870e564cc1eb5f0ccfbdc886162491d54c1be284cc1217ce3c6ad1889435168b

Analysis

max time kernel
149s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 07:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 587KB
Sample261014-jletksh19l
SHA256 870e564cc1eb5f0ccfbdc886162491d54c1be284cc1217ce3c6ad1889435168b
MD5 d0c33ca44f6abd5c4603aab893a0efe7
SHA1 e8ac29df4af85a3260dd105e1e6bf476d8aaf40c
SHA512 a5ac8f54be2fa7ddf3784153611709a16abec20f1177a9f6ff6b695319b15d4191ad90b8b90f3a2e20d0acad0cf09a5ba724a0c342772942c2950216499becf7
SSDEEP 6144:iQak4oKWp/cN41TDULcataiiu36RW0QE4yfhsz47ic8n:iQakGWyNFLeu36G
TLSH
T109D428B2BE6B5839211F21CFA02A3F4C6156D397D64996F0FAFD04286BD4CA43B5325C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4936	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714045687-1127350534-2056456672-1000\{EC7473D6-8585-4518-BA2E-B1C98CECF89F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4820	msedge.exe
4820	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe
2552	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2552 wrote to memory of 3364	2552	msedge.exe	90
PID 2552 wrote to memory of 4936	2552	msedge.exe	92
PID 2552 wrote to memory of 5800	2552	msedge.exe	93
PID 2552 wrote to memory of 6012	2552	msedge.exe	94
PID 2552 wrote to memory of 5800	2552	msedge.exe	93
PID 2552 wrote to memory of 5800	2552	msedge.exe	93
PID 2552 wrote to memory of 6012	2552	msedge.exe	94
PID 2552 wrote to memory of 260	2552	msedge.exe	95
PID 2552 wrote to memory of 252	2552	msedge.exe	96
PID 2552 wrote to memory of 260	2552	msedge.exe	95
PID 2552 wrote to memory of 260	2552	msedge.exe	95
PID 2552 wrote to memory of 252	2552	msedge.exe	96
PID 2552 wrote to memory of 252	2552	msedge.exe	96
PID 2552 wrote to memory of 4628	2552	msedge.exe	97
PID 2552 wrote to memory of 4628	2552	msedge.exe	97
PID 2552 wrote to memory of 4628	2552	msedge.exe	97
PID 2552 wrote to memory of 1212	2552	msedge.exe	98
PID 2552 wrote to memory of 1212	2552	msedge.exe	98
PID 2552 wrote to memory of 1212	2552	msedge.exe	98
PID 2552 wrote to memory of 3200	2552	msedge.exe	100
PID 2552 wrote to memory of 3200	2552	msedge.exe	100
PID 2552 wrote to memory of 2068	2552	msedge.exe	101
PID 2552 wrote to memory of 2068	2552	msedge.exe	101
PID 2552 wrote to memory of 4276	2552	msedge.exe	103
PID 2552 wrote to memory of 2576	2552	msedge.exe	107
PID 2552 wrote to memory of 3704	2552	msedge.exe	108
PID 2552 wrote to memory of 5532	2552	msedge.exe	109
PID 2552 wrote to memory of 3752	2552	msedge.exe	110
PID 2552 wrote to memory of 3752	2552	msedge.exe	110
PID 2552 wrote to memory of 4820	2552	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffed4f1c188,0x7ffed4f1c194,0x7ffed4f1c1a0
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2024,i,18353811433214386588,2774590818106311382,524288 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1924,i,4188102715751747668,14592150970405205925,262144 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:2
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,3345254465918188796,8449294069240152855,524288 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:13
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,14246642969917070148,8919028190767104532,2097152 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3640,i,3272036282584865433,2118978555429559578,2097152 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4344,i,5573934621716651107,4445353885249881838,2097152 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4356,i,18142400281171355295,11029775407311835759,2097152 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:9
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,14908006194412160641,4140105465010689959,524288 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,11361583198580585796,8313881046445862335,524288 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,14599677167081913615,3343864339442160568,524288 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,14599677167081913615,3343864339442160568,524288 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1176,i,15214749662500550273,2978555657269737767,524288 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:14
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1228,i,17060655322520703766,4632532574867612008,524288 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=1348 /prefetch:14
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1232,i,2200528657599713717,16257108873490611431,524288 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1412,i,4935553712830310867,14516025045818100026,524288 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6216,i,8517407404384046334,7083406893488437759,262144 --field-trial-handle=2636,i,10665803760352405939,15554154756658155787,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4820

