95a38b603d3f06d72694b532ad3d7881fc2fa873bc8d7ad8806545535492b624

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 15:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261009-758-f9n0jp.html
Size 36KB
Sample261009-sdrylsyshv
SHA256 95a38b603d3f06d72694b532ad3d7881fc2fa873bc8d7ad8806545535492b624
MD5 6ee1811e24366ed20959894b8d115d1b
SHA1 7abbd137a091191d9e65555d3a06dcb3b289139b
SHA512 826f285022e337b4d384ac4b6dc44588798f26d3f813141daaa7fa2e0459032cd90460fe71ccb826c50a496a8cf05cdc82c1336a93275f36dbe43b36fb4c3b63
SSDEEP 768:yu8ev549mBd4kY2m7chhYHNy/kYFGD6xg5rSK2Gd:yzM49mBd4D2m7chhYHNy/DFGD6xg8K2c
TLSH
T10EF2B87184283C3A163FE4D6B2B51F162162824ED6412C9B9DFD728C8ADCEF2117B763
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5320	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2304238888-3968896904-642854331-1000\{DF585706-FA46-4AF6-884F-68FF2CE1CE6E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4948	msedge.exe
4948	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5488 wrote to memory of 5144	5488	msedge.exe	89
PID 5488 wrote to memory of 5320	5488	msedge.exe	90
PID 5488 wrote to memory of 2004	5488	msedge.exe	91
PID 5488 wrote to memory of 2004	5488	msedge.exe	91
PID 5488 wrote to memory of 2004	5488	msedge.exe	91
PID 5488 wrote to memory of 3320	5488	msedge.exe	92
PID 5488 wrote to memory of 3320	5488	msedge.exe	92
PID 5488 wrote to memory of 2400	5488	msedge.exe	94
PID 5488 wrote to memory of 2400	5488	msedge.exe	94
PID 5488 wrote to memory of 2400	5488	msedge.exe	94
PID 5488 wrote to memory of 6016	5488	msedge.exe	95
PID 5488 wrote to memory of 6016	5488	msedge.exe	95
PID 5488 wrote to memory of 6016	5488	msedge.exe	95
PID 5488 wrote to memory of 6136	5488	msedge.exe	96
PID 5488 wrote to memory of 6136	5488	msedge.exe	96
PID 5488 wrote to memory of 6136	5488	msedge.exe	96
PID 5488 wrote to memory of 5800	5488	msedge.exe	97
PID 5488 wrote to memory of 5800	5488	msedge.exe	97
PID 5488 wrote to memory of 5800	5488	msedge.exe	97
PID 5488 wrote to memory of 1096	5488	msedge.exe	99
PID 5488 wrote to memory of 1096	5488	msedge.exe	99
PID 5488 wrote to memory of 5660	5488	msedge.exe	100
PID 5488 wrote to memory of 5660	5488	msedge.exe	100
PID 5488 wrote to memory of 5040	5488	msedge.exe	102
PID 5488 wrote to memory of 5412	5488	msedge.exe	106
PID 5488 wrote to memory of 4280	5488	msedge.exe	107
PID 5488 wrote to memory of 3804	5488	msedge.exe	108
PID 5488 wrote to memory of 3160	5488	msedge.exe	109
PID 5488 wrote to memory of 3160	5488	msedge.exe	109
PID 5488 wrote to memory of 4400	5488	msedge.exe	111
PID 5488 wrote to memory of 4400	5488	msedge.exe	111
PID 5488 wrote to memory of 4948	5488	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261009-758-f9n0jp.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7fff1659c188,0x7fff1659c194,0x7fff1659c1a0
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,9520363455946059658,18251235092885572918,524288 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1520,i,8781067891395140898,17848120106672655373,262144 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:2
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,14239472746595000883,16540334863807034913,524288 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:13
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3616,i,2972510795065787153,8955205348238770380,2097152 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3676,i,17394687739323310765,18217695561666358139,2097152 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:1
  2⤵
  PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4356,i,13268316783163586347,6612603221178256681,2097152 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:1
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4396,i,15229859541456596957,7598617247575063544,2097152 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:9
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,8633026216878686034,2101516577481559157,524288 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,12533205379498980136,13044137042427782580,524288 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,8004201626344777034,18317526981988297484,524288 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,8004201626344777034,18317526981988297484,524288 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4584,i,792971452796838208,9587038664318069045,524288 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:14
  2⤵
  PID:5412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4704,i,11439401356177381973,8848587872758527985,524288 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,8911664500068449796,14510926234225955685,524288 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,4475260726228851744,10125535041547645887,524288 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:14
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,3276613992703215815,1213846491829397037,524288 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:14
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4568,i,11053353376363281082,14505525280680231110,262144 --field-trial-handle=2548,i,2386277036970386679,8611024098535143907,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4948

