4bc22d34670654d12e0615d98ad1242f5534f748d7750c840634ba7e89e08f06

Analysis

max time kernel
148s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 136KB
Sample261009-w2xesadd94
SHA256 4bc22d34670654d12e0615d98ad1242f5534f748d7750c840634ba7e89e08f06
MD5 b43eebd13eba48bcc500f2ea6bc479f0
SHA1 c0cd81c714d5781d48e3bbea8e30d540934e405b
SHA512 7c9a1c716e74763ad71c2a95aef45b0bd42353c9b3735fe83d98be419e8e8653c3d01ae3251553a62e0218f219c20249b2d7f97178ddb6abb1bebb9bca41595b
SSDEEP 3072:Ahjk5tohpvbQCz+NiIyYL4VUctV7ynCS5C8r:ARaaYs6ctAJx
TLSH
T135D3EA72519A04A65107F02AE8087B4A797CC5BF3F4AC3133A7C2958BFE7950C67E2D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5708	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{2704A603-5A29-4B54-A71F-7ED0D2BAC8B8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1840 wrote to memory of 3656	1840	msedge.exe	88
PID 1840 wrote to memory of 5080	1840	msedge.exe	89
PID 1840 wrote to memory of 5708	1840	msedge.exe	90
PID 1840 wrote to memory of 5080	1840	msedge.exe	89
PID 1840 wrote to memory of 5080	1840	msedge.exe	89
PID 1840 wrote to memory of 5860	1840	msedge.exe	91
PID 1840 wrote to memory of 5860	1840	msedge.exe	91
PID 1840 wrote to memory of 5428	1840	msedge.exe	93
PID 1840 wrote to memory of 992	1840	msedge.exe	94
PID 1840 wrote to memory of 5428	1840	msedge.exe	93
PID 1840 wrote to memory of 5428	1840	msedge.exe	93
PID 1840 wrote to memory of 992	1840	msedge.exe	94
PID 1840 wrote to memory of 992	1840	msedge.exe	94
PID 1840 wrote to memory of 1500	1840	msedge.exe	96
PID 1840 wrote to memory of 4376	1840	msedge.exe	95
PID 1840 wrote to memory of 1500	1840	msedge.exe	96
PID 1840 wrote to memory of 1500	1840	msedge.exe	96
PID 1840 wrote to memory of 4376	1840	msedge.exe	95
PID 1840 wrote to memory of 4376	1840	msedge.exe	95
PID 1840 wrote to memory of 5816	1840	msedge.exe	98
PID 1840 wrote to memory of 5816	1840	msedge.exe	98
PID 1840 wrote to memory of 5824	1840	msedge.exe	99
PID 1840 wrote to memory of 5824	1840	msedge.exe	99
PID 1840 wrote to memory of 1948	1840	msedge.exe	101
PID 1840 wrote to memory of 5292	1840	msedge.exe	105
PID 1840 wrote to memory of 5600	1840	msedge.exe	106
PID 1840 wrote to memory of 1424	1840	msedge.exe	107
PID 1840 wrote to memory of 2556	1840	msedge.exe	108
PID 1840 wrote to memory of 2556	1840	msedge.exe	108
PID 1840 wrote to memory of 4744	1840	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffdcf81c188,0x7ffdcf81c194,0x7ffdcf81c1a0
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,12564011446309039311,6377218817339020075,262144 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,17679518268661053101,6893554457118265717,524288 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,1273547173680153188,15518945895317826192,524288 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:13
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,14999803517581806066,12228086255753951514,2097152 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,5214602173498127888,6446073851415235425,2097152 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=2428,i,6869046041700763437,4082500509423734438,2097152 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4388,i,8340169211656124690,17309086488196527857,2097152 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:9
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,7240521025405335106,17381851526013112643,524288 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:5816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,15002736603469895638,4420108197607594528,524288 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,6253563276967592776,15926610303149868379,524288 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,6253563276967592776,15926610303149868379,524288 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,10938203354848933696,7647156912218888277,524288 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:14
  2⤵
  PID:5292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,4149494835915007318,18223402136950705369,524288 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:14
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,4458892192510473927,15813076206050286736,524288 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:14
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,9023048164508360681,11931196444931768614,524288 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:14
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1780,i,5635595580277874103,15046619300702276751,262144 --field-trial-handle=2288,i,18043185509388600840,2486153114184659722,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4744

