b976234dacbda04fe38b41c2dba0b65b36473003e8daeec1debbf76d8e25827f

Analysis

max time kernel
148s
max time network
139s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/10/2026, 20:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
launcher.html
Size 41KB
Sample261029-ys84bssxhs
SHA256 b976234dacbda04fe38b41c2dba0b65b36473003e8daeec1debbf76d8e25827f
MD5 abccf30652eb506a3093bbbff0ed0ec9
SHA1 126d2f28284f1c66603eec12816c9328b9629e47
SHA512 c58a167250fd2cb162b4895bd12b117d7a29882ea58c1073331326550ca0985d42d6367691487dfc0691662a62feb1964263f243c289ce076b7a81e695d85978
SSDEEP 768:93+G3DZVtXYcw6EGJGDFsqNTRTgA6FSGLE/aWdh/Me:V+G3DZVtvugA6FSGLrWdh/r
TLSH
T161133B8A68F31026A59359DC37630B5D76568243DA02DC677BDD42B0CFCEFA268A334C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5680	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{69447D81-4ECE-45E3-93BD-C986FF04B78A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2812	msedge.exe
2812	msedge.exe

Suspicious behavior: LoadsDriver 5 IoCs

pid
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4952 wrote to memory of 4964	4952	msedge.exe	88
PID 4952 wrote to memory of 3888	4952	msedge.exe	89
PID 4952 wrote to memory of 5680	4952	msedge.exe	90
PID 4952 wrote to memory of 3888	4952	msedge.exe	89
PID 4952 wrote to memory of 3888	4952	msedge.exe	89
PID 4952 wrote to memory of 2556	4952	msedge.exe	92
PID 4952 wrote to memory of 2556	4952	msedge.exe	92
PID 4952 wrote to memory of 708	4952	msedge.exe	94
PID 4952 wrote to memory of 5932	4952	msedge.exe	93
PID 4952 wrote to memory of 708	4952	msedge.exe	94
PID 4952 wrote to memory of 708	4952	msedge.exe	94
PID 4952 wrote to memory of 5932	4952	msedge.exe	93
PID 4952 wrote to memory of 5932	4952	msedge.exe	93
PID 4952 wrote to memory of 2184	4952	msedge.exe	95
PID 4952 wrote to memory of 5488	4952	msedge.exe	96
PID 4952 wrote to memory of 2184	4952	msedge.exe	95
PID 4952 wrote to memory of 2184	4952	msedge.exe	95
PID 4952 wrote to memory of 5488	4952	msedge.exe	96
PID 4952 wrote to memory of 5488	4952	msedge.exe	96
PID 4952 wrote to memory of 3484	4952	msedge.exe	99
PID 4952 wrote to memory of 3484	4952	msedge.exe	99
PID 4952 wrote to memory of 2332	4952	msedge.exe	100
PID 4952 wrote to memory of 2332	4952	msedge.exe	100
PID 4952 wrote to memory of 3644	4952	msedge.exe	102
PID 4952 wrote to memory of 5600	4952	msedge.exe	106
PID 4952 wrote to memory of 2536	4952	msedge.exe	107
PID 4952 wrote to memory of 3624	4952	msedge.exe	108
PID 4952 wrote to memory of 4468	4952	msedge.exe	109
PID 4952 wrote to memory of 4468	4952	msedge.exe	109
PID 4952 wrote to memory of 2812	4952	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\launcher.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffd9fc5c188,0x7ffd9fc5c194,0x7ffd9fc5c1a0
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,10842254839416848680,9640665574521738841,262144 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,12721090255644965160,6722920396530501145,524288 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2408,i,7949119170996629619,713807324301825303,524288 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=3148 /prefetch:13
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3540,i,10197486958104578888,166932440956997522,2097152 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3548,i,7990499816326242851,1642124707894824363,2097152 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,11932878277638191018,9537037753319286210,2097152 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:9
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,9828932444581216911,1838312677200126897,2097152 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:1
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,16826517895895400768,10455489312878825145,524288 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,2243932693909035312,13490858979089239907,524288 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,6776900500923048253,5881719081080025831,524288 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,6776900500923048253,5881719081080025831,524288 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,237864379148697105,13184418566967795477,524288 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:14
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,10115014420209089616,17117150060436379703,524288 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:14
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,3073617992789119707,16730850519640873775,524288 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:14
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2080,i,17866914789796569236,2839386891560396341,524288 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:14
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6392,i,3745174428190390391,3858048941004940499,262144 --field-trial-handle=2120,i,12118757312515456613,17809762232246024593,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2812

