34a23bfbed7749e318a5ddf14d50addcee1441692bc3297b2115fe31ec372582

Analysis

user interaction
yes
max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/10/2026, 16:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
company-it-contracting-company.html
Size 5KB
Sample261015-tkcb6syvax
SHA256 34a23bfbed7749e318a5ddf14d50addcee1441692bc3297b2115fe31ec372582
MD5 33ed5bdf85331a8042b1c058d2553b5d
SHA1 6a56892da40c49279b343ded147a3dcf45937200
SHA512 83c6ea502d280fa6a9a565387b2f7a38a9109830770de5f7d8cde0fee2838c30be214adcfe6be54934475863e131447ad876a69fdf3fa34621906286c5c4cfdb
SSDEEP 96:2qWsQ3lFPlCZUxPEONy7qL46KyJvQ8v81KCF57QaUyray+NyXwgCOz:YsQ3lFP8ZyPEONyGL46KyJSIaLaydgg1
TLSH
T1EEC163874DB300212913D17C2FB6630AEA799103A64ED9403E5D17948F95AC9BDFF7C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3040	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4057491610-3392471755-192832105-1000\{998AE1BF-30BB-481A-BAB8-E2321A7BDFCB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3196	msedge.exe
3196	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 5876 wrote to memory of 4344	5876	msedge.exe	90
PID 5876 wrote to memory of 3040	5876	msedge.exe	91
PID 5876 wrote to memory of 6096	5876	msedge.exe	92
PID 5876 wrote to memory of 2180	5876	msedge.exe	93
PID 5876 wrote to memory of 6096	5876	msedge.exe	92
PID 5876 wrote to memory of 6096	5876	msedge.exe	92
PID 5876 wrote to memory of 2180	5876	msedge.exe	93
PID 5876 wrote to memory of 5340	5876	msedge.exe	95
PID 5876 wrote to memory of 5340	5876	msedge.exe	95
PID 5876 wrote to memory of 5340	5876	msedge.exe	95
PID 5876 wrote to memory of 5964	5876	msedge.exe	96
PID 5876 wrote to memory of 5964	5876	msedge.exe	96
PID 5876 wrote to memory of 5964	5876	msedge.exe	96
PID 5876 wrote to memory of 5812	5876	msedge.exe	97
PID 5876 wrote to memory of 1064	5876	msedge.exe	98
PID 5876 wrote to memory of 5812	5876	msedge.exe	97
PID 5876 wrote to memory of 5812	5876	msedge.exe	97
PID 5876 wrote to memory of 1064	5876	msedge.exe	98
PID 5876 wrote to memory of 1064	5876	msedge.exe	98
PID 5876 wrote to memory of 4568	5876	msedge.exe	100
PID 5876 wrote to memory of 4568	5876	msedge.exe	100
PID 5876 wrote to memory of 5056	5876	msedge.exe	101
PID 5876 wrote to memory of 5056	5876	msedge.exe	101
PID 5876 wrote to memory of 1940	5876	msedge.exe	103
PID 5876 wrote to memory of 4564	5876	msedge.exe	106
PID 5876 wrote to memory of 4564	5876	msedge.exe	106
PID 5876 wrote to memory of 4564	5876	msedge.exe	106
PID 5876 wrote to memory of 4332	5876	msedge.exe	108
PID 5876 wrote to memory of 4124	5876	msedge.exe	109
PID 5876 wrote to memory of 4244	5876	msedge.exe	110
PID 5876 wrote to memory of 2604	5876	msedge.exe	111
PID 5876 wrote to memory of 2604	5876	msedge.exe	111
PID 5876 wrote to memory of 3196	5876	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\company-it-contracting-company.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffe3edac188,0x7ffe3edac194,0x7ffe3edac1a0
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,4671274396222860783,11970526307931755446,524288 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=2836 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,10935292000003676241,9832889975555060966,262144 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:2
  2⤵
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2228,i,8513751977924821252,11755833301894685880,524288 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=2860 /prefetch:13
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3676,i,7716208373824494435,11334986233157771422,2097152 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3680,i,3632660917145049258,15466529115659569479,2097152 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,11552614022833032734,5139697100387004823,2097152 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:1
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4356,i,6395899421120824791,9040155498499542569,2097152 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:9
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,4053775065820936740,2410941960352496977,524288 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,824522791407680014,3115983768528408672,524288 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,14680734538118426514,5181400674385258734,524288 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,14680734538118426514,5181400674385258734,524288 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6496,i,5497256780663564405,15751450595382072748,2097152 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3864,i,9383765289344061017,1588276957077459980,524288 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=3904 /prefetch:14
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3928,i,5123808464710602105,3011486981809999840,524288 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:14
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,10452824567066909786,11404071932295465703,524288 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,17112938096021622590,9414581662798490920,524288 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:14
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6432,i,785490832383210244,6098258922093393976,262144 --field-trial-handle=2620,i,1023570044928834011,10857806187803277191,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3196

