82900f040d0aa72573723b01a81253a4a8daea3ac0c38be803c9cac87cb6013d

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/10/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.html
Size 54KB
Sample261029-w2b4vady91
SHA256 82900f040d0aa72573723b01a81253a4a8daea3ac0c38be803c9cac87cb6013d
MD5 0930be5d0098bb82b70cdde72ddd0843
SHA1 5c7359f8ba4c9d4051ca175263c4fc39548b694d
SHA512 a0ac73ca372f7f4de1b93e6d1dd694f0f24a511b82796dcc3f5ce346506a76b61859f303d7739ae15e2060008e0c18eca7bf9109aa1c2b84c4cd8d425c8c0c41
SSDEEP 1536:LGyph3BvMyByaSj9/pqgZk4+rhdZrrInn2GKkco1bBSo13RDArLccRX:L/T3BvMyyj/pArrIn2GKdo1bBSo13RDe
TLSH
T17043E873D4681427279F96E994A1B718F8DA472DCF4E8AF2F1F463688A44EF20473709
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1636	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{A78D3D58-729A-4240-832D-74CE7EC6E1F4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2488	msedge.exe
2488	msedge.exe

Suspicious behavior: LoadsDriver 5 IoCs

pid
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 3136 wrote to memory of 1604	3136	msedge.exe	88
PID 3136 wrote to memory of 1636	3136	msedge.exe	90
PID 3136 wrote to memory of 3688	3136	msedge.exe	91
PID 3136 wrote to memory of 3688	3136	msedge.exe	91
PID 3136 wrote to memory of 3688	3136	msedge.exe	91
PID 3136 wrote to memory of 2420	3136	msedge.exe	92
PID 3136 wrote to memory of 2420	3136	msedge.exe	92
PID 3136 wrote to memory of 2912	3136	msedge.exe	94
PID 3136 wrote to memory of 2912	3136	msedge.exe	94
PID 3136 wrote to memory of 2912	3136	msedge.exe	94
PID 3136 wrote to memory of 4516	3136	msedge.exe	95
PID 3136 wrote to memory of 4516	3136	msedge.exe	95
PID 3136 wrote to memory of 4516	3136	msedge.exe	95
PID 3136 wrote to memory of 5952	3136	msedge.exe	96
PID 3136 wrote to memory of 5952	3136	msedge.exe	96
PID 3136 wrote to memory of 5952	3136	msedge.exe	96
PID 3136 wrote to memory of 5160	3136	msedge.exe	97
PID 3136 wrote to memory of 5160	3136	msedge.exe	97
PID 3136 wrote to memory of 5160	3136	msedge.exe	97
PID 3136 wrote to memory of 5720	3136	msedge.exe	99
PID 3136 wrote to memory of 2592	3136	msedge.exe	100
PID 3136 wrote to memory of 5720	3136	msedge.exe	99
PID 3136 wrote to memory of 2592	3136	msedge.exe	100
PID 3136 wrote to memory of 2840	3136	msedge.exe	102
PID 3136 wrote to memory of 1068	3136	msedge.exe	106
PID 3136 wrote to memory of 3008	3136	msedge.exe	107
PID 3136 wrote to memory of 2948	3136	msedge.exe	108
PID 3136 wrote to memory of 2956	3136	msedge.exe	109
PID 3136 wrote to memory of 2956	3136	msedge.exe	109
PID 3136 wrote to memory of 2956	3136	msedge.exe	109
PID 3136 wrote to memory of 4668	3136	msedge.exe	110
PID 3136 wrote to memory of 4668	3136	msedge.exe	110
PID 3136 wrote to memory of 2488	3136	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ff946dfc188,0x7ff946dfc194,0x7ff946dfc1a0
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2108,i,7170744669987594064,4438489052200756459,524288 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1888,i,17210315748345764886,9173973113764837980,262144 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:2
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2428,i,4221034283708640393,14845096131486311754,524288 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=2820 /prefetch:13
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,574530340857547010,6872085067154771449,2097152 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,2660209581473357815,7315453545153174414,2097152 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,4819793787552101786,6837016357334919494,2097152 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:9
  2⤵
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,175176282286405833,4138127526645893031,2097152 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5336,i,753872545527601790,9627615164920701907,524288 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:14
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5340,i,4582145190122712559,7828099050536447801,524288 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5976,i,1085741112890530595,8133564947085833734,524288 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5976,i,1085741112890530595,8133564947085833734,524288 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=3900,i,8984094284532268218,6041305826776842674,524288 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=1208 /prefetch:14
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4852,i,17542900095498206863,2968059773823031660,524288 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:14
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4928,i,2284040333072385381,6693672912342216953,524288 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:14
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5688,i,13916520879503505304,12109876821819781281,2097152 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=1172 /prefetch:1
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5300,i,14244970040921442372,16797827195648258524,524288 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6500,i,11927324895048969375,4590787131792052126,262144 --field-trial-handle=2752,i,4941314334930669569,8387876205496506172,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2488

