fa5a4e3372b1547c5fb744c26e19689ed1b26f4cf9c3430facc978a36c70ff1b

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/10/2026, 17:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sdk1-prod/index.html
Size 3KB
Sample261003-vsj8esty4p
SHA256 fa5a4e3372b1547c5fb744c26e19689ed1b26f4cf9c3430facc978a36c70ff1b
MD5 8391053e609d1a75c86aecb93db8cf74
SHA1 1c909f41adbb6400bef7529cd61d61d2665a3f8e
SHA512 5751c8bc02cdf8e74fc625abad1bbec170c813a57e390ec9cfd636e8be98ee0c7e07fe1d00b3d5e44e6754482653cca4ccb349af4daf4fc692c64edc5a2e54b2
TLSH
T1B5719616A9284539F256A2A03DE0C79F7349EA07D64689787CE48180C68EDF2D8FB56C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2000	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{FDD1C6B1-9419-4EC2-9ED2-915464A27F63}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5340	msedge.exe
5340	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 1224 wrote to memory of 4312	1224	msedge.exe	89
PID 1224 wrote to memory of 8	1224	msedge.exe	91
PID 1224 wrote to memory of 2000	1224	msedge.exe	90
PID 1224 wrote to memory of 8	1224	msedge.exe	91
PID 1224 wrote to memory of 8	1224	msedge.exe	91
PID 1224 wrote to memory of 3848	1224	msedge.exe	93
PID 1224 wrote to memory of 3848	1224	msedge.exe	93
PID 1224 wrote to memory of 828	1224	msedge.exe	95
PID 1224 wrote to memory of 828	1224	msedge.exe	95
PID 1224 wrote to memory of 828	1224	msedge.exe	95
PID 1224 wrote to memory of 3196	1224	msedge.exe	94
PID 1224 wrote to memory of 3196	1224	msedge.exe	94
PID 1224 wrote to memory of 3196	1224	msedge.exe	94
PID 1224 wrote to memory of 5836	1224	msedge.exe	96
PID 1224 wrote to memory of 5836	1224	msedge.exe	96
PID 1224 wrote to memory of 5836	1224	msedge.exe	96
PID 1224 wrote to memory of 5024	1224	msedge.exe	97
PID 1224 wrote to memory of 5024	1224	msedge.exe	97
PID 1224 wrote to memory of 5024	1224	msedge.exe	97
PID 1224 wrote to memory of 3380	1224	msedge.exe	99
PID 1224 wrote to memory of 3380	1224	msedge.exe	99
PID 1224 wrote to memory of 5724	1224	msedge.exe	100
PID 1224 wrote to memory of 5724	1224	msedge.exe	100
PID 1224 wrote to memory of 2616	1224	msedge.exe	102
PID 1224 wrote to memory of 3256	1224	msedge.exe	105
PID 1224 wrote to memory of 3256	1224	msedge.exe	105
PID 1224 wrote to memory of 3256	1224	msedge.exe	105
PID 1224 wrote to memory of 4880	1224	msedge.exe	106
PID 1224 wrote to memory of 4880	1224	msedge.exe	106
PID 1224 wrote to memory of 5856	1224	msedge.exe	108
PID 1224 wrote to memory of 1800	1224	msedge.exe	109
PID 1224 wrote to memory of 3564	1224	msedge.exe	110
PID 1224 wrote to memory of 1576	1224	msedge.exe	111
PID 1224 wrote to memory of 1576	1224	msedge.exe	111
PID 1224 wrote to memory of 5340	1224	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sdk1-prod\index.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffb0427c188,0x7ffb0427c194,0x7ffb0427c1a0
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,7469491716093086903,3313062247101181747,524288 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,1211403477978260949,8661523594290109825,262144 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,4477161236320714630,8868971789001410291,524288 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:13
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,6559909994140753603,6428469873927398669,2097152 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3500,i,10671766921425229225,16112415872131899087,2097152 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,11629989249166697222,11448641371698936579,2097152 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:1
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,9905845426723644887,9324155507155305272,2097152 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:9
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3944,i,12202418435437853106,16062671577172523457,524288 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,2764641954006233843,7667879601294075932,524288 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:5724
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,1330198632111669814,18184479092069010361,524288 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,1330198632111669814,18184479092069010361,524288 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6508,i,777202532709972284,15003952155527124791,2097152 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:1
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6760,i,10457738389098916974,4410345036355448700,524288 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:14
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,16787742064109522453,16822637037612761480,524288 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:14
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,12068911173175732033,10096624186756180695,524288 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:14
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,13682810828231197653,13371360000751556019,524288 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:14
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5488,i,8842863416388390634,2160517805659645692,524288 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:14
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6492,i,13290534744548615014,2605417537299537767,262144 --field-trial-handle=2256,i,15412023341358504739,16098390265918607425,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5340

