4462007d37ddba20e95fc1af0914589524d602c10b0c816bd136f8526d06e51b

Analysis

user interaction
yes
max time kernel
899s
max time network
729s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/10/2026, 23:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
identifier.html
Size 1.3MB
Sample261024-3hlmhaga36
SHA256 4462007d37ddba20e95fc1af0914589524d602c10b0c816bd136f8526d06e51b
MD5 9b0f95e57e48d86a5e36c0e4af078cee
SHA1 836d7b62d8fb8b04076f8a5e262a999dcd93e918
SHA512 60f36dadf04235f167aebd41820259348644056ac6f9e7e715725d3ff5f8a2dc6929f75b63df8be2b636dcfc0e47c6b38f40abc466bb3d9b324944c73dec25b4
SSDEEP 6144:sC0q3j6/8+Oq3j6/8+Iq3j6/8+tq3j6/8+eq3j6/8+2I0QISNt1/Zvb0SRqo6/8b:sC2Izvb0SXjTFRzfVb
TLSH
T1A955A5DF9230A03FF933A8B6EAD4DD09F2984DD1E60A45B5BC71A91343EB6A61751330
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5396	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1570888168-524493533-3242721904-1000\{0BA7A1E0-7782-4DD0-9A89-CE69897AE232}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5432	msedge.exe
5432	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3180 wrote to memory of 560	3180	msedge.exe	81
PID 3180 wrote to memory of 5396	3180	msedge.exe	82
PID 3180 wrote to memory of 6012	3180	msedge.exe	83
PID 3180 wrote to memory of 6012	3180	msedge.exe	83
PID 3180 wrote to memory of 6012	3180	msedge.exe	83
PID 3180 wrote to memory of 3244	3180	msedge.exe	84
PID 3180 wrote to memory of 3244	3180	msedge.exe	84
PID 3180 wrote to memory of 2720	3180	msedge.exe	86
PID 3180 wrote to memory of 2720	3180	msedge.exe	86
PID 3180 wrote to memory of 2720	3180	msedge.exe	86
PID 3180 wrote to memory of 5372	3180	msedge.exe	87
PID 3180 wrote to memory of 5372	3180	msedge.exe	87
PID 3180 wrote to memory of 5372	3180	msedge.exe	87
PID 3180 wrote to memory of 2532	3180	msedge.exe	90
PID 3180 wrote to memory of 2752	3180	msedge.exe	91
PID 3180 wrote to memory of 2532	3180	msedge.exe	90
PID 3180 wrote to memory of 2752	3180	msedge.exe	91
PID 3180 wrote to memory of 1292	3180	msedge.exe	92
PID 3180 wrote to memory of 4392	3180	msedge.exe	94
PID 1292 wrote to memory of 4384	1292	msedge.exe	95
PID 3180 wrote to memory of 2780	3180	msedge.exe	98
PID 3180 wrote to memory of 1660	3180	msedge.exe	99
PID 3180 wrote to memory of 5536	3180	msedge.exe	100
PID 3180 wrote to memory of 1900	3180	msedge.exe	101
PID 3180 wrote to memory of 1900	3180	msedge.exe	101
PID 3180 wrote to memory of 5432	3180	msedge.exe	103
PID 3180 wrote to memory of 1688	3180	msedge.exe	104
PID 3180 wrote to memory of 1688	3180	msedge.exe	104
PID 3180 wrote to memory of 4020	3180	msedge.exe	105
PID 3180 wrote to memory of 4020	3180	msedge.exe	105
PID 3180 wrote to memory of 1240	3180	msedge.exe	106
PID 3180 wrote to memory of 1240	3180	msedge.exe	106

