3fe55ed9b8ac7cbf74c1b95bcd25e700de5ea0530a609fd39294f99d7bf73fc3

Analysis

max time kernel
148s
max time network
137s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/10/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
devabid-app/public/index.html
Size 23KB
Sample261018-pg4vssct2p
SHA256 3fe55ed9b8ac7cbf74c1b95bcd25e700de5ea0530a609fd39294f99d7bf73fc3
MD5 9756cdd8053ccec9c62314d8b31e8154
SHA1 d5323b3c26ee93e5e4e3d88448938f0610ed1e53
SHA512 b041ac7c6f7f1ccc6471d7e71de98d5796b62ca5c9a55929580ada77f335d6ba9d618462544a1e72899cdc68d7708f24fb76c7b378a9b8c3af70c152c7d4d7f4
SSDEEP 384:dkO62psu9K9u28ZaHgjghl696u5wwiiICnsQR7n0E3NNzwnbFXYdAdPU2+BzscPy:dZ6usbgxaIN6u5ww5Iknv9NzybFodAdx
TLSH
T1EEB2D5B1A1A960357537D8D1B05443DE70608E0BD963C794EF68B4B9D9CFCB36E28A0D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5204	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714045687-1127350534-2056456672-1000\{1F1B67A7-F844-49DB-B787-F79D1248FE4E}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714045687-1127350534-2056456672-1000\{318789B9-28C2-4A58-88CF-1701B5641D39}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3328	msedge.exe
3328	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 3608 wrote to memory of 3052	3608	msedge.exe	90
PID 3608 wrote to memory of 2528	3608	msedge.exe	91
PID 3608 wrote to memory of 5204	3608	msedge.exe	93
PID 3608 wrote to memory of 2528	3608	msedge.exe	91
PID 3608 wrote to memory of 1488	3608	msedge.exe	94
PID 3608 wrote to memory of 2528	3608	msedge.exe	91
PID 3608 wrote to memory of 1488	3608	msedge.exe	94
PID 3608 wrote to memory of 2660	3608	msedge.exe	95
PID 3608 wrote to memory of 3292	3608	msedge.exe	96
PID 3608 wrote to memory of 2660	3608	msedge.exe	95
PID 3608 wrote to memory of 2660	3608	msedge.exe	95
PID 3608 wrote to memory of 3292	3608	msedge.exe	96
PID 3608 wrote to memory of 3292	3608	msedge.exe	96
PID 3608 wrote to memory of 272	3608	msedge.exe	98
PID 3608 wrote to memory of 248	3608	msedge.exe	97
PID 3608 wrote to memory of 272	3608	msedge.exe	98
PID 3608 wrote to memory of 272	3608	msedge.exe	98
PID 3608 wrote to memory of 248	3608	msedge.exe	97
PID 3608 wrote to memory of 248	3608	msedge.exe	97
PID 3608 wrote to memory of 4788	3608	msedge.exe	100
PID 3608 wrote to memory of 5776	3608	msedge.exe	101
PID 3608 wrote to memory of 5776	3608	msedge.exe	101
PID 3608 wrote to memory of 5808	3608	msedge.exe	102
PID 3608 wrote to memory of 5808	3608	msedge.exe	102
PID 3608 wrote to memory of 880	3608	msedge.exe	103
PID 3608 wrote to memory of 880	3608	msedge.exe	103
PID 3608 wrote to memory of 4672	3608	msedge.exe	105
PID 3608 wrote to memory of 5048	3608	msedge.exe	109
PID 3608 wrote to memory of 4300	3608	msedge.exe	110
PID 3608 wrote to memory of 1076	3608	msedge.exe	111
PID 3608 wrote to memory of 5116	3608	msedge.exe	112
PID 3608 wrote to memory of 5116	3608	msedge.exe	112
PID 3608 wrote to memory of 3328	3608	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\devabid-app\public\index.html
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ff818f7c188,0x7ff818f7c194,0x7ff818f7c1a0
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1548,i,10274414137366171559,2498660344652993599,262144 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:2
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,2527447367721274066,15983892214335065829,524288 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,12122715670799332909,11164885021574088439,524288 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=3288 /prefetch:13
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,14437756136620398840,3912075540111734026,2097152 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,14483166869373011554,1330415017196986450,2097152 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,13833092337036734114,15263241950631904705,2097152 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,12755724964767347464,14718363687506246878,2097152 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:9
  2⤵
  PID:272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,13524472251809078940,8573537906504815631,524288 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:14
  2⤵
  - Modifies registry class
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,575670437077194513,7279616591015063881,524288 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:12
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,4932632095335722313,5883254782971721921,524288 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:14
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,4063010295049391468,12711782485082843840,524288 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:14
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,4004039161890963400,1767671862496701208,524288 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:14
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,4004039161890963400,1767671862496701208,524288 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:14
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4784,i,1324826867779040297,11057952514758625671,524288 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:14
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,11564615384962391271,14361420597722554234,524288 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:14
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,8487288149593283219,2314389324499703255,524288 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:14
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,6198560130044884962,14373794528353369047,524288 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6312,i,10473600947347773832,6878966573506705351,262144 --field-trial-handle=2904,i,8004256824964310461,17922181051914384893,262144 --variations-seed-version --mojo-platform-channel-handle=3224 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3328

