f9c7383d3c96e45fcad4502872944c47cb258c74e339c4c68052c53b1470a7d0

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/10/2026, 02:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
watch.html
Size 1.3MB
Sample261017-crktfscf92
SHA256 f9c7383d3c96e45fcad4502872944c47cb258c74e339c4c68052c53b1470a7d0
MD5 2eaf882856ab4c752bbe6854a1944611
SHA1 7d04d4c74e5f7db36f7b0c041e2bb171dfcbf268
SHA512 8871415a41af98a0eb80caf5c1afe9e019e6bb627483f840ce456c55dd52a54a773b2600c2231d1b011e524e6ec4a5d2e05a97507e45a5d40c224e8cf72bcf4b
SSDEEP 12288:7guV2uVQuVuuVouVduVduVeuV4uVduV/uVpuVmuVvesHuWv358M8EDz80CDZT0YZ:7UrHuWv358M8EDz80PBc
TLSH
T18E55C410186878B69953A147DCF5FF3F5DE023298BC5A9AEBDB7E74C01ED6480C9E812
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
360	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-696679853-3915825385-3233721679-1000\{FC7CAFF2-9519-4621-9BEB-7E55A7C0B11F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1536	msedge.exe
1536	msedge.exe

Suspicious behavior: LoadsDriver 9 IoCs

pid
4
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 5068 wrote to memory of 5096	5068	msedge.exe	90
PID 5068 wrote to memory of 4780	5068	msedge.exe	92
PID 5068 wrote to memory of 360	5068	msedge.exe	93
PID 5068 wrote to memory of 4780	5068	msedge.exe	92
PID 5068 wrote to memory of 4780	5068	msedge.exe	92
PID 5068 wrote to memory of 5488	5068	msedge.exe	94
PID 5068 wrote to memory of 5488	5068	msedge.exe	94
PID 5068 wrote to memory of 5488	5068	msedge.exe	94
PID 5068 wrote to memory of 4944	5068	msedge.exe	95
PID 5068 wrote to memory of 4944	5068	msedge.exe	95
PID 5068 wrote to memory of 6072	5068	msedge.exe	96
PID 5068 wrote to memory of 6072	5068	msedge.exe	96
PID 5068 wrote to memory of 6072	5068	msedge.exe	96
PID 5068 wrote to memory of 4468	5068	msedge.exe	97
PID 5068 wrote to memory of 4468	5068	msedge.exe	97
PID 5068 wrote to memory of 4468	5068	msedge.exe	97
PID 5068 wrote to memory of 1568	5068	msedge.exe	98
PID 5068 wrote to memory of 1568	5068	msedge.exe	98
PID 5068 wrote to memory of 1568	5068	msedge.exe	98
PID 5068 wrote to memory of 2532	5068	msedge.exe	100
PID 5068 wrote to memory of 4552	5068	msedge.exe	101
PID 5068 wrote to memory of 2532	5068	msedge.exe	100
PID 5068 wrote to memory of 4552	5068	msedge.exe	101
PID 5068 wrote to memory of 5392	5068	msedge.exe	103
PID 5068 wrote to memory of 4652	5068	msedge.exe	106
PID 5068 wrote to memory of 4652	5068	msedge.exe	106
PID 5068 wrote to memory of 4652	5068	msedge.exe	106
PID 5068 wrote to memory of 1744	5068	msedge.exe	108
PID 5068 wrote to memory of 6036	5068	msedge.exe	109
PID 5068 wrote to memory of 2556	5068	msedge.exe	110
PID 5068 wrote to memory of 4820	5068	msedge.exe	111
PID 5068 wrote to memory of 4820	5068	msedge.exe	111
PID 5068 wrote to memory of 1536	5068	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\watch.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ff81ccdc188,0x7ff81ccdc194,0x7ff81ccdc1a0
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,1928895811483610139,16964321392319550103,262144 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:2
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,13100115737692424581,11146225295120848631,524288 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:11
  2⤵
  - System Time Discovery
  PID:360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3356,i,9507048654294390314,15909062242573554938,2097152 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=1864 /prefetch:1
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,1340604117219894005,14268638049928213316,524288 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:13
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3352,i,14868835828091427817,3280381754492012294,2097152 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4072,i,2700352402247851880,11012405439857916910,2097152 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,13471412544040398844,5527860620367660035,2097152 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:9
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,11518980286821307608,15099098815130647280,524288 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,4363613781995330469,10367528726075710312,524288 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,14970128266468478413,5547851020984924636,524288 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,14970128266468478413,5547851020984924636,524288 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4472,i,9004137940704453637,14132071418409313886,2097152 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6668,i,17375224096659260055,10387416253975698151,524288 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:14
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6760,i,14934485820308741714,5210902433857845204,524288 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=6732 /prefetch:14
  2⤵
  PID:6036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6792,i,1465259268935478281,1493711635153121852,524288 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:14
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3300,i,13385507158824575032,10963794709959568122,524288 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:14
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6112,i,11323656468471966182,12987201661374296527,262144 --field-trial-handle=2496,i,2526516809299475394,2587835946767482565,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1536