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4532

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1484

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2c8904e4-f0ea-4a80-ae30-5b265cc92e8f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2c8904e4-f0ea-4a80-ae30-5b265cc92e8f.tmp
Size 34KB
SHA256 f8a971fd958d05fbcd9bae35093c0d8a7b69c677ef2183d3381eb3038fd0eead
MD5 be32f5207d066f63056cfc7f47b7b693
SHA1 ed40e289e7a2e19761d2ca1c2e9f1bbebb7a87f4
SHA512 d254cd7c6fa90f5ce7ae684492965730f51e4edf17671c24ba28461512129a46f1c052e23f9e2d6cf9787e5966462079b144723b758c9be1e5c1bedbbc3584d8
SSDEEP 768:p93Hze1iKnJXUa0xDc9bsMSJz/Fn/cykJ1C4:p93s5ULVQbs7JTCyQr
TLSH
T1CAF2C1B1EC609AB3DDDA5781AA8B76027FF44613D6C91A8895DE6E0C02973ED1307C29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56c0ce37-6bd9-4483-941d-e1773d693cf9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\56c0ce37-6bd9-4483-941d-e1773d693cf9.tmp
Size 34KB
SHA256 5a0f6c342828ea262afeaca51790c431753e47d6b15809a58d574d09cf1805dd
MD5 110a5a3de9a5a75e1bd2deb1434230cf
SHA1 0315ece38f30e55a71999155e759dcfcb963e5fe
SHA512 162c3f6d2c4a043961e5967e7e3866ee14078d6b762580098b2b933530f0aea4e19583dc6655a9603a75c5193be5459c9a0d7a6df5b6172fe3b4b4def503922d
SSDEEP 768:D93HGe1iKnJXUa0xDc9bsMSJz/Fn/cykJ1C4:D93R5ULVQbs7JTCyQr
TLSH
T12DF2C0B1EC609AB3DDDA5781BA8A76027FF44613D6C91A8895DEAE0C01973ED1307C29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

57ed527c-6a2d-490f-a093-98e8aa52ff8e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\57ed527c-6a2d-490f-a093-98e8aa52ff8e.tmp
Size 37KB
SHA256 3852c66399c105ced2bbed0ca32ac148fb1a07e78d9a504715ed0abafcd20c27
MD5 412323e91bd4d65d2c4b7823feadca97
SHA1 adc80d59cc0860f213b7badb7d4b223eb7a15756
SHA512 4aadb40d5532d144463846c3aa63d16f5fcde8c9d527bd361257caf9454fc4376ea1fc4faaad65287214bba46e2ec016649f5a48505b044eccd09be87401b276
SSDEEP 768:z/UxvxjgC+U3I9KnJXvxDc9bsMSJz/Fnn+SHXPyK/:GZj3+U375vVQbs7JT0Sb/
TLSH
T13903C03AEC9058A7CDE767803A8AB657FFF44953C5C629A845DE6E0D07CB3AC1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5adc11f8-5058-4fc9-8041-94fead58e47d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5adc11f8-5058-4fc9-8041-94fead58e47d.tmp
Size 39KB
SHA256 27b38525dc70086e0194d2214294e3a7842702dc7c89f76f0b372834c5bf6b22
MD5 295e9f6dac0ddba1e245c1247fe3c028
SHA1 8277779ae8948b20bf868e8c5c43977b6e2ea3ae
SHA512 4117ac4b476079361d5083dad47123f462ae230671f690dc1c9a4697e5a6dbb5c1c7e0b80e0655567211975c8e8158ff565a09d72dee1adda94d54a02de62c62
SSDEEP 768:1/UxvxjgC+03HzeFiKnJXUabxDc9bsMSJz/Fn/cCm:YZj3+03u5UGVQbs7JTCCm
TLSH
T1FD03CF35EC606963CDE6A780768E6647BFF40A13D5CA699849DE6E0C07CB3EC1307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76724961-b80a-478e-a366-048362333715.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\76724961-b80a-478e-a366-048362333715.tmp
Size 36KB
SHA256 e0cf7ecb8d3c915e72a450925adb13ffa74b8524f8d263e0db248468ede9aca9
MD5 0fde1c34e32acab7925dde29bf2e61f1
SHA1 9b2f048ddc2b02bd821db09e22af142d0ed071d1
SHA512 e0a22a90583a963326658a4f931f2c5b3f65f068962adc1c60b6d60ec307c0f89dd7f5f7108dcc5154b48033cd707788aaf64da5e9a06090cc9c7ac6e25c2bbc
SSDEEP 768:RFQo3HswgFe1iKnJXUa2xDc9bsMSJz/Fn/cykJ1C4:go3v5U9VQbs7JTCyQr
TLSH
T133F2C172DC90CA77EEDA5B81FA8E7602AFF44253D6C56684E6DD6D0C01972EC1307C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

