8ea7a91d6acd99295cdfdb8d17f6184e040162ac48c9b46217e303a22e51c378

Resubmissions

26/10/2026, 19:54

261026-ympgqsv18r3

26/10/2026, 19:48

261026-yjg89ags5s3

26/10/2026, 19:43

261026-yfbbjaywhw3

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/10/2026, 19:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
KdVxwGZn6go.html
Size 1KB
Sample261026-yfbbjaywhw
SHA256 8ea7a91d6acd99295cdfdb8d17f6184e040162ac48c9b46217e303a22e51c378
MD5 ecc0637ea370cbe0be25c01bc37af807
SHA1 dc9ea787a38105834675e64a85002d5ca4117c7a
SHA512 52cdf8474ab159f5f5fb758f6efc08019b11b92709dbccae1dff5c9c2f83895fee8f899019496b09b451b2bf0286168977a38ad9421c831c23f3d02f543798f9
TLSH
T10931445392901249BE0B55F6B8B33AF53E44CD5161E28919786A339EC2C14E2C27734A
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4768	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-696679853-3915825385-3233721679-1000\{327501EE-6AB6-452D-B785-662D496E4AEA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5352	msedge.exe
5352	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe
4968	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4968 wrote to memory of 4796	4968	msedge.exe	90
PID 4968 wrote to memory of 2172	4968	msedge.exe	91
PID 4968 wrote to memory of 4768	4968	msedge.exe	92
PID 4968 wrote to memory of 2172	4968	msedge.exe	91
PID 4968 wrote to memory of 2172	4968	msedge.exe	91
PID 4968 wrote to memory of 3352	4968	msedge.exe	93
PID 4968 wrote to memory of 3352	4968	msedge.exe	93
PID 4968 wrote to memory of 2536	4968	msedge.exe	94
PID 4968 wrote to memory of 5024	4968	msedge.exe	95
PID 4968 wrote to memory of 2536	4968	msedge.exe	94
PID 4968 wrote to memory of 2536	4968	msedge.exe	94
PID 4968 wrote to memory of 5024	4968	msedge.exe	95
PID 4968 wrote to memory of 5024	4968	msedge.exe	95
PID 4968 wrote to memory of 5620	4968	msedge.exe	97
PID 4968 wrote to memory of 5620	4968	msedge.exe	97
PID 4968 wrote to memory of 5620	4968	msedge.exe	97
PID 4968 wrote to memory of 804	4968	msedge.exe	98
PID 4968 wrote to memory of 804	4968	msedge.exe	98
PID 4968 wrote to memory of 804	4968	msedge.exe	98
PID 4968 wrote to memory of 1580	4968	msedge.exe	100
PID 4968 wrote to memory of 2044	4968	msedge.exe	101
PID 4968 wrote to memory of 1580	4968	msedge.exe	100
PID 4968 wrote to memory of 2044	4968	msedge.exe	101
PID 4968 wrote to memory of 1812	4968	msedge.exe	103
PID 4968 wrote to memory of 1848	4968	msedge.exe	107
PID 4968 wrote to memory of 2532	4968	msedge.exe	108
PID 4968 wrote to memory of 2612	4968	msedge.exe	109
PID 4968 wrote to memory of 672	4968	msedge.exe	110
PID 4968 wrote to memory of 672	4968	msedge.exe	110
PID 4968 wrote to memory of 5352	4968	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\KdVxwGZn6go.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ff81ccdc188,0x7ff81ccdc194,0x7ff81ccdc1a0
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,14185395786170507380,13037997073014193828,262144 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,5654720052272923532,10525145680582009248,524288 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2288,i,5346076122020416466,7769073990381980124,524288 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=1400 /prefetch:13
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,8651191905787633581,16711710519778701271,2097152 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,2935118618064976162,13126775200813624813,2097152 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4360,i,14381120789791518245,15354881572531847605,2097152 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:1
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4396,i,6722704716583058463,678073148401615276,2097152 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:9
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,16656094740348245646,6545577768438528609,524288 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,13036318930824385451,10145497215321574376,524288 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:14
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,12417179080638309884,15324777561480589774,524288 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,12417179080638309884,15324777561480589774,524288 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,1464159655310859804,17932898738690529386,524288 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:14
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,158849653778491758,8491007428668019264,524288 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:14
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,841021507584285603,10162840602512009449,524288 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,7039624398973501902,225049582290392489,524288 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:14
  2⤵
  PID:672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6496,i,11389011861404861974,15661146416053686371,262144 --field-trial-handle=2260,i,12422266184163727734,16213936613316927662,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5352

