0cf8406d1a4266f701ffec325d537a0b6159ab487f941718fcf2c1fec34e13d0

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/10/2026, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
justificanta_de_transferencia24282834292342.html
Size 926B
Sample261022-w2xqjsbb57
SHA256 0cf8406d1a4266f701ffec325d537a0b6159ab487f941718fcf2c1fec34e13d0
MD5 3a355e16e7a08d3fb3e659f4675a8b62
SHA1 43f553adf1f79c4967a59e42804d186aa4883878
SHA512 0b48cede83ad537ee86e270424e6bdcdbfff3b955fc79ccb401c68f0799936bbb0df57e9397f593df530928c2df4c01c2b29234cefdaffdf8258cb3d184f198c
TLSH
T131111417D7D83024E50740C0B06133D7370789A9F5DB17D4A601F26FE2C28A2D596388
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2832	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1704430598-3087477806-3297458608-1000\{3827801D-AEFB-4E1A-B27B-E87340DC4E4B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5432	msedge.exe
5432	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4900 wrote to memory of 1380	4900	msedge.exe	89
PID 4900 wrote to memory of 2832	4900	msedge.exe	90
PID 4900 wrote to memory of 5532	4900	msedge.exe	91
PID 4900 wrote to memory of 2568	4900	msedge.exe	92
PID 4900 wrote to memory of 5532	4900	msedge.exe	91
PID 4900 wrote to memory of 2568	4900	msedge.exe	92
PID 4900 wrote to memory of 2568	4900	msedge.exe	92
PID 4900 wrote to memory of 4320	4900	msedge.exe	94
PID 4900 wrote to memory of 4320	4900	msedge.exe	94
PID 4900 wrote to memory of 4320	4900	msedge.exe	94
PID 4900 wrote to memory of 984	4900	msedge.exe	95
PID 4900 wrote to memory of 984	4900	msedge.exe	95
PID 4900 wrote to memory of 984	4900	msedge.exe	95
PID 4900 wrote to memory of 3848	4900	msedge.exe	96
PID 4900 wrote to memory of 6064	4900	msedge.exe	97
PID 4900 wrote to memory of 3848	4900	msedge.exe	96
PID 4900 wrote to memory of 3848	4900	msedge.exe	96
PID 4900 wrote to memory of 6064	4900	msedge.exe	97
PID 4900 wrote to memory of 6064	4900	msedge.exe	97
PID 4900 wrote to memory of 4516	4900	msedge.exe	99
PID 4900 wrote to memory of 4404	4900	msedge.exe	100
PID 4900 wrote to memory of 4516	4900	msedge.exe	99
PID 4900 wrote to memory of 4404	4900	msedge.exe	100
PID 4900 wrote to memory of 3516	4900	msedge.exe	102
PID 4900 wrote to memory of 4124	4900	msedge.exe	106
PID 4900 wrote to memory of 2476	4900	msedge.exe	107
PID 4900 wrote to memory of 5516	4900	msedge.exe	108
PID 4900 wrote to memory of 3172	4900	msedge.exe	109
PID 4900 wrote to memory of 3172	4900	msedge.exe	109
PID 4900 wrote to memory of 5432	4900	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\justificanta_de_transferencia24282834292342.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffe611dc188,0x7ffe611dc194,0x7ffe611dc1a0
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,10365232663555484083,6832543641015403537,524288 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,13098795557907831438,6424131789805052707,524288 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:13
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,16454350138809187937,16554841963865935322,262144 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:2
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3592,i,18075536857217252024,13051067170384115885,2097152 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,13818664080674571697,773940909191605898,2097152 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4332,i,15731027988029535268,10591045557947443871,2097152 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4416,i,17336351233878120650,16556369777242625120,2097152 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:9
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,7201253119952375164,12441455094901393354,524288 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,13688553597160418815,17373289131129609923,524288 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,8666834497901830994,15191527234460582568,524288 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,8666834497901830994,15191527234460582568,524288 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,16957622265096542805,3799043996133339380,524288 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:14
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,1764922554127039021,15376293993109540578,524288 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:14
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4616,i,2945269676123466905,12384847344005697369,524288 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:14
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3056,i,6254664738626163224,6396745257946772316,524288 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:14
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5588,i,13709958862813999693,2105001053880759889,262144 --field-trial-handle=2488,i,7577263378760914832,2872879506974733905,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5432

