4082b4f9762c59a284724178db97c8974cc1144a25f4f2d26dd91a0c6dcf7d31

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/10/2026, 22:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.htm
Size 1KB
Sample261020-13f7eaaw3k
SHA256 4082b4f9762c59a284724178db97c8974cc1144a25f4f2d26dd91a0c6dcf7d31
MD5 037659bf7a8a9596d243a602510f6f60
SHA1 83946a69c632b628c9db03ed8be2fce70b15542a
SHA512 147f552ce322241994578d1e10f8ce33ffd137a40a4609c2763deeca87668f58bdd944c84926b4c320fd88ed4e8ce4754ef633d111be9e753b26c6ee875d0ce2
TLSH
T1DD2141726B092D7356F24776704B32A87B0050E8A2123F24705FB1C772D4EAEC2BB1D9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2268	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{9D62DBB4-5054-4372-A038-3B6D80B74316}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4212	msedge.exe
4212	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3692 wrote to memory of 3752	3692	msedge.exe	89
PID 3692 wrote to memory of 3252	3692	msedge.exe	90
PID 3692 wrote to memory of 2268	3692	msedge.exe	91
PID 3692 wrote to memory of 3252	3692	msedge.exe	90
PID 3692 wrote to memory of 3252	3692	msedge.exe	90
PID 3692 wrote to memory of 1928	3692	msedge.exe	92
PID 3692 wrote to memory of 1928	3692	msedge.exe	92
PID 3692 wrote to memory of 5124	3692	msedge.exe	93
PID 3692 wrote to memory of 5124	3692	msedge.exe	93
PID 3692 wrote to memory of 5124	3692	msedge.exe	93
PID 3692 wrote to memory of 3304	3692	msedge.exe	94
PID 3692 wrote to memory of 3304	3692	msedge.exe	94
PID 3692 wrote to memory of 3304	3692	msedge.exe	94
PID 3692 wrote to memory of 2176	3692	msedge.exe	95
PID 3692 wrote to memory of 1892	3692	msedge.exe	96
PID 3692 wrote to memory of 2176	3692	msedge.exe	95
PID 3692 wrote to memory of 2176	3692	msedge.exe	95
PID 3692 wrote to memory of 1892	3692	msedge.exe	96
PID 3692 wrote to memory of 1892	3692	msedge.exe	96
PID 3692 wrote to memory of 3344	3692	msedge.exe	99
PID 3692 wrote to memory of 1268	3692	msedge.exe	100
PID 3692 wrote to memory of 3344	3692	msedge.exe	99
PID 3692 wrote to memory of 1268	3692	msedge.exe	100
PID 3692 wrote to memory of 552	3692	msedge.exe	102
PID 3692 wrote to memory of 2088	3692	msedge.exe	106
PID 3692 wrote to memory of 6044	3692	msedge.exe	107
PID 3692 wrote to memory of 4112	3692	msedge.exe	108
PID 3692 wrote to memory of 3240	3692	msedge.exe	109
PID 3692 wrote to memory of 3240	3692	msedge.exe	109
PID 3692 wrote to memory of 4212	3692	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.htm
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffb2fe4c188,0x7ffb2fe4c194,0x7ffb2fe4c1a0
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,15877833302203416267,6802107074921321864,262144 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:2
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,8014856373582366548,13604346877297996026,524288 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2208,i,2099499075741437393,6739158411618098381,524288 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=3352 /prefetch:13
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3336,i,15586909562362989348,3631368575310563125,2097152 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3340,i,17151741752857962614,7899656240179211073,2097152 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,4321774048481102916,917901326804045216,2097152 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,17048515114738420798,2820453831634886121,2097152 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:9
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4736,i,4903588117728785238,3859831844183333511,524288 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3756,i,138060017454782802,10338429609255825320,524288 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,13025836244770471372,17352619897084258758,524288 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:14
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,13025836244770471372,17352619897084258758,524288 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:14
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,11102562017252079766,7628845961888319413,524288 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,13925308585319373877,12186880064383932095,524288 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:14
  2⤵
  PID:6044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,12753090826397260624,10832155075409427251,524288 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:14
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,18020186356745359363,10394945084906221458,524288 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:14
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,16054057473880516400,3152152777455832488,262144 --field-trial-handle=2472,i,10663796242282117,18223342543976883652,262144 --variations-seed-version --mojo-platform-channel-handle=836 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4212

