Analysis
- max time kernel
148s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/10/2026, 16:06
Static task
static1
Behavioral task
behavioral1
Sample
sample.html
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample.html
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
General
- Target sample.html
- Size 293KB
- Sample261022-tkglwssscx
- SHA256 56c0da8119832a65b8d3576eea81fbfbabda1029b0fdba2624eaef0bd216f6bf
- MD5 0f98479facf5a718e646fe2aaf73c3fc
- SHA1 64e112f5dddf3bebfced53bbe898bc28fda35ce3
- SHA512 bb38e6d4c329186f9715d434bbea7df5bf81a589e5a69586ccf0f4dbc6f163e43fc7270bfccf9a0354ce1e3cef278339bca6c0d15e276e60cd8d9d517a3c916d
- SSDEEP 1536:2pItDzDM8llVS6Yp0jcskhGdEI8g4TaiaGsXPuBrvnhtNR4P0YQlvoFa:D9zI8llI6Y7G4/vFvYa
- TLSH T18A54A4E150F1296F03C75186A5A45B892D4B806FFE472D02BEDE13992FF7D299B07238
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 4596 msedge.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{E577F111-16DA-4E56-90DB-0A953418BE04} msedge.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 908 msedge.exe 908 msedge.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
pid Process 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe - Suspicious use of FindShellTrayWindow 33 IoCs
pid Process 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe - Suspicious use of SendNotifyMessage 16 IoCs
pid Process 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe 440 msedge.exe - Suspicious use of WriteProcessMemory 42 IoCs
description pid Process procid_target PID 440 wrote to memory of 3136 440 msedge.exe 90 PID 440 wrote to memory of 4960 440 msedge.exe 91 PID 440 wrote to memory of 4596 440 msedge.exe 93 PID 440 wrote to memory of 4960 440 msedge.exe 91 PID 440 wrote to memory of 4960 440 msedge.exe 91 PID 440 wrote to memory of 3656 440 msedge.exe 94 PID 440 wrote to memory of 3656 440 msedge.exe 94 PID 440 wrote to memory of 2900 440 msedge.exe 95 PID 440 wrote to memory of 2900 440 msedge.exe 95 PID 440 wrote to memory of 2900 440 msedge.exe 95 PID 440 wrote to memory of 2300 440 msedge.exe 96 PID 440 wrote to memory of 2300 440 msedge.exe 96 PID 440 wrote to memory of 2300 440 msedge.exe 96 PID 440 wrote to memory of 1772 440 msedge.exe 97 PID 440 wrote to memory of 2632 440 msedge.exe 98 PID 440 wrote to memory of 1772 440 msedge.exe 97 PID 440 wrote to memory of 1772 440 msedge.exe 97 PID 440 wrote to memory of 2632 440 msedge.exe 98 PID 440 wrote to memory of 2632 440 msedge.exe 98 PID 440 wrote to memory of 1800 440 msedge.exe 100 PID 440 wrote to memory of 1800 440 msedge.exe 100 PID 440 wrote to memory of 1800 440 msedge.exe 100 PID 440 wrote to memory of 4336 440 msedge.exe 101 PID 440 wrote to memory of 2864 440 msedge.exe 102 PID 440 wrote to memory of 4336 440 msedge.exe 101 PID 440 wrote to memory of 2864 440 msedge.exe 102 PID 440 wrote to memory of 4248 440 msedge.exe 103 PID 440 wrote to memory of 4248 440 msedge.exe 103 PID 440 wrote to memory of 4248 440 msedge.exe 103 PID 440 wrote to memory of 3068 440 msedge.exe 104 PID 440 wrote to memory of 3068 440 msedge.exe 104 PID 440 wrote to memory of 3068 440 msedge.exe 104 PID 440 wrote to memory of 2488 440 msedge.exe 105 PID 440 wrote to memory of 2488 440 msedge.exe 105 PID 440 wrote to memory of 2488 440 msedge.exe 105 PID 440 wrote to memory of 4768 440 msedge.exe 108 PID 440 wrote to memory of 2224 440 msedge.exe 112 PID 440 wrote to memory of 6096 440 msedge.exe 113 PID 440 wrote to memory of 4672 440 msedge.exe 114 PID 440 wrote to memory of 1448 440 msedge.exe 115 PID 440 wrote to memory of 1448 440 msedge.exe 115 PID 440 wrote to memory of 908 440 msedge.exe 117
