d87176d847d469b74849ab8781d29d25b458e66d3ef201792dfedafd91f07783

Analysis

user interaction
yes
max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/10/2026, 15:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Swift-Exec-Update-v4.0-main/index.html
Size 6KB
Sample261022-seflzads5x
SHA256 d87176d847d469b74849ab8781d29d25b458e66d3ef201792dfedafd91f07783
MD5 0f8726a49c667bc337cb12c664a8cc89
SHA1 9f5a123cc20c104631162f9665a186ccddb2bc0e
SHA512 b2493ce30a5c42f7a04827be2a7b1ce38f016517af6e62433c84d472a283a138fa3de87f60598091cf1722ca9e11fbd0a5b3717eee33d55a9ea109df54686ae8
SSDEEP 192:s2D31w6hFY82h7Ozxc+Z5SBduPFv1319fZUurw7vsi/YjSrxO:66hMFGxTZ5SrY1FpxwzaIxO
TLSH
T113D14CEDF89341B6D63D1D2E91A31060A6C89DB55C8B47795BABC378784884E2C81C6F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1704	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{860A4D02-A772-4BD4-A13D-A7C637BCA292}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5484	msedge.exe
5484	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 2736 wrote to memory of 3988	2736	msedge.exe	87
PID 2736 wrote to memory of 3680	2736	msedge.exe	90
PID 2736 wrote to memory of 1704	2736	msedge.exe	91
PID 2736 wrote to memory of 3680	2736	msedge.exe	90
PID 2736 wrote to memory of 3680	2736	msedge.exe	90
PID 2736 wrote to memory of 3644	2736	msedge.exe	92
PID 2736 wrote to memory of 3644	2736	msedge.exe	92
PID 2736 wrote to memory of 1792	2736	msedge.exe	93
PID 2736 wrote to memory of 1792	2736	msedge.exe	93
PID 2736 wrote to memory of 2184	2736	msedge.exe	94
PID 2736 wrote to memory of 1792	2736	msedge.exe	93
PID 2736 wrote to memory of 2184	2736	msedge.exe	94
PID 2736 wrote to memory of 2184	2736	msedge.exe	94
PID 2736 wrote to memory of 5812	2736	msedge.exe	95
PID 2736 wrote to memory of 5812	2736	msedge.exe	95
PID 2736 wrote to memory of 5812	2736	msedge.exe	95
PID 2736 wrote to memory of 4992	2736	msedge.exe	96
PID 2736 wrote to memory of 4992	2736	msedge.exe	96
PID 2736 wrote to memory of 4992	2736	msedge.exe	96
PID 2736 wrote to memory of 3640	2736	msedge.exe	98
PID 2736 wrote to memory of 3004	2736	msedge.exe	99
PID 2736 wrote to memory of 3640	2736	msedge.exe	98
PID 2736 wrote to memory of 3004	2736	msedge.exe	99
PID 2736 wrote to memory of 1156	2736	msedge.exe	101
PID 2736 wrote to memory of 6028	2736	msedge.exe	104
PID 2736 wrote to memory of 6028	2736	msedge.exe	104
PID 2736 wrote to memory of 6028	2736	msedge.exe	104
PID 2736 wrote to memory of 1840	2736	msedge.exe	106
PID 2736 wrote to memory of 3028	2736	msedge.exe	107
PID 2736 wrote to memory of 5592	2736	msedge.exe	108
PID 2736 wrote to memory of 4140	2736	msedge.exe	109
PID 2736 wrote to memory of 4140	2736	msedge.exe	109
PID 2736 wrote to memory of 2936	2736	msedge.exe	111
PID 2736 wrote to memory of 2936	2736	msedge.exe	111
PID 2736 wrote to memory of 5484	2736	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Swift-Exec-Update-v4.0-main\index.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffd2699c188,0x7ffd2699c194,0x7ffd2699c1a0
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1984,i,10274039209001993673,7676550039932686041,262144 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=2820 /prefetch:2
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2168,i,1147155387139952376,15913069394388613338,524288 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=3312 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,8653821173817158153,13090518957933204882,524288 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=3104 /prefetch:13
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,4740821290509304030,12704884797358965260,2097152 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,5247716987464704778,5661461231073918300,2097152 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4344,i,7447572465356413734,7014588080386963861,2097152 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:1
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4372,i,17156965683399606158,17784512303747000919,2097152 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:9
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,8114350523504273749,10923398376534081457,524288 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,13386944387922861613,3717630244556031544,524288 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,4657956734159183469,7053521816527596066,524288 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,4657956734159183469,7053521816527596066,524288 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6600,i,1670900700777179124,1358448045706711575,2097152 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:1
  2⤵
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1372,i,5757071655957455599,5241876713745128131,524288 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=1344 /prefetch:14
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1380,i,5560967464536266756,5185581469564308902,524288 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=3820 /prefetch:14
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1388,i,8888388918958349675,10026850331899290367,524288 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,3105126150625449254,1239141949491844576,524288 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:14
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3892,i,5934573726786913889,6130392943348053416,524288 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6092,i,9254892766543724258,15237598193190792127,262144 --field-trial-handle=2824,i,4207043703305481371,43636254613386284,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5484

