74f76f8665ad2f3ffc1370c19db2ac19d2ccdcc6e828d60d7b6eab18b58137c5

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 00:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 3KB
Sample261102-agsefadg36
SHA256 74f76f8665ad2f3ffc1370c19db2ac19d2ccdcc6e828d60d7b6eab18b58137c5
MD5 d1caf85197a4ba7388f0e8d212a8a38d
SHA1 49460bb3ec6f90b3d61ccbf406f8a15570812850
SHA512 e01b5bdda25593f5fcc5eea53d6a8b68142c92447d71cc7e822be3a5192ea2d51440441643c13105b771476b9effc1af1141501b7b62a816242f93d9d2a0c259
TLSH
T17571535782D0592E0BA0F1EDC4103BEDCA9B9AF842E4289D7C9A0D9FDD453310D222EB
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3312	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{4740C981-F453-46AB-AFB3-D41543DF92F9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2860	msedge.exe
2860	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4484 wrote to memory of 5276	4484	msedge.exe	89
PID 4484 wrote to memory of 2664	4484	msedge.exe	91
PID 4484 wrote to memory of 3312	4484	msedge.exe	92
PID 4484 wrote to memory of 2664	4484	msedge.exe	91
PID 4484 wrote to memory of 2664	4484	msedge.exe	91
PID 4484 wrote to memory of 4140	4484	msedge.exe	93
PID 4484 wrote to memory of 4140	4484	msedge.exe	93
PID 4484 wrote to memory of 1984	4484	msedge.exe	94
PID 4484 wrote to memory of 300	4484	msedge.exe	95
PID 4484 wrote to memory of 1984	4484	msedge.exe	94
PID 4484 wrote to memory of 1984	4484	msedge.exe	94
PID 4484 wrote to memory of 300	4484	msedge.exe	95
PID 4484 wrote to memory of 300	4484	msedge.exe	95
PID 4484 wrote to memory of 4216	4484	msedge.exe	96
PID 4484 wrote to memory of 4216	4484	msedge.exe	96
PID 4484 wrote to memory of 4216	4484	msedge.exe	96
PID 4484 wrote to memory of 1012	4484	msedge.exe	97
PID 4484 wrote to memory of 1012	4484	msedge.exe	97
PID 4484 wrote to memory of 1012	4484	msedge.exe	97
PID 4484 wrote to memory of 5796	4484	msedge.exe	99
PID 4484 wrote to memory of 3780	4484	msedge.exe	100
PID 4484 wrote to memory of 5796	4484	msedge.exe	99
PID 4484 wrote to memory of 3780	4484	msedge.exe	100
PID 4484 wrote to memory of 4508	4484	msedge.exe	102
PID 4484 wrote to memory of 5936	4484	msedge.exe	106
PID 4484 wrote to memory of 2100	4484	msedge.exe	107
PID 4484 wrote to memory of 5668	4484	msedge.exe	108
PID 4484 wrote to memory of 5064	4484	msedge.exe	109
PID 4484 wrote to memory of 5064	4484	msedge.exe	109
PID 4484 wrote to memory of 2860	4484	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x27c,0x7ff8a445c188,0x7ff8a445c194,0x7ff8a445c1a0
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,2687772167768649724,5082781193855787657,262144 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:2
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,12743775018052532145,11864717892088668745,524288 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,15707045626288724784,15058483081132470714,524288 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:13
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3556,i,13819291164966308369,13782200203135238093,2097152 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,5495300035023044822,8841111493105783694,2097152 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,6206479057160560345,15477209580334015344,2097152 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,11355081994727717013,10520552568422511761,2097152 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:9
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,13391427689784547543,14892984992485285580,524288 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,9910536533309607003,6012528540794866803,524288 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,5851046226357818081,15379711552056052331,524288 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,5851046226357818081,15379711552056052331,524288 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,16605744376559678558,5438835119534483334,524288 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:14
  2⤵
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,1077646380238670730,15456614144895866288,524288 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:14
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,4500197222320137084,940218923820167743,524288 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:14
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,7715129664715397068,12941830032614610226,524288 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:14
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2144,i,408018980752135722,12472029767844723063,262144 --field-trial-handle=2672,i,8790336492454280388,11834809284567530421,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2860

