06440c1797d1f7605d41c4a6a24c03d5375210a94b3e5a12b0dcb648d880b2dc

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/10/2026, 20:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/content/index.html
Size 5KB
Sample261007-y589vset2w
SHA256 06440c1797d1f7605d41c4a6a24c03d5375210a94b3e5a12b0dcb648d880b2dc
MD5 5fc430d79bede246bf86405508911ed8
SHA1 a83a086b67910efe1b33cd1c50ea9d6110275b0f
SHA512 98de9eede484044ec1ad005a0d65bce7fbee2d810f419ae5604949cc3db84729aed0920f10d583ac3cb91a232402341104a2f920b7aec0489ec06b610028fa7b
SSDEEP 96:aI2Z7kD0wOp3Pt0DLxbxn90L+4pLlVHEgqBda8jscmhN9:Ak0JJ+Zbd9F4vZEgyaKmhN9
TLSH
T191B1B723F5F017B60D11C06DAED03795AEAE516FA7640685BC9F831C9F02E9580AF39E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3016	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{FCADF0E1-49E0-402D-B1D6-A411077B1A78}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3984	msedge.exe
3984	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe
1568	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1568 wrote to memory of 2436	1568	msedge.exe	89
PID 1568 wrote to memory of 1356	1568	msedge.exe	90
PID 1568 wrote to memory of 3016	1568	msedge.exe	91
PID 1568 wrote to memory of 1356	1568	msedge.exe	90
PID 1568 wrote to memory of 1356	1568	msedge.exe	90
PID 1568 wrote to memory of 4148	1568	msedge.exe	93
PID 1568 wrote to memory of 4148	1568	msedge.exe	93
PID 1568 wrote to memory of 1736	1568	msedge.exe	94
PID 1568 wrote to memory of 1844	1568	msedge.exe	95
PID 1568 wrote to memory of 1736	1568	msedge.exe	94
PID 1568 wrote to memory of 1736	1568	msedge.exe	94
PID 1568 wrote to memory of 1844	1568	msedge.exe	95
PID 1568 wrote to memory of 1844	1568	msedge.exe	95
PID 1568 wrote to memory of 5916	1568	msedge.exe	96
PID 1568 wrote to memory of 5916	1568	msedge.exe	96
PID 1568 wrote to memory of 5916	1568	msedge.exe	96
PID 1568 wrote to memory of 4620	1568	msedge.exe	97
PID 1568 wrote to memory of 4620	1568	msedge.exe	97
PID 1568 wrote to memory of 4620	1568	msedge.exe	97
PID 1568 wrote to memory of 2968	1568	msedge.exe	99
PID 1568 wrote to memory of 2672	1568	msedge.exe	100
PID 1568 wrote to memory of 2968	1568	msedge.exe	99
PID 1568 wrote to memory of 2672	1568	msedge.exe	100
PID 1568 wrote to memory of 4940	1568	msedge.exe	102
PID 1568 wrote to memory of 4780	1568	msedge.exe	106
PID 1568 wrote to memory of 3516	1568	msedge.exe	107
PID 1568 wrote to memory of 1492	1568	msedge.exe	108
PID 1568 wrote to memory of 4844	1568	msedge.exe	109
PID 1568 wrote to memory of 4844	1568	msedge.exe	109
PID 1568 wrote to memory of 3984	1568	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\resources\content\index.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffb48c3c188,0x7ffb48c3c194,0x7ffb48c3c1a0
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,8566179655042670333,16913037213050842878,262144 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:2
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,5212386527277795220,17546974294093822534,524288 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2372,i,1958874220629271976,8625810438252221229,524288 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=3180 /prefetch:13
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,13349929630380046591,1683941426425597816,2097152 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,14301163349538380460,3065133774817444202,2097152 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,9114262543955891187,4759920300905377261,2097152 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,13796241785776164309,3335254663077893168,2097152 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:9
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,630013572735934453,11563456360480250476,524288 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,11466610803048220555,14943356431357465766,524288 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:14
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,12918325951075388684,15047568735833652172,524288 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,12918325951075388684,15047568735833652172,524288 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,11785248760572512415,12168069472707586852,524288 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,69614711931999125,2159883433447723097,524288 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:14
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,18233577347943456239,613284603210858782,524288 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:14
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,14440134237660595594,6227669444829496860,524288 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5040,i,1024181710420150206,10930600733254356689,262144 --field-trial-handle=2152,i,11768973776159245743,5263838295715848229,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3984