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5948

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4812

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1d1a523f-bdea-4189-b921-c505ba12e2d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1d1a523f-bdea-4189-b921-c505ba12e2d4.tmp
Size 34KB
SHA256 06625d2f886bc61449c1c41f6119256ecba4e12c205ff2950704fb5776caa1df
MD5 26ffddee99d0c9fecaf83d610a20decf
SHA1 fdb177f623de807a6f995c2880cf77d2583a8758
SHA512 29968fa03593f6f2cd711fd09b09713337c4a9537d82c9aa6454b5beb82ec679359dfe5b510043b5174d656809764e2a88eacc31db124a135b85b15644ced63e
SSDEEP 384:jZcI138NLe2SXY7IBtlM0UudnfLKXOVXbt8XrXl73MBabY7Ba8S5x2YkmuP3kGg/:713+SX1JSO5GDl7MIYNa8S5oYklnA+NM
TLSH
T127F2BF35ADA4EA639CEA93C5B14A7742AEF55123E1C95ED8D9DC1B0E01C76EF1303821
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 84d025c8484a1ba1eae075fe4fb60ee1013d5e3c0fe4757f9d23c77a5ecf4bff
MD5 40a03f8f45ceb83458e7ff6718e8114c
SHA1 3aee2deed85e7e1b8a1a9090347606288ce5f90c
SHA512 011f7c1ff606c9271e176c099ac19361c51f6a3eb7ee8dae4e0bead781595a3fa38a006247688a203ba11818d1de1b9066033932d5d22ba79d5a19f921cf6159
TLSH
T164D02B316CDD4D23C08CA27C0056004117617400FE10404011211048080824142823AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 72a43fbaed1cd4a89462ff759b5bb2f6f6d1a7a9c08002937c809c101fc685e4
MD5 b04c9bc22d86d65999036cf784bd7a42
SHA1 74f3b96e34181e491a9fd238877d82f72fce321d
SHA512 9bbf9224f5546df81a26e79932518e2c3bea2fc0e37127e4af1f02d1a5543680b5d9370365c28b8bb5427b3bb4f27eb12737d158490216ff77859483f95a6b00
TLSH
T189D02B316CED4C23C08CA27C0057004117517400EA1040401221504808082414281399
MD5 SHA1 SHA512 TLSH

Submit Download

2449497c-cb65-470f-a6f4-dc123dd7a27e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2449497c-cb65-470f-a6f4-dc123dd7a27e.tmp
Size 10KB
SHA256 3014ed0b608356573c82a934074dc5cc03c9451c167a02aa270d1dd3dc327bb7
MD5 e7488645a86743a9faf0cd5717cbc70e
SHA1 a002ec1a6af54d0d37533df474de6dcce99b6935
SHA512 31b7e1c3aeef98a8ca7703bfb16ea21a148e3c9ce8879f857a93a8bd15bff22555888895706db1c0ed0bf7803d1b80f85a9cac01b8a270e224c88655798e2b67
SSDEEP 192:sxRvRrbT/frsvCzoA8p4k/g6+WNIYuei5GJIgDzJ:sxRvhT/frsvP5/5IoJ
TLSH
T1FA329615AE28A93B8CCBD25DFB56BF53E2F91032A1911F58B6FC9A1C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