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3900

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4640

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

049cb014-388e-4f7d-9e21-67260fb6bb1b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\049cb014-388e-4f7d-9e21-67260fb6bb1b.tmp
Size 39KB
SHA256 ae253613340e2d62bfdb968865cae59639322bd2e1ef540ddbb9f829baf6d569
MD5 9047a0c6c2b33771fb7df7f86ceffc66
SHA1 ddf9fb6f1ae232906571aa70f4c3825dbe0cdb3f
SHA512 9883a19a8c11f1d71a70989745b0445db8ca4135053738c2b137e31c72c568850f32b5cb55f14ccf1a75cca5b2a8ba92f423621dd86e173cf85be769672c8fe1
SSDEEP 768:K/UxvxjgC+B3swsgm1oWnFDmGA5b65Q92RQMPqCFj0O:PZj3+B3SPAF65dQyFQO
TLSH
T19803C032ECA0EDB39DF95580368BB39AAFB84573C1C955E008E96E1D06C76CD430B95B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

18937a64-768e-4b34-9dc4-4cf55f8b1867.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\18937a64-768e-4b34-9dc4-4cf55f8b1867.tmp
Size 35KB
SHA256 f2b84af5df9d0dfcb13340403e4e5f9c0213bb94109349ba6b728de7916cec4a
MD5 0f012d72488ca72b36fa7d7dfea3a0a8
SHA1 26e1d6ec605bf8e61329c1023045b0f7c6d46480
SHA512 d3a0cb3ab93bd983ea6315d5971da0928ab21456b053813bad731ee85cdf2c0ad4d4c33875cc26512db53a939655e05c47346d9cd18b7cd86432f099bff0aea0
SSDEEP 768:iE3uCWgm1oWnuDmGA5b65Q92RQMPbCZ75ENLx:iE3uvGAF65dQFdy9
TLSH
T14FF2BF71ECA1EEB35DB5929072477696BFB88223D5C942C098D96E0C01C7ACE134BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48340b12-f4df-47c3-829d-3cea7e77e3c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\48340b12-f4df-47c3-829d-3cea7e77e3c6.tmp
Size 35KB
SHA256 f2bb021ab88480bdfb931f2f9cd7ba06473752566e5d7f956f291eccd4906d23
MD5 e67f1d7e6827c87242cc19d767b7ff9d
SHA1 c5307f2b7917b5c1fcd97464dd12ed27066b2dba
SHA512 b1155e9d2bbbe6ba704c02d6143ec71a354b60aa5a2da03e386d1943d93986c2c001af049049a452710406b5e1f815767e23598f0b904a5035a4aa3e36837edf
SSDEEP 768:FE3LCWgm1oWnuDmGA5b65Q92RQMPbCZ75ENLx:FE3LvGAF65dQFdy9
TLSH
T154F2CF71ECA1EEB35DB5929062477696BFB8C223D5C942C098D96E0C05C7ACE134BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4e5d5c5d-bc30-423b-9357-6f1cbd7fe84a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4e5d5c5d-bc30-423b-9357-6f1cbd7fe84a.tmp
Size 40KB
SHA256 87e07f2216dbe7f1e484abdc2cf4fd2f3ee3845dd9a2c24b9a2dce1dc88e4eec
MD5 c86bea93b9f8511bc95fb914a2de84fd
SHA1 4473f6619d819d29280037526c3ac6bfc7fd11b3
SHA512 b7e1c95c23d097fbfdff69b5e39668aed3be53b9bce2fed12949bccf4cc85eda91b39f9262eb8e9286fd796531c3f4cbd9767ecac725ca682f9d2169f12553a8
SSDEEP 768:o/UxvxjgC+w3LqWgm1oWnRDmGA5b65Q92RQMPbCicH:1Zj3+w3LnDAF65dQFDH
TLSH
T19003C032ACA1EDB3ACB991903647B35ABFB88533D0C9559448E96F0D06C76DD430BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6fe09cca-9cb8-4ffe-ac91-efefc4d6cbfd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6fe09cca-9cb8-4ffe-ac91-efefc4d6cbfd.tmp
Size 39KB
SHA256 7da5d653c6953f29a0b4157470a938b6c2221708509a8381676576b51116d3a1
MD5 d5eac1ffd3ba99635b7a2563f1b97dd3
SHA1 6062c5b93adb1f6def40fe0d5d3107350d610b64
SHA512 95a855463429fd619a6b30f9b11499d1419772e53b927b9c5add45f76e6efff085ebca261ae293cacd983e838d62081ba47ec5c0c16016cee596cc4344140f58
SSDEEP 768:U/UxvxjgC+B3vB7agm1oztDmGA5b65Q92RQMPbIFj0O:BZj3+B3pF3AF65dQDFQO
TLSH
T19103CF36EC90AEB3DCF95280378BA35AAFF88573D1C555E049E96E0D06C768C530B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7c1db86b-9842-4420-a91c-00d2c9c1f328.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7c1db86b-9842-4420-a91c-00d2c9c1f328.tmp
Size 37KB
SHA256 0425883128fb9778d3c36c417af95c3ec79fa1a9438caf96d46a5c57f9f6808f
MD5 225c9fe7101dcccd7bfb27bb571c8894
SHA1 6eee2a641cdbae41774959c68456663335ee7b7a
SHA512 46cf2eaeaac7d737cc3f4c98131f29999649a709c2b5aeb68945ef271f02c6554cb67b18b647883f2740ab1bf9ce0b4ef6a067521cc1cb41b3462171fedf2eed
SSDEEP 768:2FdI3+wgPCWgm1oWrDmGA5b65Q92RQMPbCZ75ENLx:GI3EVAF65dQFdy9
TLSH
T1D903BF32DCD0DEB7ADB95B80B64A7256BFB48173C4C991D0E5C9AE0C01879CD134BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

