2ab315537510fc91d73825d0d6661e9f4b141799877e2f5159892886265f362e

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/10/2026, 18:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file.html
Size 1005B
Sample261012-xhqcssdx91
SHA256 2ab315537510fc91d73825d0d6661e9f4b141799877e2f5159892886265f362e
MD5 fd879317e803d0d934db5bcc5ff8fcc8
SHA1 21b7954728b3579bbccddde44255bd8173f96f64
SHA512 2b274bf9900fd88d8697f67fdd82db000d1c1c9447ef1d4fd6b0202ac74008142ada2e30beed8f3b3e6e5ea8931f35cb21d5f5294ac9721a366d0d675043731e
TLSH
T168110EE72204920E3F0091807043312CC9D79EE96FA58C41D9CB989A75D8E81C82B388
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2808	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{10CA8E3A-794D-4C44-8F06-CD5C0504942E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5952	msedge.exe
5952	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe
476	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 476 wrote to memory of 4144	476	msedge.exe	88
PID 476 wrote to memory of 1720	476	msedge.exe	90
PID 476 wrote to memory of 2808	476	msedge.exe	91
PID 476 wrote to memory of 4216	476	msedge.exe	92
PID 476 wrote to memory of 404	476	msedge.exe	93
PID 476 wrote to memory of 1720	476	msedge.exe	90
PID 476 wrote to memory of 1720	476	msedge.exe	90
PID 476 wrote to memory of 4216	476	msedge.exe	92
PID 476 wrote to memory of 3108	476	msedge.exe	94
PID 476 wrote to memory of 404	476	msedge.exe	93
PID 476 wrote to memory of 404	476	msedge.exe	93
PID 476 wrote to memory of 3108	476	msedge.exe	94
PID 476 wrote to memory of 3108	476	msedge.exe	94
PID 476 wrote to memory of 5968	476	msedge.exe	95
PID 476 wrote to memory of 5968	476	msedge.exe	95
PID 476 wrote to memory of 5968	476	msedge.exe	95
PID 476 wrote to memory of 3960	476	msedge.exe	96
PID 476 wrote to memory of 3960	476	msedge.exe	96
PID 476 wrote to memory of 3960	476	msedge.exe	96
PID 476 wrote to memory of 2008	476	msedge.exe	99
PID 476 wrote to memory of 3512	476	msedge.exe	98
PID 476 wrote to memory of 2008	476	msedge.exe	99
PID 476 wrote to memory of 3512	476	msedge.exe	98
PID 476 wrote to memory of 2284	476	msedge.exe	101
PID 476 wrote to memory of 3008	476	msedge.exe	105
PID 476 wrote to memory of 4520	476	msedge.exe	106
PID 476 wrote to memory of 5624	476	msedge.exe	107
PID 476 wrote to memory of 4440	476	msedge.exe	108
PID 476 wrote to memory of 4440	476	msedge.exe	108
PID 476 wrote to memory of 5952	476	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\file.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ff84cc6c188,0x7ff84cc6c194,0x7ff84cc6c1a0
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1944,i,498864034155174484,2824570133860669874,262144 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=3156 /prefetch:2
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2140,i,6483036293816376706,15131777280341392097,524288 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,8465527550493379595,17995211389597933587,524288 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=3300 /prefetch:13
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3360,i,8388491474352697820,2765857767477671432,2097152 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3364,i,4673901807669347830,4958157272597268630,2097152 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:1
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,13464020373683962443,16253376651933866616,2097152 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:1
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,15178623116375502376,5371314586426780817,2097152 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:9
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,14970686667571576376,659970487643679389,524288 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,4391583115535390304,9004625682407627397,524288 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,5072648296340551619,9706950503153438581,524288 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,5072648296340551619,9706950503153438581,524288 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1252,i,16231287691106574537,8840128959413922280,524288 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:14
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1216,i,18082101507494344595,1401917724423885451,524288 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=1332 /prefetch:14
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1108,i,12615358637442002389,354338379092462180,524288 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,16480752175202911524,13851870126370715463,524288 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:14
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1480,i,11447917953152560916,8154422270626079215,262144 --field-trial-handle=3164,i,14726353733329380548,4284973281320328651,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5952