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2852

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1b606c50-d947-4f98-a5d5-90e68908f5ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1b606c50-d947-4f98-a5d5-90e68908f5ea.tmp
Size 34KB
SHA256 764f6bf72a58396ff2a011a5699919c8016d22dbdaa2300297d9b094ca35e43f
MD5 7e0d0f5e5933677d2a4c53ef8c9515ed
SHA1 800d58ea85cf6a4eac0270835d3dc0135fb36080
SHA512 b5a597665410657b930999997d1cb9192c2ffa2e7867655fefe5986b456c8ad11f87b1493171beaef3474cf5e2a9b59db507035b2f7daf28c0e7d8836ddbc5fd
SSDEEP 384:4ZcI838NPmKptptxaVDfKAXOVaXBX7b5h19hgGRSp14gB+EgH18nbpOfErluZUO9:G83kLwOUp7b5fgGM1TnXMqOa52sY7
TLSH
T1F7F2BF32A8699DB35CF3D284B20AB2126EF18167D6C81F98D9ED6E0D059765F030BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4b68f5f3-44d0-4c70-ab06-c037f9c0eea6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4b68f5f3-44d0-4c70-ab06-c037f9c0eea6.tmp
Size 36KB
SHA256 d2d5fadec561a1383facaab726841ca7241d42b18681b7187f07a09e304983d2
MD5 a1f49dbca76e8d6010f5ad0bbfc21ed7
SHA1 821a6953d82262345d46b0e76e5e46a380b6402c
SHA512 7456e6bfb51c6f076157927ebc478d9214125c4fdddbeeff3f794a6dcf595d3b1e96f568034b79593fa80542e2556bcb30e8ebab7d41e066ff444806dd4643c7
SSDEEP 768:QtFQb3+wgxLwOUpI5fgGM1TnXMqOa52sY7:Nb3Mfgt1TnxOy2sY7
TLSH
T1AEF2AF339894C9B7ACF7D784F60A72126EF181A7C5C96E98D6DD6D0D019729E030BD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

1085b2b6-cece-4555-bc79-3a11dd7cfdab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1085b2b6-cece-4555-bc79-3a11dd7cfdab.tmp
Size 23KB
SHA256 da8ad780e096a4daa71b322207e801478a5acb6c0ae9d202b39e09fb7b2f69f7
MD5 422bc3272a9f5ade2ea3feaf2fcfd588
SHA1 d29d71604d725c410a14e3a20176ed59ef7f4195
SHA512 d7cf1383b4535cd9d1d91e350fc80414e504b8a98c5707a7836de4020fe92c121b65e4c936f94a222cda2c14eaeb875b4a4e53b1a5761aa9e9f01cdde18ad774
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRkRroqYa:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0VJ
TLSH
T149B2DB2F644CCB7E4FC10AAD9C1AAF976D9802C797548E4047FE994C02C77FA921A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

466c9c1c-dec2-45ff-a466-fb4e7e8d735b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\466c9c1c-dec2-45ff-a466-fb4e7e8d735b.tmp
Size 11KB
SHA256 fdf34c08ab45b9c6baf46ab6d32b31eb1106859f59331c2ffa05167b596b318c
MD5 601bd76ddec47552ba894ab5d9c4a8e1
SHA1 2b9a354a09b9d984bc6cae47a43740e164844e91
SHA512 9869c79af753ccf002771c1ff0709201cce870729e1746f16423ce0d2beb9aaf5592e3cb29e6e24237cbe047fa0bbd781484a8d4fd71da30f2d33c39c284348e
SSDEEP 192:sxRVRpbf/f6sG7qvBzoA8p4Xy/g6+WNIYRLf3jjGkIgIJ:sxRVzf/f6sG768L/5IEFs
TLSH
T14832C606AD28A97B8CCBD20DBB567F53E6F9503261905E48A7FC861C04EB7DE220340B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