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3380

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2f8bf51f-30d9-48dd-8786-f799e7a8470c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2f8bf51f-30d9-48dd-8786-f799e7a8470c.tmp
Size 33KB
SHA256 2a25b81e118fa1440302ba591dfd0a65f61fd825b6905f2c9f3056b37818d476
MD5 254cf3b760172bee054b51d7f4d78b5f
SHA1 f6fd3d5c58ffef8fb307742188e897765edc92f3
SHA512 2dfcf9b155fdb87e6e4e2807e7d1d72e62b91811294cf26402fde36fe1adf7aa37c57321d5a77987820373e89f223eb7c2e0242c8f2181663f8c0dae20bf337b
SSDEEP 768:8n3KVOc7fZrKTqp5XSwQs88uBkiT20eykJ+hV:8n3K/tr+EILNBVeyQ+hV
TLSH
T12FF2C075FCE088B3ACB693867A8637026FF49147D8C80A88C5DDB61E018775E674B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce17fffb-ea3f-4adc-b398-db02342e615a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\ce17fffb-ea3f-4adc-b398-db02342e615a.tmp
Size 105KB
SHA256 36138979757d4e71ef05f08e5474db36d940b11e0e5038b1bc41edf6d9480864
MD5 1ffead718e2d4a1c853bdde71605a629
SHA1 bec748fbabd1ff5b25bcc88b57845b8ef801ffa3
SHA512 2d9d536f4d1f11cec455a2c5b7bd5485bf92d28d29a4af0c14a218e58f3db936b6de9aa72bdb015a143ce31a5dcdb74cea83b1d9addd898b44e718cacc158e4e
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P73:fwUQC5VwBIiElEd2K57P73
TLSH
T1F6B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

0a768941-bc06-4174-be11-56457538cc04.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a768941-bc06-4174-be11-56457538cc04.tmp
Size 23KB
SHA256 73f0c75e58b7d9a6df17610bada634173dfc483e87e7a777b3203921bbc40603
MD5 bba447df744d1847db1d4f9bde12913e
SHA1 26e670127dec221cb241456646d66369eaadf51c
SHA512 2657f223af57ce3fd9368dd2d2374aba5470ea8b092601516b102519509fb44c7cdd16a3537d97b7b7ebb044081ef4c87deeb32c761505b1abc23d980932b362
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXuroJeB:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0VX
TLSH
T12CB2C92B740CCB7E4F804A9EAC196FD77D9802CB9A588D4047FE995C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

30fec8db-553f-42e2-ba55-28b1971a2778.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\30fec8db-553f-42e2-ba55-28b1971a2778.tmp
Size 11KB
SHA256 9f1e66f6daa1cb61d745b65f81430e041027a8f6fc26def4c5820e1fc2e75780
MD5 8fb6406eee4d0db41720e2361f87eb8e
SHA1 d17567e671eedc5148b868f336c3d883cbbcb09b
SHA512 d93882fdf1d167fbcdf9225b8a8678e8f20fa53f7fc77c3062968925861d9a641b012bef4721dbfffd840d2d2800e60d9628bbd9ec8f0eff01846fb1bfdfafc2
SSDEEP 192:sxRMRabM/fMsO7HR9wzoA8p4c/g6+WNIYEIX+GliIgDOJ:sxRMSM/fMsEJF/5IyOG
TLSH
T1D132C715AE28A97B8CCBD21DFB557F53D2FD5032A1905E58B6FC8A1C04E76DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 ad1503f2373260e3ef196216967d8d7729e4e4f54996e5b6daf94f956ecfd03c
MD5 472e78673e024274d091e67e1a2c5698
SHA1 2974b2fd932afeb45e1787df28f1ad53944b7cd4
SHA512 af76a59b8cfc7b5af68b318596d0a4f06b915cb9ce6fdbe26af3552b20d05096ae49aa684059de1f149ad0bffd229d95b0e6c4b5d02492ec232b63057f87da7d
TLSH
T1193151CAD594042AF3944971C7D8DFCB36B374BBA1838D8303A4C6BE63A63984044878
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 22dd8f5492f129bd5fbe01fb2123d59f539a4dfb142858f3c1bbb2170eca8b29
MD5 2a8daa32114f9350328c0ad434dfeba4
SHA1 c13d3318f774081d1253490780d8bb66dd4d85cd
SHA512 a7d4793e2a544b3bce80018bf2421d5c85d3d33c082d90325b0221d025a335eb74800f48393782a50e773efdfb4ffc337fa7a31d99955b1ab542e3c32953f629
TLSH
T1D33151CAD594042AF3944971CBD8DF8B36B374BBA1834D8303A4C6BE63B63984040878
MD5 SHA1 SHA512 TLSH