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2820

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4956

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0a17595f-4469-430b-8ebb-53570c52953b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0a17595f-4469-430b-8ebb-53570c52953b.tmp
Size 39KB
SHA256 697b3bb5f137419f21cb0aa494ccc5215c44bd0c18c93d10275a313ed7b37d30
MD5 98a1d64d7bce3aeb37d0472a6598984c
SHA1 c46addfe55cbd7849618ba6027d489c93f07d420
SHA512 62e8b3527977f71b7922eb60dc979f5269da7fd6bd195d2576663b5081c2525955b7946f8fcbc095f07b173f94a9796dffb5c837c7fee26808e6094611b4e4b9
SSDEEP 768:W/UxvxjgC+h34bRvw6c7fZrKTHyHsp5XSwQs88uBkiT2O/P8Rj:LZj3+h34detrKSSILNBzGj
TLSH
T1FC03C039F8945C33ACB2C391765A234BEFF06157C4C41AA889DE6A0D03CB76E674B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1d848411-9764-4dab-a44a-ad8686975af4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1d848411-9764-4dab-a44a-ad8686975af4.tmp
Size 37KB
SHA256 0f5cb7061d75d426eb842013a37d745d24c5719967af3a1f653dc62ec8a10c59
MD5 3a0f86fdd7d85af3b4dafc6166e36997
SHA1 ab05f7a696e85bcef380e8f92679bfd113c4ff0d
SHA512 494523804b24cc41a96eb23038d2b3531e66515df6da1072da720066bbb870366b8a7f331878162a3df07d50c8d7b1da3a2627f6116fcb7ee5eeda0763e4fc18
SSDEEP 768:R/UxvxjgC+W3j+xc7fZrKTHhp5XSwQs88uBkiTC2/P84g:kZj3+W3jztrKvILNB3Hg
TLSH
T10903C039F8945873ACB3D385365A275BAFF05053C4C41B9889EE7A0E02CB75D670B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1d91edaa-c715-41bf-a896-e8cf7f17bf3b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1d91edaa-c715-41bf-a896-e8cf7f17bf3b.tmp
Size 40KB
SHA256 979ebbb2b1e0853f5e556d5a408984c70873589f950ca300ee690b372dfe2b38
MD5 0409c5cb49a212b5591041cbd69e9c1a
SHA1 8c62f8503172baff675afb5908b23ffb97bfb0dc
SHA512 2e2a4ef4e26a261f26870045d36399023b3aa3468bb1cf1b4efc45617f070e94f062158368c4a10e5269db8274328ed747ccd432f046425e5d8571643514b599
SSDEEP 768:x/UxvxjgC+h3lbRvI6c7fZrKTHyHsp5XSwQs88uBkiT2O/P8Aej:EZj3+h3ldGtrKSSILNBzwj
TLSH
T1F003C039F8945C33ACB2C3817A5A234BEFF06057C0C41AA849DE6B0D02CB76E674B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6edbf565-5dee-4a03-be69-29e5c15d2673.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6edbf565-5dee-4a03-be69-29e5c15d2673.tmp
Size 38KB
SHA256 260a7f42dfe89baf53cfc028da8c9f3c878a5b8dcc8a8d3262906e50fcc9ca76
MD5 26dedc3c045fea78b635faa67a68baa5
SHA1 ff95b5938aff11ae03d71cb09c7a4be4e9d11618
SHA512 d178d9101c0589fcdd5c157155ccea90eb5b61b7065aec7b980ab4a61661e0e1bdacbdcca59fb9c4de042c5f1350f19542f502aadaf63073fa2741aed885ddea
SSDEEP 768:2/UxvxjgC+W31AEc7fZrKTHyHTp5XSwQs88uBkiTzO/P84g:rZj3+W31ItrKS9ILNBgHg
TLSH
T13D03D039F8945877ACB39381365B234BAFF06153C4C41AA449EE7A0E03CB75D674B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