924afd80-0e9a-4a50-9eb7-40ff81e9ca4f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\924afd80-0e9a-4a50-9eb7-40ff81e9ca4f.tmp
Size 11KB
SHA256 7052eb9c2ef125d893ebbcf5a91e62b054734a4dafeb9c082cc66f3152ee70e3
MD5 fe331b09f15a3d9a07903990ae31b077
SHA1 a3fb970adfa622e2b72c24f077a191f4505ab236
SHA512 739948bf89c5cc2a1a58b9c3f5656d724214e3c88534f771500b7bff150f8f6e70361a92e2e270b031c7fa3f3227e20eb8b46de84be96a50e095ba7e205fc37e
SSDEEP 192:sxRaRpbf/f6s77qvBzoA8p4Xy/g6+WNIYRLf3jjGkIgD2J:sxRazf/f6s7768L/5IEF2
TLSH
T17742D706AD28A97B8CCBD21DBB55BF53E6FD503261915E48A7FC861C04EB7DE220350B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9447848d-e722-40b9-bdde-ae80e3030c20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9447848d-e722-40b9-bdde-ae80e3030c20.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f25cdf9-1129-464a-9a0d-a384c686b563.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9f25cdf9-1129-464a-9a0d-a384c686b563.tmp
Size 12KB
SHA256 171ae55331fd0993d19139d2810e3f34cd722e76e43b26b43400864bdc968a76
MD5 02e5e59c59855e902dc57fce648de0b4
SHA1 5c276cb6a90e9500f1a23d20b257c9311f6ddc88
SHA512 5fbf27880205de5e8c6d203c948946badc59f57698de45263c3f688cbf42c7cf3ae2c0cc8dd7a473fc2fabdd9248ac6938b02304699390f168c01a86927d4a51
SSDEEP 192:sxRaRpbf/f6s7UqvBzoA8p4Xy/g6+WNIYRLK3jjGkIgDMJ:sxRazf/f6s7U68L/5IJFE
TLSH
T13542D716AD28A97B8CCBE20DBB557F53E6F9503361915E48A7FC861C04EB7DE220350B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 71KB
SHA256 2c295d99e26dcf357d4d01bcf270fd6924b600c9a13dd8c363ef114f4c6976fa
MD5 4b73e2ff3024784eca66d2120a9bcb22
SHA1 2870bcb8ece10145e089262bb6634d18ac85bec6
SHA512 9ebe0b2cc7ed7298d931fc246732ed90881f0252b957afbf14f390c75c1da3fddf1b3fbb00be8d489cbb7b5a18f9dbda17a24e18594d44ebba4b7ca3f50bb10a
SSDEEP 1536:MO6PxhqwEppt5fUo8w4d+X5JlhLzcua67BYePELa:M3qh7VdDf8GPH
TLSH
T1F0630245820BA35EE09D4A79D27481F61FC2CB5C2BBF5C27538289AB5F57DBF6410134
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 27fcee2b2be3ee40ce2e2f7e0c16f9618a457a68947b21301d03e615cc2de349
MD5 2638b7300458848d85a3f61f4073d814
SHA1 2dd17a42f1899b312ffa75251c13211b43b5c571
SHA512 03f1b7902e3e2e1921c4a06e92ea979e5699ef9d076930938eeb00cbeb4be8c98f5a020d2161a81938dd157484b77b0187a65b095ec97226a52d9a88ddcde3c1
TLSH
T1EE71D9504932A086F7B99137E5CC2CD33EF8F69782A33E5D879CE2B8644E3291960C48
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d2cd82b1de0bd557594bb0b3fb886462028e7811a44bf988cbbac4022d111a23
MD5 91e4b456687c0689a05d0e7bc353cc98
SHA1 98b8c3cc44497d2735dd0083d5513e92c6ba32b1
SHA512 c9101d083b791508496c9476fa103cb9a984d4fdf5a6346c67201c23506a05e999a1ac7572e1c75eccd9ef4fe1361009dd48c4eb9e3e4ead5c8bc8684b5d6101
TLSH
T14361CA504962A096F7B99137D4CC1CC33EFDF69782633E5E879CF6B8644E3191960C48
MD5 SHA1 SHA512 TLSH