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3384

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2364

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

69209b62-7328-44e5-8f4d-f82e9ddc5cc4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\69209b62-7328-44e5-8f4d-f82e9ddc5cc4.tmp
Size 34KB
SHA256 8953711b5d0cca4316bb7dffc71398c210308c50f8be632e19c831fc73190326
MD5 33f2c137408be3facc3c653f3c08bdeb
SHA1 35862cc5abe11e4fe19a68d9c69d8639af8c01f0
SHA512 cbffb7e28fa1eef5271f3a3cadc7acc38b28f39dfa03d8310b2ebdb05cf1bf87e87fb9938259650e2e0d9b1eac6678e8e786b37c21b1a95dc161ed2d6f6cc9cd
SSDEEP 768:r13s3gKnJ0akxDc9bsMSJz/Fn/KxTOlL+:r13shWpVQbs7JTIMly
TLSH
T1C7F2BF75ACA05DA78DD367807A9E3957BFF48603DAC9195895CEAB0C02CB3DD2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a12053c-4d10-4d93-a6ee-7044687274e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7a12053c-4d10-4d93-a6ee-7044687274e1.tmp
Size 37KB
SHA256 38023fe2b2254cc98563d4e66bb2ec63a73d60c89f158d1a89637f5b200cc9fc
MD5 b091d13b6f2c59f028c0578fe7c8c0e9
SHA1 5bb9e91ac84d214294ff2a731939210d898b7f5b
SHA512 62b018500d35e2b263334c16372351ac7cda27a0efe89c7e9fb39cfb1d345249e8fe8cf6b17596cbaf1ce0d0f08edfa726f8627923fd51ba9d16ed6e53a97a60
SSDEEP 768:z/UxvxjgC+U3i9KnJ1xDc9bsMSJz/FnnkSHXPyK/:GZj3+U3BDVQbs7JTOSb/
TLSH
T1C903C03AEC5058A7CDE7A7803A8AB657BFF44953D9C529A849DD6E0C07CB3AC1307817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2fd03658-2f57-49d2-97c7-9e7208b01b19.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\2fd03658-2f57-49d2-97c7-9e7208b01b19.tmp
Size 105KB
SHA256 9ea13bef147b77cf059af0bbd32c4029231ee71a5eeb87da41465837f995c823
MD5 57517d7e9ca7c7dbf0369b56fc0b7190
SHA1 a15c2c9123a0f7f8e518a208d6f83aaea1923b00
SHA512 b584ef39e653fe4d5ada82f1439bada3ed13f5368752b2c2bfc5418788b2c6d6c615bca5636bbeb2f36bed6c3cf3f63c9dff735604a91156a020790610f0581d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 355a29997d085f70c135b61fb8e48fe3b3d9b6030190662c9d930bd533b88c78
MD5 5121c8953b32388eb96bb70d0d12fd00
SHA1 e62d74f75b188deb1ec8b8dabcff7c16e7ba9ba5
SHA512 c8f0ff682c9ed7e02559e599a97078b0a2e39f928b301598e0196d5d9dd6ffac13da9bd34262b0120793cb2472ac6c7a93a178d4abcd0a5a2c6df1e9a193de10
TLSH
T13CD02BF4528C9C63C4CA30740425458100263401B948D2903501478849401B914433E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 97f58c0ff1008d9a744980b06de74b1bc42fdd2408c0871566ecacc80738c498
MD5 ffa34db42a6c31e411546fdfd8772d96
SHA1 cd3fa45407492f90d8b070cf009147d20a8b4151
SHA512 72fd2a1188869d257eaee37d23569752bb0744ad1a5cad19b6a4b2e60f4d5f74f1ccf0a0b24a6e31d4d512e939f7b384fb86433ec7496296acb712e8334d5e32
TLSH
T18BD02BF0529C9C63C4CA307804264581001634017548D2903601878849401B914423D3
MD5 SHA1 SHA512 TLSH

