335cdb0654454abc0f622ba6722f1608070af5ae955794fe7a45c66a5935580c

Analysis

max time kernel
148s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/10/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
pendencia/chat/index.html
Size 44KB
Sample261006-phl2daa16p
SHA256 335cdb0654454abc0f622ba6722f1608070af5ae955794fe7a45c66a5935580c
MD5 04363ddbda0ab26872abd814ba9f77b6
SHA1 4ad6f94cab8a643ae65c99fb3cb74bdf3dbaccdc
SHA512 ee0a2678c938af1b24ef9b806c3170039eda1f5373ec83a23522ee6c1927c1866713f33f5427e0794f8b250d868521396d2cbbda17878d550449468caf33542e
SSDEEP 768:0IkDFOi6Tfe0oWBlaEIIECrB0GyQ4gkcFPF/q:qsi6be0/cEIIf0GNZ9PF/q
TLSH
T19123F8591AF30112656770AA6BAB93063B20C103A54ACD747F9C87849FC9EF5DDB3B8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1360	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{86A26684-1551-49B2-9514-2719FA1DCDC0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1140	msedge.exe
1140	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3352 wrote to memory of 124	3352	msedge.exe	89
PID 3352 wrote to memory of 4312	3352	msedge.exe	90
PID 3352 wrote to memory of 1360	3352	msedge.exe	91
PID 3352 wrote to memory of 4312	3352	msedge.exe	90
PID 3352 wrote to memory of 4312	3352	msedge.exe	90
PID 3352 wrote to memory of 4612	3352	msedge.exe	92
PID 3352 wrote to memory of 4612	3352	msedge.exe	92
PID 3352 wrote to memory of 1512	3352	msedge.exe	94
PID 3352 wrote to memory of 1512	3352	msedge.exe	94
PID 3352 wrote to memory of 1512	3352	msedge.exe	94
PID 3352 wrote to memory of 988	3352	msedge.exe	95
PID 3352 wrote to memory of 988	3352	msedge.exe	95
PID 3352 wrote to memory of 988	3352	msedge.exe	95
PID 3352 wrote to memory of 5644	3352	msedge.exe	96
PID 3352 wrote to memory of 2108	3352	msedge.exe	97
PID 3352 wrote to memory of 5644	3352	msedge.exe	96
PID 3352 wrote to memory of 5644	3352	msedge.exe	96
PID 3352 wrote to memory of 2108	3352	msedge.exe	97
PID 3352 wrote to memory of 2108	3352	msedge.exe	97
PID 3352 wrote to memory of 5228	3352	msedge.exe	99
PID 3352 wrote to memory of 5228	3352	msedge.exe	99
PID 3352 wrote to memory of 5840	3352	msedge.exe	100
PID 3352 wrote to memory of 5840	3352	msedge.exe	100
PID 3352 wrote to memory of 2168	3352	msedge.exe	102
PID 3352 wrote to memory of 4388	3352	msedge.exe	106
PID 3352 wrote to memory of 2276	3352	msedge.exe	107
PID 3352 wrote to memory of 5472	3352	msedge.exe	108
PID 3352 wrote to memory of 3160	3352	msedge.exe	109
PID 3352 wrote to memory of 3160	3352	msedge.exe	109
PID 3352 wrote to memory of 1140	3352	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\pendencia\chat\index.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ff9f1ddc188,0x7ff9f1ddc194,0x7ff9f1ddc1a0
  2⤵
  PID:124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,1591807895850906801,8567056345624291396,262144 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:2
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,13808086171544077191,9908827562158898492,524288 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,18332092922501950528,14784761650039838138,524288 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=3116 /prefetch:13
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,225735589266853679,14873518874287570954,2097152 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3648,i,1947572373940842655,17192212780685102741,2097152 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,8877042202002049531,7274050054084723805,2097152 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:9
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4352,i,8307292257821853853,3433155134268092947,2097152 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:1
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,10935078062306402616,3499897073736089773,524288 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
  2⤵
  PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,17303524874014548867,4977541118653260407,524288 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,9821670439746283941,4560017730235438355,524288 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,9821670439746283941,4560017730235438355,524288 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,4250877911404365721,10016436346688780402,524288 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:14
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,6478076769028455094,9252462121761816224,524288 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:14
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,2078188760400730839,12710905102219411149,524288 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:14
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5612,i,14095311678509615167,1615123026133373903,524288 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:14
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6420,i,6917496536823430846,7426479280199801103,262144 --field-trial-handle=2572,i,9295570650700215854,4501422977702215459,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1140