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4384

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

566f4dd4-51d5-4def-a12b-9c3f826e6b18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\566f4dd4-51d5-4def-a12b-9c3f826e6b18.tmp
Size 36KB
SHA256 b9deb2ca680e168954a80e163aea3e51edc8da14a435914cc10547e4bf9128ad
MD5 4a8b2cbaf4da2775c925b9ce3357dd82
SHA1 502e688e63805df45a6854c75d21bde9eb8cd643
SHA512 c995826e79c942675f1202faa411ef2f5a88ba05502af430e70b815dca97249b7dbc940c50fb68c2781a69b5ec3cae2bf944fc3c52e704789170707a5cff8104
SSDEEP 768:iFQE3ewghMRFFOSLc9B/9OA9at01j0iq00+IaiN1GJCbETm:5E3JRx+uCHq00NaUICb5
TLSH
T19CF2BE72ECA0CAB7ADF6AB85F60633469FF45167D2C99680C6DD290D00575ED230BC72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

35253fef-6669-4ab6-9f3d-fd8b8aca00ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35253fef-6669-4ab6-9f3d-fd8b8aca00ac.tmp
Size 10KB
SHA256 6c5615002ce68db94fd340ef850f12e37afe58edfb41e8c2db467339ffc67340
MD5 fb5731c17686097d05d636bcdbaaa7e7
SHA1 84c8d2d8fd1f2ca7ea737145691071fe095ead81
SHA512 be19a3da8a9adf0ca9f658a831a24e78815da3c3bb0bad4ef45a3f3b473d1b3af6edf0ebed3b548e69f56d89add5f0688d3c7c095fc80ea7e5f27145cf49bef9
SSDEEP 192:sxRqRWbC/fjs5XzoA8p4M/g6+WNIYodzoG12IgIJ:sxRqCC/fjs5+p/5IrOs
TLSH
T16132B6156E68A93B8CCBD20DFB65BF53D2F92032A0D51E48E6FC961C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5c97c04b-6515-4c39-8220-53a21548cc17.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5c97c04b-6515-4c39-8220-53a21548cc17.tmp
Size 10KB
SHA256 d6f72c29db312b6ae4af03570852d5bfce5e2854df28674471a974a5d9ddb7da
MD5 bba02f6adc0e7312f4287d0a194e1f9a
SHA1 f7483a1976d23e1b839d7048e2a25c55a2ece9b5
SHA512 a5eda4149ab0a66ead5db066459383d76c932495651bdfb82b91bda92af0b2e699ed1a4cf301a8bd9e1e24117f5510b29e30ce44207cdd82fd40b914cb1b5166
SSDEEP 192:sxRJRWbC/fjsFXzoA8p4M/g6+WNIYodzoG12IgDEJ:sxRJCC/fjsF+p/5IrO0
TLSH
T1DD32C715AE68A97B8CCBD20DFB55BF53D2F9203260D11E48A6FC961C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

74900f05-37b8-4771-9255-8bd90e94699b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\74900f05-37b8-4771-9255-8bd90e94699b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92bcfe38-ede6-437b-b035-3c697bfa450a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\92bcfe38-ede6-437b-b035-3c697bfa450a.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 83c2097ef3c1f7f44717183dac176108f3193b3cb4471e8bbe9866979733b989
MD5 de3e2001b19f3661146d3a51180b6034
SHA1 b5f09f8b85e81b6fb91e33bf68e6727b6f174be3
SHA512 036a4fc41c1ded8b7d81536f40bcaefdd1dfeb7cf4a1b62ac1df4274ea063a7ed27c692004d5f9c8082bc819f22286dab948c6dbfffe5ca6dd3d468a77263476
TLSH
T1A1617042549C8290F7BA403EE5D1DF8F3EF086C24ACB2E210E86C97D2C833299384368
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 61b76e8c8632cfb4e805f4b2ae670d044b806ff4073248f5f9d7691e29b6f94b
MD5 e00f27d62d50d579b4adf95f06fa32d1
SHA1 7491ce98a5f741e7b7f0f1980c0e3990d4b7556a
SHA512 5a56ff668d5754ae2a1de231ebe5858f82af4a6f2ebad87aab2602b89302edac8fbb12738f480e89bbf7ba13a0d82e6a53922475c72b1f361eab6514366b5870
TLSH
T14B615146559C8290F7BA403EE5D1DF8F3EF486C24ACB2E211E86C97D2C8332993C4768
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2d9c7f63-fb3f-4056-848d-764cf51b9e7e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2d9c7f63-fb3f-4056-848d-764cf51b9e7e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