72dab883-5d50-4d87-9a60-9d1e90df93c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\72dab883-5d50-4d87-9a60-9d1e90df93c3.tmp
Size 42KB
SHA256 838097e2ac4a24c8dbf0b8c6b5cce73d051367bd7a281ccea419c5274704842c
MD5 24ad43d6cde773a67d7bb3896de0c7ce
SHA1 e0aa7a899d8a164586c7b8f6c229d0d791b1ece4
SHA512 5407c0fb7f01a6909cd9ddb94740403b131412cf0363276a8293629240678a3910da001f579aaf897cc4db46fac6889333b5ce89bd88dae56dba7a1308f43db6
SSDEEP 768:AFg/UxvxjgC+63nwg9bRvI6c7fZrKTHyHajp5XSwQs88uBkiT2O/P8lj:yZj3+63HdGtrKS6tILNBzKj
TLSH
T19D13B036E8848877EDB6C7817B5A2307DFF05197C4C45AA886DEA90D02CB3AD534BC97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69611277-26c9-4063-97c0-9d3be999341f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\69611277-26c9-4063-97c0-9d3be999341f.tmp
Size 105KB
SHA256 c232ec974e0782cd13a8942d319d172253ded086c99dd896db4bd09ec5006e8d
MD5 0a841124514bc95bddf295e0991715e2
SHA1 0c7f8d71116903710115f6bcd7457435319e2456
SHA512 f0411e7fb7b1b65af2901ce74beb7aae12751e5f298888551f71344040955011ddcfaae5bc0a1a0e03678f7366a807beeaeeecc467babcc548116b11f29e166f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T17EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

172041c7-2c07-46e8-ac06-604f7f60e24f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\172041c7-2c07-46e8-ac06-604f7f60e24f.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

691d128b-39e7-4829-a090-9688a4cfa288.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\691d128b-39e7-4829-a090-9688a4cfa288.tmp
Size 11KB
SHA256 db71561b7d87bfc6d4d0c6e51c832fb43912a0f2fa9edb8b030ff396f374e1fd
MD5 9ec47396c57e9ecf13f866753959e916
SHA1 4fc58404fc53dd1e4780a174e333d6ee9d0db5e5
SHA512 e13fa2c1377f12fa4b849319d9c788556b1d49bda86383f4cea130e4542f92835006bdd9e255b3a3d4f82b0981e846a37975c0284ff2ab6c04a6e755b2d7e82f
SSDEEP 192:sxRfRsbF/fkspHR/tzoA8p4O/g6+WNIYEGtnm+GtIgIJ:sxRfMF/fkspub/5ICmXs
TLSH
T11032B615AE28A93B8CCBE30DBA657F53D6F95432A0D11E48F6FC9A1C04E76DE120750B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ef4b0b4-133e-4cc5-a502-a167b1279a6d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7ef4b0b4-133e-4cc5-a502-a167b1279a6d.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 6c6074a260407498a32e5cc1b33b159633263c39b114a5347971caa5f6658a24
MD5 1e6148e564898c392e41336cc046d6e8
SHA1 4e1d33f990447da225c105c86a2063be7ab6bffd
SHA512 7311871b7efa265e8a439d9cfe6d3281ca34e956710ddecfd984f643d76bb494b3ced5f8c5100acf23113d4e50d524e7f90f33d0bb79d34881d72fdfe293c621
TLSH
T11451B7896661A0B4E7A719704DD132C37B34867ED7FB2E9E0DF8F0B51B4E350601103A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 e5f265547890d581270aa33df5556170c8283a186f65485d1524eaa9e84f4a61
MD5 9068e440d99d62613a20f5533b52434e
SHA1 d673fa356944e422fb46151ddd64430ccb968dee
SHA512 53b7cca306650c3675c50fd1ac7f2b9573a21eefd373016efe46396b8f3791c546d4cbcdee0999cfdb7f88d486f75911f8944dea52b9797a0827e0e30b5f8ce4
TLSH
T1D751A6896661A0B4E7A719704DE132C77B34867ED7FB2E9E0CF8F0B51B4E360605103A
MD5 SHA1 SHA512 TLSH