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2556

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

20e0c9af-1c76-4463-bb6b-c73168b6a012.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\20e0c9af-1c76-4463-bb6b-c73168b6a012.tmp
Size 38KB
SHA256 c4ba00e7f87aa61bde13b34731772458e9a4c6b4772c58093ac5eb80215f2c7a
MD5 3dfc739cdeb40774ec7963c9838f4e2f
SHA1 e4dd1feb38d4b3bcf0a81ec9fb4c2b3b4d6a4b7a
SHA512 7c7bf1d68d10fecdafccae6105b86500ba28ec66b65590365e110c9755cfd8e26a1b97cfcb3e001d1d94cb1ba192f23fd5c516469b9086aa1b9c2b5f95ad78b2
SSDEEP 768:v//UxvxjgC+5j3nVHFm8+ieOZm58zjFnUPO4Qp7cPAiSm2eo4w4cciGrTFIaAgZw:vSZj3+5j3njmB+jFwQpYoimeoR4ccFFG
TLSH
T1C003C0B698A8AE73DCF39781365D6342EFF1415395C16EA4CAE92F0D024B3AD430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

63464644-ef8b-4560-9cba-47d67a2064d0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\63464644-ef8b-4560-9cba-47d67a2064d0.tmp
Size 39KB
SHA256 b448bc1326ff0c0033c4fd2b1b065a3283c474c280631ad07c443a50c2e13a5c
MD5 f236449caf2bf89fa42c12169dde9a7d
SHA1 e29c05a5f2299f655927062179daab60bb514e1b
SHA512 3b09446def1cd8f73e19324a35bea9707a4ea6118a7e332389bdf9777d12b104fa94fac6b984f59fa1f5b8848e5770f2cdd5b28e851bd11b9eab0794f1bcce00
SSDEEP 768:D//UxvxjgC+E3A8rMU0ieOZm58zj/nUPO4Qp7cPAiSm2eo4w4cciGrTFla8MC:DSZj3+E3RMj+j/wQpYoimeoR4ccFFc8z
TLSH
T10D03BF7698E86E33ACF3A780365D2342FFF1456395C16AA4CADD1F0D428B2AD430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6738b819-a730-4b5d-b79c-d60bdc69369c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6738b819-a730-4b5d-b79c-d60bdc69369c.tmp
Size 37KB
SHA256 62e6d73193f678bfc49cc1ebcf5501e823c6cddb03b8baeabb7a33fff67c5491
MD5 5b7af406a40afcffd66e37d34a70c49f
SHA1 0185616a1bd042ff34c79bda4a897e980f05d3c4
SHA512 102f40c16aa1b9d1545b389eabf77a45295e895f7970ea31429321bc2fdc90df0f5c1209c4bde9e3449dc0afbe2324d7d6f3df632d7c92d8f94a65912664b511
SSDEEP 768:vw/UxvxjgC+5j3KVGN8LieOZDjFnUPO4Qp7cPAiSm2eo4w4cciGrTF5r8AgZbCMc:vdZj3+5j3KkNkkjFwQpYoimeoR4ccFFp
TLSH
T15403CFB6D8A4AE77DCF397843A5D6342EFF0416395C12A94CAED1F0D42872AD430BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

82613a27-024c-4272-9354-ce0359a01998.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\82613a27-024c-4272-9354-ce0359a01998.tmp
Size 36KB
SHA256 548907974c1afc82d5304aeeabe68078f6e678487fd63d84a67c3957e73d404b
MD5 13d6ff728b88a9e05a54a8eddce858b6
SHA1 1bd43a19a41ff742fa505020d06da8b780ced529
SHA512 33210a9ff2c5b31fd989df2b335fca184677703720a0df2e2a0db0c5b421a862a619000498c6ddebcad98e64f16bb69c5776628b3f75ca6c913115f17d8b0683
SSDEEP 768:+FdA3twg98GAU0ieOZm58y67nUPO4Qp7cPAiSm2eo4w4cciGrTFlaec+9L3:eA3/Ajv67wQpYoimeoR4ccFFcFa7
TLSH
T1C1F29DB398989E7BADB39B81B66D3202FFF04253D9C56A90EBD91E1D02471DD430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

