0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/10/2026, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
NM-Backend-master/application/config/index.html
Size 131B
Sample261022-w2qbgabb39
SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
MD5 c92aa5f16d78423a983a5d7ae44428e4
SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
TLSH
T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2432	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714045687-1127350534-2056456672-1000\{F2AC869E-815A-4536-A52B-776444758D9C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5308	msedge.exe
5308	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4276 wrote to memory of 3724	4276	msedge.exe	90
PID 4276 wrote to memory of 2432	4276	msedge.exe	92
PID 4276 wrote to memory of 2548	4276	msedge.exe	93
PID 4276 wrote to memory of 2548	4276	msedge.exe	93
PID 4276 wrote to memory of 2548	4276	msedge.exe	93
PID 4276 wrote to memory of 4072	4276	msedge.exe	94
PID 4276 wrote to memory of 4072	4276	msedge.exe	94
PID 4276 wrote to memory of 3188	4276	msedge.exe	95
PID 4276 wrote to memory of 5512	4276	msedge.exe	96
PID 4276 wrote to memory of 3188	4276	msedge.exe	95
PID 4276 wrote to memory of 3188	4276	msedge.exe	95
PID 4276 wrote to memory of 5512	4276	msedge.exe	96
PID 4276 wrote to memory of 5512	4276	msedge.exe	96
PID 4276 wrote to memory of 124	4276	msedge.exe	97
PID 4276 wrote to memory of 252	4276	msedge.exe	98
PID 4276 wrote to memory of 124	4276	msedge.exe	97
PID 4276 wrote to memory of 124	4276	msedge.exe	97
PID 4276 wrote to memory of 252	4276	msedge.exe	98
PID 4276 wrote to memory of 252	4276	msedge.exe	98
PID 4276 wrote to memory of 4608	4276	msedge.exe	101
PID 4276 wrote to memory of 2072	4276	msedge.exe	100
PID 4276 wrote to memory of 4608	4276	msedge.exe	101
PID 4276 wrote to memory of 2072	4276	msedge.exe	100
PID 4276 wrote to memory of 4540	4276	msedge.exe	103
PID 4276 wrote to memory of 2028	4276	msedge.exe	107
PID 4276 wrote to memory of 3392	4276	msedge.exe	108
PID 4276 wrote to memory of 3040	4276	msedge.exe	109
PID 4276 wrote to memory of 4708	4276	msedge.exe	110
PID 4276 wrote to memory of 4708	4276	msedge.exe	110
PID 4276 wrote to memory of 3664	4276	msedge.exe	111
PID 4276 wrote to memory of 3664	4276	msedge.exe	111
PID 4276 wrote to memory of 5308	4276	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\NM-Backend-master\application\config\index.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffe4225c188,0x7ffe4225c194,0x7ffe4225c1a0
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2040,i,8944695324335250074,12605701340120801375,524288 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=3272 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1904,i,3348277969819159131,8840791102256426755,262144 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:2
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,1258765238393722402,15283928660778234091,524288 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=3292 /prefetch:13