Submit Download

a6bb126e-4d50-4c5e-9f23-51c204815cbe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\a6bb126e-4d50-4c5e-9f23-51c204815cbe.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0fc40bf5-e611-452b-b06e-eeb89c822d3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0fc40bf5-e611-452b-b06e-eeb89c822d3a.tmp
Size 2KB
SHA256 f5c8220a341f3e1c45c0e8e11a4a50b07cf73ee4723074588ab007c899afb939
MD5 afa6a6584df3915b3a0c9d20a8b5d742
SHA1 373246338bb090828e090f58c0f91678300a30e3
SHA512 1ce8b31fdf42ff0c397a18beefc58346505a130d7141663f178a2243015f3b62ac87ded32c4781b95f088cb985efa4c9f7162c78bbbb2e9f58f207663d86cfa3
TLSH
T1E551CEF783E4867E990156F0AB146E2FCE1D0516433C7C66C8E4AE2B93F2471D142A9F
MD5 SHA1 SHA512 TLSH

Submit Download

66e02e92-466d-4d11-8fed-2600f481774b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\66e02e92-466d-4d11-8fed-2600f481774b.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

aa65f9ff-7708-4bfb-93eb-e72d9d709b33.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\aa65f9ff-7708-4bfb-93eb-e72d9d709b33.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 003117823539ea70502d2fed13f00358dfb9f8b79176ed60e2e66adc4c02353c
MD5 e2c6f5299dc808995fa42d742d9e473c
SHA1 17ae435cdf87952359962da120f501092392d2e3
SHA512 962a181b0d75ce07a5bb872eb6cb66cb645ff7c8e4d71c4c69fc5e3d9a8346a00eb3e4c65a79fc8682a8827505514d7472a5f6483b08d15c2f6bb2af5101c163
SSDEEP 192:sxRIRsbF/fksYHR/tzoA8p4O/g6+WNIYEiaTnm+GtIgDjJ:sxRIMF/fksYub/5I2mmXJ
TLSH
T17142C815AE24A93B8CCBE30DBB557F53E6F95432A0D11E48B6FC8A1C04E76DE120750B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5ddefbeb4d009cc4abb1fc748a1e7c57df06aa974b6e7dfa2e27cd370c707824
MD5 0387461d77d51e33067d3b87f364f78c
SHA1 f5dacbfa804b42b486be44662af6fa23cd64735a
SHA512 3164a54b91c906039939d9c910a8f54c422e58038f0984a078a2de702f85815bc0c319fdf176e1d9aeb7a4bdccaf968d9dd5fb85da51ee0e8c215dfde4c13ec1
SSDEEP 96:KYLSKYQaaZ8lJXLPkfLSPFhkKNBFvkRpJyXfO8KfKiY:8J/4/Y
TLSH
T1C0913210307B8640387E3A8841B5861F465272B3715EE9BBBBBD41B64F6EE055CFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a7d356b8-dfb5-466c-8354-3b115e9e7e07.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a7d356b8-dfb5-466c-8354-3b115e9e7e07.tmp
Size 11KB
SHA256 cb98fa234d9c5652e1916eff811479c3ef13f38b35808d3d00ec66164db8503f
MD5 7097e1f76d0c4bfbfc74104eac3ea3da
SHA1 bb7858598b375cccc33ba29b68ac1fc960a67b67
SHA512 73ce060888e771a950ecb1bee28f65ccca487a56708e353e2f72d1f963c8de3234bb3fcbec9d5d4e69b6519ef0c667d15b2cb98d49f78639dfdd9586227c2cf2