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\identifier.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f0,0x7ff9b071c188,0x7ff9b071c194,0x7ff9b071c1a0
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,37177743696645469,5643695589148682406,524288 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,15609011101196828695,1007087083261322801,262144 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=2024 /prefetch:2
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2320,i,5084790636817316560,4901535367074054891,524288 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:13
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3356,i,1503154005783650774,15889043365117690847,2097152 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3368,i,6486257910276039251,12781531603978852181,2097152 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,9860439982209223152,2814130054185830470,524288 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,9061832768364609216,5825938732562753411,524288 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:14
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,10347758837659672903,11418371132632729420,524288 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1292
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1132
    3⤵
    PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,3105067593106120079,12437916996484664607,524288 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:14
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,3105067593106120079,12437916996484664607,524288 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:14
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,13871516294700811134,17408559702232775777,524288 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:14
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,15096074979036953453,2355058732297796923,524288 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:14
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,12996739068784231845,17154276870376683065,524288 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:14
  2⤵
  PID:5536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,15748028668941160619,9761956274391258239,524288 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:14
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,2931860874819487399,15491391417260262230,262144 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,7761106909402929966,9454293202429498886,524288 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:14
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,15265548990967401333,16587952180820802766,524288 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:14
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5716,i,2177820139519429216,9272622518324761212,524288 --field-trial-handle=2060,i,8213067951451662139,4039746100168248601,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:1240

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4616

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

57a09dea-bb8b-461d-8dab-10ec08dbac9f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\57a09dea-bb8b-461d-8dab-10ec08dbac9f.tmp
Size 25KB
SHA256 aad1705edc25c07d82abbbc0df8f297add44b8a0b52c9aa455d3b854582c221a
MD5 c1b81e464725c11854d70cae4f375696
SHA1 da2a2a1e4af09c896e664fab7bbd0a9d875416f0
SHA512 00e27d7dac8ab924972a0f6921d7b5fb3dc6618bd9fea65d9015659d41e6f1e65d7dc47b02eabc72414977a1f7db5fafd5b15a9d38926214b922eee458ad2cbd
SSDEEP 384:nWiFiZcI638NB8TUNTUlIxBwqB3ngbzWfg9AyHD2Y9mv4EW1XoU1eWgL/7IzsJoQ:9FQ63mwgw4nEx9/9mIoUAz
TLSH
T120C24B36ECA9D9BBECFB8FD9974A7602DEE0016394AC99C4D9D85D1D008719D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c3b3d9b-b949-489c-91a1-fcf0d00bc573.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8c3b3d9b-b949-489c-91a1-fcf0d00bc573.tmp
Size 27KB
SHA256 2b5648f95b422b118a473bc2c69acba533e27e0f26906dc5054bca2a972cb5e9
MD5 4fdb5b2e713859ceeb4dc2b9b1eb92da
SHA1 b56145a3dcb2d8903571076c7b5e29b4f6eabb9b
SHA512 ec1bcdb05b0409b3672b3c43c8ae0e8d72422a4c423f60a87cd65dccc5521e05a69bdf2ce93e9d4bb61f0c75914b72768713fbe8097b6cec8b794b5058815d33
SSDEEP 384:nuiFzQkUSvz38Ng8TUNTUlIRGwq6HybzWfg9AyHD2Y/bVm2IwgL/7IzJIIlD:FFdz3XwghvSx9/Rm5yL1
TLSH
T1C5C24A36EC99DDA7EDEB8E91A74A3643DEE04213D99C9AD8D6C92D1C00CB19D130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d96eb9b-f95a-45cb-abe2-aef59df650f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9d96eb9b-f95a-45cb-abe2-aef59df650f9.tmp
Size 27KB
SHA256 5af13e99390aa63a2678e8bebe9721e93302152dcafa316068e963fef8d64118
MD5 560ec944d7dd3ffb812bb4995af6ff57
SHA1 96e83fac8f915b7345a1aa8dbfe3b5ea8aabc037
SHA512 2d701be01cd0a484e124c88c5bb2ebd1dd814a1419a7d4d2f799f2c7f8652bf94690a3938cdc0f45c55e76ac7f050247ab5ec859062f8070e322e19e7675c5f6
SSDEEP 384:nuiFzQkUSvC38Ng8TUNTUlIRGwq6HybzWfg9AyHD2Y/bRm2IwgL/7IzJIIlD:FFdC3XwghvSx9/lm5yL1
TLSH
T1A7C24B36EC99DDA7EDEB8E95A74A3643DEE04213C99C9AD8D6C92D1C00CB19D130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c9a92cbd849eecadff108aa705c8bffeefa88b48debb99ebb0a61da60d1ea55d
MD5 3eab7477df5ca8aedeabf1695c6ec99e
SHA1 47e45efb75000cd4d9e036210864e45f420f2323
SHA512 0465738c688cb93e5238241731fb0a05395e81c567aa2fffc33a9f478454ed7814c50cbc62e962000f8c572df3a8f4d2780caaf1956dec8d990b4097d0125ee8
TLSH
T11ED02B1FBAAD12A0E12331390637420030C4E540480310188450032228C268100E44F0
MD5 SHA1 SHA512 TLSH