Submit Download

bcf88e74-9acf-4dbc-b4dd-1546054f2172.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\bcf88e74-9acf-4dbc-b4dd-1546054f2172.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

14687848-1cf6-40a5-bd6c-1f93cdbf871e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\14687848-1cf6-40a5-bd6c-1f93cdbf871e.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

1aad1ae2-860f-4b67-a9b7-dda5fc5496a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1aad1ae2-860f-4b67-a9b7-dda5fc5496a5.tmp
Size 4KB
SHA256 29cacf69d7bf701dbcae7df4ccb851f022a0eace25d454ef567c116a1403598f
MD5 8f5b9026ac5f99fa6a3404c8cd510369
SHA1 00e90f5df24f7bacf72021ce08bf025855075096
SHA512 9ed391584bf3a422209b3c5785165cbd71943308fadb313be0dd04c920110f34b9c6453a111b639e733781b843a9b039a687eec6848997ef291abf32d9d51019
SSDEEP 96:DnO6wKVZ656oiYzsX/GoRjlP0Bvuj4/QwQ:DO6wKVZWniY2/GoRjlPQvuj44T
TLSH
T1F691EEB7C3E4877E890156F49A296E1BCE1C051A532C3C5789E4EF4BA3F24B1D14265F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5de6fc05-e23b-4150-8ee5-a0fa4255f915.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5de6fc05-e23b-4150-8ee5-a0fa4255f915.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

ceefa358-5df1-4cae-b89b-91d2a71d1cf2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ceefa358-5df1-4cae-b89b-91d2a71d1cf2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a8830ecf-c819-482e-86f0-13a1b5853859.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a8830ecf-c819-482e-86f0-13a1b5853859.tmp
Size 37KB
SHA256 f170b81a7b16355a88feee3ea34c7c17a1b38afeff6d43b89486766894a5de11
MD5 da1184c1ecb5af74f8156b2d5231e991
SHA1 5961891ce143e0eacc1044aceeb9bd429fa75138
SHA512 3d961aaffbeea996d205cef4264a2e0614bb89744ea410037033fdd9214b854b2fcc1c70d25cc85aeba0d746338ae149ff820179d1daeb50aa7c911d3885a4ce
SSDEEP 768:5/UxvxjgC+93nBwOUVu5fgGM1TnXMqOexAaP8:sZj3+93ocfgt1TnxO6AG8
TLSH
T14603BF36AC556C739CF3D384730AA2A6AEF24463D6C51EA889EC2D0E06DB35D530BC57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb5db883-d289-4c45-9ceb-b4c42c00b7b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cb5db883-d289-4c45-9ceb-b4c42c00b7b1.tmp
Size 33KB
SHA256 5ff1a65e92370026d5eed7d2f15c3f0f4899671a3c3cef5f8ed29aa88d26804e
MD5 09d1dd03948564e76cefd62d6a9abb84
SHA1 e81a8eaafb50fddf082c487156e03a103d610536
SHA512 7503bd7a51e439ba6728cbda618d25d5a943aba28e6d95068b4236d5f5178134bde5bef7f6962a7ddc55838a0ea62f486b562c47eeab2f931ffaf41ee971a676
SSDEEP 384:XZcI838NPDKpypt7aVDfKAXOVaXBX7p5h19hgGRSp14gB+EgH18nbpOfErluZUO9:f83sLwOUp7p5fgGM1TnXMqOa52sY7
TLSH
T1FEF2BF32E8659DB35CF3D284B20AB2126EF18167D6C81F98D9ED6E0E059765F030BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75848dd3-91a4-4567-8ea3-b27ef58bb3af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\75848dd3-91a4-4567-8ea3-b27ef58bb3af.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download