79b5a6ea-5003-4bf9-9f4b-2789a7a6dcd5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\79b5a6ea-5003-4bf9-9f4b-2789a7a6dcd5.tmp
Size 38KB
SHA256 06b8d689b6d1c0b14b9d48f367ecf9e4c4388e0816bff6a878f3d93580671c5e
MD5 1f3c33961e58b92af507ec8bf3cbe0b6
SHA1 dd23930b7e72cf98a37710b7e4383881d4905915
SHA512 7dba2cdf7d761a46c62a5eee78647b2a70a96f1bc4ce595cd277ba59b99cfc552690408b9e98408fc37ff65968b92c53dfcddf763bb296d05299cd44c2854dc7
SSDEEP 768:D/UxvxjgC+U3Mw8KnJXUa5xDc9bsMSJz/FnGcSHXPyK/:WZj3+U3F5UaVQbs7JTZSb/
TLSH
T11803C039EC5058A3CDE767807A8AB647FFF44A53C5C629A459DE6E0C07CB3AC1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 355a29997d085f70c135b61fb8e48fe3b3d9b6030190662c9d930bd533b88c78
MD5 5121c8953b32388eb96bb70d0d12fd00
SHA1 e62d74f75b188deb1ec8b8dabcff7c16e7ba9ba5
SHA512 c8f0ff682c9ed7e02559e599a97078b0a2e39f928b301598e0196d5d9dd6ffac13da9bd34262b0120793cb2472ac6c7a93a178d4abcd0a5a2c6df1e9a193de10
TLSH
T13CD02BF4528C9C63C4CA30740425458100263401B948D2903501478849401B914433E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 97f58c0ff1008d9a744980b06de74b1bc42fdd2408c0871566ecacc80738c498
MD5 ffa34db42a6c31e411546fdfd8772d96
SHA1 cd3fa45407492f90d8b070cf009147d20a8b4151
SHA512 72fd2a1188869d257eaee37d23569752bb0744ad1a5cad19b6a4b2e60f4d5f74f1ccf0a0b24a6e31d4d512e939f7b384fb86433ec7496296acb712e8334d5e32
TLSH
T18BD02BF0529C9C63C4CA307804264581001634017548D2903601878849401B914423D3
MD5 SHA1 SHA512 TLSH

Submit Download

363841b4-f321-4731-925f-26ce1389f42b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\363841b4-f321-4731-925f-26ce1389f42b.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

52dee4e5-ea50-4c5f-8496-098893764a7f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\52dee4e5-ea50-4c5f-8496-098893764a7f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