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4560

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1288

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

175da0c7-127c-45ed-8204-d34b31466490.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\175da0c7-127c-45ed-8204-d34b31466490.tmp
Size 34KB
SHA256 8321764e6177428b26948f240c9fffee5cfec8ba8f42ccd9db0bf5dea867610c
MD5 c7a6540ea5ab6c55f16800a1806d5c8b
SHA1 96c6aea85f848aecfd6289d83886f8fcba467c92
SHA512 3acabdb2c1dbf3f89dd962c5e276b1ac9c68fb311aa5d6728411325f96ec8d73966391564180f16bce624ac26c9a5b4824581887a7be85b876fb0e6dfa00978b
SSDEEP 768:OA3i9DcZ0rfZWmYoKYoSBw4Ot5AEl94BHYjHO6RUaL0:OA3iHBVa5AEncHYjuqUa4
TLSH
T1E0F2AE39ECA59D638CFAE785B70A3646AEF08153E9805FD0D9CD3A1D0A8719E134B807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

25a6fe2a-3c30-455d-aae8-3475aac28f85.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\25a6fe2a-3c30-455d-aae8-3475aac28f85.tmp
Size 38KB
SHA256 05fd3a1b37f080c02e0e0c954df2aeb3246cc40f0139ab256388b88dbc0fa82f
MD5 d48e9b7ded779f83b6750e6ccd6e9186
SHA1 22bfc4d97db78b69d4700ae7990023682e0e5915
SHA512 3846950b014ce27859a44be90a6cd517ceadd4c0e73e6b608bb23861bf1665b1f36e6c73f620936d0040403daf26d303d7657ab61c0c269335f7c5f5243e623f
SSDEEP 768:8/UxvxjgC+b31NcZ0rfZWmYoKYoMBw4Ot5AEl94BHYjeOAFTN/:pZj3+b3rBVa5AEncHYjFAFB/
TLSH
T10903AF39DC6599239CF7E685770B338A9EF18563E5816ED08DDC2D1E0A8729E130B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4234c8c1-06ea-463a-b49c-5fae64607758.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4234c8c1-06ea-463a-b49c-5fae64607758.tmp
Size 39KB
SHA256 e9b69fb8f9781edf52c52c4f8caa432819177f4ea2cb65c3fe33fc06d98c2f7c
MD5 6decf3360d319cfef9ba8905cb12e82c
SHA1 6d011e1af8ea85726d6e3101ae97822ececb36bd
SHA512 d18aa71669d4d97142a9e528ddfac0a3b3d99d885e5539d924b4b5d82a16686bba84042143ebb1c68fbae3811ae0c7e5b68c9a9e60dff673be1df507bd2829e7
SSDEEP 768:l/UxvxjgC+83MpDcZ0rfZWmYoKYo/Bw4Ot5AEl94BHYjHO4p1:IZj3+83M4BVa5AEncHYjue1
TLSH
T19103AF39EC659D239CF7E684B60B33479FF18563A5C16ED489DD2D0E0A8729E1347807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a6f2abd-e274-464d-a442-fcd7119358ca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9a6f2abd-e274-464d-a442-fcd7119358ca.tmp
Size 34KB
SHA256 f636636ed8a88756b26d3583bd62073acd305060b9525049b7043e4f89708ca6
MD5 564bc2ee5fdea3ccfd551ee41a61cd4f
SHA1 dae5c085aa12ba0c19a405b1f36a65af2fee854f
SHA512 a862e2fd721a97dc7eec58fe18f08ca77c670ba11b423f8b8ca7450213862c7015b23d34c1505444c9122a544865602133675c72bddd94f1bafe192b18e7bd48
SSDEEP 768:MA3r9DcZ0rfZWmYoKYoSBw4Ot5AEl94BHYjHO6RUaL0:MA3rHBVa5AEncHYjuqUa4
TLSH
T1B9F2AE39ECA59D638CFAE785B70A3646AEF0C153E9805FD0D9CD7A1D0A8719E134B807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 59619e39464102fa53912dd9a15237954c5125d546c48a72b8bdb58ad9eb9753
MD5 f80a0057aa895d42a15b594d07d09f76
SHA1 2478a67794a5362ccf809b7a2c8f64a03c72fa32
SHA512 4a9ec8459a11d9e573883d5eacfd5386cf838bad2bd0b33ff1b37017f5f2cf6bfcef877344a87892e3c49ce624e0cae52791ded1593b8233138de87fd2e5e634
TLSH
T1C6D02B75F668E9D2C140043C00410920706035066F6801C206030038040324B55022C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 91a032a4ffcdd10503afdeb5220904a7e7cea899c3a55606bb3e90180ed9472e
MD5 f04321ebc7aa4a8f91bb5362a6c4c79b
SHA1 c98d3283204e4a0453e416a04c3ae56e4c3feed8
SHA512 c2faa7fae738d85299e6f63b9eaf33c25db5a255ea3f5f6a8551842b7e0cec73c7e8b5e86a9cfb9714287d2b382b57b7249bc70671dbfde2815d5937243570af
TLSH
T1DED02B71F678E8D2C140043C00420920705035061F6801C207034038040324B55012C3
MD5 SHA1 SHA512 TLSH