05d0db06-7ae2-4f80-a899-ebd848b0cabe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\05d0db06-7ae2-4f80-a899-ebd848b0cabe.tmp
Size 105KB
SHA256 4ee1e0056f41a046e8efbfc68a394a9993e9e1572e402e58600b2c2d27cdbad0
MD5 cbb9f3725f3320854f02b5fb7d1eee93
SHA1 9c687195aa5a8f617023a505ab65229bb9a04596
SHA512 a8e728ca1dd3f2320d59c0244f1a4c82c5213ac624c22798462d831fa8936055eccd554951d7106079089867cda6e052f87a3bef24aa908224fd8e90caa6ebfc
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7Z:fwUQC5VwBIiElEd2K57P7Z
TLSH
T13DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 68f353a62995fc87917d7d1eef768abe00ffab02e1d3e469100f99b6987f6488
MD5 5ba62d3fe2ddefdf87e8dd139f3e421b
SHA1 1986deda7bda2ac5b490eacb9fe2784fb6d01648
SHA512 4e6a767b24298d2e01c8dbefa41509e1bc67cf2c2f34fd0bf866fc1017e1d15a470a5a95feb8ee1cccf4b8ccf5fa9054bcbb93919c00de89eeffec199b68baf9
TLSH
T19CD02BB5DFFCCC62D54820B802518E116085B41519490040DA03FC04DD110814D03555
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 648887a89dac8888df245d8758dcd78e85ae79931c9464f19b0967fcd69c3d2f
MD5 b053e18c94ac6f6c60a9e0a281e1687b
SHA1 17ed2d8ae6844c2878132336a2fea7d044381f8b
SHA512 abf3d05979a55f573445c0c7a95529a5899c0d9f55f350b3eb35132d8502e23e6c764ffc98e92f4374754aa22e9292fd03f8e6e8113c0e919f428e797e339bfa
TLSH
T151D02BB9DFECCD62D54820B402508E116095B4156D490040D903BC04DD110814D03569
MD5 SHA1 SHA512 TLSH

Submit Download

0a1dd8b8-e1c0-4fb0-8f19-b14c81c0d18a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a1dd8b8-e1c0-4fb0-8f19-b14c81c0d18a.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