Submit Download

233fb7f2-08dc-46c3-9f70-68bbf01bb0bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\233fb7f2-08dc-46c3-9f70-68bbf01bb0bb.tmp
Size 11KB
SHA256 0a5361c423689519a081dfb4b1bca0edd1bc23e66bbf9ffb63f811faba950b6b
MD5 3946142512019414587b29fe9c2e5ec5
SHA1 3b73020d12fffddb6b566412718baf1e7ed70c59
SHA512 d1ded4bdd20537f6b5275cec11ed258e71051473fee4c7445458c6f151ac9b1b65b3c3c72427f191264039bd6ee787620ad4204370a62415ea0a385051dc80ec
SSDEEP 192:sxZvRpFz/fmsZqPzodpEt/W6+WNGY0YXznPjuIg5f4AJ:sxZv1z/fmsZPM/bG5Im94k
TLSH
T1E142D8156E28AD3B9CC7E219BB15BF53E7F95032A0901E48E6FC8A1C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

344bba70-8eb5-48e4-ad8f-a3bc0921242c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\344bba70-8eb5-48e4-ad8f-a3bc0921242c.tmp
Size 11KB
SHA256 4899fb427661a7d7287cb667cf4425e621057d2f6aa5a72d448cfd86ce0c6142
MD5 8826239749688437547be39486b6907c
SHA1 0c270e465aed0db7c360933127f8dafbecbbd875
SHA512 3c108dd4196207771f67946903aebaca7970a71325861ac6b3e3718826d803cda19bdd52f998bb5a92d2ba48020c729885af055d517bc7e3836d2a48a71a5fb1
SSDEEP 192:sxZvRpFz/fms4qPzodpEt/W6+WNGY0YXenPjuIgj4AJ:sxZv1z/fms4PM/bG5IFj4k
TLSH
T11042D8556E28A93B8CC7E619BB15BF53E3F95032A0911E48E6FC8E1C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5916bc44-9b55-4fab-ab38-ead4ace1339a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5916bc44-9b55-4fab-ab38-ead4ace1339a.tmp
Size 11KB
SHA256 832a5862565a9ba0becaa812dd09899b25ce28be85b5716f04a96e9047ead4e9
MD5 2bfd26db1d9c17360bf1d65d3a22f33d
SHA1 6678012c8d3806839a7b70733ff572c0a0e42284
SHA512 0255ee20485822e62e4f0cc7cd444d4b2236c51b9ab0cdfff542cafded67bb9ce9fea98b05ca6f661850668bf3dc10a82f7d64cdc2a521321e2d820fb8c527a8
SSDEEP 192:sxZvRpFz/fmsaqPzodpEt/W6+WNGY0YXenPjuIg5f4AJ:sxZv1z/fmsaPM/bG5IF94k
TLSH
T1D642D8556E28AD3B8CC7E619BB15BF53E7F95032A0911E48E6FC8A1C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 a98cf5d3294d82f6670cb9129fa44788ee4b22c1e4c43dae7f647cc096b48869
MD5 754ea505ac5835d43012995e49f6fc09
SHA1 3dbbdda0bd7617d7059631af886c002b368f0b09
SHA512 f8aa508142f5b800d5ccea127f5f24bf6f3b9b94305c8290f319e95044777343d3f53678e1bcbd229f7662f4ce529f71ecf1af862bf5cf61f45586da39b69fc8
TLSH
T1F5E07DA418CFC22EA30866D7037C470FC381371FD2C8A98E1728C5887005278B2F6F90
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 5cb9150c76c8065f484a485330fa0232d5032d1c386c3d5cb1d86ef7416b8150
MD5 26679234f98b2391352fc53a57ea61f3
SHA1 8fe383e0d870f98fd907436065018b8e2b3cde7b
SHA512 c6d889b1abeb40113af525ab62d88bb79d6b8caeaa99c9e3db9419a0baa785da479a647cd2a7eebaafdde8837e042ded2df8030712da7b009167e3d219015f7a
TLSH
T1D8E020D505DCC21D5124A9C70594830EC3D1272BA2C4AD1D9B00DD89700A180F6C59D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 089a57c48440fe21bbb5ea5f9cb64e9bef065099c059bc4f97d0c918de15b587
MD5 fd7f47f5bd332f8957bdf5ec1bea4658
SHA1 06d5294f3a673e136d99af3509775e98ac071a88
SHA512 7397077294fcf521433528d02e55bf04e875ae8728b09775365e4f478384f63401874cb9fd735fc44fe1b90770ba24d70d691e0eef496c9774631c81cc0d3ba0
TLSH
T14DE020B419D4C23D5124EFC701B4430F93802B2BA2C4AD0D5B30D5C8700599466C5B54
MD5 SHA1 SHA512 TLSH