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4268

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3736

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3bd9763b-e269-4240-aa50-ee78dcbf8ad7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3bd9763b-e269-4240-aa50-ee78dcbf8ad7.tmp
Size 38KB
SHA256 a2dd8d6a6a919c95c1f10f31f6da272e367d2daf1b62ebac0a0ab3824a26fc54
MD5 ab71bbe452d96a6fda7cae4630364223
SHA1 ab817a4d9145e24a65f8d1da186a716e90f480b1
SHA512 1cf21a1a3e07e672c45794d60f486eba03ac87390c75fe27010ee08eb03686816a48d426b620af265a4cef90002ada16c7be9e172ab5b7a944206d688dc2a1ad
SSDEEP 768:1/UxvxjgC+W30fs1c7fZrK11tpp5XSwQs88uBkiTzn/P84g:YZj3+W30ltr2HILNBhHg
TLSH
T1E703C03AF8D45863ECB29381365B274BAFF06153C4C50B9449EE7A1E02CB75D670B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52fafe25-42ef-4eca-9f94-68bc73fde6cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\52fafe25-42ef-4eca-9f94-68bc73fde6cf.tmp
Size 37KB
SHA256 bac3c1b5d5abfee7b690f3d1e8f1eaab45171aed032b9e7047f1237b2e814ff1
MD5 16d326d62a58c096f0d4e22316fb94a0
SHA1 77dcb3d2a04b738c51e02c09ccdd146bdd2437e3
SHA512 12fa00b91b5e1fbae73513f7f29b65384f9e35d2c23ed8a70ffa585e9acc8ba402e3f8b186abee54f207a4a5c3315b98a7496957060783719b1798d32c85bdbc
SSDEEP 768:R/UxvxjgC+W3D/fc7fZrKup5XSwQs88uBkiTCx/P84g:kZj3+W3DctrxILNBEHg
TLSH
T1CD03C039FC946873ECB39385365A275BAFF06153C4C41BA849EE7A1E028B35D6307897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6dacd5a4-5abe-4633-923e-a339e3ceacc5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6dacd5a4-5abe-4633-923e-a339e3ceacc5.tmp
Size 36KB
SHA256 b3b6190170d3c8702156442f3ec593d4d8eb41d587e2a3601472c559f2c34c92
MD5 ab36bd0e73a25e90132d053597d09f80
SHA1 fc502c28db2d76aea1b43eaa7402a34c01df3d34
SHA512 8f9487312a08f14475c287fe5fe3dc7ebfec89ff70309854230ccf55aac864de50f419a59b8a29c9d2f8b640f793056d7db475d41c78d77f095892fca63e06bd
SSDEEP 768:JFds3swgueisXc7fZrK11torp5XSwQs88uBkiT2neHhLp:1s3S2tr2Y1ILNB6o1
TLSH
T1E4F2BF37ACC489B7EDB69782B65B3703AEF09287C8C40A94D6CE651D01CB29D274FC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9fa9f8aa-0711-475d-bbf0-95826e95f09f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9fa9f8aa-0711-475d-bbf0-95826e95f09f.tmp
Size 33KB
SHA256 08c4936a9cf8c7f780be8002278e2277fe2150860c7b9b6f874d38413ba3dba3
MD5 eddebce3e975814c45dcdc7ea78e8a96
SHA1 6e80bc4777326e28dd3447171b95271f628d0c72
SHA512 b31d9650996eaa845d59ebdac0938208c69d1466d5febaa9c0cde0bb0c0d111d6a49f2ced7c260db19532bc618f9a2ad7e0d1f40e1ee3e46a13f11520e3c72fa
SSDEEP 768:Vj34eL4sXc7fZrK11tBp5XSwQs88uBkiT2neHhLp:Vj3hLItr2fILNB6o1
TLSH
T18EF2BE39B89498A39CB29382765A3743BEF0A247C4C40A94C9DE662E02CB75D774B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