50f4858c-fe38-4a57-bbeb-0f5a789ad616.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\50f4858c-fe38-4a57-bbeb-0f5a789ad616.tmp
Size 11KB
SHA256 c9882b8ba1ec3acf7d19b0d85f25c72897ec54608d5cb741d7f89b2a46b1bca5
MD5 cf834cc6f091f34320b1e315d50bdbf7
SHA1 f135fee036d0f53563d3b2d32f482cbc89f5efb1
SHA512 90c7aa207f598511eddbdef015634e58c8e30887bdc57f1027b1805c215e8dfa736b156fde074b7dde889362029bcc072930fe4817fb25fec4f3326f82fdb8e5
SSDEEP 192:sxR/R4bq/fsysTDyYh/zoA8p4U/g6+WNIY2FSc1GyIgIJ:sxR/Yq/fsysTDbWd/5IfRs
TLSH
T10032B715AD68A93B9CCBD21DBB657F53D7F95033A0902E48A6FC861C04E7BDD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

61f9c63c-e13d-4867-b293-e9d63112ae98.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\61f9c63c-e13d-4867-b293-e9d63112ae98.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6eb086ea-8f0e-402b-9edb-cf930abade9b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6eb086ea-8f0e-402b-9edb-cf930abade9b.tmp
Size 23KB
SHA256 57c02a1a8af9b29807d7b286ae0045688b772eb2fcbf20a53164595cba4fdfa3
MD5 3b18b62df8315cd1b334581c6b339c30
SHA1 ef887a562a83a4e24925818c21cd2ca5dbdb5a7f
SHA512 3346cd40757b8108dee0e71d462eb3148f0746cf30b1bc2cf3277a50779d9b66d392d7d679b18b0a6c882b65ead72cf12ea3d3c8c26ef2cd317ad2f5bf9b3671
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWUroHrZ:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0VT
TLSH
T1F1B2EA2F644CCB7E8FD00A9DAC596F977D9802C796588D4047FE984C02C77EA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8bfc2b02-167a-4a80-b1f8-91cea43ef47c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8bfc2b02-167a-4a80-b1f8-91cea43ef47c.tmp
Size 11KB
SHA256 164be345e7396e28a7f17e28f425dc9bc9d2eb95ef124b83d322602dacb6211e
MD5 aa9b1de4716e6f1bfecbaa95755ead36
SHA1 b25c31ae77fdac219c99dc48425b27ba37ca3b4d
SHA512 7b4e28321fb6cf3bcf54ad602d91956a6ba0d05b084efe2f4fd8c10a880ba660d9e3279a285a99350399bc107914521dd364c04f9cd5483b6cffaea5e5c7638c
SSDEEP 192:sxRgR4bq/fsysisyYh/zoA8p4U/g6+WNIY2T4c1GyIgD7J:sxRgYq/fsysisbWd/5IXRZ
TLSH
T13632C815AD68A93B5CC7D21DBB657F13D3F95033A0912E48A6FC861C04E77DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9489e04b-6d10-4ac4-bab2-0a575fc30ced.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9489e04b-6d10-4ac4-bab2-0a575fc30ced.tmp
Size 11KB
SHA256 9bc44df6db64aecc0a0ac414cb2d4abd9fa996ee5cfbdb7f55142025407ec70e
MD5 6cc38e43633de6d59af14cbec575d39d
SHA1 e57dba4780596f6c3869c6833d80c0eadd3bcf2d