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1988

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3724

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2dea9a01-402a-4f87-b48d-f0908065bac2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2dea9a01-402a-4f87-b48d-f0908065bac2.tmp
Size 37KB
SHA256 4835d97de65240a20014168c0f4acf0e365a6b627721759fda6c47a5fa112b19
MD5 2053392eb5618f18ac21c6aac514fea7
SHA1 f317264739c6a632132b4431158eac43dd8a73db
SHA512 09192670c1d12e1a02e27ae2acc68ac2b12c24f4adcb71a50d8e07425b0836275b6b0962154d35ba0efcabf20d9c050199ccd3931db416feec5c95b6df599f22
SSDEEP 768:A/UxvxjgC+I3LuDKv3E57Y0GZxJsXBdK8lpSHUPpMs:tZj3+I3u70/JsXf7zSfs
TLSH
T17603C034ECA05D775DF793903A0E7397EEF446B3C5C55A688AED6B0D028B26D030391A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38583cfa-5c62-49e6-8620-35605333c6b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\38583cfa-5c62-49e6-8620-35605333c6b9.tmp
Size 38KB
SHA256 82476388b725fc3a7efd742d3c56b525bccb15880d46482e821639e8c3415069
MD5 ec87ef4fc235e400e3da864ad1a01551
SHA1 29cb0ce186979bf0ea31b904391493ece53d7a19
SHA512 6c390a269996ab77556ed32b5d8c66b4950add50f54fb52db5718f3546184ca260b1899b1e7b52e7e8c181aedc5790edf3e3e2d1a6ac9a11157dcff794f19c82
SSDEEP 768:X/UxvxjgC+I3GuYFKvHEE57Y0GZxJsXBdK8E8SHUPpMs:KZj3+I3pT70/JsXf7NSfs
TLSH
T15003C030E8A49D775EF7D3A0360E7347EEF487A3C6C51AA459ED6B0C018B2AD034791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43c0a49b-73dd-4ef6-90a8-14d6d73c86f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\43c0a49b-73dd-4ef6-90a8-14d6d73c86f9.tmp
Size 41KB
SHA256 c0efe6f752e71a191b9305f315a593d1a41ee003e2e5542a7a91eb1e7b4f0c0f
MD5 8d5740ad4cbe4734d69f4a82799b0ce3
SHA1 5b89db092e3338e2179956158c8821cbee123d40
SHA512 1fc7aa43093da5280fff159f2591a4f8ec1569affd3faaea039c0950669de3ac77c5a4b53e910016f23048757c4ef62c4c41349620a500f00f0671e23387b824
SSDEEP 768:kFd43awgUSKM/KvHKE57Y0GZxJsXBdK8Z8xTyLf:I43FjZ70/JsXf7Wgz
TLSH