Submit Download

297083c7-d18e-43c9-9d9c-b4cbe047cb87.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\297083c7-d18e-43c9-9d9c-b4cbe047cb87.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

543531c4-9cf3-4fcd-a9f4-7cb05004df1b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\543531c4-9cf3-4fcd-a9f4-7cb05004df1b.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

546980d4-f9e7-4e8f-80ed-8203953162db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\546980d4-f9e7-4e8f-80ed-8203953162db.tmp
Size 11KB
SHA256 b8032ded3c0eaf5e6c555da59f57d6343c0e80ab9931a158ce741e6edf4df3da
MD5 9eb109646a7f4309d8133b53e89e5153
SHA1 1e55ec2ac1e041eef11699b284b4cec5dd70375d
SHA512 73ab0489291805182b84b34e662db63143e64574f41924b437e30fd4fcc2bd56c8117afd4e35697862a55919f13067370e62454ef427c1ef8d2fcc6106787e69
SSDEEP 192:sxRLRfbB/fVs/SqzoA8p4F/g6+WNIYtJb6G5IgD9J:sxRL1B/fVsanU/5Ie7
TLSH
T1DF32D715AE28693B9CCBD60DFB95BF53E6F91032A1951E08B7FC861C00E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a5e34ce-a3a1-4f3f-82c1-ba4a54595e20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7a5e34ce-a3a1-4f3f-82c1-ba4a54595e20.tmp
Size 10KB
SHA256 a96b450fbec5f6780db692edfd91d651b0fabe9f0085950d6d1c3ca269b6cb23
MD5 9f7d15283bf38d599b01535124b77d65
SHA1 aa519bc0ccf34c353bf07c0cb60fb4b099cb6e0d
SHA512 acada4f2604bafa985f1c67180c4054204c5bf202e0ac368689aa42e48e955f7056537b074cda24e949b6cb4ecd9c9ac4c7f0f89d018835c824a478707be2853
SSDEEP 192:sxRcRfbB/fVsGqzoA8p4F/g6+WNIYt7v6G5IgIJ:sxRc1B/fVsGnU/5Ius
TLSH
T15D32C615AE28A93B8CCBD21DFB99BF53E6F91032A1951E48F6FC861C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