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1864

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4336

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

40229645-6186-4b81-b605-0e1c1cf98af7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\40229645-6186-4b81-b605-0e1c1cf98af7.tmp
Size 37KB
SHA256 c5047b6e6c6c6c90e9fe43f3922ddad479a8172b4831ca718a10c5a2dc902c8b
MD5 ebad9b5b7892e2038675cf11ffe9181a
SHA1 0fb9aea56621a52a0e32a6f57debd8f9f4bd2bfd
SHA512 a17403decfbf617e0402e11f66f7a9a683d1f3438a5ef3e411f89cbabe42e4963746208203d13a6422bed3ecc25fcd57d90422d22ee7211eddfcd8b620712e9a
SSDEEP 768:z/UxvxjgC+k3wgfybNbFkmtxOeRFZD1fTos7Rzd/+Pu:GZj3+k3wkFY1fT/RpKu
TLSH
T13B03CF3AF8D46D338CF6E244720A764BBFF415B395C91A9809ED2F0E158BB9C130785A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

54c19415-8f22-42a5-a913-73a9e8d14d1f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\54c19415-8f22-42a5-a913-73a9e8d14d1f.tmp
Size 33KB
SHA256 451f73ded76a1e21eeb5e588b7f7ba11e08fe44a7435dfdb9d63c00d3ae24162
MD5 eef455e7fee1c555bb58131747a88c37
SHA1 4b6dd6512791046ea2450482ab068c068175b9a2
SHA512 1eaeaea6550ee1e7f42e312bb246527ebbcdd9f44d50fcbff3eb9e47ae49e37c4da62188cdf9dcb06194df404be506cb4ec01a3caa7a2d4b56673f466ee3ba0f
SSDEEP 768:xo3Nrf9ybNbFkmtCqOeRFZD1fTos7RjQ4YGHKy:xo3lFHY1fT/Rk4YUKy
TLSH
T1B9F2BF36F8A49D734CF5F285B1467A47BFF451938ACD198855DC6F0E08CBBAA130782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e082113-0d1e-457d-8f66-bdfb935deae1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5e082113-0d1e-457d-8f66-bdfb935deae1.tmp
Size 36KB
SHA256 8ad4803d07afb26ac51548b29a5f7a1324bbb4507bceb4edf6179d6ffd149ecf
MD5 cd6d722e778de10bc3b443f74315cd6f
SHA1 bd9a664706d973ead13e01fd670242f02ea5f89c
SHA512 59ca6a2506e2f38340d7e42d50d8b076b321685d97c990db73ad9dfbc35cc8b39db7c56de2eb7c6e53865e22903e170461c002e02e470a756948b09f7850a6ed
SSDEEP 768:2FQN3CwgFrf9ybNbFkmtCWOeRFZD1fTos7RjQ4YGHKy:9N3cFzY1fT/Rk4YUKy
TLSH
T13EF2AE37B8D48E779CF9E685F60A3607AEF051A3C9C9559492DC6E0E0487AED1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f993c19-c110-4b01-87c6-ef0d01303ccc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6f993c19-c110-4b01-87c6-ef0d01303ccc.tmp
Size 38KB
SHA256 6014e6956c623f49cc1933cd8522ce839976de644fe6cb86c5e51a71de1b2fe5
MD5 4413d59f9aa181b8a2e8dee863db76de
SHA1 debcf306f0ad1c5209a7fd12feb34c60ae6c3261
SHA512 77c99d74be5464b7e71ec7e6da5eb93452b16b317c3c61e811e07f97eefaee88e8fc756e6f7fb67f115c95c85bf959163791fa6100a7f2e9c50815b0744b12cd
SSDEEP 768:d/UxvxjgC+R3NrD9ybNbFkmtCVOeRFZD1fTos7RjQAX:AZj3+R3lR6Y1fT/RkAX
TLSH
T11703C03AB8A4AD234CF2F250B24A7647FFF0556389C9199805ED5F0E09CBBED1347816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