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2240

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

30c4617c-02fd-44d5-842a-a230449d13ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\30c4617c-02fd-44d5-842a-a230449d13ce.tmp
Size 40KB
SHA256 496f741767d2a5adb2e9c43093b008bc10d508b9692d7dfa497682a1dad42862
MD5 72d7f4c4f08069ba4100974e6defa3eb
SHA1 2a97db8bab10d47fc2ac4d46739b39eca95a5e31
SHA512 671d5a899d13d33ac2910332b5f1ec8ab7c5ec5aae0751a704d066ce38d5437a6717225916e42d4e569e67d2cf57ab47774e42446792c4e44d261c302637493c
SSDEEP 768:j/UxvxjgC+H3udSgm1Jp0uNDmGA5b65Q92RQMPbz0q:2Zj3+H3DXAF65dQU0q
TLSH
T15703CF32ECA4AE739CBA918036477356AFF84533D1C996A449ED6E0D06877DD430BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a85df67-9eeb-4e0c-9fbc-68e17a57056d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7a85df67-9eeb-4e0c-9fbc-68e17a57056d.tmp
Size 35KB
SHA256 0f8c2e97c972596008f085be129d25ade51c4006984e150bdf1c94e7112a577f
MD5 2657012bad00bd8f208d663adb9d3c37
SHA1 620f337c94865c6a3876a398f15faf9104b76273
SHA512 5f8c810fe720099b9133499ea70efcae1d07dd6fd653d9e0d70abd2c8424fbb8f6f2bc2879602b1e66a38c80261a580ab8afdde2dc01391ddba4427edfc516bf
SSDEEP 768:w23XdSgm1Jp0utDmGA5b65Q92RQMPbzWTp:w23O3AF65dQUk
TLSH
T131F2BF71ECA0DEB39CBA9181765772157FF88133D6C8869454EDAF0D0287ADE430AD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

970e2a95-93c4-4d12-bfc5-606b8f524bb9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\970e2a95-93c4-4d12-bfc5-606b8f524bb9.tmp
Size 39KB
SHA256 2c540535874a08d66f02c111c5101f9d4416d0c44b36528273915fc45263649a
MD5 cc0ea1aadf263e6967c5d25d6f03d11a
SHA1 d5e748504bc2f04cb39e9c49403948257e78cbd2
SHA512 bf1b6534ee681c935bccd321392507c8036f27baf8c9263465eb0a596497114837e60ca9f8abc4e4a4f33f9bf3f0d5549680a201ea0adf41b76b69e2abac200a
SSDEEP 768:U/UxvxjgC+B3IgGugm1JpLtDmGA5b65Q92RQMPbqFj0O:BZj3+B3/d3AF65dQhFQO
TLSH
T1BC03C036EC90AEB39CF95180364BB35AAFF84573C1C456A049E96E1D06C768C830B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

19f50f3e-bc16-43e1-b040-a7f30b415f10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\19f50f3e-bc16-43e1-b040-a7f30b415f10.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5986bd06-9e7f-41f1-9d19-7c6124b5de14.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5986bd06-9e7f-41f1-9d19-7c6124b5de14.tmp
Size 23KB
SHA256 113b66c47c433779d5785960c7858caec8491c7eaeeeef67324650a405c6771d
MD5 8cd50c7ed387ec3f5990bfff59fb8bfa
SHA1 073deff401a9f18ed56dafd29039b1589bcba573
SHA512 bfb165456028505095b6c3c9e3db979d10a085fbbdc23069331e3c6944e690c4b07357539fb69071b66aa0692c26eab4d4130f3318822e316b4a2ceb8011adb7
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWlroHri:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0Vr
TLSH
T1F2B2EA2F644CCB7E8FD00A9DAC5A6F977E9802C796588D4047FE984C02C77EA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