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,17489376420977257949,10704350698994130007,2097152 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,16571061348213753987,3141982086982861608,2097152 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:5512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,11580280549779590833,16331007743502330087,2097152 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:1
  2⤵
  PID:124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,16194230434032170406,9705493073306284939,2097152 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:9
  2⤵
  PID:252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,375179872667745644,16063140991932504896,524288 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,579003944954603918,4751340149595203540,524288 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,7227205109395819853,16335760642138561125,524288 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,7227205109395819853,16335760642138561125,524288 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1256,i,7544906849086447528,4341887231307436073,524288 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1260,i,10242073126495577415,11397553998755586124,524288 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=1144 /prefetch:14
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1264,i,12034925543084158151,12625581931912613870,524288 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:14
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1224,i,2821929656150965468,10783103870101736270,524288 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:14
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5676,i,2718558025980279752,13697967208969650311,524288 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:14
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6228,i,13548481900580745913,16547507202040822840,262144 --field-trial-handle=2608,i,4042891284910867690,15936187426265845277,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5308

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1a0c63ae-1124-431d-ad29-bf2aad6c3768.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1a0c63ae-1124-431d-ad29-bf2aad6c3768.tmp
Size 34KB
SHA256 a597c2abf918422985c6ac5cc932e1b496f8e32efc3cc12eeb76b1cc372fd838
MD5 ad3f26a5924ecd7292d283d6ca5f9cbe
SHA1 2a49ec2fa17166ff37784e2b9296591540c1a905
SHA512 c14ca59c920efff8cc3b50a3f48d554e274e078b9a5af427610bca5d2eba9f1c24bd7f54b52690ab6e44d927e9c57ac22d46d08bed5ab8d7a0a7a5410ae46fde
SSDEEP 384:iQkUSvA38NYV8X46++8I199fw7DJPzdvLcN9YkWwJJhoMSboCzfnFLj/NuewQTHZ:aA3JOKnJPxDc9bsMSJz/Fn/EeXtLb
TLSH
T1D2F2BFB6AC505D9BDDA3A680768B3A47BFF44643C6C91E84D9DD6E0C02C72DC6347427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e5f4c71-2fa8-4ad4-9f5e-fc3909865100.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2e5f4c71-2fa8-4ad4-9f5e-fc3909865100.tmp
Size 38KB
SHA256 4fbd3559837e75ad6840f8df7efa971d28d4245f7b57745e4d78175a7968b8aa
MD5 b87622efd8fa1f2c945af0a2f45ead88
SHA1 8fc06e31bdda6b30812360c21f8592aecfbb8be8
SHA512 543f62a89e272ec5c2e9d80e7bc3d5ac0a8027f77940da36e317ebc6bfee447c1c5de79b978cff8a7ae58b179b83794f44daefd35412448ad58f843e5d99cf60
SSDEEP 768:c/UxvxjgC+U3toKnJ2xDc9bsMSJz/FnGESHXPyK/:JZj3+U3voVQbs7JThSb/
TLSH
T19103CF7AEC505C97DDF3A6803A8AB747AFF84983D5C5299849DD6E0C06CB3AC5307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3863f724-ed57-40ec-936f-a26d72b0089f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3863f724-ed57-40ec-936f-a26d72b0089f.tmp