454babac-1841-4a70-8c24-b0143ed49406.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\454babac-1841-4a70-8c24-b0143ed49406.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9975cfdf-a9ba-4325-80c1-81aa38767ae9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9975cfdf-a9ba-4325-80c1-81aa38767ae9.tmp
Size 23KB
SHA256 a1339e097f0de83cfe637cb012897b465d2e466687ea3948297f8dbbfeedff21
MD5 efb007affa1b22bc7f97d3cd2920330c
SHA1 1e5e10bfb050328c258ee9412f5da225e89a6870
SHA512 71a9c1639b04948b24eb2fc2982a34d29c9f5b53b0737e4ff75bfe64185ddade7c4300d47c2d5f173066f1b04c4bf3ef702f0d4505d5e70466d3ca7951d8fb59
SSDEEP 384:/7fnhUVfCtg6UFfCwKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXb9kMR66rocbJ:/jnhUJWg6cfCw8F1+UoAYDCx9Tuqh0VG
TLSH
T13BB2DA2B644CCB7E9FC00AAD9C196F976D9802C796988D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d5a1e94185214f5240753aaae94cc69100478178f430b92449350d2c19c931fa
MD5 1c392c1a7ea16dd2a13cc3702116e70f
SHA1 7513255ba1f2d5027e24650ae18ea613669e2da0
SHA512 c4ce97896f6d89d9a789a5b39a829aa70f05f59f086a74322728a34e008f3478146a7eb9108c7abfb6d367dd884e5df475f8dec0196344a5b5117f584bfa4cda
TLSH
T119E086E815CFC62EE20A74C74178EB4DC790369FD7C4A98E1704C984F54B958B6DABA0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 00937e5de96b7fd0502d2139bc21b99ba21e6f675a2e05a078c3c63556bfb6c2
MD5 e6a212b8972d0f0d5d7e2d33b037814d
SHA1 c9ea6eaf19696b298888437c60a1ad6f7679248f
SHA512 c2a1f89af754a6ae17b03e16a7737e021f08df07942a47c569b6010a8d437236c5456bab433f2b674d47cad7ddd4d0dff348bdd4b57d083c0a8dbff773716e2d
TLSH
T133516E8C116087B6F7984075ACD04DC73B3489F994BF1E4A33B8D0BA6E46F5E82D3168
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 ce2d3588be3dfd32a3178375db1ce4123319523ed8808c8c4574fc35b17f47cd
MD5 7a967c15f919cd88de07de8e3e580926
SHA1 da9c136bed8e4211285d9434e04672bb03526065
SHA512 07ef42eb0d84a245568a87df5a662267957b87154e72676e329585af8e5b647a79cdf764093728016dda6066abb9300727ab13b9fdc6e13d7ab2717d17cd7d4b
TLSH
T1F9516D8D116087B6F7980074ACD04DC73B3488F9A4BF1E5A33B8D0BA6E46F5E82D3068
MD5 SHA1 SHA512 TLSH

Submit Download

e90eb6f2-70ce-4e08-a73b-4dd509858bb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e90eb6f2-70ce-4e08-a73b-4dd509858bb1.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

7bb6b138-41da-4e09-aee2-43a491fee3d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7bb6b138-41da-4e09-aee2-43a491fee3d4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

bf2695e7-860a-48c7-8376-cf00345462a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bf2695e7-860a-48c7-8376-cf00345462a6.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

ff3a16f7-ecf5-4ff9-b745-a38f642a7e90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ff3a16f7-ecf5-4ff9-b745-a38f642a7e90.tmp
Size 2KB
SHA256 fd5e681cf1d4612bd9521f738d8b8e35ce0adedddf860d415f0efc58cc8bc1a4
MD5 e062801a9cde3c58ffdc8ec207ed9356
SHA1 4d47e5591716978331bb55c98708643f75bd086e
SHA512 16675b1f552f93eb82563f6c002c7a63310b21f0faefbbe3f887fc9b06753329ad219dc85f93bd00a876ee36809b8d415e416d328595b6396e674618bbea9a08
TLSH
T15E41BFF3C3E8866E8D0156F4AB146E2BCE1D0915432C3C56C9E4AE1B93F34B1D14195F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