Submit Download

5a742977-5c3f-4d03-9b80-515e25854a56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5a742977-5c3f-4d03-9b80-515e25854a56.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

35e3285a-1e4b-4076-9657-3755a651f4df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\35e3285a-1e4b-4076-9657-3755a651f4df.tmp
Size 2KB
SHA256 6a3e7b1492f23e651e368e94953a4e275cd382c00e2808d970c9347051cfd8fa
MD5 d8f62363dadba673b72ace42a9e105f2
SHA1 39ae7ea7ad49d69874ffa2ac8e63cd96189d1c6f
SHA512 21281ae3290c6d32a3047314085ff430ab6186aa47eda0ff7cb9ad0c7156a0a7d4e4aaaddeea54f4eb70d3fc4bccb8a0380074c12b777bb159e4568b338b6770
TLSH
T18641F2F7C7E4866E891196F0AB24BE2BCE2D0515432C3C66C8E4EF6B93E2471E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

5580b338-fbb8-445d-8964-b0c1b2aee1ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5580b338-fbb8-445d-8964-b0c1b2aee1ba.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

632976d8-6427-44c7-87d2-2a82e1bd5c8d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\632976d8-6427-44c7-87d2-2a82e1bd5c8d.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

92c786e9-9e9f-404e-8460-623ea3fe4e00.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\92c786e9-9e9f-404e-8460-623ea3fe4e00.tmp
Size 2KB
SHA256 b504717b96c3b0d0e112469ddbe3902c157c54c039f2f1c070ca8e92b162637f
MD5 9ebb856edfa0373118cf8995b58882c7
SHA1 a74691bd217ca1600c027349402dc56264bacbcf
SHA512 34a20792146750e2ef89e39b4080d5e2cbf5a13b37ddc6a64f1a2022fd495815c87251d7dfbe06912fe425b8275be2a4dd79be71c680549c05beb6b3c62f900a
TLSH
T1DF41E1F787E4826E891196F0AA28BE2BDE1D0515432C3C6AC8E4AF5B93E3071D14175F
MD5 SHA1 SHA512 TLSH