Size 40KB
SHA256 b77d72b3a360b0c7d0d0424f95d2c9f69b9b28ae249ad5a47cddbb228f743c29
MD5 845f6aec9324421f31fef10f09f71f42
SHA1 b831de0d9dfc7530f417c72d9d97402228c959de
SHA512 d273d2ef78d421160b4b66f783278298badf5bf159cc6f24119431eefa736a9eaa23f4cf95eb9f19f6d2ac4b14ae0c997dcabfe8e204de671b861954fd2c06f6
SSDEEP 768:9/UxvxjgC+03FOKnJPxDc9bsMSJz/Fn/EeXmL:gZj3+03pVVQbs7JTG9L
TLSH
T18E13DF76AC506D97DCA3A680368B7657BFF44943D2C92D8889DD2E0D06CB3AC5307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f4ac2dd-6ce3-4835-8884-3a5442fe52b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6f4ac2dd-6ce3-4835-8884-3a5442fe52b2.tmp
Size 36KB
SHA256 ac9e0f8a9476163578b6fb913a62ece802663629571ea3b1e60c6540b4d56e7f
MD5 2d0ca3fa11f770eacd6f7e38bc362c14
SHA1 d4c401910d2c677f6bb9579ea3cf0065ccff1b5c
SHA512 1f37a4b841c238071f332dc6baa88b884324740c46603053b1db1a7c45ecf247c799c87141e1e7ee54115f15921aaa2c37612fa5204e17fc708dae14ff1d672b
SSDEEP 768:9FdL3vwgZOKnJKxDc9bsMSJz/Fn/EeXtLb:pL3fYVQbs7JTGA3
TLSH
T10A03BFB39C8099ABEDA79BC0B69A3647BFF04553C5C56E84D6CD6D1C01872DC2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d3de2c8-4359-48f4-a485-fd62e0ae3136.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\2d3de2c8-4359-48f4-a485-fd62e0ae3136.tmp
Size 105KB
SHA256 3c023366c78522106a9da07039c85fdca442b8b2524e3ef09015959fba816460
MD5 1407776b2d091c5f8f337ca833f701e7
SHA1 26ec3153e7e4ee7174d00776d5731af45502e9f1
SHA512 828cee75ffe6f6dc85f839506df778d4a85a8ecb4be27dfbd05737489c9da66bcc7c1318e30b6b931f9c0dc0ed530c46530b62098d2ec8250df235492165e080
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7O:fwUQC5VwBIiElEd2K57P7O
TLSH
T192B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 355a29997d085f70c135b61fb8e48fe3b3d9b6030190662c9d930bd533b88c78
MD5 5121c8953b32388eb96bb70d0d12fd00
SHA1 e62d74f75b188deb1ec8b8dabcff7c16e7ba9ba5
SHA512 c8f0ff682c9ed7e02559e599a97078b0a2e39f928b301598e0196d5d9dd6ffac13da9bd34262b0120793cb2472ac6c7a93a178d4abcd0a5a2c6df1e9a193de10
TLSH
T13CD02BF4528C9C63C4CA30740425458100263401B948D2903501478849401B914433E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 97f58c0ff1008d9a744980b06de74b1bc42fdd2408c0871566ecacc80738c498
MD5 ffa34db42a6c31e411546fdfd8772d96
SHA1 cd3fa45407492f90d8b070cf009147d20a8b4151
SHA512 72fd2a1188869d257eaee37d23569752bb0744ad1a5cad19b6a4b2e60f4d5f74f1ccf0a0b24a6e31d4d512e939f7b384fb86433ec7496296acb712e8334d5e32
TLSH
T18BD02BF0529C9C63C4CA307804264581001634017548D2903601878849401B914423D3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 38d1991e601de00b34a6f5193a5c3faa2249aa9b87af1816393cd46784dec0d3
MD5 a13796011d154d358c41aac3bb6c7d87
SHA1 09ded60a0956dd126ebeace8ac54cde6703ab51b
SHA512 8b49536b6fd8c3a4f775a1e2f7445589093526f5e95202606707c3c7705b3abcd19a7b027f7f69e7b3512528bf977e71ecae8476746379c818e8c862a89c71c6
TLSH
T129E0268805CCC2BEE238A687027E634C8380261BA3C0A92E1714CDC47005464B6D27D0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 5d67d965c74519f9516e1603c0251537b4bb0f49cdfc29859fcbe74b80ca036a
MD5 291ca24a859442571dd080ebc2487f1b
SHA1 64477e609a01d01c3614765b09536822cd20d20e