761e1452-c105-45d4-81ef-80b2d4a67f21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\761e1452-c105-45d4-81ef-80b2d4a67f21.tmp
Size 10KB
SHA256 65f792ed5ab623da2726a339526441ea87ad26e664d2afac4a2f617787fe8bc1
MD5 b3a6f457b0a18895f3f18aceb0669f85
SHA1 d9863392323da2a341f49e44a02b652896899fb0
SHA512 f28f5497a0c555c06bd6f31447bc7dd98769c10c9c6b54e78470974f299a5f659145736e5c4447905e7a3073efffdf5396c28925bce5a164180a8faac3b2bd70
SSDEEP 192:sxR6Rgbi/f1slJFxzoA8p4I/g6+WNIYt7Vj+G7IgD/J:sxR68i/f1s3Fs9/5IOl1
TLSH
T186329515AD28A93B8CCBD21DFB59BF53D6F91132B1912E48A6FC861C04E76DE120790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94c5169a-4d4b-4683-a1bb-574e985d8c9a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\94c5169a-4d4b-4683-a1bb-574e985d8c9a.tmp
Size 23KB
SHA256 739694f170820fb1710aed95c05196217331cd3601df5054a586f558de642715
MD5 9e3358aa8e31561939c8e30828674a87
SHA1 b3cf1ca8e826d41a4899026612f3af9743ec9481
SHA512 78dae5bab3c28a3bc256f265c1f34cc1190c77f2d729be38ecaa87c9e009c1cd57d0810f72ebba43ad6342dff4409b59933c10f4ef9bef547eda411e3dc9a06c
SSDEEP 384:dFIGx9efCtgmkFfk6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV6W9G+RhKromLc:dmGx9sWgmMfk68F1+UoAYDCx9Tuqh0VG
TLSH
T13CB2CA3B644CCB7E9FC00A9DAD196F976D9802C79A588D4047FE984C03C77EB921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 c39656fd3f255e909021550f8aa2847720fc22ef6d4e0fd2c067978a29e270a0
MD5 51f6166418397d32b3dbff3cd34c6662
SHA1 a69e70d610a5a80ab57e93581934834995fdf5bb
SHA512 2b19d19b66b39ac262070498ce5c3ee464ed4113c07fb6f6b01547934f99389da19f2cae06076cf8a221656472fb58557e4b8286c319810231c6b613825e69dc
TLSH
T14D616240DF908275F7B8003380D0FCDF363382B699471D5E1659D5B8994E7B583B5597
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 484c06773773dbe0d9dbeb0ee2160dfc11da82bd138724d1c908909399df4407
MD5 97b1bcb782a4813bc0d521f563387479
SHA1 3fcdf863e7ee9e6de84d232ac806a07f57b8e796
SHA512 0d78730436f117b710800b65105be33b2acda6b9d0d6b0bc73a802da556c0f5d7c270a31b3db20f0139644caae16e96e06c39b3340bbd57f4903536331892f7f
TLSH
T117615040DF508274F7B8003384D0FCDF363382B699471D5E2659D5B8994E7B583B5597
MD5 SHA1 SHA512 TLSH

Submit Download

fb8f241c-0abe-480f-85f3-c4bf131cad7f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\fb8f241c-0abe-480f-85f3-c4bf131cad7f.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

02a44f22-fec3-4875-8f7d-660d25098d42.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\02a44f22-fec3-4875-8f7d-660d25098d42.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

0dc99239-cbe5-4c8a-adc5-dd619cd33795.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0dc99239-cbe5-4c8a-adc5-dd619cd33795.tmp
Size 1KB
SHA256 cba52682a3a433070b1909ff6802cb337f50da0dbcec57d8e130cab5d46d23d6
MD5 8e3cbf5a04db174679bab8b31482ee7c
SHA1 159f6a8dd9a871899f0e45b21a56a84d26bfa158
SHA512 21c1c74d143750b9c2bc05161ebe1b23a4c0eb789d7c25039dacd440fc6cedb8ac46377c210190b8e03bcc23ab10d7e3cd399d90ee28449a811f33798d065eea
TLSH
T177219EF7C2F4567D8A4152F867142E1BCE2D0914931C3D9AC8E49B5B93F24B1D250A5F
MD5 SHA1 SHA512 TLSH