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1168

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5d7bee73-75f3-4210-b094-a3663d6e1ff1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5d7bee73-75f3-4210-b094-a3663d6e1ff1.tmp
Size 36KB
SHA256 8fe561c2d993b501ce89df0ac7b5d3884fa168818ebadcd6cda2251976d7e98c
MD5 17595d75503f2c33582e34b5fc9ce571
SHA1 e4a93af4c8f17ea8c9e161a00b6736793fa8ef70
SHA512 48665afc6ef2815675262e281a0f1c81074e3ebcf8495d24b93c5edd34c90b1a50da1448343528e99701b4937419c0231300c05edbc2845615180a39ca4c14fa
SSDEEP 768:+FdU3twgWyzc7fZrK3ePhp5XSwQs88uBkiT25oaTZcLLh:eU3K9trkePPILNBY92t
TLSH
T134F2AF36EC94C9679DB697D1B74B37039EF05147C8C80694DADEA81D02CB3AE234BC96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

2ce74cb7-6413-4298-9094-83bd060b1d7e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2ce74cb7-6413-4298-9094-83bd060b1d7e.tmp
Size 11KB
SHA256 3ecef1aad9a2c35cd3d4f218e1c7b0233eff3ca640a04f70475824b0967ec72b
MD5 d8624b68d7feabae853c6b84564c82b1
SHA1 43313d6d09e49674aef9a7762adb76366ddadd3f
SHA512 685fc7e68c889d06643157ba4e4af37339ed31d463d7c656c2c9b10e0977dea92f85e72d264eb72832fc883d116a20b9737a907a2514eaeca86c41d62c9cd306
SSDEEP 192:sxRnR9bj/fFsnUHRlTzoA8p4d/g6+WNIYEeta+GxmIgD1J:sxRnjj/fFsUK8/5IZ7er
TLSH
T1B7329615A928A93B8CCBE21DFB567F53D6F95033A0941E58F6FC8A1C14E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

968c8cbb-df71-4772-ba78-ad47464a20c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\968c8cbb-df71-4772-ba78-ad47464a20c6.tmp
Size 11KB
SHA256 44d7513cd70c1dd011c4c1d63c369bba6983cbba38563e76fc953150eb2aac27
MD5 05be22b4824026aa89c1d69b1b391018
SHA1 90dd28ae89a4229598042e828d715fa448c72539
SHA512 7f58475c9692bd9cb19abada1a220586a04de81593dfb962f2c1ca179624daf9b629e729a80b818ae2b9bd9a754f4ec55c5a565575a30345553b05ab955d1337
SSDEEP 192:sxRnR9bj/fFsnTHRlTzoA8p4d/g6+WNIYEGLa+GxmIgDzJ:sxRnjj/fFsTK8/5Ih7eB
TLSH
T1C8329615AA28A93B8CCBD21DFB557F53D6F95033A0941E58F6FC8A1C14E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 1bf0b8288f7622a6cf2f61e69f9370c175598b80cbe70581e70dd2038c7bbb13
MD5 9c02f7bc868fb352987e79963d265eaf
SHA1 1efd6a9ac6de4125c8b9e55b5f095db8f246f3f1
SHA512 198d7ffcd0db2f966cad8ae49f5bae2d9f38cd3bc62503cdf4e0aec4ed13e5897f8ac295ab745a1c97a913bc1143c9eb6a1ee5498bb2c6d91c8b2648cd9e4f37
TLSH
T13E5180C35518C13ECF78567AAAEBA8873537417952433E3208D6F8FF674AB68D18B014
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0e98d4b36fe7fd2dc1057d569fb55155dc21c0227912d82af26d463c9b86aa1e
MD5 50d0614e56600120c4d21c580c67d6a9
SHA1 6b032a36c80e159c518ed9a140a6e649f33836d5
SHA512 7afa0f2f3509b758ce6f1eecbb44878c6d09e3083d1c93cacd6b5cd5584c8dc6166b817f5d73494078d66782166b9ead9d8ce785952ea5803adccae04721bfe2
TLSH
T178517FC35508C13ECF78567AAAEBA8873533417852437E3208D6F8FF674AB68E18B014
MD5 SHA1 SHA512 TLSH

