4ec840145077667a0bd24b4769f78d31b7db5847df399437fff35f6e924ba0f1

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 21:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 2KB
Sample261014-1c3bysh18m
SHA256 4ec840145077667a0bd24b4769f78d31b7db5847df399437fff35f6e924ba0f1
MD5 d93b6688f61e53592d94679a6d275f42
SHA1 0d8271edcddec3241a7dc0cf86073b976424379a
SHA512 68a6c52640103d7ed75278f90b41927b482620e109d35335b0892f2249865f55c41ab521828798092d96d6888b63b6af21e91c9f9055f82bd588ae2c709b88ba
TLSH
T18A517637D90084154661D684F4E9B75D80A3478BEB265C817BA061DF52D3FD5C33A3ED
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3740	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1704430598-3087477806-3297458608-1000\{19284CB0-E0EB-4F43-84DB-C3D4CED2FFC8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4452	msedge.exe
4452	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4456 wrote to memory of 860	4456	msedge.exe	89
PID 4456 wrote to memory of 3660	4456	msedge.exe	91
PID 4456 wrote to memory of 3740	4456	msedge.exe	90
PID 4456 wrote to memory of 3660	4456	msedge.exe	91
PID 4456 wrote to memory of 3660	4456	msedge.exe	91
PID 4456 wrote to memory of 828	4456	msedge.exe	92
PID 4456 wrote to memory of 828	4456	msedge.exe	92
PID 4456 wrote to memory of 4260	4456	msedge.exe	93
PID 4456 wrote to memory of 960	4456	msedge.exe	94
PID 4456 wrote to memory of 4260	4456	msedge.exe	93
PID 4456 wrote to memory of 4260	4456	msedge.exe	93
PID 4456 wrote to memory of 960	4456	msedge.exe	94
PID 4456 wrote to memory of 960	4456	msedge.exe	94
PID 4456 wrote to memory of 4612	4456	msedge.exe	96
PID 4456 wrote to memory of 4612	4456	msedge.exe	96
PID 4456 wrote to memory of 4612	4456	msedge.exe	96
PID 4456 wrote to memory of 4556	4456	msedge.exe	97
PID 4456 wrote to memory of 4556	4456	msedge.exe	97
PID 4456 wrote to memory of 4556	4456	msedge.exe	97
PID 4456 wrote to memory of 4276	4456	msedge.exe	100
PID 4456 wrote to memory of 4212	4456	msedge.exe	99
PID 4456 wrote to memory of 4276	4456	msedge.exe	100
PID 4456 wrote to memory of 4212	4456	msedge.exe	99
PID 4456 wrote to memory of 5972	4456	msedge.exe	102
PID 4456 wrote to memory of 2832	4456	msedge.exe	106
PID 4456 wrote to memory of 3156	4456	msedge.exe	107
PID 4456 wrote to memory of 5444	4456	msedge.exe	108
PID 4456 wrote to memory of 4692	4456	msedge.exe	109
PID 4456 wrote to memory of 4692	4456	msedge.exe	109
PID 4456 wrote to memory of 4452	4456	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffaa86fc188,0x7ffaa86fc194,0x7ffaa86fc1a0
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,3847032474158660052,11027436586732291507,524288 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1536,i,85940544002848764,18046738072789167524,262144 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:2
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,10094438240425210137,12808939905667288709,524288 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:13
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3536,i,634908022933909543,18656676838148369,2097152 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3540,i,3607072785024816648,9971791833407640345,2097152 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,10558450659421402119,1036443643612471044,2097152 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4160,i,18028025160826071178,17964255087547819851,2097152 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:9
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,4518166615183234485,8696846724685479175,524288 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:14
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,2726953001257764563,18047863683680022693,524288 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:14
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,10958673689896415485,3212857465220413087,524288 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:14
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,10958673689896415485,3212857465220413087,524288 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:14
  2⤵
  PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4680,i,10209824328563714517,7598885632499259648,524288 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:14
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,11513936681392358128,13302925169938518234,524288 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:14
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,8743417479949751110,11378463335176145856,524288 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:14
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,4120781876826416999,14900596125762392543,524288 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:14
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=768,i,4193777209609918299,10643067014245492154,262144 --field-trial-handle=2608,i,1836881400536059868,4856869778428170333,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4452

