a4ac9dcd045e9f21bccceef2846a209f25deb2cca87019893938604413ec7e8b

Resubmissions

27/10/2026, 23:15

261027-28wpqaxvaw3

27/10/2026, 22:53

261027-2vffksef658

Analysis

max time kernel
148s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 22:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 12KB
Sample261027-2vffksef65
SHA256 a4ac9dcd045e9f21bccceef2846a209f25deb2cca87019893938604413ec7e8b
MD5 bfa04495e0ca71ba63cd9dd34c4e77e8
SHA1 f26710602b5d232a69954ae1ec3a22e46ea4c48f
SHA512 516d9b0d0a339a268799b353e4991d07e7f416bff3ef52d86eebac48c22cf18a8cdad7e5c4e6472d2e303ade2b16d44d782713230c959f93bc934e27c77e094c
SSDEEP 192:Gz37c4FBycygOgSxUuZSTtUR7Rc0R5T+GcBAyqRI:EB+U47Rt5T+BH
TLSH
T1AC42E9A77DA655192223C0945BBBB33C74366407E705CC50B69D93A4AFC8FE38CA359C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3944	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1262770251-41185387-1005173349-1000\{93C449C0-C578-4A40-B5B5-F03BF377BCA5}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1262770251-41185387-1005173349-1000\{6FCCA39B-85F0-4692-B2FD-DED7D5121E5F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4416	msedge.exe
4416	msedge.exe

Suspicious behavior: LoadsDriver 21 IoCs

pid
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 820 wrote to memory of 5252	820	msedge.exe	90
PID 820 wrote to memory of 2588	820	msedge.exe	91
PID 820 wrote to memory of 3944	820	msedge.exe	92
PID 820 wrote to memory of 2588	820	msedge.exe	91
PID 820 wrote to memory of 2588	820	msedge.exe	91
PID 820 wrote to memory of 5928	820	msedge.exe	93
PID 820 wrote to memory of 5928	820	msedge.exe	93
PID 820 wrote to memory of 3200	820	msedge.exe	95
PID 820 wrote to memory of 3200	820	msedge.exe	95
PID 820 wrote to memory of 3200	820	msedge.exe	95
PID 820 wrote to memory of 1328	820	msedge.exe	96
PID 820 wrote to memory of 1328	820	msedge.exe	96
PID 820 wrote to memory of 1328	820	msedge.exe	96
PID 820 wrote to memory of 5232	820	msedge.exe	97
PID 820 wrote to memory of 4444	820	msedge.exe	98
PID 820 wrote to memory of 5232	820	msedge.exe	97
PID 820 wrote to memory of 5232	820	msedge.exe	97
PID 820 wrote to memory of 4444	820	msedge.exe	98
PID 820 wrote to memory of 4444	820	msedge.exe	98
PID 820 wrote to memory of 1872	820	msedge.exe	100
PID 820 wrote to memory of 5040	820	msedge.exe	101
PID 820 wrote to memory of 1872	820	msedge.exe	100
PID 820 wrote to memory of 5040	820	msedge.exe	101
PID 820 wrote to memory of 3036	820	msedge.exe	103
PID 820 wrote to memory of 3520	820	msedge.exe	106
PID 820 wrote to memory of 2572	820	msedge.exe	107
PID 820 wrote to memory of 3520	820	msedge.exe	106
PID 820 wrote to memory of 4728	820	msedge.exe	109
PID 820 wrote to memory of 3476	820	msedge.exe	110
PID 820 wrote to memory of 5020	820	msedge.exe	111
PID 820 wrote to memory of 5860	820	msedge.exe	112
PID 820 wrote to memory of 5860	820	msedge.exe	112
PID 820 wrote to memory of 4180	820	msedge.exe	113
PID 820 wrote to memory of 4180	820	msedge.exe	113
PID 820 wrote to memory of 4416	820	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ff8ac2ac188,0x7ff8ac2ac194,0x7ff8ac2ac1a0
  2⤵
  PID:5252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,17328086122935739855,11790241978604656945,262144 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:2
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,5714763211322314707,10189712971384797849,524288 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,569140203563752142,6440496951575006516,524288 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=3092 /prefetch:13
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=2928,i,15587090323335701069,18150030447466394845,2097152 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,13930305128317784258,998647593895796237,2097152 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:1
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4332,i,11500642126112283169,9289818561878214744,2097152 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,8398379763660659787,5742582145052971702,2097152 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:9
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,14538634735245685388,12472880432551729316,524288 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,10730469052873433438,7540832511385172785,524288 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,660722756793549107,12340678567935154442,524288 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,660722756793549107,12340678567935154442,524288 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6580,i,5691886260975741192,2263292456667660485,524288 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:12
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6584,i,16842178680597269591,7639993980728254228,524288 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:14
  2⤵
  - Modifies registry class
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,5778638930841968077,5395809966582474962,524288 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:14
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6540,i,17475297601142248044,17960291455626420284,524288 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:14
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6756,i,10354859141452734410,15677332153109658477,524288 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:14
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2876,i,18110044685180506922,12413141750848052009,524288 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6768,i,17138570761641247291,14118346591199938742,524288 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6428,i,8775931600792657391,892984556986598607,262144 --field-trial-handle=2768,i,10740967280986325467,12414877851975514882,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4416