53092e93-7225-42a9-91b9-444bedec3db3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\53092e93-7225-42a9-91b9-444bedec3db3.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c81b158-a735-4ba5-81f1-d80e2562c229.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9c81b158-a735-4ba5-81f1-d80e2562c229.tmp
Size 11KB
SHA256 4b84bec45f4f19efe6a2431cd4a736a9395d3a05ea4da6aa62f864416a6fc96f
MD5 f42d6474a5f6d06de36628ebcce91ad4
SHA1 fc26b0d19c17cc2f371223d96993d9aa989f7b39
SHA512 e52cc7e10d0e3d88feea60b242ad94d72bacff5ca70cf48ba46528311ce316fc6db2f71bad41a4a11d460e2d6d84b2de20330801d12e9f20b4175fc39621a996
SSDEEP 192:sxRLR0b7/flsZLHR4QzoA8p4qB/g6+WNIYEGvhGOyIgIJ:sxRLI7/flsZLef/5IsSs
TLSH
T14B32A816AD28A93B8CCBD21DFB65BF53D6F91032A1911E58F6FC861C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 b023e9774739bb27017ea4d730a1c3a704c35dba2807580d9ba485694d268c83
MD5 1fef468708f361cd88136995e296ac17
SHA1 b8b06bd68c496cd76bdebc01b9fe3760f76e3f79
SHA512 3b38e6c60a65b641a6f31cbc47b7a17c41dd9202b6f8bf6b4d30f042e5db7403d993d4d3a0991d2b53bd4b53c6092e67379304bd122a95374109a23e8d472d3c
TLSH
T112E026A904CAC33EA358E8C7326C530D83906A1B92C0AD4E6B08EA84F845840EAD6B94
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 44d3cf4d0ffd3a8a2097b52752cb5d547197bebdde9aca59fcee5d9a320d32e3
MD5 7b8d0390629d236f5ebe3cad29fe12f7
SHA1 f94691a8c9b1943f7284f44944140a71f6970a11
SHA512 8e5ba64d076230bdbf9692032eea2aabc73d97f8f17cf985a6a1ab6fa35c77cf62d6f50f9abf38829ef099baa89e77cfdfcc757656174691d3a26d3dd489543a
TLSH
T10451C7C342C25C7EC77AE93A01E8211B3E3094B426CB2FD91C97EBFD7B69B199560091
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b2bcfdeceb6a1bfde3842bf352ca950f25262ec6b60871599c3f9a4af27aafd7
MD5 d225ddf91786d98a36b5d37845afea7d
SHA1 4ab6bea6166733f16ff46585c7441df26086cbfc
SHA512 7d27b10c57fa0bef57b90f9dbce1c7422573866bc1fc99ef745e31e1da21a94db60454c99c41809ac540a6bbe058c0c14bbc30246aad5d29ebfc08229d33e379
TLSH
T11351D8C342C29C7EC77AE83A41E8215B3E3094B416CB2FD91C57EBFD7B69B199560091
MD5 SHA1 SHA512 TLSH

Submit Download

5f097cb9-24e6-4976-8738-6a4e719dc5af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5f097cb9-24e6-4976-8738-6a4e719dc5af.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