SHA512 33b36120821879d79163ffceced68fbd432f343932d41a51b0349b7591586b87e1ed824c413e1fff7b30b274b124b776d0e3fb2d9f262f82c34f549d21f01089
SSDEEP 192:sxRgR4bq/fsysiDyYh/zoA8p4U/g6+WNIY2FSc1GyIgD1J:sxRgYq/fsysiDbWd/5IfRr
TLSH
T12E32B815AD68A93B5CCBD21DBB657F53D7F95033A0902E48A6FC861C04E7BDD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 c19faf2e0dc662646861a51b0871e690ed190a4ac58f7a3cf0bf720885b76733
MD5 0b2b9d24e0fc3592cd7c2d2d9b7e1516
SHA1 994c70f054226c98023e8f00bb00592ba517c818
SHA512 3946edfb85428d92c30a1911c350e61ed57b97041d1e5ef4f228d61dd044d60d1acbbddcf53372e4ab65ba0d94b6d261b6cc86770f062b0222060838ba0cdb04
TLSH
T11561854095E050E7E7AC447469DB3E8B3B7A4AFA7DB75D0AAC90C4B41B4E3F4E198124
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 78d2be47f00800aa34fc18226d25f60d4d26fa023d8b6a7205bdfeb8800fab64
MD5 eaae7c13a26f0ccd5a75850b26969ed1
SHA1 6b36695a696b2899dcb8104ada1afe5d34acf1e3
SHA512 05e0da4887334fb59cfffbb86300e7489eb7ea9681824394c7f11563041cb7f909be472cbc7df4bc36e42df237d9e2270da971d2f7f9ab9c4eb9736eda65dfe1
TLSH
T1F961954096E010E7E76C447469DB3E8B3B3A4AFA7DB75D0AAC90C4B41B0E3F4E098124
MD5 SHA1 SHA512 TLSH

Submit Download

d1f90cd4-904f-46e0-bd39-cf4ff6c97457.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d1f90cd4-904f-46e0-bd39-cf4ff6c97457.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

692e1efd-c9b4-499f-9c82-71b1f27f5ed0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\692e1efd-c9b4-499f-9c82-71b1f27f5ed0.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

9ffec76d-2b85-4e1d-8b52-e31a4d2cbf20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9ffec76d-2b85-4e1d-8b52-e31a4d2cbf20.tmp
Size 1KB
SHA256 bdd7ac63083d4fe4354d0692cfd19013d2640d84447ddf94e27faf87617ee090
MD5 baa3d034c6e6282ec034a895ba3ccf62
SHA1 e1a82de594e081deb72d6586d651215add7c7383
SHA512 a22354acac3e2ec75663a633efe851fd0f6e30232b791819dc6358baa37003b78a97c2949ff9238b7f266b8e9ef5d38fa7692897bb7a259f0393ce12f8b0d79d
TLSH
T1BA31E4F383B4857E9E0186F0AA04AE1FCE1C0515431C786685D4AE2793F3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

f5268fc2-d56e-4947-ad9b-086803712d10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f5268fc2-d56e-4947-ad9b-086803712d10.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

02ede5cc-50d0-4ba6-98ea-bd033b1b9140.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\02ede5cc-50d0-4ba6-98ea-bd033b1b9140.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download