Submit Download

02dec799-d6da-4ec2-9387-70af167f33f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\02dec799-d6da-4ec2-9387-70af167f33f3.tmp
Size 10KB
SHA256 d0ddbad29aeb493e84c768c10956be938501cb0ead9e5cdef9e663f29c8dc348
MD5 c6ed6e8373b38be23680775a65ae7923
SHA1 981d95aa8f51f51b3e93e7a58639ad287dc4efac
SHA512 c3986d6f7dbe0f9196257ae9d63798eedd282eff7db762c693391ce53638aab92958de1fc31812537f2862260563edbf1ebca9abdbba474d6336403045b5df89
SSDEEP 192:sxRqRKbB/fps0JRzoA8p4q/g6+WNIYijyacGpIgIJ:sxRq2B/fps0JMH/5IRs
TLSH
T17B32A615AE28A93B8CCBD21DBB65BF53D2F95032A5911E48F6FC861C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 94c71205146de5542f61912f71e96bc4802ac1cf19f4f93cb04a5e204270292e
MD5 f1417f5b3a7b22caab6036eebbf7588e
SHA1 0dc9beae117b1bbc473b69383943e195a4020955
SHA512 bb7fd32da765ff148966201c1066026c9655ad6d41e925558d6e76182bd72a41f8c96e8c92a17245bbb9fbb2f9936ec5eb5d2f75f50fd34d90eb055c97e9224b
TLSH
T13261714876EC4171F35882F0A1C9CCCBB9B64FC01187CE1205DAD2B86AEF3B8795A484
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 94fb84c853df338462e6cb0f383bacee9f4e00b2a892b3839918ee688093c689
MD5 b0d5852426b3d2b981611ea9f8046fd1
SHA1 932cf1176faecf28a98ace3bcb867c4e564d9675
SHA512 dadcd89324c763cb66de791818338a711bf628e41af99ee8cc5bd5f5222bf31efce7322edb4f6bb7c301c411454f4261470c768a096c3b1b719683fed321bfe1
TLSH
T1026160483BEC0171F35982F0A1D9CDCBB9B64FC01187DE1205DAC2B86AEF3B8795A484
MD5 SHA1 SHA512 TLSH

Submit Download

3cf45776-c3cf-4eba-af26-18dc5232d6b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\3cf45776-c3cf-4eba-af26-18dc5232d6b2.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c0b761b4-c5c8-47f9-9e54-b406ad36a31b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c0b761b4-c5c8-47f9-9e54-b406ad36a31b.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