34169803-15eb-42cf-bd06-d022c88a0f49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\34169803-15eb-42cf-bd06-d022c88a0f49.tmp
Size 1KB
SHA256 508f15d676463650fdf7e4700ea39b5d4e2724cf3684f3c2f92a2d58b665c333
MD5 4dcc5c572aaa8847bdd09b4385d7cb0d
SHA1 8b8e0161796ac265c2162fc89b5a9a214bee87c1
SHA512 135e975099d94340e9772abc349d532cb8dbbe74e3f403ae2d74ec527f94b55fd70a5af65f11267ce83c3887da3e1fdab3d34343385c438dd305974dff3f1b29
TLSH
T114319DF787B4957E9B0196F0BA08AE1FCE6C0415432C78AA85E06D2793F3461E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

c0e6aa59-6c3a-49bb-895f-0763a6d607b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c0e6aa59-6c3a-49bb-895f-0763a6d607b7.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

db3bd37f-63e3-4ade-8e73-9ad43c1c913d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\db3bd37f-63e3-4ade-8e73-9ad43c1c913d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 4676e253957d68a9e3db9d56124a579b2b39c20e0ba0d08b958a2f0560a7b96a
MD5 1a4d2ca04498a5ab580788a47f86c09b
SHA1 caa8d50fe0befafc5198fdde71920ffa5c1057ef
SHA512 dfa3a65c8f900ca31e353718ee7fcd843d69d72be53657bf0163590d8299cfe607c69cc24b9695982e131f104baed5727ec87943ade55aa10e42dc297e6927aa
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXQroJeq:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0V2
TLSH
T16CB2C92B640CCB7F4FC04A9EAC196FD77D9802C79A588D4047FE995C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

bf274517-7074-44d0-a036-cf4d99d50d20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bf274517-7074-44d0-a036-cf4d99d50d20.tmp
Size 11KB
SHA256 20918a8bfafeeff1da4efdc21b9e08d215c9624e0fb7569ee0a2d4858c7e445e
MD5 045afe77ed43cf049857a52f32cfea67
SHA1 e51405d1a801961320306d369a16c525dbdc7fb2
SHA512 6f1974cecbaa9094f0fb76855d3eb0d72252e3525720a38c90a9a6e714435d6e3386d82c6aaad6ab137a87dd47dd2ecde4f99f68cb8835fad4c0b806db732f71
SSDEEP 192:sxRMR0b7/fls+LHR4QzoA8p4qB/g6+WNIYEGvhGOyIgDdJ:sxRMI7/fls+Lef/5IsSj
TLSH
T19832A916AD28A93B8CCBD21DFB56BF53D6F91032A1D11E58B6FC861C04E76DD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f021089d-4c15-4c1b-99bb-3dd5c81254fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f021089d-4c15-4c1b-99bb-3dd5c81254fc.tmp
Size 11KB
SHA256 0cea668ac4a9b637f93be40c4141ea00861119160bba764111967ae188545aa6
MD5 c319d1ac05d3f76a7170ee84b48eea77
SHA1 c3c24148d7a451b379ca63d7ca996476dd38f960
SHA512 f345a1228ed60e5b872fa285be218f25f7ce4009dcb7dfee7b5c1d58ccbd1d03d9acac8477623f1fbcece58fef89233e5d6c96b6e3518cfd353a2b1b8231cbbc
SSDEEP 192:sxRMR0b7/fls+HHR4QzoA8p4qB/g6+WNIYEzphGOyIgDzJ:sxRMI7/fls+Hef/5IDSh
TLSH
T1A532B816A928A93B8CCBE20DFB56BF53D6F9103260D01E58B6FC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a26b48bd-0ab0-41ed-b8b6-2ece9c758cfa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a26b48bd-0ab0-41ed-b8b6-2ece9c758cfa.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b3d7939e-b7dd-4b4f-8b5c-de8d3df7bc1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b3d7939e-b7dd-4b4f-8b5c-de8d3df7bc1e.tmp
Size 33KB
SHA256 5cc674f963dc1d67a523fba3c822a7a093c0158ba508d4b1c0e9a8344cc387eb
MD5 9bc9e025762fbedf82eab1fe9c83108c
SHA1 924c00a6f10f3ae61d6cdebe9d8b57d0ddfbf3da
SHA512 2a77172a4d3f005dbab7da0c3ab7126b338f0c7125a7c684020c40730a59bf6fadf69448ca4b78a244b7396fdde8cfc0a351585bbb423119b187a927f19a0614
SSDEEP 768:cj3heisXc7fZrK11tEp5XSwQs88uBkiT2neHhLp:cj342tr2aILNB6o1
TLSH
T14AF2BE39BC9458A39CB29382765A3703BEF0A247C4C40B94C9DE662E02CB75D774BC5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e133280d-20d1-4a33-a69c-0cfbb79ff337.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e133280d-20d1-4a33-a69c-0cfbb79ff337.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download