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5144

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

39f6438e-fdc5-4da0-bb81-29772c5e336b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\39f6438e-fdc5-4da0-bb81-29772c5e336b.tmp
Size 36KB
SHA256 3d32c305f21a3dbf9b43e1b47e026b2bdf08b9d522490f0bcf7b0e7cc1deeb99
MD5 1234e102dc8288fe7e99b75d2cb97e72
SHA1 22ef8ee073caa490e67baa2c09969e1e677bb4ed
SHA512 802448a0fdac7b612e3417ad55180067855bdbc26487b29b2f03c60bc0d10bfb017be91204fb4e18b1d781afe7001da3952a01c042d112c8b1e9ced56292c9ae
SSDEEP 768:UFdK3swgppFcZ0rfZWmYoKYoBBw4Ot5AEl94BHYjHrrLJ:4K3TBVa5AEncHYjLr9
TLSH
T1FA03AE369C94CA679DF69B80F75E3286AFF18193E8C1AED0DACC681D15871DE1347C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 59619e39464102fa53912dd9a15237954c5125d546c48a72b8bdb58ad9eb9753
MD5 f80a0057aa895d42a15b594d07d09f76
SHA1 2478a67794a5362ccf809b7a2c8f64a03c72fa32
SHA512 4a9ec8459a11d9e573883d5eacfd5386cf838bad2bd0b33ff1b37017f5f2cf6bfcef877344a87892e3c49ce624e0cae52791ded1593b8233138de87fd2e5e634
TLSH
T1C6D02B75F668E9D2C140043C00410920706035066F6801C206030038040324B55022C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 91a032a4ffcdd10503afdeb5220904a7e7cea899c3a55606bb3e90180ed9472e
MD5 f04321ebc7aa4a8f91bb5362a6c4c79b
SHA1 c98d3283204e4a0453e416a04c3ae56e4c3feed8
SHA512 c2faa7fae738d85299e6f63b9eaf33c25db5a255ea3f5f6a8551842b7e0cec73c7e8b5e86a9cfb9714287d2b382b57b7249bc70671dbfde2815d5937243570af
TLSH
T1DED02B71F678E8D2C140043C00420920705035061F6801C207034038040324B55012C3
MD5 SHA1 SHA512 TLSH

Submit Download

09b64609-02b1-4a6f-9f3b-de17b235dcde.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\09b64609-02b1-4a6f-9f3b-de17b235dcde.tmp
Size 23KB
SHA256 6740ce11d57a3306e78e0cce37d71d411c86a36df4501f5fe6d1e07778863b74
MD5 e2eba96b4557f5f32517cb6bbf76db21
SHA1 74519a1e01a7ed8ab566b9485e73a9bf3f94ecee
SHA512 b09299ecf1dc69d7cf6b78470ce0794ba02c83c7236fcc543d6c55108a6878e52b57ed0cd49e33cecf62ad3b3fedd7941e2568fbef18e98db48fb1a32cbecdcf
SSDEEP 384:XLMDmVifCtgvdFfnvKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVC69lLRRjrohZ0:XIDmVoWgvHfnv8F1+UoAYDCx9Tuqh0Va
TLSH
T163B2DA2B640DC77F4F800A9DAC296FD77D9801CB9A588D4047FE994C02D77EA921A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

