hxxps://amp-sntissste[.]pages[.]dev

Analysis

max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/10/2026, 23:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://amp-sntissste.pages.dev
Sample261011-3v96mayvbx

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4524	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{B0BD9FC5-35E1-41E5-9E2E-712BE45C3300}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1944	msedge.exe
1944	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4840 wrote to memory of 884	4840	msedge.exe	85
PID 4840 wrote to memory of 4524	4840	msedge.exe	86
PID 4840 wrote to memory of 3524	4840	msedge.exe	87
PID 4840 wrote to memory of 3524	4840	msedge.exe	87
PID 4840 wrote to memory of 3524	4840	msedge.exe	87
PID 4840 wrote to memory of 2560	4840	msedge.exe	89
PID 4840 wrote to memory of 2560	4840	msedge.exe	89
PID 4840 wrote to memory of 3336	4840	msedge.exe	90
PID 4840 wrote to memory of 3336	4840	msedge.exe	90
PID 4840 wrote to memory of 3336	4840	msedge.exe	90
PID 4840 wrote to memory of 4468	4840	msedge.exe	91
PID 4840 wrote to memory of 4468	4840	msedge.exe	91
PID 4840 wrote to memory of 4468	4840	msedge.exe	91
PID 4840 wrote to memory of 3196	4840	msedge.exe	92
PID 4840 wrote to memory of 3196	4840	msedge.exe	92
PID 4840 wrote to memory of 3196	4840	msedge.exe	92
PID 4840 wrote to memory of 3048	4840	msedge.exe	93
PID 4840 wrote to memory of 3048	4840	msedge.exe	93
PID 4840 wrote to memory of 3048	4840	msedge.exe	93
PID 4840 wrote to memory of 2948	4840	msedge.exe	97
PID 4840 wrote to memory of 2948	4840	msedge.exe	97
PID 4840 wrote to memory of 5056	4840	msedge.exe	98
PID 4840 wrote to memory of 5056	4840	msedge.exe	98
PID 4840 wrote to memory of 4248	4840	msedge.exe	100
PID 4840 wrote to memory of 1788	4840	msedge.exe	111
PID 4840 wrote to memory of 1560	4840	msedge.exe	112
PID 4840 wrote to memory of 2836	4840	msedge.exe	113
PID 4840 wrote to memory of 3976	4840	msedge.exe	123
PID 4840 wrote to memory of 3976	4840	msedge.exe	123
PID 4840 wrote to memory of 1944	4840	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://amp-sntissste.pages.dev
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ffa2304c188,0x7ffa2304c194,0x7ffa2304c1a0
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2016,i,14515698671581374396,9316466328935153796,524288 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1836,i,6431824763772898002,15016379994413562908,262144 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,1614818424915765407,3321549090658175881,524288 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:8
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,9730347231953633994,1967239583598487364,2097152 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,7310146485933850411,15162794221765060987,2097152 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,10090068682503108780,11348667973984290214,2097152 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,4863219361906953210,1573244218516242078,2097152 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,1234333273664671337,12839163838339444353,524288 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,14831503184799754367,2627030851011146461,524288 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,5730024069465284032,13741074490076495141,524288 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,5730024069465284032,13741074490076495141,524288 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,9648978635312807507,14050850936160605374,524288 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,6823184677597442544,3688838593002366511,524288 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,4965477459872078774,3950813672101657512,524288 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,13260699670572668395,6455830661386295914,524288 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5844,i,13809431675400188533,1880765865577167888,262144 --field-trial-handle=2316,i,15647788875528962707,3902866409490218566,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1944