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3544

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:588

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

19a30d04-6b6f-43f2-879c-bb0cc1f54ac8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\19a30d04-6b6f-43f2-879c-bb0cc1f54ac8.tmp
Size 34KB
SHA256 0af0e6e4545487f0844a06a4aca3e76125657b57a990bc84a6e1fba40425ae14
MD5 52a0610fa9d5756e41499022b309df1b
SHA1 6dd218072712d706f8e6768d97393aa2538be731
SHA512 e41f8b63bb2ac2d58b0ac1952823e89ac341f84894d9c80f5007cfb5042db1e2a2bc57fbeb0435f471c6c192ccbaa7b37f11fbb86894df9fbb35b4e566188f52
SSDEEP 768:sc3pFK3ONtaX1h3Yogkl5akl8pbHW0AWDPoaTZceLy:sc3IX1h3Yog05akl4bHW0Am9ru
TLSH
T1FFF2AF31BC65AE774EA5E244712E2207FFF0D527AAD84AC494CD9E0D019B2ED134BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1a5dcb0d-95ea-48ca-a6bf-d45bc8fc1eb9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1a5dcb0d-95ea-48ca-a6bf-d45bc8fc1eb9.tmp
Size 38KB
SHA256 69ed7744d866def10610fa9b73b9d18ca269c7e3617990ce666b4784a15cb255
MD5 1d8ead322eda145906bc12749fd65228
SHA1 82df2097ac314b3980cd800fb8d70fc9678c8df6
SHA512 cefbb218ddc2a254f44bb621d795100d1a322e19d3101d98283cf0c42ededfe7b9a75f9d062c80be1d7b24fe5035ac1115ed0f4a6cb3c46f7a67032f85a39e7c
SSDEEP 768:c/UxvxjgC+CZ3NzK3ONtaB1h3Yogkl5akl8pbHW0AWiPSHvP0Vv:JZj3+I3aB1h3Yog05akl4bHW0ANSCv
TLSH
T11703BF35BC65AE738EE6A244751AA307FFF4D5639AC45AD444DC9E0E028B3BD030B853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