SHA512 6f3ed255f250f26dadaa2272488b73238cb54d72dc925dae319004dcb6150a76ea97ca30c0ad111ccd770bc8a58708121d1c54ae37cf0c7775e1d4d782bcc3c1
TLSH
T1A7515DB019998E55F3B80076E4CA5C9B7E3449C17BB71E1E0FB9D5A4688F3B9638C014
MD5 SHA1 SHA512 TLSH

Submit Download

60092ece-7f43-4613-b95b-2b683c5389fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\60092ece-7f43-4613-b95b-2b683c5389fd.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2afecfa0-d990-47ff-bd9d-14ba0acad8aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2afecfa0-d990-47ff-bd9d-14ba0acad8aa.tmp
Size 1KB
SHA256 53d41a563c72ccd9c82d1d88e0ec1b212e4dd954dd65ca412d99d93874926c1d
MD5 dbdc1c278c2d8cf7ae86f93b1554b4aa
SHA1 c79ce91a068aaadfa02a4b133639c32d1ac8d8a6
SHA512 fb74d51e542f619055a627ec28cda274fd8d4c7a333edc6be183574e1bbddcf0b823c282aa472b3cb78d25c4b809e89f4261f4906f373daa4def62f362d900b2
TLSH
T1A731A0F787F4956E8A0196F0AA14AE1FCE1C0515431C7C69C5E4AE27D3F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

520ec37a-f553-4b29-96bd-d7bd1b92ebf9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\520ec37a-f553-4b29-96bd-d7bd1b92ebf9.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

e62a7064-a9e0-40e1-a565-457a3924e18c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e62a7064-a9e0-40e1-a565-457a3924e18c.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 85114f252fd842509f20d47bc7f5528d769a8525d7d38d13fbb7bdcfea41b6ac
MD5 70c3dc7754f8bd7ad3378957dab55265
SHA1 b2680202a406bee3e4ea03284edbc90f3a376c84
SHA512 1fb3ebb51c4566ffbce3592be855f167e11e5db31d427830cb2866209f6ebd9a0d44ac70648bdff2a6e604533ef858616954a3e66af0a42a5eadef86219ad00a
SSDEEP 24:Kxvo7QLInKPhu1qSORryXjIYYH9tie9t2D9mB9Icb2KlVhtB21PTmSZ8HF3ad+p8:KEUInKpuczyZIIDKpScNSI/Kf6YDyy
TLSH
T196919490353B9621387E3A0C50D4B65E238631733968E52B7BFA40B14E6BE690DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b63c6cf0-6030-4d78-8b7c-613c067922f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b63c6cf0-6030-4d78-8b7c-613c067922f8.tmp
Size 11KB
SHA256 09787e617779bfc2c65778a6d606811f5d7ac66d3798103eaac84dad36a6b43e
MD5 a608bc24837271c392343e7769f7e0f0
SHA1 15e5d1672ffff952fb03d1e17350d911bdef9066
SHA512 1dd6b3fba685084b281178061178e1263155aecf1e06210e55db51db1aac1d07425d40baa2f89ccbaa203c92b6b32cd5882ee0351bbdded7858b2764316fa130
SSDEEP 192:sxRTRkby/fdsXJtzoA8p47/g6+WNIYtuwSGuIgDsJ:sxRTYy/fdsXJgq/5I78
TLSH
T17C32B716AD28A93B9CCBD20DFB567F53E2F95032A1911E48F6FC8A1C14E76DE520740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8c0d744-839e-407f-9d05-d6e2b593fc40.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8c0d744-839e-407f-9d05-d6e2b593fc40.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

efa0cc85-4e64-4d5b-b36e-3da552f56668.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\efa0cc85-4e64-4d5b-b36e-3da552f56668.tmp
Size 23KB
SHA256 4cdf7cbdd99a7bd0f5a103b2fa7dca56e8faced90187ffcc6b06320e622921af
MD5 9d1bfc1ea29e1b141b332924b6592461
SHA1 01c21e40719f2c5be45ff3d9777ceb6dff053df2
SHA512 6018232a552638bb7ef19ba1998e3a13ff46c7da579ad8d49781dcab34309bcaa1c62e1e3c7e8098654ac98ce0b54071ce0603e2bece06ddd08619ca1235e295
SSDEEP 384:dFIGx9efCtgmkFfk6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV6W9G+RhqromLC:dmGx9sWgmMfk68F1+UoAYDCx9Tuqh0Vk
TLSH