35effcd2-f99c-48bc-9b50-af16821bd940.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35effcd2-f99c-48bc-9b50-af16821bd940.tmp
Size 11KB
SHA256 00475a2587f6dc79cd83c5c8042df13b5c15dff76e0a88bcf17ef36ef6236a6f
MD5 d5db1db654786c6f513b5d40859f2530
SHA1 6e4b908d266425252d756a91905b9de18d2fc6e2
SHA512 870efc0a4a702b128b2327200b959b26a81ca4b2c76ca17d5ca19bf344311a087103c59e2fc5fb4dcbc1dcd13bdb4d964890a74e139fc21745981a1293ce2a99
SSDEEP 192:sxRURcbS/fosBUrWzoA8p4X/g6+WNIYijM2aWGku3IgDnJ:sxRUQS/fosarLq/5Iy9
TLSH
T18D32B815AD28A93B8CCBE21DBB69BF53D2F95032A1D51E48F6FC861C14EB6CD120750B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 46539fd99f23bd0bb8ed5a8446e8a9db8dac6509d700dd4dec5187f92a345c78
MD5 97c720f7cef6088be456a08eee815b16
SHA1 3c726b486e47f2671b06c99c1d33f26b59bf2689
SHA512 2513705e14acbc592bf2f341408c314df725c009bda184a7e7063ebd0148648f55c7ee21bfd2433901f8e3575dd28f8ef5a27e458b658f43ab6f66b9b7d626b1
TLSH
T14A61714876EC4171F35882F0A1C9CCCBB9B64FC01187CE1205DAD2B86AEF3B8795A484
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1a02f43c81185418d61240127beff3cd140f88a17c3f9dd580778277a82c72a5
MD5 9d23ef301a745140cad42dbb00fd0ebf
SHA1 9b8bbee6c5ac73b7e749c102c1efeed537eaf9d8
SHA512 c0e97520346083550e8c3e4c88cd630b30b84d1f122f162f1a271cc348d594894430c337696dca799dbde22bc4939a5f7aa1bedfb4f40456b0c6b2e383b52e38
TLSH
T17161614837EC4171F75482F0A1D8CDCBB9B64FC01187DE1205DAC2B86AEF3B8795A444
MD5 SHA1 SHA512 TLSH

Submit Download

6539aa94-f99e-4bdb-a4e9-696ab42d5e68.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\6539aa94-f99e-4bdb-a4e9-696ab42d5e68.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\file__0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

03159ff0-7da7-4c7f-bf2c-5b958f4a1d27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\03159ff0-7da7-4c7f-bf2c-5b958f4a1d27.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

090602cd-876a-4b26-989f-ee08de83fe36.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\090602cd-876a-4b26-989f-ee08de83fe36.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