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0be3b225-0cf8-429b-bc84-570fb0c7ac6b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0be3b225-0cf8-429b-bc84-570fb0c7ac6b.tmp
Size 8KB
SHA256 e3813ea2712aded49174b01a596242e0241bc32974a9cda654be7416b8a2252c
MD5 e387fc0620b746476002714dc73ebc1b
SHA1 9e2487b60a0a85d551b2277d3121786119a2fbb3
SHA512 5e41847ffb551c48721b83ef76a99e4da4a38a08408e0a7e4182d2e29fbcd691e43e29f2c4254b954e6c8a0c388b0ea1640d9909087c1e40ba8bc2b49141fa47
SSDEEP 192:1ONl6wlDgQmiUyVRW4X58gZjOKSAwDltNU6:1ONl6kgAW4X58EjORAkPU6
TLSH
T1FD02E734E9687C7B8EF3AE49F58B27139FE5102BE5512F80DAE81A2C00D769C1307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1519e9f5-43e2-448d-81c9-a91e93799bb0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1519e9f5-43e2-448d-81c9-a91e93799bb0.tmp
Size 18KB
SHA256 8b94193f952cc5371a0c393f623cd5bb6c40e84e71c150113ca7f10bce660414
MD5 d6dc0602d0b4c7b29bfdc32f2b6c12d1
SHA1 a6d8390f1b3424131ff1397c7f4f2fe375de841d
SHA512 b25f47ca53efc24e5d0cb5ecff6e700abc127261b5aab4a93aadb53e68f112569344dd6735dbd61c0da6e752ad6a0ffedcc0315f11159eb5c2b939e709d0a54f
SSDEEP 384:GZcIhsNf8PZokKALHX58EjORABj3aiW/9q:UhV7TaIOWj3aF9q
TLSH
T159827C71A8B86D3759F7A149F88A35034FF89027E2C57F84C1EDAB1D01DA6EC1307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f71562e-0ceb-42a2-9970-720c97f64384.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6f71562e-0ceb-42a2-9970-720c97f64384.tmp
Size 8KB
SHA256 6aee2ffbea58f069db49837f84957b371c9be53cb6518eac92d5588d40ad43a5
MD5 56bd9a0be9ad4ef7ab5df257e3d87f8d
SHA1 d9c5410bd1260cf18d188ecc72b5b1085bbba3a7
SHA512 240d88274064367425f244ab80cae95f4cc87397a2e1dbd92deab13d02fc95c33b573a5d7192018eaf0a3e8bb950516ca6e2c26a4a40bf6c6de671512d0cecb7
SSDEEP 192:lONq6wlDYQmiUyg1RJ4X58gZjOKSABjsvefqNU6:lONq6k4PjJ4X58EjORABjHaU6
TLSH
T14E121931B9A8BC3B1DE2A544F58731039FA95127EB467F90C6DC2A2C01EF6AC530B913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a68c44f-55a8-4241-a69b-38aa9d51aca7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9a68c44f-55a8-4241-a69b-38aa9d51aca7.tmp
Size 18KB
SHA256 bb90291dd3692541d18f3875a09e743aae5e536c9f68714ff3d826622fc5a779
MD5 4fdfa26db88107f48a7515f45296aac7
SHA1 d2b269c090953903a961b9e3dad15a172282cd51
SHA512 7bb2ddcb5857ffc193d8c55af120e656e42540cd87c2f2ec695b0991dc734920bbd9c63af41ebb254ee09653bded6da4dd6b0afeed19ad922ece6186889f08b1
SSDEEP 384:XZcIhsNf1PZokKALHX58EjORABj3aiW/9q:fh67TaIOWj3aF9q
TLSH
T19F827C31A8B8AD3759F7A149F88A35034FF89067E2C57F94C1EDAB1D01DA6EC130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