T1941349F158D38A36CAAE8793673D2E429EBCC263B5854A54B7C95A0CCC871BFC307915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4a061817-d79a-430f-9931-1117505f4570.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4a061817-d79a-430f-9931-1117505f4570.tmp
Size 34KB
SHA256 d554637262a0dd3432476928e97e9a71cbaa8f9e8fe96c802fe0b207e21c5faa
MD5 8af02597626351de317b7e9bd3f58a8e
SHA1 d3ee1bedaa563ce84ad04085a112f867ef8915eb
SHA512 f95958b953ac1c78c9980c807e3f0ad218581e20f22dff060e526e0b180a9bd935c73ecde9b9953f833a4e5a599716f289ae746402e5155ff5191af54d7a728b
SSDEEP 768:ah3vSuM/KvHqE57Y0GZxJsXBdK8Z8xTyLf:ah3vL570/JsXf7Wgz
TLSH
T165F2BF30A8B48E674EF7D291760E3747AEB48763C6C90F54D9DDAB4C018B2AE134791B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6dbf5ec6-a8b2-49f2-a71e-3d0676a691ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6dbf5ec6-a8b2-49f2-a71e-3d0676a691ec.tmp
Size 40KB
SHA256 8701a7adac346a1c0f913c2ebd21b56b508c5a2a44129f934e6ee2c0587fdfc1
MD5 bef5ebc83a0d57cd56e98576a1418b5f
SHA1 c881a2b9ded83c97fd24714c0825d0f67d0b8f81
SHA512 27dcf08f794c2a290a7faf944146044f3c3a2332d51cf2e020da797302ff8165d02cd7fdaa0f3077aeb9c01c6e22cf125b317d9a0bda7313ed366382b9674e9d
SSDEEP 768:A/UxvxjgC+N3k9uy/KvHmE57Y0GZxJsXBdK8Z8xTxC:tZj3+N3kId70/JsXf7WzC
TLSH
T1CC13C030A8B49D235EF7D295360E3757EEB48673C6C60E6899ED6B0D058B2AD030791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fe09a9e94fbd795d6fab442dc426ef79e7bd47dbd80086b003cb1cd34d18db58
MD5 4da51a25f1a6b822ac642c6eae6f9a72
SHA1 9d4f1d1e83270c8d54d24725cd3d7f406de5967d
SHA512 c027a48a18b3b282e84d69320ca44ca416bceb43057eee8fcf4b2647669c307720f00240e17a22310df0488100938fd8b34a0660ca73adaa5f0433a1657b325a
TLSH
T16CD02BBCB76CC476E40210744042050052617004AC1704D10F0562448984080804114E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 54a604899198f01e1a2f5ec52bac53679a6d2775840ba8c81ab97c59f718adf8
MD5 b266cfe7dc8e59a4693bec2c7307d768
SHA1 0ff4c63ce201552fd340f72d3376df63989a21f9
SHA512 6832b9d56510cdd21708734b256b052e90f313f920ebc959b4845a1a4fc17cfbfe75dfa04c5252540531ead21e0662a341763e79030c36867f2823312c51c0f9
TLSH
T1C1D02BB8B77CC476E40210784043050052517004581704D10F05A2448984080804014E
MD5 SHA1 SHA512 TLSH