SSDEEP 192:sxRIRsbF/fksOHR/tzoA8p4O/g6+WNIYEGtnm+GtIgDNJ:sxRIMF/fksOub/5ICmXb
TLSH
T10932B615AE28A93B8CCBD30DBB657F53D6F95432A0D11E48B6FC9A1C04E76DE220750B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbd952c9-0678-4a81-bcf2-08fa19b2c66a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dbd952c9-0678-4a81-bcf2-08fa19b2c66a.tmp
Size 23KB
SHA256 e8c35a1cdf6e2655ddfc91f67245714c9fb779bf98908b8f68f1043b65126db6
MD5 f92058edbc4156b31abc3cb6a9ea7ff9
SHA1 39ed9b9a63f01a5fb180ce24f8c990d7b4d12a95
SHA512 f70a9887329c25e155f93e8be951cc40eefb1c0f435db24c66eb1f18a619a957b1f72bed3e97efee57e2605c0f4453b2f6b42caa5b5e05ee84d0054557c46890
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXMroJey:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0Vm
TLSH
T1F9B2C92B640CCB7F4FC04A9EAC196FD77D9802C79A588D4047FE995C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6e9ee4b-7af3-4e56-a7a8-504bd9374f6f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e6e9ee4b-7af3-4e56-a7a8-504bd9374f6f.tmp
Size 12KB
SHA256 565899458c21bc8c4a9041b5566ba1fe949b8c68cf61640cbd0d2c9c6a62436e
MD5 29f2c1bc05ef82c66805056b2694250a
SHA1 32049db9a85e7c1f4b8de5a1d23fc351595ed2d6
SHA512 8d08f11b14309236d27cdf069681d9b446d04eb655a5a01ee1355420737c2ec18f70a59713ccee24b79849cc0d5700ba99a3fe54910f5e6fe4ee9ebf4676c037
SSDEEP 192:sxRIRsbF/fksYHRJtzoA8peO/g6+WNIYEiaTim+GtIgDjJ:sxRIMF/fksY8l/5I2LmXJ
TLSH
T10842C715AD24A93B9CCBE30DBB55BF53E6F95032A0911E48B6FC8A1C04E76DE620750B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adc8a12f-cd17-4f16-aa17-4f5a56d3fd95.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\adc8a12f-cd17-4f16-aa17-4f5a56d3fd95.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

623736b5-9c58-4c37-952b-cf6c5fcf3020.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\623736b5-9c58-4c37-952b-cf6c5fcf3020.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f6b3f9b1-9541-44b9-9192-3651ca1d4625.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f6b3f9b1-9541-44b9-9192-3651ca1d4625.tmp
Size 40KB
SHA256 c64ba326f5c299836c96a9d9594857d08ccb80702b7c9ef469224927d91ac7a6
MD5 d4c81606b101db6095fe91566e232ffd
SHA1 7aed0021f2bb82482c350d67999d82383ec4f69c
SHA512 d30f2fd2e053a04bdf2bfd8056b2c25d825057a23e894b52869ab2658e1e46077281295a3e203e5c2d0862933e8a9bc14053fe4206f488186af9ac84e8e2738c
SSDEEP 768:h/UxvxjgC+h3lbRvI6c7fZrKTHyHYp5XSwQs88uBkiT2O/P8lj:0Zj3+h3ldGtrKSWILNBzKj
TLSH
T1C903C039F8945C33ACB2D381375A230BEFF06057C4C41AA849DE6A0D02CB76E674B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download