e34b5dbb-b3f3-4e68-8403-8dc461c92471.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e34b5dbb-b3f3-4e68-8403-8dc461c92471.tmp
Size 1KB
SHA256 12e2d04d2df2ccb80418910fc7d243bfb4e6ffcb13915880afe9a28bc523f01a
MD5 922efcc9c44904a0827bceb13ac3042f
SHA1 0d7e7c05ddb25ef655e38c6adfb9f2e8ecf8abbe
SHA512 947c3e3d6ceba48987c0349ab1e0d8cf419d837166f42fa83816ab819ab31e6aea0c366588e047395a3e6b4bc7ea6ca7a05a625dbb67367d0ffcde19c576bd88
TLSH
T14C31A0F787F4856E8A0596F0AA18AE2FCF2D0511431C7C69C9E4AE2793F3472E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b4d2b4c5-c384-46a7-8272-f76c033aa429.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b4d2b4c5-c384-46a7-8272-f76c033aa429.tmp
Size 11KB
SHA256 451e58c5bb100a83f9acab81481af7cca8b17b6552eac1ee778539b0fb673e41
MD5 b223f5609160912c10204b6e3f8e3302
SHA1 5d4716e6c9858000e0eb603b83ba94f46a065d80
SHA512 c19b28bf287a1689ca76699f2832c37c2ba70cec5e1040fa2525f3670e175ed42edca6cbd7392c7f20026e19159c9c973c879b41305825f0d4252d2444e1e384
SSDEEP 192:sxR9RKbB/fpsBJRzoA8p4q/g6+WNIYiJyacGpIgDlJ:sxR92B/fpsBJMH/5IXr
TLSH
T13432B815AD28A93B9CCBE21DBB55BF53D2F95032A5D11E48F6FC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bedb04ea-bc3b-466e-9186-fc2e909814dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bedb04ea-bc3b-466e-9186-fc2e909814dc.tmp
Size 10KB
SHA256 f265cdaf7a68be2857e2185336eec2ed3bda7caf27fffa715f7b55c464797766
MD5 69b696ed41a1bf5e0b1a878a9aaad70a
SHA1 b2e04a413bcd8bd0ed18f84a649df7d0476288f0
SHA512 b45991cff71afed5d7bcfe71c540832a011b326441087a9b81a01912571db644c60b3d9366979073df7c9d5a1b2b35c2bb438a56d839cf0f71a26c6dff758054
SSDEEP 192:sxR9RKbB/fpssJRzoA8p4q/g6+WNIYijyacGpIgDjJ:sxR92B/fpssJMH/5IRB
TLSH
T111329615AE28A93B8CCBD21DBB65BF53D2F95032A5D11E48F6FC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d029d1ef-5495-4663-b562-5af3a1aeb17c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d029d1ef-5495-4663-b562-5af3a1aeb17c.tmp
Size 23KB
SHA256 eefb7576f132c3fbeca85a1bb08c88155a64d35b0df0a5508c5c9b42f77ebb94
MD5 08c840d61d9b8c0a9865380bfcd565a3
SHA1 a92d77e8f4e268fe241cbe4e6ce895721737ff77
SHA512 8e41fed4e7ff8bf0304d8c8bcbf37f09115637c996a78c44bea98964b1769516f9566b355c276411a7991f4d035fe1b70c19b48e04659a2f4166153944f0bc68
SSDEEP 384:XLMDmVifCtgvdFfnvKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVC69lLRR2rohZZ:XIDmVoWgvHfnv8F1+UoAYDCx9Tuqh0V4
TLSH
T159B2DA2B640DC77F4F800A9DAC296F977D9801CB9A588D4047FE994C02DB7EA921A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fb3d7b18-8339-4f10-9d95-7e4fc5fb7d55.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fb3d7b18-8339-4f10-9d95-7e4fc5fb7d55.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

01722aef-28fa-492c-b3e1-a3e5fbc404d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\01722aef-28fa-492c-b3e1-a3e5fbc404d6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a4c6db20-0677-47f4-b1df-7c193bac1620.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a4c6db20-0677-47f4-b1df-7c193bac1620.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fcdd4a96-cbb7-470a-9011-20f4ef02842a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fcdd4a96-cbb7-470a-9011-20f4ef02842a.tmp
Size 38KB
SHA256 a29c65bd35478004eb5562e71fcb89ed769a5d6b60350c6a12a74567c3688512
MD5 0dfe01da5bba135b9fe3165aad73fd2b
SHA1 642197b7274ba1b973bc3fc96f13526afacdc49f
SHA512 5d94adf44ab8a0cf54879d2e6a208da7af1683af96838b0cbb831733401229ef857873909beed99949a9fc4052e8819ac587f0b42d92650015486ecfdea14e81
SSDEEP 768:z/UxvxjgC+b3rwcZ0rfZWmYouBw4Ot5AEl94BHYj/kAFTN/:GZj3+b3BBVa5AEncHYjMAFB/
TLSH
T16703BF39ECA599278CF7E785771B3387AEF18463A5816ED48DDC2D1E0A8729E1307807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe12ab52-3429-4e53-98e1-25bfb9a19c16.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fe12ab52-3429-4e53-98e1-25bfb9a19c16.tmp
Size 36KB
SHA256 74fae0304521bfe1153c4c0768f79e02b4364bb2f66f1c2f88d06ab17c482f15
MD5 432aae8305b9b0ff25990298a6bef998
SHA1 13bf5641fcc7c989f1baed2a44f6514781349969
SHA512 78e81e73831a8a76a1411b560c27a2ea5f9434b7348e29ede72730c9138db4d986c3aae8641c4a13c337bcc4e24004dace4ebb4bc389b1c2ba6e0a11ce6c0c2c
SSDEEP 768:5Fde3gwgQ9DcZ0rfZWmYoKYoxBw4Ot5AEl94BHYjHO6RUaL0:le3hQBVa5AEncHYjuqUa4
TLSH
T18503AE36DC9599679CFAEBC4F70A32469EF08153D981AFD0EACD681D0A871DE134B807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download