65b2d0be-8e3b-40c3-a533-ce90bed13f99.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\65b2d0be-8e3b-40c3-a533-ce90bed13f99.tmp
Size 4KB
SHA256 6578d7a890367b0a0dbf6f15cc25df8647bf3ce04883249c5ebc498dd1216652
MD5 7bca1692ae561574c4f940b8f3513797
SHA1 6e700f7fc5b67b1e64cd61063766228bf25ebd77
SHA512 41c1b20ce7e02f251f84c14aee482f6949ff401ec190218c2abe760babcb01b36c8227e2dce01d10634c487af86e0b576b993805541c00fce1a982c54c92b067
SSDEEP 96:D6866VROEafCtaVZarrz82+6Gk+Yzmag5wl5p:Db/EEafwaVZarrA28kJzm95AP
TLSH
T130A1AFFBC7D8877E891166F09B257D1BCE2D051A422C3C5A88E4AF5F63E2471D10169F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\ae854327-daf8-4240-9efe-ac07af6707f2\index-dir\temp-index
Size 1KB
SHA256 a99d9bb074e9ec1f9b8271542cef3074be8e4613072823e2766f5e3caba4efe4
MD5 d3d1391465f21da45b5e39d7a8adabd3
SHA1 4d6698e54af8042ff8b103193a9f120977034d25
SHA512 93dd937ae1f0710d4eb58ffabf9eb9441f74afacd585343c36411d77b2f9739416c0805f41d72d75bf2e527d5da9fc019231902c6f8facbb50f3d9e111d1dd9c
TLSH
T1AC31638CC89067DED8B462BB29A409F157B12D24FC19C35181A4B6B634017A41B976FD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\ae854327-daf8-4240-9efe-ac07af6707f2\index-dir\the-real-index
Size 48B
SHA256 138f855b866ab46e4af86b42f012f74e4ffb4d66b687e2af203cb7caab8c782c
MD5 89a059191a3ab8a41f5167a19071c7f7
SHA1 2f848d0aa7c5fd4d8164f1ee002d6da632df1d7f
SHA512 43276af2874620fc6c81c76442937860f733a9a3395b6fed09f74d6cf2edecac07a3da75d35269296f66d6d2698ebfb99e42aa3462592922718931c141933a3c
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 105B
SHA256 4bdb7328bc13bd9cd27695211b6bcea253b16986b959d45ed007c255b777fb0c
MD5 99dc26beb28e567dad39a74ca3134ed4
SHA1 71169ffd348173ef9741e28e1400840c7042f5e7
SHA512 39351c9b60efb5c873ed11902daa007203f1974e0123224c749d052d1c66ae8a8db3d0b240385b7d6667300d685dc36893d4d31bc8231f44555b55331323de46
TLSH
T190B01288A1E12E2353621703DA14690F1F9FCC016404ACCCF58F34493031423DDA89BD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt.tmp
Size 182B
SHA256 ca8eef80ff0dfc2e5f3eed07584a7f127c78388183a407cbe04104de22b792b8
MD5 66b9838e5d99b9f3d8d5278262483b55
SHA1 f7539e053f9f8651f61fbb95fa353230094ad894
SHA512 e6b0eaa14f635ec9c5ab4e2104e177d304faf8cf757c3897d611802cc75f28e7dfa2a8c263e9b35b1308831a5bfa335ed9e830a3a996e5bfe2be6d1035955a2d
TLSH
T130C022A8A3B20C23336007008620100F06B7AC00E40499EDF848746A2039922E8659B8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt.tmp
Size 98B
SHA256 5fc5d0c88e88c4331346e8c60ddfb6a61a05fc4a7d0f76c5d43dca91f2ab44a7
MD5 5f30173dc5219b5d08728a6279d3e3ef
SHA1 823e3f843e8a3c9a20b53d673bbf76793c5bd40d
SHA512 f1ef202c4988f02fbc3b4baef93ae53de4dceaba9c4aea1b99eb64b4a6424d838d12f37c292b06e385fb6a1ef0cd75bab79febe11e0b5d453d4a15750de9f8c1
TLSH
T156B012D8A1911D2757751B069A04650F1F9FD400A414ACCCF48D144920324229DA09BD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt.tmp
Size 100B
SHA256 68ed020cbbd8e38b9361b7145e65237a02e26755ccb13be45d5d09197b168f69
MD5 597c3934cce689de1acba992f9c70442
SHA1 5c11e9b96412dc00772bc67b8332ab973e3f4eec
SHA512 08411dadb31f88f1d7b4947d0447e4890c22630b7c0eca9d40a5470d0c0818771c34cc23c808468a11655ff2ca206357456efd047e7a20a2ef26fdc584b4d825
TLSH
T16FB01288A1911F2357751B0A9A04650F1F8FC40064A4BCCCF89D148961214229CB09BD
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a644a281-aa4d-4f1c-a865-9f10a860325f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a644a281-aa4d-4f1c-a865-9f10a860325f.tmp
Size 10KB
SHA256 e5ec948ea2020badd38268fc928f2b60968746d78bf93c91d5a0e16ec3d69d13
MD5 7725d461ee19fe3d77f8d00ae269c73e
SHA1 5be9fa43c4c9e3d4faa1f9094985ee2371525fcc
SHA512 e7d00dacf224f8203a4deda344a75703415ee455e0dfdab7452e69d9e72bd09cf93b7d27ee40913a2a1922c54e0530a7ae4a4d08eeb310951b15efbd5976a2b7
SSDEEP 192:sxRhRcbS/fosBM9WzoA8p4X/g6+WNIYijM+aWGku3IgDRJ:sxRhQS/fosS9Lq/5I8P
TLSH
T1CC32C715AD28A93B8CCBD21DBB69BF53D2F95032A1D51E48F6FC861C14EB6CD120750B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dc214a9a-7c4e-4b8b-9ed2-fff21f2ebcc7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dc214a9a-7c4e-4b8b-9ed2-fff21f2ebcc7.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe325187-b85c-46e1-b416-f1691d5e060d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fe325187-b85c-46e1-b416-f1691d5e060d.tmp
Size 10KB
SHA256 49d2e279c9f3d47e1f1c50f5279898ac6b4d38c36dafce749385accd3eb77b73
MD5 381353f3fdc8bca9bf1f03a0ccf648a3
SHA1 91bfcfb9c6097a08afda4e1dc3206b87a529125e
SHA512 48bd58ec1e872977ff4d0a818ba9f302026db8f28378f685e83fb32516d1511cc33afb08dbda4be8fa8a7c766a8fa52a8223fa536e0d0ec0a4b020aca5d6629a
SSDEEP 192:sxRmRcbS/fosP9WzoA8p4X/g6+WNIYijM+aWGku3IgIJ:sxRmQS/fosP9Lq/5I8s
TLSH
T1A432C615AE28A93B8CCBD20DBB69BF53D2F95032A1D51E08F6FC861C14EB6DD120750B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c3ed86a-e469-483f-849d-515831b7237f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2c3ed86a-e469-483f-849d-515831b7237f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b4acf580-de8d-4073-9761-78cb4d80da63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b4acf580-de8d-4073-9761-78cb4d80da63.tmp
Size 34KB
SHA256 58e0b1c1fefd1a8927cdd51c19900a7db8ba07732c2291ecab2d70921d675d50
MD5 63ac487396ac953e3808ebd08b3ddaa9
SHA1 870cd33c902f3b6a1a2506cbea60c5ac357e269c
SHA512 4ca256c54e510c77323b1615a6ff189a3d79d8dc8f967ad2e6c36e15c000164db3dd10e7c0e7e1a1f00b801ad077d70d4561aa5ae0a921c2473a706577e7f460
SSDEEP 768:Fc32pFcZ0rfZWmYoKYoeBw4Ot5AEl94BHYjHrrLJ:Fc3OBVa5AEncHYjLr9
TLSH
T151F2AE39EC659A638DF6D381B65A3286AFF18153E9C16ED09DCC291D0AC72DF2347807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