0c3cf074-9a01-4d3b-8df7-934a131e45b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0c3cf074-9a01-4d3b-8df7-934a131e45b2.tmp
Size 10KB
SHA256 edd2d2872537954c37943e2402debc4012cabe7a54e0a9e4b2b894d3140af5db
MD5 533642f176ae6c37d305cdc4210fa9e4
SHA1 04b34242ca104255f18dfb39e3cf3bfb693ec3ba
SHA512 236daba3e53b76b699258b15a7964b7eb325ce3ac15c7711699ee0f40056c985ff6cfeea9471b588cac2e9f24d6f7693f7f4d8c65669e4a306efbc59b5e6abb5
SSDEEP 192:sxZOR1W2/fVRsrKyRIdpTqHW6+WNCH9j2/YrQpeZSIg5oJ:sxZOW2/fzsmyaeHbYx2//vu
TLSH
T10732C9516E34AA3B8CC7E20DBF59BF53E6F9503261952E44AAFC861C05E7ADD130740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0f73de01-3806-4f2a-bcd1-9189c486a5b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0f73de01-3806-4f2a-bcd1-9189c486a5b5.tmp
Size 10KB
SHA256 86922c96a57c6e75152128afd6f4f263ed57c7f32f1e0521825991caf4b1d487
MD5 a2f82491daec1f735105b4c1a10dc2ec
SHA1 e5973fde1214951c1a7849f7f8270eb7605d0f85
SHA512 ebace88853e441e5988501749d0a0c7eac60a5f6f08e4a984988f5d3835c84cdff670bd79af8d2c85946c3dc529437713041d4c11c2872455a743361e561ba4f
SSDEEP 192:sxZOR1W2/fVRsJ/yRIdptqHW6+WNCH9j2/YrQt7VSIgrJ:sxZOW2/fzsZyagHbYx2//i9
TLSH
T11B22B7526E34AA3B8CC7E20DBB59BF53D6F9503261D52E48AAFC851C04E76DD630780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e536269-e69c-4bbc-aa02-d3890ecb0434.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1e536269-e69c-4bbc-aa02-d3890ecb0434.tmp
Size 10KB
SHA256 5c6f750f6f827a348bf790ae0721bf0a9a58df143bd7ec614fece2a596af16b8
MD5 06baf2ce13b52cef916965919428d89b
SHA1 30d59a7441b9ec0266600673b5dd68bad018eab1
SHA512 38748ce133f1ef623ad7c3c0c4865173863c8d6f09cb302b7596c96376bd6dd998e38f543c275426d1a06eb5269d88aeeb6efc70bd5d565ec243494e7599ef84
SSDEEP 192:sxZOR1W2/fVRsr/yRIdptqHW6+WNCH9j2/YrQt7VSIg5CJ:sxZOW2/fzsDyagHbYx2//iE
TLSH
T1BE22B7526E34AA3B8CC7E20DBB59BF53D6F9503261D52E48AAFC861C04E76DD630740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48ca3c5b-6d10-4595-b624-daf74a5f6043.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\48ca3c5b-6d10-4595-b624-daf74a5f6043.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

8eb931b2-e043-4529-af2e-32b737139d21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8eb931b2-e043-4529-af2e-32b737139d21.tmp
Size 10KB
SHA256 31ab8900d8c4f2506cc24bce370d3efd02f195662e646d9448e4289c7514c11e
MD5 2ba4838bbad1411c0835974c1c54e547
SHA1 a87d6b2cea71f97cedeeadc9929b47b35815596e
SHA512 69267eeee2da4c994d759aa7ac94371ab2a63642bc7eba04fb77510e561090d2e25cc8844f6d1669bf3331440d8d33058db7352cd5ec5b5518bcf98bdd7928fb
SSDEEP 192:sxZOR1W2/fVRsrKyRIdptqHW6+WNCH9j2/YrQAJVSIg5oJ:sxZOW2/fzsmyagHbYx2//1u
TLSH
T18922D9516E34AA3B8CC7E20DBB59BF53E6F9503261D52E48AAFC861C05E76CD530740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 7801e3b41db4e09769afcb1d5ae4622553725418cf919b04bc32c21180aecbe2
MD5 29a6cc213eaf591aeb3ca771591c7dba
SHA1 e14c5954c955eca692c948bdf5b64d0b7f7bc9b3
SHA512 8ee4b03d8b6f27eb29893cdae829c1964d00e98fb1befac26db12e50dad1b23df0544f4a9c581682be010190f83ba2e3d542b6fc750b3180073e31d8508fea9b
TLSH
T13551948197608492FFE4B1BB91DE12FF3E745580D6831EB21BA4DCBE9F6A30740100E8
MD5 SHA1 SHA512 TLSH

Submit Download

ae88c65d-9c8a-4187-b5de-22da85c5ac05.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ae88c65d-9c8a-4187-b5de-22da85c5ac05.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

5a5d4197-8c54-4332-a4ee-65ed9a50425c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5a5d4197-8c54-4332-a4ee-65ed9a50425c.tmp
Size 2KB
SHA256 3338266e4f253995419f662c5483251e2825442df9d21cc2cbe84cb2481d1a93
MD5 e821b6c49ff93104a698ae789677241e
SHA1 3e05055f100d33518402f6b09536f9e693c03543
SHA512 42ee01565e0d9c297c75379d4c28cecce8ac9a3aa5bdcbf47ebba925789d058978d52c0c9d7e09e690ebb2066c2d1b12c533e0ac69da797b3b5039c4bb7c0be2
TLSH
T1B351FCE2C6D4D62CD8251EF0AA25AE2BCE2D0D98922C3D0A88E4EF0F97E15B1D50055F
MD5 SHA1 SHA512 TLSH