0ab5b469-5f57-4bc0-bd46-1e124e068339.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0ab5b469-5f57-4bc0-bd46-1e124e068339.tmp
Size 10KB
SHA256 2c06f18391808801a800dc72c7cb35606ef8e0cd08c387f3b9c00d0fed533959
MD5 fbf20b16320ed166d198cd6673b9d88b
SHA1 4fbf2f40ad7f6adb0ce3150c0cb84f4b71163358
SHA512 6d1c8ed9d6eb21aec461e4314831fca0ca86260b66367b0ecc04e74bde523c2cf8d7588f1d1bf3aafa3dc0971f098417796c539e9b810228ada4a1115d0480e5
SSDEEP 192:sxRMR3bh/fezsgypzoA8p4K/g6+WNIYc1tXsiTuG0IgIJ:sxRMhh/fezsz03/5IPciTGs
TLSH
T1CF32B616AD28A93B9CCBD20DBB65BF53D6F95033A0D55E48E6FC8A1C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0fb344a8-0507-4d5e-b929-ce1d5b4bee1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0fb344a8-0507-4d5e-b929-ce1d5b4bee1e.tmp
Size 11KB
SHA256 872b2eecc2e4a3724db5f5e3316b6817eb94b3442814848b20c77a41c994261a
MD5 b4bb24c1e0d9f0f25431a57428933bca
SHA1 9cf33df596cebe3058c5291e908905671c35e156
SHA512 63109939d8da79d5dd87804b23891a0b40995cb5acda952860a595495373a53f0c76d5a06a73be855a7faac9575af2d338ca135607952b91a477b35d8cbcf953
SSDEEP 192:sxRPR3bh/fezsNypzoA8p4K/g6+WNIYc1tXsiTuG0IgDkJ:sxRPhh/fezs003/5IPciTGU
TLSH
T1AB32B616AD28A93B9CCBD20DBB65BF53D6F95032A0D55E48E6FC8A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6732b628-4c85-45fa-84ee-b1a9a7eb1f78.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6732b628-4c85-45fa-84ee-b1a9a7eb1f78.tmp
Size 23KB
SHA256 674c27f02f958ec002785ddfc61897cc49fb9d25c87d399fec9123458fabe080
MD5 2b741bdb04cd2080b7a3db5b0b183f32
SHA1 4ddfef3d8f8a1a5a863e3e9fe8a1c3cad20b2fd9
SHA512 5fa9bdacbfa7e21288e7e29fb0329f547d3a90c554fc2d8713580d7359401a28d3a92f733276f2cf347093da88ba32694cf2ea8e31ca6f70e71491f5d1cfc9b6
SSDEEP 384:D7JakElfCtg17Ff9tKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXn975RwProMXm:DFakE5Wg1Bf9t8F1+UoAYDCx9Tuqh0VY
TLSH
T13BB2CA3F744CC77E8F804A9DAC196F976D9802C79A588D4047FE994C03C77EA92294DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8bcc59d3-dc84-4953-a754-4c7219bb67cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8bcc59d3-dc84-4953-a754-4c7219bb67cc.tmp
Size 11KB
SHA256 9984a60c4a8f14d9cdeac144aa8af04090f8381846347b077e31dc12d5e9fbb6
MD5 ad150f151fc15a5e47c918099c1197a1
SHA1 2dbd6b0a12c186da474723347a6f7ba271cb0017
SHA512 6c1a5bdcdd43d13e0390ee9a9be4ab14b042595a7aa0c9ff2b3e361232f0447cdbdcfa0fa371c46b2f96e8da82b6b8d25e2eac0f2194f930642bea1ea02650f3
SSDEEP 192:sxRPR3bh/fezs5ypzoA8p4K/g6+WNIYcYhXsiTuG0IgDWJ:sxRPhh/fezsA03/5I0ciTGu
TLSH
T15832C716AD28A93B9CCBE20DBB55BF53D6F95033A0D51E48E6FC8A1C14E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 d038d8240981dea4d521aa400ec025e2f405b11317e266f91976665b63eaacc8
MD5 e78dd610e1b755187eb834c19299067f
SHA1 ea5d53395160585baded4c752166adf213ab268f
SHA512 8e93f02ff1d08d33642929dcb1f83021e41ab04fed67368ca62aab51788472ef99e1784ca886e726df2d38bb249f4dd7ecbb76ad57e345492a038b847850e977
TLSH
T1DF61A3886748D064F76CD87CBBC31087F6327DB173870DD25698C2FCA7A27690C8014A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 847961377192c647ad71ac6e57d2813ec4f40b6b29d35380c598216789d0719d
MD5 4b09c7b06360e2ffce8642d684e5011e
SHA1 26a91a85c1e842afa3617f91d66a18880d7386ec
SHA512 13050a6b5faf6f293bd29f90dcb4c8f07f1ca033abffb93ddd28189851ca0186128177f980ce2eb985523e66e4da1e0c2b8d66ef30a4cb21474ff004f2358202
TLSH
T1A66182886748D064F76CD879BFD31087F5367DB173870DC26698C6FDA7A27691C8014A
MD5 SHA1 SHA512 TLSH

Submit Download

5047cd97-0f87-424e-be22-f07572d6ca1c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5047cd97-0f87-424e-be22-f07572d6ca1c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