d312ac21-a9ce-4c24-814f-ba75cdad4980.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d312ac21-a9ce-4c24-814f-ba75cdad4980.tmp
Size 10KB
SHA256 73575c3bd5edb351b705e381ad9fa2de5b42c006cf2e9ebd50ecbe933f56fdc2
MD5 738d10b6fb07a0945a2c3920ee2b6b0f
SHA1 4eabf2b405ac293021107e63bcda061392287da2
SHA512 945bb3a996d0530d831d464ea541d373c1023bf79e66388fc02fdf011c020b76412a7cc90a1b72de28049f78aa13877396d663e7102effb58782b2a5ea941c8e
SSDEEP 192:sxRYRrbT/frsKCzoA8p4k/g6+WNIYuei5GJIgIJ:sxRYhT/frsKP5/5Ios
TLSH
T1FA22A6156E28A93B8CCBD24DFB66BF53E2F91032A1D11E48B6FC961C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee69291e-b1f9-4254-aa5e-6f2aafbdb6c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ee69291e-b1f9-4254-aa5e-6f2aafbdb6c8.tmp
Size 10KB
SHA256 a3d171b273784d979f6f5e6800a53481c92c5988d702b1fd46a7737da8a6990e
MD5 3ec96c8166d9e076fbc509fcf4921750
SHA1 e16fa458cec301bdbac60c663337c9f114041926
SHA512 c9226acd3f8356be32e1c0d03485c981837a89d507874925d24f5f90a37144fb37096e2b51d75cb74c5c83e023ff02173369cb1482621149c17e227c3686d802
SSDEEP 192:sxRvRrbT/frscCzoA8p4k/g6+WNIYuti5GJIgD1J:sxRvhT/frscP5/5IVj
TLSH
T18732A715AE28A93B8CCBD24DFB56BF53E2F95032A1911F48B6FC961C14E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 18KB
SHA256 d675bad1a758b07f1ed431a7812bf9fd82a0134557a9f1479faf96798a2a9d7c
MD5 f18b79a3435844f3cd10f1b52c52502d
SHA1 686226dff62991217fcaf2118b30364ed5b08220
SHA512 203b436d074f1f469ce6afb478f21e5847cb9adeecc4318aacd5ca131357810be9a8992d7737bd36a754ccc8f35273e30b64a8a51eacd17024779ac32e0ed767
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uP:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbA4
TLSH
T15482751CC52C7E3247C92F7D6A2F9D727ACA30CA7081459D798CC69DC31B06DA58A2BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b1328c9d-4eb9-4135-8de0-5b448b1409c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b1328c9d-4eb9-4135-8de0-5b448b1409c6.tmp
Size 38KB
SHA256 02dd3ab16f61c498a3f5a45d5c083c5dea0a0ee900d193c3b985a98fc98fce90
MD5 3710ffce71fcbbfaff2a9ac358ec9eb3
SHA1 5033b25bb36665bc2ad40e85f842143415dab5e6
SHA512 d70adb6bac6091f37ac1b98fd35b1fd850cda2c2e558cfca23c19bc6c4823f004b617cfe7e0e4d5b951068fbe66e2e1cbb5b27d7159728c5bc70179fb658cd54
SSDEEP 768:do/UxvxjgC+23Uf6SO5G/JMIYNa8S5oYklnAapSH8L4:nZj3+23WWuHTWRdACS04
TLSH
T14103C03AAC94A873CCF663C4760AA357AEF54123D1C569F88AEC1F0E07C72AD5303452
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5ff7f66-d7fd-4144-8a41-a64e2ece8857.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d5ff7f66-d7fd-4144-8a41-a64e2ece8857.tmp
Size 36KB
SHA256 600e69d161053a1dc244028572c1e098048221f2ccee4c4cdaace4be70b6c664
MD5 57d50ca0cef41039451be80c3d08a976
SHA1 e96ce9f6d83659fc88f83a3de612839953b74abc
SHA512 e17c221b0402c29be136c0b0c454efabebed5561c4c75a6d48d7c2e28663b39448296e1d52267a5e8c27a9ebb658f140d7362d8bf5eb8d83b40242c432a1fa61
SSDEEP 768:qFQb3OwgjSX1JSO5GDlLMIYNa8S5oYklnA+NM:Rb3MSHSlTWRdASM
TLSH
T175F2BF329D94DA77ECBA97C5F64A3342AFF14163D5C5AAE8D6DC1A0D01972EE1303C21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dcd05f32-be47-4b8d-ba3e-15db30534a11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dcd05f32-be47-4b8d-ba3e-15db30534a11.tmp
Size 34KB
SHA256 179e5366cdc198e6d5a94f6f956d58972fe3169b7f79f448e873bc2691948b1f
MD5 645ccf3847e4858c407ed75e6e44c297
SHA1 db001365a5c61671d1af8675fc146ddddd8ee513
SHA512 03291bb60d4231e09d6eb4e99de29786b2b024361246d26bed1f220110f4cce73de44a68a02cf45bb9d8218d8a7f9dea05208ca6c2727dabb0b3e0da4923b6c9
SSDEEP 768:5h13vSXKJSO5GDl7MIYNa8S5oYklnA+NM:H13vSESVTWRdASM
TLSH
T1A6F2B035ADA4E9639CEA93C5B14A7743AFF55123E1C96ED8D9DC1A0E01C76EF1303821
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c9760915-7933-46ee-a751-86b39f882470.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c9760915-7933-46ee-a751-86b39f882470.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download