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:440 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b0,0x7ff8135bc188,0x7ff8135bc194,0x7ff8135bc1a02⤵PID:3136
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,7817382447414875305,13670972424292364329,262144 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:22⤵PID:4960
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,16644569764174509862,15896485209628661330,524288 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:112⤵
- System Time Discovery
PID:4596
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2440,i,6670436112708920993,11136052536260515109,524288 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=3304 /prefetch:132⤵PID:3656
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,7434188003713261,18175548380908089671,2097152 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:12⤵PID:2900
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,16216935896788490788,6552121812769909814,2097152 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:12⤵PID:2300
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,14484871577233767996,16256689291118354661,2097152 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:12⤵PID:1772
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,18417642295181425925,8647967821572274849,2097152 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:92⤵PID:2632
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4892,i,14858877164889936394,5327073260939976211,2097152 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:12⤵PID:1800
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,6665796719153196853,17797865051176704592,524288 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:142⤵PID:4336
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,14868595002749072937,5553666537496148849,524288 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:142⤵PID:2864
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5596,i,9323891550265565282,6969325116564094030,2097152 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:12⤵PID:4248
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6020,i,8472399843425875535,2790774778137844659,2097152 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:12⤵PID:3068
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6240,i,7061350545311028046,9499378297514116956,2097152 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:12⤵PID:2488
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6816,i,2857023280889009774,12475229337755367863,524288 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:142⤵PID:2892
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6816,i,2857023280889009774,12475229337755367863,524288 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:142⤵PID:4768
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6920,i,9571632080950247872,13356294347967772714,524288 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:142⤵PID:2224
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6928,i,257689366679240559,1209537014624324906,524288 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=7244 /prefetch:142⤵PID:6096
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6924,i,13062094612043726256,3581587605292354356,524288 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=7272 /prefetch:142⤵PID:4672
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7044,i,17334971038319388409,3480143755646086591,524288 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=3364 /prefetch:142⤵PID:1448