9b677f33-e360-4093-bc8f-f6607e985fa5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9b677f33-e360-4093-bc8f-f6607e985fa5.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

e1697c15-9f0a-4759-b35d-b609620d41e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e1697c15-9f0a-4759-b35d-b609620d41e7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

e3408139-d66c-4898-826d-e3a39235d905.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e3408139-d66c-4898-826d-e3a39235d905.tmp
Size 1KB
SHA256 a2c8e6125ffaf8c28b9c976ea05d9414c714528528b74522b04b1ad8f79c3e2f
MD5 d9390226142e281246ea64ac3b581d58
SHA1 ecc3973ae496c6ad55d3c0a6fe1b7ca3842f0f72
SHA512 b9616e6440ddc43006eb558dde1ded8a6fc424a788eda57bebd1111ec39a723f77f6d62d84a4ec261172ab41a5391d9f90f03830ae741937812722dfd7592709
TLSH
T1A731E2F783F4857E8A0186F0AA046E1FCE1C0511432C786AC5E49E2B93F3472E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 91eefca4aa82d2a4705119ed5d855ccf96d4906bdce1df8c52b3175034a67f7b
MD5 3bce150b4cd757542b8eb52b52c86712
SHA1 4b56b02c2834cbe3ae1f5b952031ed4c93956cbf
SHA512 ad997eff821b34ad05555425e11a03b8a64317de6cde73a01a438c6fec7d252cb24a93b0d0482fa103fa67d9bd84ec3843e1f0a18035594465db8a8fc387a029
SSDEEP 96:KMUQKBSqdebSOQ84kI8lPyWkKKByYkGuOFQNArGywiefPGJ2B6yK53BZylTb8xjJ:CndebSOQ84p8lKWqByY5uOFQ+bl
TLSH
T105912F50753A12213C7F6A0C40D5A62A464579B331B8F62F7FED81A68A2BE045DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ad141874-6aa0-4e7e-8216-2393b1eec1ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ad141874-6aa0-4e7e-8216-2393b1eec1ef.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9af3b555-307f-4178-abd2-1f7a156da725.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9af3b555-307f-4178-abd2-1f7a156da725.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a68dd260-97a3-43d7-81b8-ccfa3f95372b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a68dd260-97a3-43d7-81b8-ccfa3f95372b.tmp
Size 34KB
SHA256 c121b986f95aa10a0bb76091e19d4604b96ea7001e4957d5aa768a57c2d9b4d5
MD5 19535f094c032103d3f9050ab33e6d26
SHA1 146a090c711800393642435a5bd721f4b9342148
SHA512 3b798e3fcd55423a8b1526412ec2312c5224a40d00b8083ad4c4515385e85f2237932d533d8dc2866c583c79813c20a98df48828379607928fb659369d73a82a
SSDEEP 768:xI3z8GAU0ieOZm58zj/nUPO4Qp7cPAiSm2eo4w4cciGrTFlaec+9L3:xI3JAj+j/wQpYoimeoR4ccFFcFa7
TLSH
T1D7F2BFB2A8A4AE739DB39681765D3342FFB08213D9C51F84DADD1F1D028729D431BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ecb2cf78-d67d-4337-ab1a-e514b76a4e32.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ecb2cf78-d67d-4337-ab1a-e514b76a4e32.tmp
Size 34KB
SHA256 fc2f98d8074ab994254dcb5e65965eb3cd1541cb581d796508066de212b6255c
MD5 4a35473793f9b303954ef7ef3f318760
SHA1 0f0f7a5344a0ba299620e83b7f32b65b7503ec14
SHA512 23d7900b04d293a57402d2a2e8465124cd0d431bc44488e3e7fbf76b1272f0400510d0e3e8d055e8e042ce2a2b6137f1d3055e9b3589aca2ee8f7c8bbb430957
SSDEEP 768:DkI3u8GAU0ieOZm58zj/nUPO4Qp7cPAiSm2eo4w4cciGrTFlaec+9L3:DkI3CAj+j/wQpYoimeoR4ccFFcFa7
TLSH
T1C9F2BFB2A8A4AE739DB39681765D3342FFB08213D9C51F84DADD2F1D028B29D431BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c68ba71-3b8b-414d-91d5-6efc432bd758.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3c68ba71-3b8b-414d-91d5-6efc432bd758.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download