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5616

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5676

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1e1cf860-c4c9-417c-bd27-642956999807.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1e1cf860-c4c9-417c-bd27-642956999807.tmp
Size 37KB
SHA256 1445d2ff68b2c779b368c41646176d69638838712d4fedc01d0ab8afe605d130
MD5 c519229184982082598edc6c5f8c96e4
SHA1 72517f52ff71aea8a1725ea9985435e90bb78ea6
SHA512 35cc8830bf34afb35f1d972c32228c02aab49ab2c07ab390b8e32000ea9750c985b55d3ba860e5091300fbd98cab28da774a742ca52df3b5bb55e1759d93746d
SSDEEP 768:vw/UxvxjgC+5j36Vl+8fieOJNjFnUPO4Qp7cPAiSm2eo4w4cciGrTF5xAgZbCM3s:vdZj3+5j36/+IKjFwQpYoimeoR4ccFFO
TLSH
T13003BF75A8A4BE73DCF396843A1D6383EFF1416395C12A94CAED2E0D42877AD430BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

85e8e503-0109-4b08-9384-97edf0dd2b8b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\85e8e503-0109-4b08-9384-97edf0dd2b8b.tmp
Size 40KB
SHA256 a76bc2989c42d187d70978280473b3a12c12605d1da03c844184c57f30e12b13
MD5 99c4b2fa62917e9e9113c24b40d96934
SHA1 9261cdb233b3d59a3f3c213822aa2a81497fe127
SHA512 8d4c36a95e7aa08205e57f952ec751b6b8018a0bbe43f034aa48e04607d1978477c97b9992a75204f0b574c64ea752877e76d0d813cdf4402bb57822faa440ff
SSDEEP 768:Dp/UxvxjgC+U3Po5CKIieOJjdj0nUPO4Qp7cPAiSm2eo4w4cciGrTFlRykJfjMl:DcZj3+U3P9VWj0wQpYoimeoR4ccFFjy5
TLSH
T1B713BF76E8A4BE339CF29280760A6783EFF15563A9C52D988ADD5F0D02877AD4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 648887a89dac8888df245d8758dcd78e85ae79931c9464f19b0967fcd69c3d2f
MD5 b053e18c94ac6f6c60a9e0a281e1687b
SHA1 17ed2d8ae6844c2878132336a2fea7d044381f8b
SHA512 abf3d05979a55f573445c0c7a95529a5899c0d9f55f350b3eb35132d8502e23e6c764ffc98e92f4374754aa22e9292fd03f8e6e8113c0e919f428e797e339bfa
TLSH
T151D02BB9DFECCD62D54820B402508E116095B4156D490040D903BC04DD110814D03569
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 68f353a62995fc87917d7d1eef768abe00ffab02e1d3e469100f99b6987f6488
MD5 5ba62d3fe2ddefdf87e8dd139f3e421b
SHA1 1986deda7bda2ac5b490eacb9fe2784fb6d01648
SHA512 4e6a767b24298d2e01c8dbefa41509e1bc67cf2c2f34fd0bf866fc1017e1d15a470a5a95feb8ee1cccf4b8ccf5fa9054bcbb93919c00de89eeffec199b68baf9
TLSH
T19CD02BB5DFFCCC62D54820B802518E116085B41519490040DA03FC04DD110814D03555
MD5 SHA1 SHA512 TLSH

Submit Download

18360a86-6011-4896-9df6-0a8c35f8dca4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\18360a86-6011-4896-9df6-0a8c35f8dca4.tmp
Size 11KB
SHA256 6c745f79d6c2c8640d249050cace39f2793cf5fe9e6116528cd23862bef5cbac
MD5 cf0916af79249904c7f2027cb91ac22c
SHA1 0da81ca1a576203bee20fd3cc09950ad60b5c927
SHA512 b9547a431fa1febf56e08f4510492d329968d8d69ad47ba1cbbe814c68bf3bf86167153a7626c69ba9732a611eafa28459e0b8699cf1926e90b06c6d7e6eb5bf
SSDEEP 192:sxRVR3bC/feJsTmzoA8p4M/g6+WNIYcvVXMiTgGHgCIgDkJ:sxRVZC/feJsTbl/5I98iTDgCs
TLSH
T1F4329615AD28B93B8CCBD20DBB697F53D2F95132A0951E48A6FCCA1C15E76ED220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2116d3bc-52ef-46a1-b549-33c83b871e34.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2116d3bc-52ef-46a1-b549-33c83b871e34.tmp
Size 11KB
SHA256 a2a03300784a6c06ea1bb19b33e591ca5c25773378e8fcaf9192df05a55e2c70
MD5 e0f602f80efd6c04dc5d3e7cf1091271
SHA1 554bb19123307a163509a30941d137ebf7d375af
SHA512 81ac29ea6b7038ddad7088190ba2feff7582e7f5f24409e602cc3b5e46e050d84ab705dfef343b0f50d31cabdbb03ac607d477e68ef4ed3318667beda5c80a36
SSDEEP 192:sxRVR3bC/feJsimzoA8p4M/g6+WNIYc15XMiTgGHgCIgDeJ:sxRVZC/feJsibl/5Iv8iTDgCu
TLSH
T1BD329615AD28B93B8CCBD20DBB697F53D2F95132A0D51E48A6FC9A1C14E76ED220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