1273cf03-5109-47d4-ae82-a943ed5900a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1273cf03-5109-47d4-ae82-a943ed5900a0.tmp
Size 23KB
SHA256 21ab3115fc2942afe2297bda16c49385f409621d3743cca10b81c237849f7fce
MD5 a237ba1331829ae14b0a22b76f94bbba
SHA1 d526b20bcfaeba1e9013b697fb74acbaaa0d53e8
SHA512 b3fd5cfaef8e729ffbf2a5afc8fff959e3f22b2c100b5ebe28213506076fd75796b261e70da0b9efb71f69d3fbbda6b93a31ae99abf6e9ff55239f76cacf9adc
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R9LroTyk:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0V9
TLSH
T1A4B2DA2B640CC77E4F804AADAC1A6F977E5802C796988D4047FE994C03C77EBA11A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e5020ec-0af2-45ed-8744-459467921892.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2e5020ec-0af2-45ed-8744-459467921892.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

439f70a9-e02d-49e9-9782-2515c7114723.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\439f70a9-e02d-49e9-9782-2515c7114723.tmp
Size 11KB
SHA256 85aeadfba799b1ff7d9c76976cadf0a4436d1712fed9c9347abbe3a208697be8
MD5 27471d5269114e094aeac3ec8f2b00ad
SHA1 75d0e241ec5719bc21d5b5f0103118314d2794c8
SHA512 3570e24343b963f00a019a33373c73f08429fb78eda0e38e284d315c3b9e4d72bec49f69ae1a45d40189804acc5fb1c9f328a9dde3752a148bf325972f8c321e
SSDEEP 192:sxRNRIbj/fxsOK7xNfzoA8p44/g6+WNIYDF1GSIgIJ:sxRN4j/fxsO6qB/5Igs
TLSH
T17232A715AE28A97B8CD7E21DBB65BF53D6F9503260D41E48A6FC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 12f821c76b1c7127fa296ec2ca7777b60994ffcc85f734b65328d818f837a788
MD5 298056496c3561416f8d67e626ac4b4b
SHA1 8bd99af768bde9591b94c39e65e41e85e88878f5
SHA512 470d30642c057010f9074e2a1449696a7af8f6316e5518796e507a808f8c6313de57644cc91c77788eb51aa78e7962f00442f5ab4b0954f3063770e75014e6b3
TLSH
T13A51B483E891C595EBA4823593F1A8CFB730B87EA9831D4208B4E3BE4BE7390C15407C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 e5f50eced5810099c6a0c4674e7a07ce59bcf3e6ee604701fd8389ddbea2ebb3
MD5 654ba3d174b0a68af5548fc7b70cecba
SHA1 6f2b9f12e3dad7e1a3e6e61b7ec70bbd31cb1c4e
SHA512 eb2899bc284fd58ad3cb89f73f62dcb24b596d40334d6e4446e75f889158d7b252565aec1d7941324129c8f9fca62a25c631a409fdb7f5ec2006e58a75bd64ee
TLSH
T1AE51A543E980C594E7A4823193F1A4CFB730B97EA9831D4208B8E3BE5BE7750C15407C
MD5 SHA1 SHA512 TLSH

Submit Download

bf75e37c-2f5c-4302-a571-5074dea45189.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\bf75e37c-2f5c-4302-a571-5074dea45189.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

5105ab2d-5de3-43d2-a355-b93735b9b8f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5105ab2d-5de3-43d2-a355-b93735b9b8f1.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