Submit Download

4a6c1b97-1c35-47e3-a618-f08e87852737.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4a6c1b97-1c35-47e3-a618-f08e87852737.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

fb1f4e1c-5092-4a19-8ff3-52d98a91344e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fb1f4e1c-5092-4a19-8ff3-52d98a91344e.tmp
Size 3KB
SHA256 582c82c8e635726a7d48e22dcff01fb2b970decd1eb89c4a1f5ca9c0542d0b70
MD5 98f5ae6380b40288683ceee5cce98b16
SHA1 00148f144cf08b5aafb676ec69db35895a071022
SHA512 be60be1d21e02f39276ba0ac8d5d1657b357be4e40f017efe87af8eff7976fe67d6d85f3d7aad43132825706e9a8ce328581ff17b8729b427b0d339a4e1baf87
TLSH
T17C61C1F7C3E4863E891556F09B147E2BCE1D0516422C3C5A89E8AF2B63F24B1D14276F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ef25b91ffb6223617dd7b7b391ec51b6eea0bd20e61a414b1d78a8b3aeef4fbd
MD5 f3554eed40ccd4673e454f34df1f7341
SHA1 95a3a0d362d3907abd62d6bb5a80ba9b8eac2ae6
SHA512 072febe9089bd88e53070fa8e29c034043e459005cba3a077e99a069f13d689190c8e9fe910da8c58ef95ad8cc761fe8f205e1998646d72ddc4d03e90a08cb2c
SSDEEP 24:KDjRA/wA1DPfpiD5UkI1LpKI2hA9p1+15S8rGuW/ayXCSyRS7S0SPASEDSCSeSgV:Kc6IfKnqs3yBgILKFycBBIxKCM0jyS
TLSH
T194919360327B5642787E361854A5D79B139272B3302CE5AB7FEA41628E2FE041DFC8DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a055e20f-834e-408c-9e32-8b0fcbdeab1a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a055e20f-834e-408c-9e32-8b0fcbdeab1a.tmp
Size 10KB
SHA256 1bd27c4751b4d654a8010bdc41d953fe66d9f2b5af55366b7dd2634d5c31f9cf
MD5 d369c5c4aaa9fa57b7d62e9465de4437
SHA1 22c1388290d5f2caf6387288e5ab508da726b7de
SHA512 6a60a329baa14745daa58662db6edaf6de6363b80d6e305b4c03c9987a9200337f49bd07cce434d02dbfe30882ebd5eb8f919802d38e2bea7c45dfce258fbc12
SSDEEP 192:sxR1Rgbi/f1s/JFxzoA8p4I/g6+WNIYt7Vj+G7IgIJ:sxR18i/f1sxFs9/5IOls
TLSH
T13E329515AD28A93B8CCBD21DBB59BF53D6F91132A1911E48E6FC861C04E76DD120790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fb5dfc8e-878e-4bf1-a974-748f9bc671d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fb5dfc8e-878e-4bf1-a974-748f9bc671d6.tmp
Size 11KB
SHA256 5ec73e98c3d1ef4b1f2f30e8464140f06877898c4b2584d23cef1922e03f426a
MD5 ab75cbf04155603c4dd5168242b00fc5
SHA1 ef1fd142e36a0a8f8c6feb1f2dde18353054d5bf
SHA512 94a799372a9e4f6a6efaa0ab824497e503dfd3bd428a5cc7eabe9ac0dd5b4ea626561772f1bf123f66be95937268942752a9415c6773ef9cd300e09d94e09e67
SSDEEP 192:sxR6Rgbi/f1sl0FxzoA8p4I/g6+WNIYtglj+G7IgDhJ:sxR68i/f1suFs9/5ILlv
TLSH
T13F32A615AD28A93B9CCBD21DFB59BF53D6F91032B1911E48A6FC861C04E76DE220790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd0665e0-2a45-4be0-a6d1-254d46a9e940.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\dd0665e0-2a45-4be0-a6d1-254d46a9e940.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download