639e50dd-c2ac-4e81-96a2-089689907cc5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\639e50dd-c2ac-4e81-96a2-089689907cc5.tmp
Size 36KB
SHA256 13529ef72c88e9776e152aedc25dec27f03177390e7fe17ff61cbafe1ca0849c
MD5 41962a222650b3c13e33cd19d46c96e3
SHA1 a9bf73374a7200c92b53ebc18e3bfde2979a3079
SHA512 b36b05fa952c09b86a40c5fccc64ef9d5dae81f28d1294430f77b4380d744b69e65b2c314105bce1eb52945f888e11d819b5d01a2618b20189cd9b53f4feca40
SSDEEP 768:tFdj3ywghFK3ONtaZ1h3Yogkl5akl8pbHW0AWDPoaTZceLy:Zj3lZ1h3Yog05akl4bHW0Am9ru
TLSH
T178F2AF32AC95DA778EA6D784B12E3207FFF08167DAD45AC4A5CD9D0D019B1ED034BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e1837ee53009f9b691f7aee3be45ffb945d4894bf04ccaf875b9947114bb5224
MD5 58ba31abb4a3fd3bbc9aadea4fc9ca13
SHA1 d79c4b2ccee6dadb45162ea34fb988911510f0b8
SHA512 0c096d7f5d364e0911d26f4bc2ea03e3d81b2026be5182b04fc17e7949640761db8056138b55b28aa9abe884d601d2cf6b1be9e992fd3565c35c69def459d32a
TLSH
T1F3D02B3579ACD772C18C503A405901112A95F001FD46C1801953B10848913400006295
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0a1e646beadfff70af6a1dc73b6baa41188262ddbb2b7781270d4e94c92c02be
MD5 893220bb58a1416480d52375128fa19a
SHA1 3a577208211e9133f3744d9ba695501b0481ca9b
SHA512 b3f0e3d85398f7aa7fcea74cd44fd2709c0265d9072771dccfe7508832bc1173f452a0f49028e8bd62ea434676abcdf4a111c8e31f121871fbdfa4acf207b131
TLSH
T1C2D02B3179BCD772C18C503E405A01112A85F001FD46C1801A53F10848913400005281
MD5 SHA1 SHA512 TLSH