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5468

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4afd9566-2914-481a-87b8-30e495dd1dc6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4afd9566-2914-481a-87b8-30e495dd1dc6.tmp
Size 39KB
SHA256 35696d0796b7554af09bf9a9b88f9463ab0786ea376aee862f9ad2781ddbae9c
MD5 6bbe49f1de86ccc157041a6d7178c0c2
SHA1 1f42c6cf14f639c4d8a2441c5a694d6d80aaac31
SHA512 0cf0a6fdfc4469d9c24d822e85ea77f61f21d824fba1dd0afda136d984c80056470e427fa6c1cd3c834babb21218d0016492bce54c26a34708c2b73378531a0f
SSDEEP 768:S/UxvxjgC+B3DTxgm1rUGuWFDmGA5b65Q92RQMPqQ2Fj0O:XZj3+B3ZPAF65dQg2FQO
TLSH
T1CC03D032EC94AD739CF592C0364BB356AFB94163C1C996A049F97F0D06C768D830B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

51a9ac1e-287d-4f3b-a32b-c7f98fd60f5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\51a9ac1e-287d-4f3b-a32b-c7f98fd60f5f.tmp
Size 39KB
SHA256 b629fd334244ed117bb9b241372c0ae9bad26f42e569d706a062e09074d10bbb
MD5 e949ce933c0772e54e09cd161cf50b03
SHA1 33ca2d40a0016e5a6242a749e094d01ca31dc922
SHA512 ac130b7f99792f1ff39188bc7da82f64ebe5cd1861fa9cd6c13489c39cf3a3c62cbe3a584c8ab34cdc390d106cf1e497c3c45e34dc1f96bc0303d595e7973148
SSDEEP 768:U/UxvxjgC+B3WMVDgm1rotDmGA5b65Q92RQMPbcFj0O:BZj3+B31U3AF65dQDFQO
TLSH
T15103CF36EC91AE739CF95280374BB35AAFB94573C5C852A049ED6E1D06C768C830B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66ffb5a8-b4bc-4609-87f8-27006085b190.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\66ffb5a8-b4bc-4609-87f8-27006085b190.tmp
Size 35KB
SHA256 5f8ffc8b4daa35bf022e15488af3ba1d3a5daa8ade983453c2536012d5da7b7f
MD5 607b67a18de52d111fee587d7b7e4fb3
SHA1 57e706bc1462b3dee8144a748f41beb798dadae6
SHA512 a7fcad03de529ca104a53eb8e96eb1eaf1a56c7affbae787c13ca98d0d552be83eb3869cb0792cd6a3c3930d873ba569445f853013c91737b61947bfcba7ec02
SSDEEP 768:cd3SzXgm1rUGuWUDmGA5b65Q92RQMPbQ2LLz:cd3Sb8AF65dQF2Lv
TLSH
T16BF2BF71ECA0EEB39CB99281724A7255BFB58123D5CC8BA099DD6F0C05C76CE530B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

83fdd9bc-b2e9-49d6-a099-c102936db97d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\83fdd9bc-b2e9-49d6-a099-c102936db97d.tmp
Size 37KB
SHA256 b685319f77db1961e3884ca6348c1b15f7d24e0619e5aa78be770f6bae60b188
MD5 25aefcf95945386e01b026d4ef9ebed1
SHA1 8620bed8c47f7634ce85728a6b11bfef15f6c5a8
SHA512 740800d1e5dce48c5db07c57a182e24317c859d90ea3ec0197cefa49f2c21ffffb4cd58ed44a6e750edf2406e522506ef15e35ac1a7c388902c9dc1ff201c6f4
SSDEEP 768:GFdG3ZwgIzXgm1rUGuJDmGA5b65Q92RQMPbQ2LLz:WG3QyAF65dQF2Lv
TLSH
T10903BF72EC90DEB79DB996C1B74A7241BFB58163C9C9D7A0A6CD6E0C01871CE430BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0bc45f6f-5532-4b25-a138-24db7535fc67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\0bc45f6f-5532-4b25-a138-24db7535fc67.tmp
Size 105KB
SHA256 3c023366c78522106a9da07039c85fdca442b8b2524e3ef09015959fba816460
MD5 1407776b2d091c5f8f337ca833f701e7
SHA1 26ec3153e7e4ee7174d00776d5731af45502e9f1
SHA512 828cee75ffe6f6dc85f839506df778d4a85a8ecb4be27dfbd05737489c9da66bcc7c1318e30b6b931f9c0dc0ed530c46530b62098d2ec8250df235492165e080
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7O:fwUQC5VwBIiElEd2K57P7O
TLSH
T192B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