Submit Download

842497b6-3ea1-4ca2-be30-cf309762a0dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\842497b6-3ea1-4ca2-be30-cf309762a0dc.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1c1cbaf9-58eb-40c1-808a-9d81fe949171.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1c1cbaf9-58eb-40c1-808a-9d81fe949171.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

2fd8fcbd-c5b7-42f5-b5af-85a1b27b28f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2fd8fcbd-c5b7-42f5-b5af-85a1b27b28f0.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

dea43269-c513-4f9d-91a0-dc6a854e6d73.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dea43269-c513-4f9d-91a0-dc6a854e6d73.tmp
Size 3KB
SHA256 8dbcee81ad04f59c94b6eacf7a3f2049d32dee1e3966eed988dacff947c3b0e6
MD5 51687046bf773e928266ec4b2ba0a345
SHA1 6756fff4f365f11d37b8d1eb2e2a25efc45ae80c
SHA512 3186c8a0ee58b3d0cd339bdc5967e6df1309a69404152014d7e6fb8b34d41e3d34987a4fbde4c777c0fbf12a8d7bb91c63c28b3052547cbfe957e069eb6294bf
TLSH
T14681B0F7C3E4867D891156F0AB146E1BCE1D151A423C3C9688F4AE5BA3F2471E1416AF
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c8a9d33c-e4f2-4445-89f9-29ec0575f17f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c8a9d33c-e4f2-4445-89f9-29ec0575f17f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1a48be9-06fa-4074-a61d-30f310994292.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d1a48be9-06fa-4074-a61d-30f310994292.tmp
Size 23KB
SHA256 1bc7c4816aacde1cddc62c579083ab8134fbb9d7e4dbd2ee10ed3f7ac60867f2
MD5 1893029fded8191cc819a81f234befbd
SHA1 adca95ab7b24e74f8db1e1edd06c18fcbdfef4c9
SHA512 4e8f6009cab7a13aeae8ffa351b3172e1c410c9ef4bec4f908f2f91648c9066611a0393616117fad2e688ef54aa8094edeafb621ece5371e160c85d386e32958
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXsroJe6:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0VW
TLSH
T182B2D92B640CCB7F4FC04A9EAC196FD77D9802C79A588D4047FE995C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df9c2da3-fbe0-4ecf-896d-00b8f90180a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\df9c2da3-fbe0-4ecf-896d-00b8f90180a6.tmp
Size 11KB
SHA256 438b0782d29030a52a096e1fe3919e5cd6e34df8b07097b88577f0f1f6fe3cf0
MD5 bf889d047c67e5b8b944d90bcd8cb342
SHA1 0ca2d9c0a84179b02060a899d2dd57f10e016424
SHA512 ea3aef736c538bbdd1a560564d81d7dedca058427c8220ff55033ce9dd97e6cc3b1c65a499565ccfa49ad3c105031b0df6bee1dc1ea6da17d4a15d4ece3c0f70
SSDEEP 192:sxR4R9bj/fFseTHRlTzoA8p4d/g6+WNIYEGLa+GxmIgIJ:sxR4jj/fFs+K8/5Ih7es
TLSH
T1D9329715AA28A93B8CCBD21DFB667F53D6F95033A0941E58F6FC861C14E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d172e6ee-0d03-4a10-8f59-fb56982aaaba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d172e6ee-0d03-4a10-8f59-fb56982aaaba.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 5b5a7294006b782bdee6302fe35b43829ebdbf6812ad93c294f439ede74b18ca