67fe1d6b-011e-4079-8d06-0c9833742352.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\67fe1d6b-011e-4079-8d06-0c9833742352.tmp
Size 2KB
SHA256 4447c62e5153729fa0f0e77f29b482119b3cf0538bfde9a26770f3132f273187
MD5 19172aebaff8122c09f1a3b88a270952
SHA1 b0b79ad63dc201995e5b04cf71e98b71a8f5e57e
SHA512 b4a43dfc2392193a44b60d06f1923e8b87c7b36b1bc25009ab04bdc0f01d6a9cfb2ae0aa5d9d6377ca5de3f7520732ad436be5176449eea249349b660d8decdc
TLSH
T1B951A0F7C3E8867D891156F4AB246E1BCE1D0956832C3C5EC8E4AE1BA3F24B1D24159F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

dafa9981-5391-45b1-ad5e-7ae7378d6aab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dafa9981-5391-45b1-ad5e-7ae7378d6aab.tmp
Size 11KB
SHA256 e561d60bee0792ef5cc5601ce339c48f0d52055ff2469c429ae532c76c2e8c43
MD5 4d320832c658f65266c81dff4a827e26
SHA1 ec034132113f8ba89560a465e3adf62a7c329c15
SHA512 f14a863b1857ba2436dd65d4a6f2c277da7c7b01b0e850b2662b1743b2b5ba46b6ea05a05375540a22ba3482408bade51440d47ea1484e97924b4f2ec0ab0201
SSDEEP 192:sxReRIbj/fxs+7K7xNfzoA8p44/g6+WNIYDF1GSIgDFNJ:sxRe4j/fxs+76qB/5Ig5X
TLSH
T1AD32B715AE28A97B8CDBE21DBF55BF53D6F95032A0D41E48A6FC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e80e288d-1b16-42e9-b5f5-4f324e86044c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e80e288d-1b16-42e9-b5f5-4f324e86044c.tmp
Size 11KB
SHA256 2797715d9d1f6c207f1f0b1bd595f248e18b60c21474fa97fe4925540d5eb549
MD5 ada3d229cd9bdadc53a58c9e16c31827
SHA1 5e39c7767ce0851be1c90b31d75616ec2ccc5344
SHA512 625b303fa88239a0b4e5912de3ef66abcd90ce1a62b2afe8b35e269a9c3e20624cb29f5fc6fb4c65c8529dda135d0604a1791383678c1ef59695c901ab125528
SSDEEP 192:sxReRIbj/fxs+tK7xNfzoA8p44/g6+WNIYDi1GSIgDFjJ:sxRe4j/fxs+t6qB/5IT5V
TLSH
T16232C715AE28A97B9CCBE21DBB55BF13D6F9503260D51E48A6FC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d2a262a7-acc3-4f09-a1d2-d9f850c78fb7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d2a262a7-acc3-4f09-a1d2-d9f850c78fb7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d50e7248-5a91-4601-a538-9cf0fae01fc8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d50e7248-5a91-4601-a538-9cf0fae01fc8.tmp
Size 33KB
SHA256 4afa33778439b163a43adc4787ab12a881301a39979608b04a9c4a3808c96344
MD5 43c747e708b1fd3ab83b8a8289e873ac
SHA1 3c523187a2d672c66e3d62bdaa1796d958de7a0f
SHA512 119a3be39b989426af0043dfbbfe58e520dae45fd9f83391a19440f0e57e6f9c276e6e99f56507323ce329676c1729f0ddc2d2c4ab54085a9d15352d33638821
SSDEEP 768:Wo3irf9ybNbFkmtCqOeRFZD1fTos7RjQ4YGHKy:Wo3iFHY1fT/Rk4YUKy
TLSH
T1DBF2AE36F8A49D734CF5F285B5067A47BFF491538ACD198855DC6F0E08CBBAA130782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc15327e-933f-4fff-8807-46861e0d4a1f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bc15327e-933f-4fff-8807-46861e0d4a1f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download