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6868,i,3769203193408695426,8198096797905993104,262144 --field-trial-handle=2304,i,14020095313608608290,7517052723911443892,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
PID:908
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:5588
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5740
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start1⤵PID:1700
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1e2b2a4d-9064-4ff3-8417-f0e1b5aa3543.tmp
- Size 36KB
- SHA256 fd7f3c1990c37a6d70b627724da09bac549445791eff307e530b6628703b187c
- MD5 cca5130e693adf5ebe04f244d5d9aa9e
- SHA1 661e56d7428d576f7fb39f7d064440f6a16bca96
- SHA512 3d3ff23ebec7aa36ee54ad0999b1ae56d9b0d2a78ee1ab90cfb3206e63c4a6462e5fd3c88a58b4381996fc516afcc7b69d95b07097454f5c7348a7ae35507c71
- SSDEEP 768:ZFd/39wgJKNsPc7fZrKIHXVp5XSwQs88uBkiT2HeNILz:F/3VKN/trt3bILNB6DP
- TLSH T199F2BE37A88499BBEDB6D781B65B3302AFF09247C8C41A94C7DD681D02CB29D274BC57
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3afb84f2-2744-49f6-9894-1daa2e12e646.tmp
- Size 38KB
- SHA256 bf7d662d6cf6a40dbe7175c7bc998f6c74e6f3604dbb69b03e21b730ab1d5fa3
- MD5 b216b4966011ac6b0273dd0137f3c29d
- SHA1 6aca09cae65be50a972a4a2ef1312e51f19cf764
- SHA512 38946567fe4db9732d178e102bba7123bcd6d1dd4a65ad2dc8c27293c956c13a6afa73ace37beb129c48563be6f670e59cfaa3dcd863db03574d7b5e1f391b2d
- SSDEEP 768:L/UxvxjgC+93GKNEPc7fZrKIH6p5XSwQs88uBkiT2Hy3Jm:+Zj3+93GKN3trt0ILNB6Cm
- TLSH T16E03CF39FC945863ACB6E381769A2757AFF05043D4C40AA849EE6A0E02CF76D634B857
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\88727fe0-925a-4bf8-9358-6e21ac7df429.tmp
- Size 38KB
- SHA256 9f6dc2d791015c3848b1e0ab41adb2550f9d8297c1562d611c12a2127792bedf
- MD5 d4088950f1f0e34827c1a9d3607862cf
- SHA1 ba6fb7a203065a048b94831957ae37f185d22565
- SHA512 20e4bcc24583495c574e48c871888e0b3405d690883e05dbc9cad7f82f2876494d75c6487f99c3c2008798dbb6a8832ff9fe399f49772ea807b1b9bd1be5f46c
- SSDEEP 768:+/UxvxjgC+W3PXNc7fZrKIH+p5XSwQs88uBkiTzH/P84g:zZj3+W3PutrtQILNBVHg
- TLSH T1D503C039F8945863ACB2D381365B275BAFF06153C4C40AA449EE7E0E02CB75D674B897
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8a14cba6-5109-40d0-b6e0-002e22e45700.tmp
- Size 37KB
- SHA256 c2d2f6b2bb8537c22341e3195b3342cba5e16ddfd2cad4b77bc0c1017ea3b87e
- MD5 7eed97f72ab9352ec835304d8b8f3ee5
- SHA1 feb0e9f44cf5481694aba1d76d0f5dbb1fab9763
- SHA512 c4db93a81225dc1d49513f56534ceee173a22ea7760ab2106f8684c61ca41bab3563652b068cf2a20cae72bba570fd736217f5d70fd2954ddd4f7d6567dbd4d8
- SSDEEP 768:R/UxvxjgC+W300/Rc7fZrKIHAp5XSwQs88uBkiTC0/P84g:kZj3+W300Ctrt+ILNBJHg
- TLSH T19703C039F8945873ACB3D385365B275BAFF05053C4C41BA889EE7A0E028B75D670B897
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8edbdf21-6ad4-43a2-9c05-87c68fa422cb.tmp
- Size 33KB
- SHA256 229f9133590e20fdc9719425131749ced684f3e5bd0fd09b8855cb65db6a299c
- MD5 9e39ca7c42fd1121db3ffce61d62a02a
- SHA1 75d5eaf43ca1e43a06483abdcef68c45f4043557
- SHA512 e38234456e3481b44a22eb28792dc2d8f342cb848172800d9fab26532a96c38f78a97a502e48806cf0901b9116fad0fdb8231d09d854efe660c3c19e1d5e026a
- SSDEEP 768:Qp3TKNsPc7fZrKIH6p5XSwQs88uBkiT2HeNILz:Qp3TKN/trt0ILNB6DP
- TLSH T1D0F2BF35F8905DA39DB2A381765B3742AFF09207D5C40A848ADD661E02CB35E774B817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
- MD5 667b54168424526a7188593696f59ace
- SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
- SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
- TLSH T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
- MD5 edaab58c014c1abbfa900853b2ab2696
- SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
- SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
- TLSH T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\568ed65a-8759-4456-bbe8-5655fbae9810.tmp