625e498a-eb93-4e01-b24a-0b1719a09d9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\625e498a-eb93-4e01-b24a-0b1719a09d9d.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b7e7a27-854c-4216-99b1-1551db4c79f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7b7e7a27-854c-4216-99b1-1551db4c79f6.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 1ec276dfba6216e408f5b48cbecd2deacbac086a1338b8d6aeb2cacf084de26b
MD5 17afbfd09ef4f6d1cc4a84487d206606
SHA1 b9ab2c069be3381a1fa9e9f838abd599c6c9769f
SHA512 3234fd40f094abdd8781ce0238ad6b60479e65ed867e64ae4d4a96abef1e8eb216dc97358dcc640f7edb3d77ade113c0a2a4580a0726ab3828d7f8ddcb2d5e36
TLSH
T101615B864FA16CD5D39C87FE81C344C6B73147B51A830FF10E98C67F49C2B6DA106819
MD5 SHA1 SHA512 TLSH

Submit Download

d16304cc-a22b-4c0e-994d-d6d198043d7f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d16304cc-a22b-4c0e-994d-d6d198043d7f.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3b85be14-ba4c-4398-96d2-4d001f53c9af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3b85be14-ba4c-4398-96d2-4d001f53c9af.tmp
Size 1KB
SHA256 e6d4e933404f51ec3f78b03a4a55dea31913cbbdcf30f8eae951cd9a2db88cbe
MD5 3d567db3c6d41f5bdf52b4ed6a5e4129
SHA1 57723745e0b6a838cd8a40d0a88b3b1d9b6f79c3
SHA512 c84a7103cb18dd714ad5078f945992b90b519de069106a990575c7aba8145f95e0c16631f80ce58f1f3bc2ba2261f939281de6b457701e734bed3c1badf0aa44
TLSH
T1F931C2F787B5957ECA0196F0BA14AE1FCE2D0515432C786A85E09E27D3F3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

fd7ee055-dc48-4a0b-bc66-678e14f467c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fd7ee055-dc48-4a0b-bc66-678e14f467c9.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 10f851fa81ee646161cab8308205cd430167c3dbc148574709c487e137fca10e
MD5 9fd3153e02f809d4e3fadc1230a2afe8
SHA1 71a6afe795697d41989aa660151afdd24d5ca73a
SHA512 b98e7594cc29a206b04de9ea00eb44e344c6908aca0dc909a85c42374eebe7b8ea855955ac4f0c5a73bb6341a1111f68cb86364530bd91bfbcc498fa3ef2527b
SSDEEP 96:KyU9m6U2Wx3ansFyxKN4F0xpME/yWSWTiK4wfbeXrlpdU9JwfnjUKvRndUDrrwFf:LU9m6U2WpanmyI4F0vME/yWS1kbeXrln
TLSH
T1A1913E15316A02427C7E690C90D5EB1B868235B73078E52F7FEA44A64A6BF081DFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