75776b97-d71e-4c5f-b211-e318ae97e1d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\75776b97-d71e-4c5f-b211-e318ae97e1d8.tmp
Size 11KB
SHA256 8b452ce25bf06a28b489ee20ef974be415f504753b9754ffe01e86b35e6c348a
MD5 5e20eb1773fcea4c07e4ad75e0be7722
SHA1 e081afd9a21f07129f256ec771364df8d50589d5
SHA512 bc3481cc2b13590502f84db39f01e3180870185a6a6b75bdcd415e8b6c9b46cf84ce7b7761364c5e9e9d5b1498b9aba1059e02537b8274a4ff7b902198837ea8
SSDEEP 192:sxR+R+bX/fsEs4nyYh8zoA8p4x/g6+WNIY2FFctG8IgDxJ:sxR+SX/fsEs4nbtk/5ISj3
TLSH
T19E32B715AD28A93B4CC7D21DBB69BF53D3FD1032A5941E48E6FC861C04E76DD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

957276f9-7aa0-41b5-8321-d62dce7ba581.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\957276f9-7aa0-41b5-8321-d62dce7ba581.tmp
Size 11KB
SHA256 560341bfca45e9c58373e3df696cf39061eee7c0be7a23ae5f650a037811181b
MD5 6ca759bd835d609f360120aee1889f53
SHA1 b40c844850f68e2b326ca8eee9a96bfd450b8781
SHA512 1af2c6929d105c75601c5669009c95869336267de9fc17b0cb4ad08769f0fa53bfdf846030cbe4d83aad4968260276058726886113e5eef8a64e58a59ca09b95
SSDEEP 192:sxRpR+bX/fsEs+yYh8zoA8p4x/g6+WNIY2FFctG8IgIJ:sxRpSX/fsEs+btk/5ISjs
TLSH
T13432A615AE28A93B8CC7D20DBB69BF53D3FD1032A5951E48E6FC861C04E76DD221790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 c8228c71c30ede4ce6d43aa5a69d284e4bdc2e3acbe8b298ddf38ff6b7923b56
MD5 271f9bc2b5cfdb5cb62ca0ef20521610
SHA1 f951cf10b539964291773f1140e7afb7232890df
SHA512 51c927a8edf39875a8213d48654ca552b102b1b03217142c078a1b7868069ba0a83e869ea95fd3211a35beabc6c18ef17b326e2b20409ce2c859b2b21d98ac7f
TLSH
T1CF5122A186504755FB6906776DF412BBBBF247B291F39E0209A8FBB98F473F44206244
MD5 SHA1 SHA512 TLSH

Submit Download

696b7114-4048-4f84-8974-ebe9f90a6e9a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\696b7114-4048-4f84-8974-ebe9f90a6e9a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

6761876a-78e7-4e3e-afdc-8e48e2cb6743.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6761876a-78e7-4e3e-afdc-8e48e2cb6743.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

a49d28b4-cdd3-4137-9e1e-7f63d20ba327.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a49d28b4-cdd3-4137-9e1e-7f63d20ba327.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