74e0e395-32f0-4759-9533-fc3f762d2f54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\74e0e395-32f0-4759-9533-fc3f762d2f54.tmp
Size 11KB
SHA256 5177314243d13c628e738fc7e3531eda6edee51a3dac664d86167cc17a338731
MD5 6e72b4694495fadc727963ef88f5f953
SHA1 6e41d57ae1d3f3d59aa38121f884f58edcc64950
SHA512 9633892d4c99c8701656a65c2e6c89a73ccabcef362bf39df408aece223b6184eecd2fee7112f0d00940a026a61a0e63fd9c41a1c6d53c928fbfd16a969a87ed
SSDEEP 192:sxRtRab6/fsFs5PyYhVzoA8p42/g6+WNIY28cK+G9IgIJ:sxRtq6/fsFsZb4j/5IPKLs
TLSH
T1BE32B7556E28A93B8CDBD21DBB66BF53D7FD1032A1901E48A6FC861C05E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87291af0-2ef7-4380-b19e-15fa1f19f40f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\87291af0-2ef7-4380-b19e-15fa1f19f40f.tmp
Size 11KB
SHA256 971b07f4f4e21f996fb82dadbad358634d93990aea64d5b579356d35f0c4ff0f
MD5 0c7912e403d225f775e821f2327031ac
SHA1 59bfbad7444ddcece6f602693689a3bcb5f5f003
SHA512 5f9926d6ff60336d595f91772ad8fc043881449cfa304891eb93ec62c19d9778c952850f2525b14ad53db4fc7fae08aa28689ed45040cc7ed55dbe303586cf8c
SSDEEP 192:sxR2Rab6/fsFs5PyYhVzoA8p42/g6+WNIY2PcK+G9IgDKJ:sxR2q6/fsFsZb4j/5ImKLa
TLSH
T15232C855AD28AA3B9CDBD21DBB66BF13D3FD503260911E48A6FC861C05E77CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 b18df45fb1a534290d501d4b8766bfb76a9f3929b2005007a9097321a90cd5c6
MD5 dafa1e9b23dfff7c701906db8a2e863d
SHA1 98f43689e81e0620d94f7ea31421baac503f5333
SHA512 2129285510150608cdcbe2c079af7d54e5768c4dcf5b4e773bbf0577c617729e824a43ecf0a61733281730ef3bf910eb25a3a022173d07d145ab58ce874a8bea
TLSH
T1C251648290B393B2FB57053D82DCDDFB3A344571599F9D020CA8FAB6B78E799C100298
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 70885ebff1af1d0a3b1424510b9ac822f5a454838efed8eb1851b0747540546d
MD5 9fa244cff74b286906f82faaafbab3ef
SHA1 f8063c74ec9a730a5cbf3c708c7d3e92aa028d69
SHA512 d43958935b2f33be56425e1793109d5dfdbd56341f84b6051b8fc87b8405d1f923c204c1eca3cd38600cc3c0e9b7c5d932a2bced0250c871b726907f39ef2e30
TLSH
T12051668290B393B2FB57043D82DCDDFB3A3445B1599F9D020C98FAB6B78E799C140294
MD5 SHA1 SHA512 TLSH

Submit Download

f89b1340-9189-4a16-8eec-47dae09b69b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f89b1340-9189-4a16-8eec-47dae09b69b3.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

378d81ce-5e5b-473d-bfc9-475eb2214692.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\378d81ce-5e5b-473d-bfc9-475eb2214692.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