973efef2-afa5-438e-bc29-b1bcbf066b69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\973efef2-afa5-438e-bc29-b1bcbf066b69.tmp
Size 23KB
SHA256 2be5549cbac2ca9f8266419ab678b98d27c8cf5383bb3842f64575bc6478ef24
MD5 415d531d4cea48f051b02ed9d7f37d2f
SHA1 626e1fa86fa0c4cd1d673c0650325bce89cfe278
SHA512 2b0e916edfa801381ac9e8c9c7956d433632a0796d4324df47e879d3e26aed464006627f2041f72122fd35fef8b72270d14b29bea270635759483b4873fc9097
SSDEEP 384:dFIGx9efCtgmkFfk6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV6W9G+RhZiromf:dmGx9sWgmMfk68F1+UoAYDCx9Tuqh0Vn
TLSH
T1A8B2DA3B640CCB7E9FC00A9DAD196FD76D9802C796588D4047FA984C03C77EB912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 125098a6bf725b5e4b25a76af5e32deccea2be4fecafff476991ccdd720d9685
MD5 44c237cd22dffb2bf73b39a803627c7b
SHA1 3978bc23a54bd48c0f56e425815dd322ab52391b
SHA512 c94a62defa8a9d828f6d071657449704551930b5a99493736a6989fe2d1a1984601e258ec9e4f0de777f05d82c4f38545661901eff0334bca3be9d37a159670a
TLSH
T151614E8276B5864EF7B88830DAD7DDCA3A30BE94408F1F2225A4D8F19849717F8940F4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 68627104e9cff454dcd0fd27778e9c3196b43961b7822992d9663738ac76652a
MD5 f4d7a8a9059d6fea1620aeccf6ccc030
SHA1 d660c1199730dce30c3c6a1278f21f79044ec35d
SHA512 19bd48163beeab75d6eabacd7f9075af954b156cd8b823601e94411db720437e5b12ccba23e2994868350f6f26f150eb8ff2f6ace8e96cb7b94a1352fb96de2a
TLSH
T1E6614E8276B5864EF7B88830DAD7DDCA7A30BE94408F1F2225A4D8F19809717F8940F8
MD5 SHA1 SHA512 TLSH

Submit Download

07ec4122-071a-42ac-b2f3-7f4455ac269e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\07ec4122-071a-42ac-b2f3-7f4455ac269e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2c98b800-3d25-470b-b68d-a8b7efe6404c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2c98b800-3d25-470b-b68d-a8b7efe6404c.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

84d2c030-7988-435a-906a-bcf059b6c8b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\84d2c030-7988-435a-906a-bcf059b6c8b7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

985243f8-2688-42a6-82fe-87a639d5fd21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\985243f8-2688-42a6-82fe-87a639d5fd21.tmp
Size 2KB
SHA256 d66abcb79162bc58963efc576474cacbba86184603b1a67d30b01cc3e2432e62
MD5 5cdfc3ca21ca1274e9c74e9570e49172
SHA1 c76a63860952437a0396aab6386300aed2de09ff
SHA512 1f97a0fbe0b04374ad9817a5cc52ac0e188513d40964d48776bae94ffb34f27f8ca3d0543b3bee912d92489e365a5e9688b95611b6b05ccc30ee2a92ff4cba20
TLSH
T102419EF787F4867E9A1196F0AB14AE1BCE1D0516432C3C5689E4AE1BA3F34B1E04179F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b975f570633374c2e515e00ac52906b5901630bc2b7fd89fc679b8647169e088
MD5 b414ad27d1fd413eaed7f76817f45919
SHA1 d701a4810f7d53b3a3a2d5eb1cbe1ba5d2746f3b
SHA512 89766be9a3d4c78a1a3f88ea7153d95437f41c27927204f0cfff2c232dade00ecbb10f6159035843908f2a42423a0335321619a1ce95c979ecde5e44c0625a00
SSDEEP 48:KssIDKRakJRIFKSYY3ycUHA0yK62MKN9Ib02KCT6e2ucmd1OZs:KssAKRa4R2KSY62d6KWY5s
TLSH
T10C91CF22723B1201387E791CE4D4B75A534732A33425E52B7BE940A58AE7E055EFCCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