- Size 23KB
- SHA256 fc88c047695737b53d55456b30d23667abf18b3ffd8fc86392e21908c498cbdb
- MD5 0c31188faa7d63b532245bdd0e670b16
- SHA1 cd6e1f4c9dab6f73ed01259b01816d2444512557
- SHA512 a5be4b40aad961ad91d5ce84d56567701ee832d8ab1594bdbb5c9e902817a5318fe04685981ee815c6c7a0dde21525fc3511bab2aef0fe10c9edadc3c8b46532
- SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRX9roJe4:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0Vn
- TLSH T1C6B2D92B640CCB7F4FC04A9EAC196FD77D9802CB9A588D4047FE995C02C77EA92194DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8a5305f0-9260-43bc-8f02-cb586a8a8fc1.tmp
- Size 11KB
- SHA256 7d5702c72e98ff2a5746c8e3894404f239babbf5fe60756ae036042a5913d8a1
- MD5 9d621ab572db3c6bacdbe9de66c18e5b
- SHA1 5d42379674fe1ae1f569c1c196134bbcef955c2a
- SHA512 a650e7d2e68b0524d2188260ff81d34d893f9fde53473c3b66bd5aa5d4025be98e8f22e304af48779854646b311efc90e2173092ce8ef7ff9e234157896c26c3
- SSDEEP 192:sxRMRQGbPb/frK+s0HROdzoA8p4Y/g6+WNIYEGQOGbIgIJ:sxRMuYPb/frxs0pF/5I5s
- TLSH T11232A716AD28A97B8CCBD21DBA567F53D6FD103260D01E48F6FC8A1C04EB6DD620780B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\972bdfdc-7054-48dc-822a-6b340460de4a.tmp
- Size 11KB
- SHA256 551cffdb57bd200b6f6b6464bb01c41ee1d31eaaf95dd53add480ea151eb28dd
- MD5 8105aaf986f84037d6a76fc5c08eff05
- SHA1 3113e9062917222570cf82da55abac67b1e57334
- SHA512 c72f90d4b1ef739489aebdfeb1803641ef7a8e2e7e4bac83c8dedf36f656da946c03bc15a05a4098a04d731c571b8731531e50d4d19485ec35fc8a11899fd764
- SSDEEP 192:sxR3RQGbPb/frK+s+HROdzoA8p4Y/g6+WNIYEvYOGbIgDTJ:sxR3uYPb/frxs+pF/5I6h
- TLSH T1B642A716AD24AD7B8CCBD21DBA567F53D6FD503260D01E48B6FC8A1C14EB6DD220780B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9dd9e45a-fcdd-4d98-80a9-c573126272b8.tmp
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000039
- Size 105KB
- SHA256 97b8e459bb949d2f1e4e2ef2124e4af13f8adbc8e8b1344f6b480624dae2da8d
- MD5 7a00814365a727d13bc4e520cd5ab2d3
- SHA1 3811eb895a60951394fd780ce5f2faf9a4e1a474
- SHA512 883a634394a4573f0aa242ce1c82b1b228e92c510186ef215e602db1e85af34d15b281f805d29321f6e4949c019cbd62a212df16d65a1a4123329b0550d128e8
- SSDEEP 1536:H0H09ukX93XxFiH9ZGG9Afi2NW0rXU75nZTSYQ5aK3GrACH1NnCVT4Bo:iY9C4K2NRDKZTSYQ8ACHVBo
- TLSH T1F0B31268364B8CC6EF22F27C0A9EE693D82B843D52E0815E345AC5CBD4553D264CAFD7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 1KB
- SHA256 9f115472f377b8ad3f753cccfb32af74fbedb099cc3a8a27f34b81f3b83e852d
- MD5 f0807147038435d8e098e58cf9ccc586
- SHA1 6852c462ab4cb47edf42abfef603fd966f644264
- SHA512 8b53b75bccf34658688d5dd1ff706180fdd58be120eb873baaac8b2bf0c7e6cff2aa81fc6c920b326ee08466dcb3357eb93948e99de78d11e3a7f7c58bbd1ba2
- TLSH T11A312D87C6A81085F791BA34C7D137333AF4F98E51870E821AA4D8B5794679E7250F7C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\1d38970d-0797-478e-96cb-2d870e3654ab.tmp
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\10f9edd5-c5ee-4edc-b7f9-aa9a507d0b82.tmp
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\34c23705-46ee-415a-a7ac-40918fefcfce.tmp
- Size 40B
- SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
- MD5 20d4b8fa017a12a108c87f540836e250
- SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
- SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5fd788b3-9d9f-45b5-bd7a-9402240ab9fd.tmp
- Size 10KB
- SHA256 0e7a53887c2b2203db49f4022cb83fee2c916a97140db81bffbb6d7039fe6e7f
- MD5 b90cef70067ea1b720e29766ef149eb3
- SHA1 db12a0354f241c044c749ec181678f3191925a75
- SHA512 a87d98b62871e79e53f42e75405310fc289a662429a8f02cd6c8cd0a638de5cee770182794eb59067b448a581f6756ac39a837cd177a94cb0bd06c9bad0ad6d9