Submit Download

766d4928-73f4-4689-998f-4df8cb3fafc8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\766d4928-73f4-4689-998f-4df8cb3fafc8.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

6ea12f9a-e5ca-4be7-a950-2ca5e4b4e7ca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6ea12f9a-e5ca-4be7-a950-2ca5e4b4e7ca.tmp
Size 2KB
SHA256 b202882f2fa69e04612c47040ad02e742fb31fd631b43a91144a70b888a2cf27
MD5 59c973f1e78d7be9e638505ba2c68829
SHA1 a1a85dc03e08a5b973b47fea0eec023d3e7c9e78
SHA512 e8b1b137818c3a7a3228af2413af8f680f68d1cd87e36e0c5a02044d9830acbe5066988db407d863f3bcaac85e7ea84edac96e0e989d8b9eb5733cd6233b4124
TLSH
T1AA41A0F3C3E8867DC90156F4AB186E2BCE2D0955432C7C5AC8E4AE1B93E24B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

89318caa-65b9-42a5-be26-63b5797320a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\89318caa-65b9-42a5-be26-63b5797320a8.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 630770c6eceb59eb477f223863a0abc022886888138dc8d726a5a13a6a376f11
MD5 ad1ab731defd6952be91c35157f01c52
SHA1 9d9609c86d68ba71649ad8c6396f7254e9f899a8
SHA512 5ab70f9dc1baaa747f322b818c8f00412c2b1b58604c88bd745654e3d26a929f126a43238db7c4f453e93d3a395f8bd61737773f211591df956929400a5f751f
SSDEEP 48:KYbIVKYkYfy1FIlKWIIC0InKhukLylJI9Kawgd:KYbGKYkKGFWKWIl0gKhu6eJKKawe
TLSH
T180B1D15130BE124038BE650A80B4872A518132F3715AEA3B7F7D51F64B6BE186EBDCD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

dc7e85ae-7537-4eea-aaff-118e7d302883.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dc7e85ae-7537-4eea-aaff-118e7d302883.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

e46bb306-7cd5-4975-bdea-dcddaef25b9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e46bb306-7cd5-4975-bdea-dcddaef25b9d.tmp
Size 11KB
SHA256 ac1515a4c92a630917bcb32de29f53aa7091248257b67ee9ba70cd2d4152505a
MD5 47d52cf7e3d333d5435330ab27c16d8a
SHA1 c12041eb04eaf4df608c768b16690b31924838c8
SHA512 d525eea54017aeb085dc67ca33227932673651a0e9409d53e8648493dc8332c5aa8f98d3ba8457680ffb15e4b960e5c59f5eb83f9671687247d0d5895983e4bc
SSDEEP 192:sxRMRabM/fMsOLHR9wzoA8p4c/g6+WNIYEeX+GliIgDUJ:sxRMSM/fMsAJF/5IAOU
TLSH
T16E42B715AD28A97B9CCBE20DFB557F53D2FD5032A0915E58B6FC8A1C04E76DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ec7d6474-aa3a-45ac-bf32-622d27b9d2c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ec7d6474-aa3a-45ac-bf32-622d27b9d2c8.tmp
Size 11KB
SHA256 53acd1ea40e52bd1ec791fcecf948dae3fb17a2501efc0a6d89f597452ada8ba
MD5 83759b727a2c3f9b09acd02b07461e2e
SHA1 cfe96393f997ecd813f1798b989ee94bd1b3e2dc
SHA512 5d4a4f8282d89d0b4b547cc43fd6c0453981e129da35e8bd6f4034985f3a08043f005c2eacc0a8dff43485ec7b6f554b734941d6b62cd36943836ac57cc767f6
SSDEEP 192:sxRrRabM/fMs67HR9wzoA8p4c/g6+WNIYEIX+GliIgIJ:sxRrSM/fMsIJF/5IyOs
TLSH
T11C32B815AD28A97B8CCBD20DFB657F53D2FD5032A0905E58B6FC8A1C04E76DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f8bde3c0-7e49-4d41-b049-3dd72ae500e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f8bde3c0-7e49-4d41-b049-3dd72ae500e1.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