e5cbe0e3-db91-461f-8bc8-6df1acb2277e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e5cbe0e3-db91-461f-8bc8-6df1acb2277e.tmp
Size 10KB
SHA256 45c3f267710109d0d22198c4e3331fbe2622dcf17b0a91235ab29201aa162323
MD5 5c28f9b1a3814a070fa52a63118664f8
SHA1 cee57adb264bd89575557bcf9d23c97c23f9a625
SHA512 e7a1c118af8db79240115bf4fdf1bf3ae89e2f3a3deb8e492d34fcf713585b114361546ceeaa0bef01e147ca3918821ae350f58e3582290c6c749b55dc5dcef0
SSDEEP 192:sxRLRfbB/fVsgqzoA8p4F/g6+WNIYt7v6G5IgDrJ:sxRL1B/fVsgnU/5IuR
TLSH
T1A332C715AE28A93B9CCBD21DFB95BF53E6F91032A1D51E48B6FC861C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

efc48864-fc9f-486f-b444-971b54592677.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\efc48864-fc9f-486f-b444-971b54592677.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b7d4d15d-b540-4e34-97d5-3e396bc31bfc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b7d4d15d-b540-4e34-97d5-3e396bc31bfc.tmp
Size 36KB
SHA256 d9d04296197364bf5cbfe5a1ade02bf13991c9d02054d808555f4c1eb2e55fd5
MD5 dd14fa00049cdd984684672f9da1ac77
SHA1 6005aa8ff0af0848f8e05098a85d2414777d1805
SHA512 5ac566499bb59727d6536e348befbfa47f4d20be15efbba24ee6e24cf02036ee1bcd1623270ca9eafee2f85ec1148e15ad31f9e481c1ea81ebc0f5b6251b34b0
SSDEEP 768:qUFd936wgcDgKnJ0aOxDc9bsMSJz/Fn/KxTOlL+:q493LdWlVQbs7JTIMly
TLSH
T19FF29E729C908ABBDEE65F80BA9E3557AFF04153C9D95954E6CDAE0C02C72DD2307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bfb5cd74-008d-4feb-957d-2f779a2858d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bfb5cd74-008d-4feb-957d-2f779a2858d7.tmp
Size 34KB
SHA256 5c286b6a08f706954201a7cdca5b40232738a27fcf84b74e0f6e120e60a6afb1
MD5 4c7adc99c27ff4de63ed93ea149d24a9
SHA1 d38762f985242a1de2aa65a9c55f21c5b1a62b65
SHA512 b074d76cbc808da8462b54e6a07c9035d0b698eed7ab2d02301a464bbd97bba60618b903788363237fa52a8a90f6d51a5f220b0394c561724a32fdaeadf56c0f
SSDEEP 768:Q13BDgKnJ0akxDc9bsMSJz/Fn/KxTOlL+:Q13BdWpVQbs7JTIMly
TLSH
T12FF2BF75AC605DA78DD36B807A9E3957BFF48603DAC9195895CDAB0C02CB3DD2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2c1565b-dc05-4d04-a631-e5d4babc7ba2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c2c1565b-dc05-4d04-a631-e5d4babc7ba2.tmp
Size 38KB
SHA256 0275a8ae51dd6ece3d0a725513702ea859019f22a5bbe5641998e70f444a149c
MD5 1291625aaa9dc9cf399dabf9db254bc7
SHA1 609532ed72488e0aec7d805b2805c290fc2a714a
SHA512 7b8563b72a0bb9e460d68f7a0f10e1d060a2408237b08980d1759936ccbdc91579ccfa8b1df80b4315559393f303bd68bab4ebb4eb3e62b8c2dd728a7a15d286
SSDEEP 768:o/UxvxjgC+U3T6KnJ0aQxDc9bsMSJz/FnGKSHXPyK/:1Zj3+U37WbVQbs7JTvSb/
TLSH
T15B03C036EC5058A7CDE76780398AB657FFF44953C9C529A459DEAE0C07CB3AC1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d657d480-2fbf-4177-8a9f-b89ba66ddfa6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d657d480-2fbf-4177-8a9f-b89ba66ddfa6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download