MD5 c4f60113ae31954cda0cacb84c3fe781
SHA1 5d48dcca7454b2af6c894dad96ddb4698158806d
SHA512 058eba5bc5107d55aa03c13095fc7d82d04f5d94dc0097b0ba0fa4d468b3e842dbdc29c8bddf79327083549368b30f89f6535fbab1a370208327457deff532dc
SSDEEP 768:R/UxvxjgC+W310Gc7fZrK3Ap5XSwQs88uBkiTCv/P84g:kZj3+W31+trkeILNBCHg
TLSH
T13A03C039E8945863ACB3D385365B275BAFF06153C4C40BA849EE7A0E02CB75DA707C97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b7065771-6afa-4f38-8dfe-9a6dbc39e935.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b7065771-6afa-4f38-8dfe-9a6dbc39e935.tmp
Size 33KB
SHA256 545cd212147ad413634aed890b192a7a2abc9af75d42fe4a8d89c06c2357e9d7
MD5 d7412995fb27f31bab9d04085550a838
SHA1 4af1ffc1ecfdbcf557eac6efea9c9d592839bb53
SHA512 f16378abd46ce34da5632fd6082969757dde8c7311383eb30241095510725d71ed4222b4c5a73bf87b594f5effe83872537bed7e73c90d588b17942a776d1fbc
SSDEEP 768:FU3Zwzc7fZrK3evp5XSwQs88uBkiT25oaTZcLLh:FU3ZntrkexILNBY92t
TLSH
T11AF2AF39F8959D639DB29381774B3B076EF0A103C8C80B94D9DEA51D02CB3AE6747897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6184ae6-1aa8-4ef7-b729-8968d0388fa6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d6184ae6-1aa8-4ef7-b729-8968d0388fa6.tmp
Size 33KB
SHA256 b8d15e35c2f0fbf4561858d90b7747b20c30ae32071c2630a152c6ff09795880
MD5 bc3dcedc41593254f718c3891cd2fc9c
SHA1 a2e73f963421803f2bbd4d8190b03cb5044ff481
SHA512 6e724d2f0a2de34b15d33b2e2135f5632a453fa182553f3b5f5321df7dfa60d0faf487210d0ffd56f31bf328ee41b8b446ef6c0aa7ceaf84b0e113e401af3c09
SSDEEP 768:rU3Uyzc7fZrK3e9p5XSwQs88uBkiT25oaTZcLLh:rU3U9trkeDILNBY92t
TLSH
T1A2F2AF35F8959D639DB29391774B3B03AEF0A107C8C80A94C9DEA51D02CB36E7747897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

def8bdec-d695-4393-9d7f-7d801ccf19df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\def8bdec-d695-4393-9d7f-7d801ccf19df.tmp
Size 38KB
SHA256 42e580cbdf95f0d75e32e691991730d2c19bc4090ecdc8c820fbf48fc12bec50
MD5 ace4cfc9bc681b74b3b9990a76652517
SHA1 8fc3f38ce89684b061c3a18fc64f84e8774b81de
SHA512 36c05c2027d5c57926dbf0642fa0a5b9e10073aabd7caf0489f63d59f0b3aed13dd132fb3d690c757b6485e9a699cbc7a15485e9ae2d7de84004cc5cf6ec2215
SSDEEP 768:n/UxvxjgC+W3johc7fZrK3eGp5XSwQs88uBkiTz5/P84g:aZj3+W3jVtrke4ILNB/Hg
TLSH
T17003C039EC945863ACF29385365B274BAFF06553C4C40BA449EE7A0E03CB36DA347897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0fdf5daf-ccb6-4518-ae5f-a15120fe9af7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0fdf5daf-ccb6-4518-ae5f-a15120fe9af7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download