Submit Download

437ab154-ae10-4d87-88a1-d176c40c54fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\437ab154-ae10-4d87-88a1-d176c40c54fa.tmp
Size 11KB
SHA256 a751bb3d34fff5c1d162d82a5eae31b60896aafdb71300067319520c45db99db
MD5 1450103bd07ae525485b386df320f6fa
SHA1 a765121f7a6612cbb1b7760f4f0bdfd03b54ea28
SHA512 a47757ecfef97e630911a08fad4be58f9a5c7f2e0795f357b1f3570836c4c0216e81af6089b5275620fcafa5db7a6500934c2dcb058b1e9bfd468e0e20d1cedc
SSDEEP 192:sxRKRYbi/fJsTV/zoA8p4k3/g6+WNViY/YU2Nf9RdGIIgDOJ:sxRKQi/fJsTVWp/5j/22
TLSH
T1F932A715AD28AA3B8CCBD20EBB99BF53D2F95133A1951E04B6FC961C14E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7eeb6884-40be-48cd-ada7-2c9e78f611b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7eeb6884-40be-48cd-ada7-2c9e78f611b0.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7fb6ccc9-ae29-485b-8e28-0de73a511513.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7fb6ccc9-ae29-485b-8e28-0de73a511513.tmp
Size 11KB
SHA256 9834da653626eba0e6d631f0032e6ef9b5a2302f08c0edaec6af3e847f7ab013
MD5 56004402b27a960161aa5bc00e115b95
SHA1 0609e8060e3e05a8847635e9b4057d90fde2b051
SHA512 ac0907813c98b0b91047fe46a09df8a20c2d66550ecb3f981afee83229050ed52277ed9b7de4e8cd9b08d3c5204bc4a9e396f83e41f925eaac9484f54caccdcd
SSDEEP 192:sxRKRYbi/fJsAV/zoA8p4k3/g6+WNViY/YU2NpDRdGIIgDUJ:sxRKQi/fJsAVWp/5j/4E
TLSH
T1F432A7156928AA7B8CC7D20EBB59BF13D2F95133A1951E04B7FC961C14E76DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94913ca6-c7e7-4c4a-a15a-69b504a1fc49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\94913ca6-c7e7-4c4a-a15a-69b504a1fc49.tmp
Size 23KB
SHA256 cc456fdbcf44bd2c938e2314bf6e38c860345cadab4924075c2bbb4821fce743
MD5 c7d397a68e67965dddc7bf1b24ee3fbf
SHA1 afe57e3803006b151f7936b16f411d6adea60a18
SHA512 9872e2750ba49a66888e60ac99009ea0ee95eb0895298e0c50d6b5b215ca59ac4cfa62be3c959a0b56ee547b32689bc4c006330e52f56ae4cd8239ad6741352e
SSDEEP 384:64qajXwfCtgmcFfsO7nKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV+a9mWRuF1rQ:6JajXKWgm0fsO7n8F1+UoAYDCx9TuqhX
TLSH
T139B2C93F640DCB7F5FC00AAD9C19AE976D9802CB96588D4047FE994C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 1.1MB
SHA256 a7d83eed9bd8303c37a17f2627ab0a2c8f3f979921cef478781d4fddd778b2c0
MD5 566bec0b8a97901a884bf5f73453b73d
SHA1 f6e0b1c2d9daa63dc33e5d5e7b66e429a26458d5
SHA512 ffb8df1de700dc8186aa4bef69eeb7bc453f193fb55dac875f3785ddbc3182f302792b7602c94b686fe943f3769732eb9e656314681190279e0c80efb7bf0694
SSDEEP 24576:dSqkCfPEDe9d62lqfIREGvfkHF7d3sDmhEOU3PDwVCpVCk:dSBC0Dh2IAnv8l7d3OSElPDECnCk
TLSH
T13C353325EB1DF8CDE42395B95C84CCE16D892292F2F284A784F534ED6A0D768F0047EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 6dd46878872d5ffe9c5c32bcf4a34c05a1344753d642b12f35740487219e017e
MD5 4154744e6130089200682a61b77b68af
SHA1 1f71bd59892b675e4df727a09c329f2fa563bea7
SHA512 00a885b730b88ad186ffd444a64b7731c449812a15b2c0634e59b64ee57a9ea49d757751e4491b27bb596b8131e345b3710b57035966eead43a4af11325bcecc
TLSH
T1C681772891A4C8B1FB5E1A78D9CF8D663935DA8FE8C31F020168F13596C636783D8F59
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ad2f413f0bc23c8e9d480343fb8e9348cc7207e4ee6e5d84587b7c11cadc081c
MD5 f9870b1148b8538483448c54f91b8cc3
SHA1 2951d58b3f6c242a16c565ef128317717ee2125b
SHA512 71fffb7062a8101b57c4dfa661da38011f15142e2bf1c520ab94f5fb81e8a090eac910127147cfd1dfb728dd7be85df6ccd89643adc69fa833447b8e9b5e147e
TLSH
T10D61A869A680C0B5FB5E4474DADF8D973A34DA8FECC31F520698D43AA4C63278758788
MD5 SHA1 SHA512 TLSH