Submit Download

fa50f96e-89ac-4008-b5b0-2c7afa3d576c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fa50f96e-89ac-4008-b5b0-2c7afa3d576c.tmp
Size 186B
SHA256 739f067ea65361275e8ce128b859c29f725d7a2c219277d87b8cd103c98cbc1f
MD5 4d349a76697efc53f747e441092db991
SHA1 5287b4d893175a4971506cc09f989cab80dde7ee
SHA512 edde5fc27b6c1bf3fb271a6e23c16eb4e03de571261e4a3053f2cca2ffa10357811a52da3751054f2eeecfa4d9c6ebb536e51b0b901f277aa3c199e181bbdeed
TLSH
T10AC012A284BAE4762075C5791D84BC816E79D474044350A4DEB6837CB1E00B77A95039
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\afcab03b-70c8-439a-bda6-a4bf4abec265\index-dir\temp-index
Size 360B
SHA256 018dcb4784c0fdd616db09a3195d3eab066a0c5538482cd88dfd5177f08a2680
MD5 700aa63a5de03bb20531984b1af43ad5
SHA1 8ebecb6560fcdbb2664e0a05e18f4300f28c23b7
SHA512 0f35ba73779d40ae696acd60be51181c4230e92bdb1e9228bd3a36f852ed01651f4a229283e783e3a312f2cd59285b9794d91401b1ba062ea170e8fe6d3596fc
TLSH
T104E02B691E535106FC54413438BE71F5A77058CCE710130F20EDD055CC1A798AE07B2C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\afcab03b-70c8-439a-bda6-a4bf4abec265\index-dir\the-real-index
Size 360B
SHA256 c7af00866ed3a2953f391f2014bd138d037f87daf0d7c25002899ebeef3bc5f9
MD5 796d4c37fd4fa37ed000418c9b7ff0a8
SHA1 78502be228f3cbc8717115aa0fda1aba6d3cda26
SHA512 815bcf78ee9e5bb3eb32325c15c017e1f16ad13e99201c6fb24c13e6f27b1a4f4f101b64f2404ec22f2a133d0ec3de4f45fc06929951453fa2badd14877629ea
TLSH
T1A3E02B5956138145F8040131346E5171AAB12808F310260FA1EA9496CC47B845F02B14
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 371B
SHA256 b68389a508d04fcc55987fcf2f5f85637804e6be049521d54e436da27b312d34
MD5 1f4f71f1d625fdece039966a6dbd6da1
SHA1 37531acdae0003a06b0f08339d297a9111774eb4
SHA512 98ba378067b40629bc4ad52d147b314e41642ba62c9f1ba9d4a3892a75a559bb78b303877dd77f1166ecfc71612ccffe015b86a9c27ab9226dd9875b255e6cd8
TLSH
T1EDE0D8BA2DA72814E8AFA3F6647080F801063D19E596AD5F656B62E390A13643047C56
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 b979c59a9aab9ff8e706629e0932ffcf4efb2791f295e0b7f010ccdb090ec7a5
MD5 4cc1875bd3769d5365d7dc80de0d4b34
SHA1 099c8360528de20b3332525370a74e21a6b35804
SHA512 b53b7d0c8d17e1855f1c4e37049bad6d0b612048c4d2868192a3590e7e8bc629609e91832ce458612147f04804e9d82e2c86d9201c9d94aaba076f0ad629d380
SSDEEP 192:ir/+SvIrlfrljh9DdgslV9rnUSTOywIItYJCSSLgs5KSxcif/w:ij+UIZf5jPDasb9riVw
TLSH
T128B2641571BA12453CBE291C81B5972F128235B33119EA3B7FBD44A68E6BE085DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b2eec879-2b00-4c15-894d-63abe4861d8f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b2eec879-2b00-4c15-894d-63abe4861d8f.tmp
Size 28KB
SHA256 7e5c0efbe62817fc26e7111fa924548ed0c54e74db7ffb89f5210c999d5de653
MD5 741caa4e5283e663de2f3e3453954f46
SHA1 3b6324cfed1d6ce1c5d6ac02126b58c0901742fd
SHA512 ac00c1db14fb285d5f4f4c3e11378b36cdcc5d34b4526b93e60f071dd1fe86400d4d6051a59d9c5674b0ee3bc06730c08c986f9e67854a3eed2a96cde8ecc0ca
SSDEEP 768:SPcas8Tw23fWRmLJQt18F1+UoAYDCx9Tuqh0VfUC9xbog/OV3VOLl/hf0+7Yroq/:SPcas8Tw23fWRmLJQt1u1jaKVOLph8+s
TLSH
T107D2093F640CCB7E4FC01A99DC16AF976EA802C7A6688D4447FE994C02C77EB51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6572905-c9a5-4eb5-bf6a-e0943a74bd64.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d6572905-c9a5-4eb5-bf6a-e0943a74bd64.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f06d4706-aec1-4cb9-b388-4fe2824e1937.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f06d4706-aec1-4cb9-b388-4fe2824e1937.tmp
Size 414B
SHA256 b565d6f2490096e57100d6aa0ca7ae08e3c33aefcfc18ecd34407f9050f25eba
MD5 409bb3db98062c6e10590d580bd04a23
SHA1 6104202f19a49aa09505069d1d154683d1754fda
SHA512 064678f10cbcd1550dd1749021d488a20f5e2f69a49c79153462f59902401fd397679d1796072a9881030ccd5df757e942fc33aaee198dcc7044ce76b5f060af
TLSH
T1CEE02BAAC922FC3B1EFC5B1D60500782D751739B3A40455F3A3D821DCFB5626429EC1C
MD5 SHA1 SHA512 TLSH