- SSDEEP 192:DNm4QttGCJL7m70pReNUVaaiZjhrAIc3ZGgOR7KeCNapeV99R7BYDqwrg0AxispG:DNm4QttG6L7m70pReNUVaaiZdAIc3ZG7
- TLSH T1ED229BBAC7E843BE881156F09A257E1BCD1D155B42383C568DF8AE0F63F2471D24269F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
- Size 4KB
- SHA256 a4027415eacfc88965b620d5194a70d372e4175b97b8f6322c24c2328edff5eb
- MD5 21b3ace924cbb461cf2a9c5d22cf7205
- SHA1 14d6c87b49624e156bf4e8bfd0d5e05ba4f47d3b
- SHA512 9624a3c0f3e7ef19f0b9427c25d7db2ea3e9c4d067607946b1b49462d274f02856dc2b2a0de0a747ad18322c241ddabbab8fe5f9862c828ccf20e3200954fb9e
- SSDEEP 96:Kj1iPz1fvpcj0kirpKKgilp29ls7PaakgK12WOzKKYQr:g1iPz1fvOj0frpgil89ls7Parnl6
- TLSH T11991FD4530BE124139BD290B9274871A025235F3706AE53B3FBE40E69AA7E056EFCDD9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
- Size 149B
- SHA256 17b472a1de9b0dab67b9b9899b47a3282d50ca82a2a4416255958afb96772b3d
- MD5 891bcc2cdf94a3d5b1426ec9adfad3ff
- SHA1 5c2c9b55b410ee436e56e424f68733358d623ede
- SHA512 5da5e6feded1f065731164fea9b5665a4bec8b30e5d6af183f8d6b27e5bee0c8cb002c4676e2b6e0ab7506178e85daec04df7abc268f65cd4689fac84b2d6dc2
- TLSH T172C02BE7457780873720A4D52C3A110D980BCE8C4CC4CAF9D006F042207C633C1A3052
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt.tmp
- Size 65B
- SHA256 26e78cb8e189406e12ca36d7fe0eee3d0757dcb21dd8c84917e09c50bff3b708
- MD5 f012cdf7eed009b6531e662c6b34787d
- SHA1 b0cf0127db406b6184aa1230ceaef87f6d0f7c01
- SHA512 89ab98a58175d02e277f293cd9cd021d3dffd012d12bd15f4163b6a90216d6bc3fabeaf18fbefb17b9d007eb734624065a9ce52fa418ee5216d4250c588573f0
- TLSH T1ADA002B70911818B6F30A9D82135A21EF80FC3CC8CC0CEF4D049C0432128A334052491
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a3b06675-ac60-4ab5-829b-c6e3dc4d1718.tmp
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aaa7ba01-73fd-4583-8dd3-3ba3e50224be.tmp
- Size 11KB
- SHA256 5bcc771a14093e91a0e0cda2cc3cd28a262904e0e3429b06d0c3cd9c119bb926
- MD5 3357663fe07e768d46e0c1f5f86ea9d3
- SHA1 b8f21a61a6a64b163a9d7a8ec0ecdd2226f9ffdd
- SHA512 a629fd950e07601e5c041c4b2be898702abd7a89579fdcca9a302747e7792b61c08045d472b80d14fa62fa1f2c52021e3289c0f313dd019c801f0a5740c71d23
- SSDEEP 192:sxR3RQGbPb/frK+sSHROdzoA8p4Y/g6+WNIYEGQOGbIgD9J:sxR3uYPb/frxsSpF/5I5j
- TLSH T1C1329616AD28A97B8CCBD21DBA567F53D6FD103260D01E48B6FC9A1C14EB6DD620780B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4088492f-7159-4d01-ae79-25cefbd3a4fd.tmp
- Size 22KB
- SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
- MD5 f768bcb451a187c18099961c484eef8b
- SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
- SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
- SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
- TLSH T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
- Size 3KB
- SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
- MD5 904e6e94a1d46374c8630cfd86cc729f
- SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
- SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
- TLSH T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bcaa73f7-136d-4289-a57e-90cce839cb87.tmp
- Size 33KB
- SHA256 bb7224341d5bb407b33b1fc125d871369ca2b5a3b10ada6b8f1656e07aa42134
- MD5 d8569b8f2f6cd3c32be8359cee14c403
- SHA1 bcb521308fcdb5689298e54a9999ce8b79bafe7d
- SHA512 a8dbaca22c936b0b20c43b7d5134d38f7dc7dfff720a8fbb741ab7e4346a65c77bc4fd9e191581ad64a9caa33ff8b5fcfefd451dbfca04331373d51dc7f63c8e
- SSDEEP 768:Ip3GKNsPc7fZrKIH6p5XSwQs88uBkiT2HeNILz:Ip3GKN/trt0ILNB6DP
- TLSH T10FF2BE35F8905DA79DB2A382765B3742AFF09207D9C40A848ADD661E02CB39E774B817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1fe85b59-50d6-42dc-a2f2-26ac019ac7a3.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512