8422b181-064d-4d9f-b639-c2a78730d414.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8422b181-064d-4d9f-b639-c2a78730d414.tmp
Size 2KB
SHA256 67b0fdbe81828c98e7c50dd0799cf9a9613e447b2a7df1d602329303ab879e71
MD5 f170999a1f42762826e9038e3bf1ff70
SHA1 fcd1051ec6817d7e1624e006d9fcd900d3fcce6b
SHA512 7832cae252bfe1b9aef44d9088d85e46fa0b31976fed9afb99002cb2698b71d47263807da61ac45cb07919390bc2bcc118d52bb80f923079f108f20a3ea37d73
TLSH
T19641CFF3C3E8867D8D0156F4AB186E1BCE1D0915532C3C5AC9D4EE1BA3E24B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

ef6f71d9-5426-4827-98a3-c1ad61b5c9ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ef6f71d9-5426-4827-98a3-c1ad61b5c9ba.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

baf3e911-f8b3-4a6a-b594-50dba1e4ad2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\baf3e911-f8b3-4a6a-b594-50dba1e4ad2d.tmp
Size 11KB
SHA256 f90e9ce1e3a4d6a81837a78e9d03407f1feed79a7c7ef157fe26f2b03c04389e
MD5 49d51dc2439f4af475664a1da581f98e
SHA1 855a6962ac60cc1f3115ea3092c237125903fe6a
SHA512 c1433170f9a36121d72981e2c00f21e0d92b4fc4d4490531b62d64626ebf90c00a876da3df8ecaf289c6ad3d8345a82561cd15fb68973b09523147719044adb0
SSDEEP 192:sxR2Rab6/fsFsZPyYhVzoA8p42/g6+WNIY28cK+G9IgD4J:sxR2q6/fsFs5b4j/5IPKLQ
TLSH
T1FC32B855AD28A93B8CDBD21DBB657F53D7FD103261901E48A6FC861C05E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f4e0dae-4e66-49e9-9638-73b8db13b331.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3f4e0dae-4e66-49e9-9638-73b8db13b331.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

af2fed93-a340-41fa-bfed-624303f920cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\af2fed93-a340-41fa-bfed-624303f920cb.tmp
Size 35KB
SHA256 6b298e55da658208f341eca69e0db868a27b75db7237e7dba2dfa664d3caf7e1
MD5 c21f62b4c6d378708fe190bc625d605f
SHA1 806fb0aa4adc3812c55801ee6bc67acc6dbcc05a
SHA512 f10203aba553e43a00e2c8ad470ec0a263503f499a188c714f5abd46ae667492b779413bf0150dd049898042c32d28b53ce99a1efcbbfc8fe2d2de8811c02455
SSDEEP 768:/23udSgm1Jp0utDmGA5b65Q92RQMPbzWTp:/23N3AF65dQUk
TLSH
T164F2BF72ECA0DEB39CBA9181765772157FF84133D6C8869454EDAB0D0287ADE430BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb2d49c5-0c3a-4a33-8dd1-506d2474e003.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\eb2d49c5-0c3a-4a33-8dd1-506d2474e003.tmp
Size 37KB
SHA256 c082b90f36ea41f3e42d7aec9bed4662abce24950070350eeb90bcad3d318a74
MD5 aea8a039ec6d4754222ca6a38c61fee0
SHA1 f944a9cae2c053caa7e876f9a029113f46fb47cd
SHA512 75f9f5c5e3228d6ac7ca7817e783f9e8bbf116fb6cdafab37944658433b57a8cb7d05af600963e41c499aa68af68e1aeec49e51b393ca86b8af8285f9b1d5d56
SSDEEP 768:lFQf3nwg/dSgm1Jp0LDmGA5b65Q92RQMPbzWTp:Ef3zAF65dQUk
TLSH
T1D603BF73DCA0DEB7ADBA9A8076473215AFF84133D5C8D6A0A5DDAE0D01876DD030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e31ffe6-ded2-4fc3-b6dc-c3a68a8961d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8e31ffe6-ded2-4fc3-b6dc-c3a68a8961d5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download