4ccd-ab7c-2b58bd09c491.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3a37c521-7d78-4ccd-ab7c-2b58bd09c491.tmp
Size 10KB
SHA256 86b9beae115bd1bae6dae6d79a4c5e655f08a80ea4cf05f1866397aaeb71cff4
MD5 1b80033596cd04a99acc48c84ea5f3d4
SHA1 b086757faf2cffa3d0a816299243425c5cbd0093
SHA512 e0b78f8e315345d7652b4cd9b16331581acf2135fd5b09f3c82fe33095ff419b08f4242fccbaff26c73248b04b45f891c9d27655be223d804c3dc8a9fdb5f90a
SSDEEP 192:sxRZRwbm/fts6ZzoA8p4m/g6+WNIYueCFG/IgDhJ:sxRZgm/fts6kf/5I8n
TLSH
T1A432B8156E28B97B8CCBE20DBB557F53D2F91132A1915E48BAFC9A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5bb0bee1-e7ab-4295-a85e-24b6a77d7cb4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5bb0bee1-e7ab-4295-a85e-24b6a77d7cb4.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

8fa65a44-1fbb-4f70-acb6-ef6025872fff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8fa65a44-1fbb-4f70-acb6-ef6025872fff.tmp
Size 11KB
SHA256 925d468e0f7bd91479dd457c1d781354a85db8a3e36156542da621bccc7aae70
MD5 eb8fb7440e3a91425940eea774de2dc4
SHA1 83ad43eaa91bff616ec64b84c7737245555fe84d
SHA512 8de0c91b06d64334710a3a6ab0ba5fe90375c8851c13ba40e9775ff3a76e0521f2a4b8007286bad4866bfa0f2d96a94201d516a0ca48682bff6306c96dc9ee1e
SSDEEP 192:sxRZRwbm/ftsXZzoA8p4m/g6+WNIYu/CFG/IgD3J:sxRZgm/ftsXkf/5I1l
TLSH
T13C32C715AE286D7B8CCBE20DBB157F53E2F95132A1915E48BAFC9A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 7b7e2d851160efe323b7f88503c2e54bd58da291c90e867ab7a5cfb087f1c7a4
MD5 18d4ee0a20c25beec59ecc9f1656fc0f
SHA1 2b899bf6bbd3d3808318641c300e7689cabf372a
SHA512 fd26ce118880d2d3a7edbc8652155be419f1abddcb8d7cd0ee4ec0ca54bfaf0a1d8a8507c8782674fdae7223a486f20e9942bf07702b8c471906597bfd8d5f5e
TLSH
T13541FAC24260A39CF7B8457DB5C00E93FAF2A8B06487DF500654C5BBBAC1399FE54200
MD5 SHA1 SHA512 TLSH

Submit Download

16826e0e-66d3-4bd1-9cc3-38144aaebf86.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\16826e0e-66d3-4bd1-9cc3-38144aaebf86.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

a9b7fffb-23c2-4356-8dff-2035c34c4f75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a9b7fffb-23c2-4356-8dff-2035c34c4f75.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