caa498e6-2198-4420-b9a2-4eda0815737e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\caa498e6-2198-4420-b9a2-4eda0815737e.tmp
Size 38KB
SHA256 89b0ba448f5c8ab152c023d747eb69836c49b9ef065c3983a5b09072dc8cfc97
MD5 5063ab90f30ddfdba865cfb8ee15859d
SHA1 2717f2efbc9dfcecca6d00b40f428c6892503b8e
SHA512 1495949359b180f738faa34f36f1860a83dd76aebefdf90703f025fb002bc6f5f681e4d7a792a1e0f23c6ed140a313423bc32eb518445989988c091fae2763b6
SSDEEP 768:z/UxvxjgC+b3lwcZ0rfZWmYouBw4Ot5AEl94BHYj/nAFTN/:GZj3+b3rBVa5AEncHYjPAFB/
TLSH
T1C903BF39ECA59D278CF6A785771B3387AEF18463A5C16ED48DDC2D1E0A8729D1307806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd8be6ec-18b5-4a51-aa91-7133824f6bf2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cd8be6ec-18b5-4a51-aa91-7133824f6bf2.tmp
Size 38KB
SHA256 09b733f547289324709493355124d2012caed18de95d121ad70e7653dfd0ccf8
MD5 b8d0eebc87eaf9f743b28147adcb5581
SHA1 0cb6f1c813468044fdc5248ad893b3e20f2af6e9
SHA512 480165a80670136a973bbc2f0d46eef8268ac05abca28b9de96b80123ff04edaf2d2055dcb6da27d49dcb6729b16e25f6cdac495d63171fcacc172e8b59dfb83
SSDEEP 768:C/UxvxjgC+b3KXcZ0rfZWmYoKYoaBw4Ot5AEl94BHYjerAFTN/:HZj3+b3KBVa5AEncHYjEAFB/
TLSH
T1BD03BF39EC6599278CF6E785771B33469EF14563E5C16ED08DDC2D1E0E8729E130B80A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d90cb250-2e68-4513-85c3-912aea7ea3ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d90cb250-2e68-4513-85c3-912aea7ea3ce.tmp
Size 34KB
SHA256 2d735b67cde6420080ce84f2218ba13afbca82fb8a0608cdb0e06a30bd99adf7
MD5 4f9866ede476f4f4ec32cb8d93b4022c
SHA1 3aea7dc13c1dfc6c64c48d70190f152f5b59f879
SHA512 ccd4480334280022f6b4edaa384ea7304c8ca96d459ffdc6d80cf478f3b195321e76b74188844264b64b29a4adb985831741b873580430a4c235ee89a3b286c8
SSDEEP 768:ec3rZFcZ0rfZWmYoKYo1Bw4Ot5AEl94BHYjHrrLJ:ec3MBVa5AEncHYjLr9
TLSH
T1AAF2AE39EC659A234DF6D381B65A3686AFF18153E9C16ED09DCC291D0AC72DF2347807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

020a929b-06f7-40c9-8709-03a3bb7c64fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\020a929b-06f7-40c9-8709-03a3bb7c64fb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download