bf8df936-f528-4756-92d3-329955c5b432.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\bf8df936-f528-4756-92d3-329955c5b432.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd4eb12a-7c23-4ef1-a725-ff8bb8111cde.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bd4eb12a-7c23-4ef1-a725-ff8bb8111cde.tmp
Size 40KB
SHA256 632c32512e3034e80cf6b3fa15282cb7cd14327b4f6d45497e0dc4301cd35cb6
MD5 dbdf9b68477ad6c63b7066de37494e6d
SHA1 52116a7f54376e3fffafa2665cce696406775167
SHA512 767c3860f606f351aa07b3ec6808dc1c3f17cdee83ae81759ea3b92ba27591e583d72e0e1140a4c683c7fbd25fab0422b724da9f8a8477686d3740484dadcfae
SSDEEP 768:W/UxvxjgC+m3rFOc7fZrKTqp5XSwQs88uBkiT20eykJ+kA:LZj3+m3rvtr+EILNBVeyQ+kA
TLSH
T19303D03AFCD49C63ACB2D381368B2347AFF45157D4C40A984AED6A1E02C779D634B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bed1a6ea-522a-4dfe-afad-efbcec4e8220.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bed1a6ea-522a-4dfe-afad-efbcec4e8220.tmp
Size 36KB
SHA256 102f2c686ee38bef52d7b48ef0dfa4ef3ef7b4dde320fd21a2ede9ba570e6482
MD5 a31785b93e1fe86b0ed78c978bf127d0
SHA1 74e7fbd2055d2c90045ec4879ce5dd7307edd396
SHA512 c4e8e54b57777a7d93424cb33a364f9702a523cc7e0cb12d6442c944c257b1ae7c13051817731499448f4f3ad6a8934281e9e0d10ea439964ae244eba18d0d37
SSDEEP 768:UFQe3LwgOVOc7fZrKTB1p5XSwQs88uBkiT20eykJ+hV:3e3c/tr+B7ILNBVeyQ+hV
TLSH
T1B7F2CF73ECD0C9B7BCB68781BA8A33025FF49157C8C40694D6DDA91D018779D134BCA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db7e9647-b5db-4a7f-93d0-e6fe63912100.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\db7e9647-b5db-4a7f-93d0-e6fe63912100.tmp
Size 33KB
SHA256 fc6193df557a9be0928b5b6903c4c1672a651df688d192a4ae218dad9cba9e7c
MD5 fce419d5b18c4ac53cc9ef2786fc26cf
SHA1 ba29779dc655bfcc93e00dcffdbb8727412dae8e
SHA512 6b8b5226b17a6a8924dd8e48370d644f2eb9603d47f00ddbbf468f4d3f9c0bfb9c4c9213018f4997d21e5b8418e7419036c84f11a1efcd34a2e782247c21ae4a
SSDEEP 768:un31VOc7fZrKTqp5XSwQs88uBkiT20eykJ+hV:un31/tr+EILNBVeyQ+hV
TLSH
T1ADF2C075FCE088B3ACB693857A8737026FF49147D8C80688C5DDB61E018775E674B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77b8b576-5b3e-4ab8-bde3-55562255de56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\77b8b576-5b3e-4ab8-bde3-55562255de56.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f6bd2f8a-33a9-418f-8735-3680c8a303df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f6bd2f8a-33a9-418f-8735-3680c8a303df.tmp
Size 37KB
SHA256 04d6ea528731c0adae463193e0cc162b9fb28a08cc7f421b9b3e1d33dabaf82c
MD5 ac76c2182e23a1fd862d8cf98b4d08f7
SHA1 25f457ab74f94247df581c76ba17fb386b9ea7ed
SHA512 abdd4ae35edeae5d8479c89ae8afa8789b9c60571a9649081bda14d1466d204239a1eaf31bb8b1848926319394dd44750ba55e0314c94c8c6b4a571be108aa3c
SSDEEP 768:R/UxvxjgC+W3cB/c7fZrKTRp5XSwQs88uBkiTCQ/P84g:kZj3+W3c+tr+/ILNBtHg
TLSH
T13703D039F8946863ECB79385365B274BAFF06153C4C41BA849EE7A0E028B35D6707897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download