407770c0-c202-4d46-9a9a-01daca82b53c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\407770c0-c202-4d46-9a9a-01daca82b53c.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

7e1da48b-fc37-4768-91f8-b87b0b92e887.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7e1da48b-fc37-4768-91f8-b87b0b92e887.tmp
Size 2KB
SHA256 140563c8a5c859512bd8003b379396adaa5910820b4e21b4dad8b494100e2634
MD5 91bbc1c6263cb0a0dc9775d73fb1f494
SHA1 d708764ca47bf0027686329e87014cfd50324fc7
SHA512 94d882b1fa7081bd54e9ba1d7c128f27adf02b345c4eb6fe78805f8effa15d6210164705384ca24c1976a664a5ef2c391432a6a971d3ac1b694130f8b1012a66
TLSH
T13941BEF783E4867E991196F0AA14AE1FCE2D0516432C7C6AC9E4AE2B93F3471D10275F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a7c51fe799b1ac2b11da81e41f25a468f6a08b4ed5b11fd89027f47bd42915ba
MD5 3382c6bfc56d18dbac378a53844c3fc5
SHA1 70182f4a1582bc46354d18c2fd42aaf1433fec09
SHA512 801f79a9a4ca313761084b3fa10a5a7248988c9c73c6ff7e6ccfd018c0142615938dcc4968f1d05f32ae9aabdfa5125a8391a825c306319173deab645b2c576d
SSDEEP 48:KMb2XbVdtmT9oNIabmKVj9xmRz2oAB73yDfaTfxRxqT58ZIavqKVf9dqR/6oE1Ps:KEMAK9mW6AAKNq6KqMKnKn
TLSH
T12C914121313B1690797D394894E4A7AB135237A33038FA3B7BE911A54E27E441CFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

dca174b8-da22-4d29-8113-4b1e7b3aabff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dca174b8-da22-4d29-8113-4b1e7b3aabff.tmp
Size 10KB
SHA256 13cef90e828903e289c1f74f9789945d23c21d9bc7a1a0db101e632608ef1c3a
MD5 6f7d346e400937f5c8ae2e121ceb5127
SHA1 8ccc738a6137bec54607be90811bebbbf414850d
SHA512 64e7954ddfb8d9335b2dc96aea2388517df8897982bffe4a2a9cc1f5896563f4b0e96026bb2b9e7268c07c7db6ad4ea65cfe0799fc34e195afddf60909431a3e
SSDEEP 192:sxRJRWbC/fjsNXzoA8p4M/g6+WNIYoZtoG12IgD2J:sxRJCC/fjsN+p/5I9OO
TLSH
T15132C715AE68A97B8CCBD20DFB557F53D2F9603260D11F48A6FC9A1C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f83e5032-7971-4fa6-aa35-6c718af3ebd1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f83e5032-7971-4fa6-aa35-6c718af3ebd1.tmp
Size 23KB
SHA256 bd255e5195d4e140a218672354377962b9b46b10afed408eb01cb68fc1d863f3
MD5 970a55388b7886303048e0a1b7622367
SHA1 37250c91cde12142c987a7eb3c4ae576028b804a
SHA512 0445cc0e9401227aa75e5ea20d782d7c258dd2fd1b0198a42fb5770faabd0ac09ff309a224eb3f4680a8a252ec98e23ff178e7d9c30d7dbdff1e9da572138467
SSDEEP 384:pFZwWWPfCtg/NFf1pKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVt5931RUwrondv:p/wWWnWg/Xf1p8F1+UoAYDCx9Tuqh0V9
TLSH
T1DBB2DA2B744CCB7F4FC04AAD9C196F9B6D9802C796588D4047FED94C02C77EA922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