cc8ed47a-9e32-47db-afe2-81c9eeff0004.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cc8ed47a-9e32-47db-afe2-81c9eeff0004.tmp
Size 23KB
SHA256 ea124594040e0acefb44e8ee0cdfcd1907c6e45c85b0b59b7572b66e6f5a61a3
MD5 08c7332e8fbcb81455b6dabd5cca508c
SHA1 4ef14e36b78ae6ad0f2a277b12a8843b5d258965
SHA512 8669ec9850419f6092395b2c3e1dadccfa883be2cdba0efd8927334d474d7c0b04320cd6bdfbf522d974ef5171989c4da77b8e19cbd7387dc7673142b5e1c314
SSDEEP 384:D7JakElfCtg17Ff9tKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXn975RwBroMXP:DFakE5Wg1Bf9t8F1+UoAYDCx9Tuqh0Vb
TLSH
T192B2CA3F744CC77E8F804A9DAC196F976D9802C79A588D4047FE994C03C77EA92294DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf916540-4953-467e-bf88-378e7263ed64.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cf916540-4953-467e-bf88-378e7263ed64.tmp
Size 10KB
SHA256 0135857f398cb2a7faf5e076cd2bee880d37045861aa9abf14433ad17858ed76
MD5 f24f2c6d161a3b0cdecdb9529949454b
SHA1 e8b18d73a2f4b84c4bab9a2ae66e9ca84971f33d
SHA512 e03c00b3ad11fc8408401a49462a28f747a9c29964761ce314b852b736159f26f23ee7cfa89c53a04aca4d95d9ac5a632eefeaf24b57b8961128a6738a60285d
SSDEEP 192:sxR2R3bC/feJslmzoA8p4M/g6+WNIYc15XMiTgGHgCIgIJ:sxR2ZC/feJslbl/5Iv8iTDgCs
TLSH
T1FE329515AD28B93B8CCBD20DBB697F53D2F95132A0D51E48A6FC9A1C14E76ED220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5acfb3de-2867-49cb-af5c-b55130f730c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5acfb3de-2867-49cb-af5c-b55130f730c2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b89f16d1-c60d-4e89-a76c-4102d748ee98.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b89f16d1-c60d-4e89-a76c-4102d748ee98.tmp
Size 34KB
SHA256 a3b4415a28303bb3c37903aaa9190cd191945a4edf1321f2b64e13c8fad7b3ba
MD5 bb94b462d3ec750422f3e3e8c5add0cf
SHA1 98bd803a9a8ab6bec716b33deace6554112b3bc3
SHA512 706c4a75b6bae487d2035cd4f8b8676615a582db085c88107ca8b98487aa7dffe9c59d09d4d118b2f9a3b03c33b6aac3cbb2b9549b692f9f412638ccfb0a1b8d
SSDEEP 768:De43a5JKIieOJjdj0nUPO4Qp7cPAiSm2eo4w4cciGrTFlRykJfFLx:De43QVWj0wQpYoimeoR4ccFFjyQfF9
TLSH
T1C1F2BFB1E8A4AF739CF2928176197683BFB09213D9C51E94C6C96F5C02873AE1357C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bec02359-8930-4462-a207-d673bd2abd0a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bec02359-8930-4462-a207-d673bd2abd0a.tmp
Size 34KB
SHA256 50127a1963e0cf51de133eda0605d33b835ad35160a0ecaf33b139352cacfed1
MD5 1d5ddc931d7ea2a693daaeba6a91bb77
SHA1 e9a55c181524e899f711f030d35f43c1a159ecb4
SHA512 1c219df5bd5904ecbe9594521e9f1a1f0bd5ecaf301e6e5f0dff22f79f131ada15d8ace6955507be7d92ca63a02a604bbee9442f2d0c3d303b5cc8b8c6a6f329
SSDEEP 768:V43d5JKIieOJjdj0nUPO4Qp7cPAiSm2eo4w4cciGrTFlRykJfFLx:V43FVWj0wQpYoimeoR4ccFFjyQfF9
TLSH
T167F2BFB1E8A5AF739CF2928076197683BFF09213D9C51E94C6C96F1C02873AE1357C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ea1ee8b1-3b02-4deb-8d19-1ff94b0cd915.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ea1ee8b1-3b02-4deb-8d19-1ff94b0cd915.tmp
Size 36KB
SHA256 2a35cf76398896d1e9eefb6a74618cb6354465e848bc09dfdd2f531aa363f6f2
MD5 a92f95475d0b15df2220fd059afb4b3f
SHA1 8b18a315c68f9ab820254e828b71049153600dbc
SHA512 b1ba00dd68c6f7da97b447e3450796c177d67e696818e9356b2e64324a357fc1d42377dc1e81f6e4700b7eeff54fcc6141605f453523cd0f6e097a30c34be4b3
SSDEEP 768:aFdP33wgF5JKIieOJjQ0nUPO4Qp7cPAiSm2eo4w4cciGrTFlRykJfFLx:6P3PVX0wQpYoimeoR4ccFFjyQfF9
TLSH
T1A4F2AEB2A8E4EB779CB28B80B61D3682AFF14263D9C51A94D7C96E1C01872ED1347C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4460f6d3-41df-4b02-80ea-256f9665db12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4460f6d3-41df-4b02-80ea-256f9665db12.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fb5be973-784c-4059-b898-2e7495963f2f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fb5be973-784c-4059-b898-2e7495963f2f.tmp
Size 38KB
SHA256 57f9891fe3c60a71776f8da3f008001fca3cdf7d31dd45da0e78482c386de97b
MD5 a0af5dde835427097c5970abcde7f2fc
SHA1 a10885cfc10c4165d5091ad72dd7521423bea71c
SHA512 0db45ca66742d3b60f1464038a55150e4b81417b86670a2f1766c0e30ebbc51256b3c6bb1c2ff9d96e2330f6b21c66074bb9ca585daa7e511dfa99315c5b39aa
SSDEEP 768:v3/UxvxjgC+5j39VaR8SieOJjdjFnUPO4Qp7cPAiSm2eo4w4cciGrTFIRAgZbCMc:vqZj3+5j398RxWjFwQpYoimeoR4ccFF/
TLSH
T1D703CF71E8A4BE339CF29785365D6383EFB1416399C12DD4CAE92E0D068B7AD430BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download