d99e9f66-9cce-44f8-bad8-5b517396e3e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d99e9f66-9cce-44f8-bad8-5b517396e3e1.tmp
Size 1KB
SHA256 f3a5d84fc55b71cb716320f93293c7daca2f10056c565f4c97c204190fb78b6f
MD5 b47e65b44cd53eb9e69fdef53db59279
SHA1 466c54c92fe19d1a67f400d9ee4407b2c1c1e6ac
SHA512 ff3d026d5274bde0442dfdd8607de1b88672e6de0df9a6af12b70fd70620149f72ca0ebb972fbf582a1eef5d8a630cbfe865fa1473db75ed27345239925fccef
TLSH
T14F31A0F787B4957E8A0196F0AA14AE2FCE2D0515432C786985E4AE2793F3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d4709da4ab835044ad502e8b92e432686ea2220647c5ed2bee35dadd7ec59b8d
MD5 626030ecd0f6a372c6df029b857d0d8d
SHA1 764a66c6e73377aec8a62be6ba218ee634460b6f
SHA512 d8f779a360a28fc70020ad618527cc97b1ff5e0d91679b98d9786791f6a0cbf1db95f5756c6b073d95911e780e2fb2d7709d5e771865de40812f3d56806cc97b
SSDEEP 96:KjNMfrNvPxmLWsUjxKc4UtxgF9OjPSi24KfaDCLeS8wc4YoFri64K6dik4W6aVkm:SNMfrNvPgLWfjJ4Ut+F9OjPSfuCLeS8/
TLSH
T104915105317B12003CBD399D81F4966B569131773025E92BBFA852A7DB6EE044DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a407daa5-9cee-4707-9456-b6ed18b2fe75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a407daa5-9cee-4707-9456-b6ed18b2fe75.tmp
Size 11KB
SHA256 ea58b16226ebe31a78092ef97e10cfd75812db89a32c0d003b962601deaf5b4c
MD5 53e390930c0761f2c57c6e5aef74c9ae
SHA1 5ac1ad6be5b9e4e45f840a3356e22c42ef12e9e1
SHA512 245daeb6b6ba31f81a2382ac87a5c558007d9887281e5d2bbc5bb2372eab2601071d08248ea599ce59990fa4bbd9807390334f48ff781679512b6b55ca7da9e8
SSDEEP 192:sxR+R+bX/fsEs4xyYh8zoA8p4x/g6+WNIY2dBctG8IgDHJ:sxR+SX/fsEs4xbtk/5Iej1
TLSH
T16532C715AD28A93B8CCBE20DBB657F53D3F95033A5911E48E6FC861C04E76DD220790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a980c367-1fc0-4e42-9686-a5575c189114.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a980c367-1fc0-4e42-9686-a5575c189114.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

d3e7b8fb-f259-4b48-9263-9af22276150f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d3e7b8fb-f259-4b48-9263-9af22276150f.tmp
Size 23KB
SHA256 cccf270ece9fe0cd4f20205bdc08bb8e3d9999c673cf0f76ba4a0335b455dec2
MD5 bed7987420d1f97ebf1d1beefef2b25a
SHA1 fe987bbbc4bd83c218882bd3617ccb051651c041
SHA512 beb609331b7f06a68becba8aec1c98e26818d9323064e4381de69658298867e4611798ca11946951e42b19d109eaf0e6ef81dbbbbfeed3f399556aefc1acecf2
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWbroHrf:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0Vc
TLSH
T19AB2EA2F644CCB7E8FD00A9DAC596F976E9802C796588D4047FED84C02C7BEA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d55c3cb6-9a7c-4bf5-9e7a-ec4c32bb8fd2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d55c3cb6-9a7c-4bf5-9e7a-ec4c32bb8fd2.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2d9982f-ef16-4045-a33a-f48b8181bf1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e2d9982f-ef16-4045-a33a-f48b8181bf1e.tmp
Size 35KB
SHA256 9407f5cf88b68981719eea42c97b159a09da2b2cd1fc9c6928b0bf3194a2ab37
MD5 4914ab0c4b25ed4b2a4fc23a913a4a14
SHA1 c1dee0fe0237e3f85a90d1b83d94f58686a1b40e
SHA512 7a4105d61b03c6a44fd3694b2e72d06ceb602c79f91f14ce28322e0f15bb41a3fc88a1ed5209211ffc37165fa90fdb3d2a63aed49b40cdf1a5efb59987b7e7c7
SSDEEP 768:3d3vUXgm1rUGuWUDmGA5b65Q92RQMPbQ2LLz:3d3vy8AF65dQF2Lv
TLSH
T1D7F2BF31ECA0EEB39CB99281724A7255BFB58123C5CC8BA099DD6F0C05C76CE530B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1edd383c-4adf-4b25-b667-c37bf27d1e2c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1edd383c-4adf-4b25-b667-c37bf27d1e2c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download