e33fc000-0e04-429f-914b-e743c2f24dcb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e33fc000-0e04-429f-914b-e743c2f24dcb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b0ec309f-968b-44cb-87f9-01f7418277c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b0ec309f-968b-44cb-87f9-01f7418277c2.tmp
Size 34KB
SHA256 8c2b930788c2a5a516fa5bc50669ee59ac8b6278a45673659ad1a2223eac653e
MD5 94c5f3a6a52539b7e3fdba2a11482da9
SHA1 6fcf291279acbfeae864af28e729fb611df0835b
SHA512 1313c8c539f142238ff3d8fed426c0bca9f9547409b16f2b56c852a0772d47ac1175c2f4acb296e2f1e840ca3129a7ba461379f67c24595e1d1573901431b01d
SSDEEP 768:y93VMRFFOSLc9J/9OA9at01j0iq00+IaiN1GJCbETm:y93iRx+2CHq00NaUICb5
TLSH
T1D1F2BF71FCB08D73ACE6A685B21663475FF85127D2C95B8088EE3A0E44575BD230B877
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9d99916-8247-4a48-b5bd-cbd643dabe0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d9d99916-8247-4a48-b5bd-cbd643dabe0d.tmp
Size 38KB
SHA256 c50eb0f8729cf5b2e611b60ed05683bcacfe475f588d5266c2d625f778c66085
MD5 2f92555c3d80fb77ba2731ec764ba68a
SHA1 3e7c3cc630fd0a96951b35170609dae76356ea64
SHA512 2c14790dd3ff679175fa6249587ca92016ebc092f1592795e4b1d733a41cff62e175a9b74d88322e27707b2dce334454e67c56125df6cea7d28c5b0d5ffa0ae3
SSDEEP 768:o/UxvxjgC+H3pqjOSLc90/9OA9at01j0iq00+IaXN1SHxRz:1Zj3+H3pU+lCHq00Na7STz
TLSH
T1FC03C031ECA09D73ADF3B384730A63879FF45653D6CA5A9049ED3A0D05876AD230B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deebc9bb-dd74-426e-8d2f-c7dae7089f34.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\deebc9bb-dd74-426e-8d2f-c7dae7089f34.tmp
Size 34KB
SHA256 ac7eb5afa8982caa38512a84e55ceb1e5d4b87d5873c1654f4b3356443fa0e25
MD5 47106e8292b2b94ce6122801401fea56
SHA1 609d03eec857338dfb6512737f66442b554e2d35
SHA512 1989bf81af0fd832321b11e8e07428bc6ab4e564f687e8859a29971966b13f02ad39502a3b0ca2888282185c933b3f255d4a897f3ad99f24593f971d014b22ed
SSDEEP 768:O93aMRFFOSLc9J/9OA9at01j0iq00+IaiN1GJCbETm:O93zRx+2CHq00NaUICb5
TLSH
T1B0F2BF71FCB08E73ACE6A685B20673465FF45127D2C95B8088EE3A0E04575AD230B877
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e4def153-13df-4c5b-b490-b26027ca57e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e4def153-13df-4c5b-b490-b26027ca57e8.tmp
Size 40KB
SHA256 1c42781aa4baa9694e1561fe24b5c45edb61d25f12c84733ea317d58deaada96
MD5 67df2c0a236767bbfda4f19f32cf66a0
SHA1 d506d3868b11fc53f8a978380650747c80fbd89a
SHA512 afba381e9c08e936f3af8c3577cf210193b0b0ef7061823e15915b60b164f98cfd9b72e9d81b0a49249da2f942c7c5ac1bd9b70389d82e5a395c00cbce877cf4
SSDEEP 768:y/UxvxjgC+I3iMRNFOSLc9J/9OA9at01j0iq00+IaiN1GJCbETXX:3Zj3+I3LRp+2CHq00NaUICbSX
TLSH
T11613C032FCB09D739CF2B284721A63879FF45563D1C95A9449ED2E0E05876AD230BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ec1f24bf-e1ac-4b31-b362-ec87d5fd74f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ec1f24bf-e1ac-4b31-b362-ec87d5fd74f5.tmp
Size 37KB
SHA256 e2557f7af6d4435548d572cdce81feda017f89cd3020c5850369da4f3e7fb677
MD5 00f23866d7d8ac6414c6f5f317aa29df
SHA1 06f4bf3fac6282096e01554776e873f6c2a137d8
SHA512 6aebeb6bb4e437d4ad92d439a3e905a1b6f305a47c4bda1b91c2109668795351c9ff3a5bf9d14fdb2f186623da4fdc1c1dcd19efa4059271ceeed343c6fcfa04
SSDEEP 768:X/UxvxjgC+H3MZsOSL9/9OA9at01j0iq00+Ia2DSHxRz:KZj3+H3MuSCHq00NaISTz
TLSH
T19103C031ECA19D739CF7B384770A63879FF44663D6CA6AA049ED2A0D01876AD1307C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc0f6eae-ac6d-4b90-a71a-b095c88b5d1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bc0f6eae-ac6d-4b90-a71a-b095c88b5d1d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download