f88c04ca-7232-4bd0-bfe8-441547523f9e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f88c04ca-7232-4bd0-bfe8-441547523f9e.tmp
Size 2KB
SHA256 90d51c6a4d570a3b8c849e0a3b1b3677552aa4ac2b07e1959c33873bc86767c4
MD5 8a772d46bf6449e8138ae2b364c1d7b0
SHA1 c9726b10d57042bf972cd6165d72b76cd1321919
SHA512 2ac213684c68ba15cb072ce2eca717e51d793805617224b4303b3190e8dfb97351d060094147f8ddaa2b467d48dd1c8d3fa7391ef32ea840a88465d679369dfd
TLSH
T1C241A2F3C3E8867E890156F4AB146E1BCE1D0915432C3D5AC9E4AE2B97F34B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3bbbbc13a5d77b4935f47105afe956933642f988993befb006e694ebada9085d
MD5 e486865a706b71ddf98e8796991691bf
SHA1 7b8d486d9f4776ed06c7d8db77123ff4370fadad
SHA512 ef80653058717c3ec8ff1561a1369214e1df0f1a6e8ec4c3fdb571726a51243a8da4dfd7f1362424ab4b17eb33c15a848ed9e1e390774d6dee7a30352e212e00
SSDEEP 48:KM9MZN3LXYTD+LIa1YKV99fYR1IoOfN1yD3SL3pJZiTB0RIaHiKVH9FiRnyo8d3u:KkC4Kf6+qUAKNimiGoK7S1
TLSH
T1C791572170770660383D364CA0EAA7DE1B4177A77828E62B3BEB40A54D67E095DFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a202e83c-9c8a-4978-a966-c209f59cdc66.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a202e83c-9c8a-4978-a966-c209f59cdc66.tmp
Size 23KB
SHA256 75820c371825eb83e3e101aa771791da5354405e24acb68917d1e1d64408642e
MD5 fe93da6278c0139888d35882ee33e0f0
SHA1 3f08523ba2d0e3f56b28a18c295915914e72653b
SHA512 dc4650336b760d50066e81772150bdf06e03c46d1a6bbf2717bf147c4e46abfd86e5efba7fca12ab21843463d782872a2510046c1e763c80c08fb5ce3927c2c4
SSDEEP 384:/7fnhUVfCtg6UFfCwKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXb9kMR6SrocbI:/jnhUJWg6cfCw8F1+UoAYDCx9Tuqh0VL
TLSH
T11FB2DA2F644CCB7E9FC00AADDC196F976D9802C796988D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b47231d4-2669-4862-b304-acdfeb99d0c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b47231d4-2669-4862-b304-acdfeb99d0c0.tmp
Size 10KB
SHA256 e04509c8b17d779ad6560a65b1e7f56315ce75ac4fd3826db473e7ddb28c1350
MD5 25a9315b4c91949cd64f8fa39f7c06a6
SHA1 657640b85a3d4f1ff987022d7e55243dfb79104e
SHA512 ace718e6befaa12124dd17e06ba86e713f25b36ed4f5264214fbfd8f3940b1c1073402ee93f330ad14bea3642c65a62ee25089c0e4d9f3b4b3ae570a88509840
SSDEEP 192:sxRuRwbm/ftsqZzoA8p4m/g6+WNIYueCFG/IgIJ:sxRugm/ftsqkf/5I8s
TLSH
T10532C8156E28B97B8CCBE20DFB55BF53D2F91132A1915E48BAFC9A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98c2cc28-4932-4fba-9475-b9878110f740.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\98c2cc28-4932-4fba-9475-b9878110f740.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c5091631-1908-46c1-a7a4-66d17baa4c18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c5091631-1908-46c1-a7a4-66d17baa4c18.tmp
Size 36KB
SHA256 adfcba85faf9d88012711b81f7d6d3e3e359a3787b742ab68b2f513244e9a6f5
MD5 52dc3a17ec697343d1b78566461ab344
SHA1 e6aa6da69c74bb0e3545eceb2250fa472064fc73
SHA512 ee6b1de13386d12155bdb4dc8b1dd39e7ecfa2514a315f39d6acbed45341ef31f8b96e80438042ea02aef4998b82df4381975e924de8b65a5534a1969770e193
SSDEEP 768:+FQr3mwgtGSO5p1j81tSMIYNa8S5oYklnA+N2sRXF:Vr3TpB8zoTWRdAq2s5F
TLSH
T14E03AE3799E4D9B7ACFA57C5B30A7302AEF54223D185EAA4DADD1A1D02871FE0303C65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f5a80d6e-2a94-4cd8-b0d2-99d6470b30c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f5a80d6e-2a94-4cd8-b0d2-99d6470b30c8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f1d2bad7-b582-49f8-beda-84682045f84a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f1d2bad7-b582-49f8-beda-84682045f84a.tmp
Size 38KB
SHA256 8e77251cf1a456154b5f97e73813c8005fba77bc9964b3f151242f4aa22219ad
MD5 a82fe5d83c8c2f3f5f1d69f6273d2121
SHA1 d2e1680a45df0d4f70811261e3e59218eecc0a53
SHA512 a08fbd0cdecac7d99be7488df3af62a5b8997c54829215db37095553df6da1c0b8506400b6afe3c256da31f331f110f0300054791b91a62be424ad19eb1b6598
SSDEEP 768:do/UxvxjgC+238fOSO5p1jdJMIYNa8S5oYklnAaWSH8L4:nZj3+23+qpBdHTWRdAZS04
TLSH
T13A03C03A9DA4A8738CF663C4770AA357AEE55263D0C16AF88AEC1F0E17C72AD5303455
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download