Submit Download

3d8290d2-442f-4aee-a5d3-49172d82eef5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3d8290d2-442f-4aee-a5d3-49172d82eef5.tmp
Size 11KB
SHA256 bf2db829fb6a022d9e9808f946272bd3cb9ec5113fe9fbf32598cc3c08e8199c
MD5 5d6cfd778507c68f6365515852fc456e
SHA1 f32a251b98704041ab794f9bc8dffc69f8fcf97f
SHA512 82534df64840507c211e7facee8b32c7645b0f77394300efa999f8517566afef1f398954467013b42ab9d5431ed1aef042824d45a36d4c8bae96dc25b594406c
SSDEEP 192:sxRDRYb5/fdsDOqmBQzoA8p4a/g6+WNIYd6YIQaGNLIgDUJ:sxRDg5/fdsDOHBJz/5I0TU
TLSH
T1B532A715AE28A93B8CCBD21DBB657F53E3F95032A1D51E48B6FC8A1C05EB6DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4105051a-4ab2-4c34-8a8d-67a5822b04c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4105051a-4ab2-4c34-8a8d-67a5822b04c5.tmp
Size 11KB
SHA256 759dd314820ca523558b51945816a15f4b2e80a72c2d4021a9214ec3b6e14fc1
MD5 94bf49a0ba90ee10bd7f51eb450b06aa
SHA1 4f9b028b776d3828ad7a4f274e6e9b92fc834c53
SHA512 ca63063581e6d5b8a0919619e8c4fe4ad7f8df6388236768ac52cce5fdcba2d62510aec9d22e0611ba595155799e65667bfeb958a2fe92879b77cb119dfcae2d
SSDEEP 192:sxRDRYb5/fdsDdqmBUzoA8p4a/g6+WNIYdqYIsaGNLIgDGJ:sxRDg5/fdsDdHB1z/5Iwpu
TLSH
T13942C815AD28A93B9CCBE20DBB657F53E3F95032A0D51F48A6FC8A1C15E76DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4ff8dcbd-c20b-4ded-bede-1b4dbf43e525.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4ff8dcbd-c20b-4ded-bede-1b4dbf43e525.tmp
Size 23KB
SHA256 4cec95ac1a8c9554417e260d22b55b49c912c6920bcf8100949a2c33ca20b880
MD5 fc7d1a4f4110a2a5ca374e4f07fa1b4a
SHA1 98b65e340f63c2947907479fa67cfd17f847a161
SHA512 e6faf59998d423b7200f7584653e0ec45c1e910b4ab32e3cab4c2d8defb523952a91eae2b11276945cd2c0c4a8165e9b40d1a8852674ee52ac084a1d46fa4e9a
SSDEEP 384:qYe+z1ifCtgUGFf8SKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV269GGRLDroKr9:qF+z1oWgU6f8S8F1+UoAYDCx9Tuqh0VA
TLSH
T1CEB2EA2B604DCB7E4FC01A9D9C196FDB6DA802C796588D4047FED94C03C77EAA21A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67577fe9-5662-4061-aa0f-0feb4334fa60.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\67577fe9-5662-4061-aa0f-0feb4334fa60.tmp
Size 11KB
SHA256 7efe8c78cf8ab56265b524c266a96731003dd0a5364cf5ad7b26993fff6a27c6
MD5 d894b8b832ef59d850920ecb31c7587c
SHA1 ffa40d99016a2322757c33847b05596a5daf46c1
SHA512 3c4c52da2dfbfeb4b3ae08c16d6f7cb945d386850044855a7276454a978f3a71798fb31199c4499d0f3bd9f3489ff3ad57be0724b706c0ae7466a391697115f3
SSDEEP 192:sxRgRYb5/fdsROqmBQzoA8p4a/g6+WNIYd6YIQaGNLIgIJ:sxRgg5/fdsROHBJz/5I0Ts
TLSH
T11432A715AE28A93B8CC7E21DBB657F53E2F91032A1D51E48F6FC8A1C05EB6DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a711b8e-5e39-4406-b2ef-08162564fed7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7a711b8e-5e39-4406-b2ef-08162564fed7.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d56c9d8fb7a4ab3d17a6c2511391640e55ffcafef4383cd34bfad876c0d2b213
MD5 403d01bbf5645d262eb3a02ed0c51d95
SHA1 7310eb01b9405b53983e792add43b5e532c313b2
SHA512 9f86bfaebb4d171a7351b2e0654e2ccaeae15f3fa6833776d902085e841489cf4d935c9dc5c63f314a0d0a70b3967fdf3137e24624fee5880513a7ae857c6690
TLSH
T1D4E026C484CEC33FA618B88701AC631C9F82362EA3D07A1E1704EA84704A184A7D26A5
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 dc9959ca365b4eec991ad6b719f82cbb0cba2e698c8cd4e0096818c13d7d7550
MD5 a616fce5eaba9de4d56ba99500a99c1c
SHA1 90fecdf4c9f728bdc07708a510e5e4c86b6ac51d
SHA512 804c9afa43f69fe55243f54387d36c670a1f465f423fe53578ce3bdbecec100c94f93bec77aa7ec8eb4f28ffc49b50790b48d3fbd10c653134f3ad3b429fb5e5
TLSH
T12871C7A082308146E3533A7436F9596631BFBC8CCEC71E1DD267DBBADA3933094C2098
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d481e2533403dd4076b5fbd6569d514f2bd2c5b13af2bc23f6b8da63d85f1e91
MD5 7ff91d4a247838e3de59ca8a9bb8e8c7
SHA1 4109fb545b5a553f3aec4ab1dc739593b429ecaa
SHA512 9c2441c196705fedfb76536d95e8858b2888a33c35e0a61732be17de0f0ef48d27cc02a543a6758763b5cb4caa25ccdadc57323bacc9b2c53e4baa4ae00d2bea
TLSH
T10871C8A042308146E3533A7476F9596631BFBC8CDEC31E1DD267DBBADA3933094C2058
MD5 SHA1 SHA512 TLSH

Submit Download

87973635-7a93-4bab-a048-ced5ddcdbf8f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\87973635-7a93-4bab-a048-ced5ddcdbf8f.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

07691ed7-eaec-49dc-87d8-cae280c10829.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\07691ed7-eaec-49dc-87d8-cae280c10829.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