T14FB2DA7B640CCB7E9FC00A9DAD196F976D9802C79A548D4047FE984C03C77EB922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f138d40d-91bc-4fbc-afae-8a2c2d44fd10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f138d40d-91bc-4fbc-afae-8a2c2d44fd10.tmp
Size 10KB
SHA256 3b154a8528fbf294a8d9291a760c70eef34a47e058c92b912a4a289268c37f82
MD5 146594bdcc957f461e950fb567341d17
SHA1 76e93986871ca1ea05bdc1c82d4b051c2e3e407a
SHA512 2aa01824fcafd112faf3d0281f2afac818eeb073cd40fea952cb64ad51d15bfdbcb470b7fa28e4cd19e7bbf4a60120963ccc9f1aa0cf917f0f91f9011369d62e
SSDEEP 192:sxRTRkby/fdsHJtzoA8p47/g6+WNIYt7aSGuIgDWJ:sxRTYy/fdsHJgq/5I2+
TLSH
T1A132B616AD28A93B9CCBD20DFB56BF53E2F91032A1912E48F6FC961C04E76DD520740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f59273ea-ccc5-424e-b310-f2b1607f45d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f59273ea-ccc5-424e-b310-f2b1607f45d8.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fcfe0629-cb34-436b-a277-ca5afc386f08.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fcfe0629-cb34-436b-a277-ca5afc386f08.tmp
Size 10KB
SHA256 e7ff93da84dab1eab2fb060b17c835b8efc451441c206bb23df19846204f14d5
MD5 ddcb7cd655e871d3b7854f2e00a0eb6a
SHA1 d22c9a1b09cf1dee88545423dda51249411f23ab
SHA512 ca82a03771ac8660e653482b32b32de89748a27e8529b531944bb698a87160e0bb088e07d00208fa42e920785f9b5af4b655eceb5c7324deee2a18a054e1c70d
SSDEEP 192:sxRkRkby/fdssJtzoA8p47/g6+WNIYt7aSGuIgIJ:sxRkYy/fdssJgq/5I2s
TLSH
T1E132B7166D28A93B9CCBD20DFB667F53D2F91032A1912E48F6FC961C14E76DD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

54a77b82-e375-4fb2-87c4-6be30c8cf30d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\54a77b82-e375-4fb2-87c4-6be30c8cf30d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d2f38d2c-412d-4ae5-8f6a-3ce7b5130c73.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d2f38d2c-412d-4ae5-8f6a-3ce7b5130c73.tmp
Size 37KB
SHA256 1e9eb0532f153a89f85be64c66b09598f3210add3acf510446cf389599068290
MD5 426f3d1c4e98e02c13561eadefef48b5
SHA1 9e80b4f0d2af12bf1c88c54f6749a53a4fd6ded9
SHA512 4490f4668ea3d7aaf1acfaaa865efa572c9d141b1beec5cff2be104042dd0cf6c9fc792eeaefe48c8c90556a70b5886a36ce6cf662c1b8ffca5549e539009350
SSDEEP 768:z/UxvxjgC+U3I9KnJGxDc9bsMSJz/FnnDSHXPyK/:GZj3+U37wVQbs7JTdSb/
TLSH
T14C03D07AEC505CA7CCF7A7803A8AA647AFF84953D5C5299849DD6E0D07C73AC1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86b68cfb-b840-4b40-b928-90a18cc67e94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\86b68cfb-b840-4b40-b928-90a18cc67e94.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fc5fd88e-854e-4f91-99fc-2340c703c21b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fc5fd88e-854e-4f91-99fc-2340c703c21b.tmp
Size 34KB
SHA256 b86d51cf0ff018d05129c8cd5d93eea44454aa7b594c504489617a29a0666d23
MD5 67dcd3abd170c6eb4d58cdb3482b7844
SHA1 238426dd0acb6eaba9aa011ae4d35415c8eadfe2
SHA512 5dae8d9fcb3ec01ad173c806ae3a5b3c57285f129288ce23d30c3baca366cd60068ed2fb4b743a3d7d5f47579446b44335a7ea6c16fb8f66d5b404ede5bc65ec
SSDEEP 384:SQkUSvA38NYI8X46++8I199fw7DJPzdvLcN9YkWwJJhoMSboCzfnFLj/NuewQTHZ:KA3gOKnJPxDc9bsMSJz/Fn/EeXtLb
TLSH
T181F2BFB6AC505D97DDA3A680768B3A47BFF44643C6C91E84D9DD6D0C02C72DC6347427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download