Submit Download

d23739ca-088f-4d87-9743-c70b95a1ee24.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d23739ca-088f-4d87-9743-c70b95a1ee24.tmp
Size 27KB
SHA256 865c51b9d744b746ec47a4c122b741eddf14ec91dad4d591f6f4b809c70b62c0
MD5 d8dec006a2de7347172946303adb3efd
SHA1 53958d2b041cacbe75944b783ba6ebcd1cd6a94e
SHA512 6778025ca561c09252452078c7fc26816bc6eb981cde35fb97bc197ba5ea64bc8c31064ac9a51489bc07024b53bae8baca6a8b13c1187f3349b1fd1abda2c616
SSDEEP 384:n+iFzQkUSvC38Ng8TUNTUlIRGwqnHybzWfg9AyHD2Y/bRm2IwgL/7IzJIIlD:VFdC3XwghGSx9/lm5yL1
TLSH
T151C24A36E899DDA7EDEB8E95A74A7643DEE04213C99C8AD8D6C92D1C00CB19D130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9a95e21-0974-4ea3-8f0b-1150e442b62b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e9a95e21-0974-4ea3-8f0b-1150e442b62b.tmp
Size 26KB
SHA256 36f777ca7670ff36757f1960f4f788def98e0ebd5f61cb3280debadd567b091d
MD5 2d3475a3d9513f66c562d1b736ea5f98
SHA1 313a458e3c542c555ff6572400e6f3f2e86aece6
SHA512 575c465dc47737f8f4165c23f11e0fa677410f01c5d56d81071c934bde1647dbac15db1e9b25ea605f0a27b90b43fc536c2f52e0e1642c5eb512e6db5ae613a6
SSDEEP 384:nwiFiZcI638Nc8TUNTUlIxBwqGFDbzWfg9AyHD2Y/bemv4EW1XoU1eWgL/7IzsJz:LFQ63nwgw1rx9/KmIoUAz
TLSH
T150C24B36EC58C9ABFCEB8ED5978A7602DEF04223D59C96D4D9D85D1D009B1AD030BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4392-187-0x000001C0B1060000-0x000001C0B2060000-memory.dmp

Download