Submit Download

cb233dbc-a4b4-4659-b4c8-f8063ebf2d3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cb233dbc-a4b4-4659-b4c8-f8063ebf2d3a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

cdc775a3-f344-4806-9fa8-7bb396143f7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cdc775a3-f344-4806-9fa8-7bb396143f7d.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1e5346118799bf6d08ba4f7e50a0995c09dc925678b757282111b2c122d806b1
MD5 564e1d391f8d76e973dfa2bfd91f76c0
SHA1 6c77e89e6909d4d2602f3df10e6a265fe4f9a502
SHA512 73559ff9b7abb06e57da8dde8afab290a857ecb60a532760474ac02cd495136a7bd567a4b58d294fa3ab0ca8b111e1629f1c2aa889cb94bc50572a2f0ce2f872
SSDEEP 48:KIDI1Ks04jyLJ4FZDHb0bni/ISx0K9x1b0xZkYij5pyLOpEIGM81bAHIISg1K9ED:KIDCKs0+aaYKTCK2pOKKQa
TLSH
T16B91014630FB061138BD698C8175876E124232B37518EA2F7FBC41A99E2FE044EFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c68680c8-e7a8-4958-9b80-435fdb2b2b37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c68680c8-e7a8-4958-9b80-435fdb2b2b37.tmp
Size 27KB
SHA256 523de086e1f88c24d41e7e41e6eef1d7d68bcb298f70a3ff8ba9aad409f9a9b3
MD5 748d35d129efeb4ede826f5a7d13b950
SHA1 7f7a148aa049442de8f91e77f1356bb8ca920147
SHA512 3cbf85cd5db721862288d795b01b0c80903503b92ab6eba4f8a60febf918a3b7d7035fe90b24ea5ab6df91413a798e5ec610fd5b6f49c6b205bf2ddf289dee15
SSDEEP 768:B+6my4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb6yroRsJ:B+6my4J/DWvbtBhu1jajiLm0b6peJ
TLSH
T1C0C2FA3B644CCA7E4FC00A9DED5E6F973E9802C79A948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f7705e80-e118-406d-a17d-bdb624abd942.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f7705e80-e118-406d-a17d-bdb624abd942.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5462d2e3-7196-4e51-80f0-0acda75fed39.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5462d2e3-7196-4e51-80f0-0acda75fed39.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

82ff467a-83bb-45d9-a0a8-29d3535ae6cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\82ff467a-83bb-45d9-a0a8-29d3535ae6cc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f5fc552e-a963-475f-8d23-1d3a2f89ab8d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f5fc552e-a963-475f-8d23-1d3a2f89ab8d.tmp
Size 25KB
SHA256 8aa209915749db76876ac8e39917a22eeb33b370db3d836791a193ba6d956e08
MD5 74972a3689ac6f5698d626c0771416a1
SHA1 806809e58d6435d43ba7118149c76bc11a700164
SHA512 d66162e9afd43f424fa9ac1734a28feb9c2d1b71f1e42f42cb9b8729b9fe15abd154fe6a540afefa10df68b90e95707cdb7482921182c434076f27bc7de8e371
SSDEEP 384:/iFiZcIJzsNB8TUNTUlIl8PZokKfLHX58EjORABjiaiW/9q:KFQpYwgigTaIOWjiaF9q
TLSH
T100C208F298D79936D9EE9747A77D2D034EBCC053B585AA90B3985A0CCC961BFC306801
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 64bee573b23199e80d3cd6cdcc6c947d4e41097880c6b1c3cc8a1dbb4f5cbf2a
MD5 5eebf67116e59c70c0d605d9807d47a4
SHA1 18d7c6187c3838e4ba0fcfddc6048da4979fb5fd
SHA512 6b7436776d925ba698d2c5253b45410f67158a716e44756d204afeb1b846f8de6127b2acebde08a700ef950a96f7c8fbe471b374d4d3fe58c97b32500512527c
TLSH
T1D1412D58A6FA0148B3B72F466FF6A86D447FB8772E06D05D10020D4F0A22A40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download