550e05b4-634f-4daa-872c-4cedd3fac7ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\550e05b4-634f-4daa-872c-4cedd3fac7ee.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

a11baa51-519c-460c-b292-7928eeadb869.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a11baa51-519c-460c-b292-7928eeadb869.tmp
Size 3KB
SHA256 5f8f90cbf8cb155059db74af3aa50165c088d375b4a8b2f62f8e549047c16690
MD5 a64c484f42909f52287d7ebf03b99db1
SHA1 6e7044f438687c43cc5e03866741a50c38b46f7a
SHA512 d303201d2a532dc56d694dba26931740dea6904eff75e677e498aee785e6e609a85935fbe7db59ff5d8013a80f3be79eaca51448630dc8a48b4ab196c6a99eed
TLSH
T1B451BEF783E4867ED91156F0AB246E1BCE1D0516432C3C6689E4AE1BA3F3471E14279F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

aa35b455-cfe9-4ce8-a782-ec6d5e9d932d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\aa35b455-cfe9-4ce8-a782-ec6d5e9d932d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad5de472-90d2-4acf-92c5-833ffe511ea1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ad5de472-90d2-4acf-92c5-833ffe511ea1.tmp
Size 40KB
SHA256 2fb7bd481bc31f8b333fdde8fe9b0edee303dd0e46b835df67e0e08080346dc7
MD5 5c64889060e8b01a15d7127f7efa5fc0
SHA1 4f8c20129119aaff188f65ef2f3d56d6919516bd
SHA512 348e8e466f758866bc61a80d62b2b5fc33da7747100a69f039bb52b7b947126b41aab543468ef018546567e7aecc44dfad43bb0a6b7315274980141a8e460cc4
SSDEEP 768:H/UxvxjgC+Q3qFK3ONtaF1h3Yogkl5akl8pbHW0AWDPoaTZcFE:6Zj3+Q3ZF1h3Yog05akl4bHW0Am9iE
TLSH
T11103BF35BC65AE338EA6E244711F6347FFF49863AAC459D844DD9E0E069B2BD034BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c5b9dea5-982f-401d-a01c-908a7fc220cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c5b9dea5-982f-401d-a01c-908a7fc220cd.tmp
Size 37KB
SHA256 01ce3d5a14ff65eed292c050132321927ef7bea6ba0d7a566cdd0b2db8547b3f
MD5 1ddfe24afac25326aedf9a0259e765f8
SHA1 265bfa9bbf1e08979e624797e1654b2051d98149
SHA512 b03f264f29d907f6aab650df14a048c3514b78b23ac803974c6721a860eb6a2762f440444fbfbb96d7595cb286b7df55e60e519e7ebc1a352a8b228495110a9c
SSDEEP 768:B/UxvxjgC+CZ3pFK3ONtaN1h3Yogkl5akl8pbHW0AWTeSHvP0Vv:UZj3+I3IN1h3Yog05akl4bHW0A/SCv
TLSH
T16003BF35FC65AE778DE6A244761AA317FFF494636AC4569445DCAF0E028B3BC030B853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5d2b9d2-8e64-4bb2-9d1f-4400d95d97cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d5d2b9d2-8e64-4bb2-9d1f-4400d95d97cb.tmp
Size 34KB
SHA256 e4ac6afa951bc7220c1cc5a6f42f4c6637b7ecc965d4ff364fa5c0cf629327a2
MD5 24db75fd514abec0254fdbabecb62007
SHA1 9700ea630fb2fabb52e359f5536713fed44a3d5e
SHA512 792eeff9fac4ce572ceff4bea961befc3bac1fd459eca1c21753991bd7c46a2e10e754c0077a41960e9f5875f0160449b6204d54cd4c43222a7a9a476bce8d08
SSDEEP 768:gc3IFK3ONtaX1h3Yogkl5akl8pbHW0AWDPoaTZceLy:gc3rX1h3Yog05akl4bHW0Am9ru
TLSH
T170F2A031BC65AE774E95E244B12E2207FFF0D527AAD84AC494DDDE0D019B2ED134BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

629cb227-9fe2-4c9d-848e-fe92747a84eb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\629cb227-9fe2-4c9d-848e-fe92747a84eb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download