Submit Download

3ca179ef-8dcf-44ae-bee6-43d722d5e95d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\3ca179ef-8dcf-44ae-bee6-43d722d5e95d.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

10d0b15e-1fb2-4571-9371-d5f7ba408436.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\10d0b15e-1fb2-4571-9371-d5f7ba408436.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

57a64798-6481-44a0-b33c-5694ffa71a7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\57a64798-6481-44a0-b33c-5694ffa71a7d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

dbc9f420-9ae7-4618-9aac-77bc1fe2eeeb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dbc9f420-9ae7-4618-9aac-77bc1fe2eeeb.tmp
Size 7KB
SHA256 75c17ab987203afa9a6ead0ae4fd8232b5dcb1598ce6e584aaea406f99b9b649
MD5 0f716d9a44416412e02421999b29388b
SHA1 4998f999b1f9e35b3700dc3c04dbf8d70be9015d
SHA512 685c4dbc32277fcc2dc57729a00ff2a6c866dcfbd37c8ac925618e01b28de48aa713fca1844351463a486f4873a44815ea7d9f286c2aa1c87544b86d28c34162
SSDEEP 192:DEw1DJaqeGoGe5VaaijhnSc1G72b2icU0MiqtBNM+GhDGc/vkI:DEw1VaqeGoGe5Vaai5Sc1G72b2icU0MI
TLSH
T172E1BFF7C7E8962DD86156F09618AE2FCF2D051883287E79C8D49F5BA3E2471E24074E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

fcdc6aa6-f0a8-4fee-92f7-bace0128c15d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fcdc6aa6-f0a8-4fee-92f7-bace0128c15d.tmp
Size 10KB
SHA256 3f21d483d06925277e9c90f355da8da59ac1f429eadf4b520a178d3eb55162d0
MD5 5616f05ee22a888fe4d212233161ebf8
SHA1 13d305d55834889d18c7ace5fcfcf2401bf14d5a
SHA512 6695c84e3447b62044041ce73bb2b3f293f3f14a5d0ad42b1acbdb1ff0f74c9fd3e9590d30c0d2babe32b95a622fba8988b23b1905c1f4947aabefe7c45f70ba
SSDEEP 192:sxRVRYbi/fJsPV/zoA8p4k3/g6+WNIYU2Rf9RdGIIgIJ:sxRVQi/fJsPVWp/5Iws
TLSH
T1CC32A6166E28A93B8CCBD20EBB59BF53D2F95033A1951E08F6FC961C14E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3a3410d2-27f0-4bb9-b4c5-a99e5709cb72.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3a3410d2-27f0-4bb9-b4c5-a99e5709cb72.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee93de50-ea61-441b-8c23-c4bc805a5ebe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ee93de50-ea61-441b-8c23-c4bc805a5ebe.tmp
Size 34KB
SHA256 3ef313444cc1d43f31d702a0ca288f7abfdc2f6195df82fce5c1526d94e5b92d
MD5 c45d230301261a4c59a1d50f608b8179
SHA1 7aae00e5295b68d54680cddac20a3afe9ad783f4
SHA512 6f6b0320d81bf8548f6b4581b84220af854a24e748951c2a9c8ee9aa418d26b9347406d7f481eec98d9b175a726f1ba078098b0aa9eb140006b03f29a9c255a4
SSDEEP 768:9h3kSuM/KvHqE57Y0GZxJsXBdK8Z8xTyLf:9h3kL570/JsXf7Wgz
TLSH
T15BF2AF30A8B48E674EF7D291760E3747AEB48763C6C90F54D9DDAB4C018B2AE134791B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e058bccb-0a1d-418e-b398-f74a87ecb326.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e058bccb-0a1d-418e-b398-f74a87ecb326.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download