bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635

Analysis

max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 00:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
literasi/application/cache/index.html
Size 142B
Sample261102-akemray1cv
SHA256 bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635
MD5 d92311600f6632e0f98c0e5777acf431
SHA1 e799bd5ab234730a641b034fb62d5f7ca0461c50
SHA512 0f6c1d055daf7e1ddc565fd70c9a98f38fc3ee874141494cb2c4f3ed41f43b2d4304167592ae7e41ac95af257b92e2074f5ac82a8f4286624878ed402e1bd09f
TLSH
T1D3C08C66220C2C0C52F233B01AC02260219323C002032B255B8451233A1111DCDC218D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
740	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{DE9F9EDB-F0D1-4E71-82D6-635F4C93FBC7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1604	msedge.exe
1604	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe
1308	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1308 wrote to memory of 4588	1308	msedge.exe	88
PID 1308 wrote to memory of 740	1308	msedge.exe	89
PID 1308 wrote to memory of 4476	1308	msedge.exe	90
PID 1308 wrote to memory of 4476	1308	msedge.exe	90
PID 1308 wrote to memory of 4476	1308	msedge.exe	90
PID 1308 wrote to memory of 464	1308	msedge.exe	91
PID 1308 wrote to memory of 464	1308	msedge.exe	91
PID 1308 wrote to memory of 2300	1308	msedge.exe	93
PID 1308 wrote to memory of 4724	1308	msedge.exe	94
PID 1308 wrote to memory of 2300	1308	msedge.exe	93
PID 1308 wrote to memory of 2300	1308	msedge.exe	93
PID 1308 wrote to memory of 4724	1308	msedge.exe	94
PID 1308 wrote to memory of 4724	1308	msedge.exe	94
PID 1308 wrote to memory of 1192	1308	msedge.exe	95
PID 1308 wrote to memory of 1192	1308	msedge.exe	95
PID 1308 wrote to memory of 1192	1308	msedge.exe	95
PID 1308 wrote to memory of 4496	1308	msedge.exe	96
PID 1308 wrote to memory of 4496	1308	msedge.exe	96
PID 1308 wrote to memory of 4496	1308	msedge.exe	96
PID 1308 wrote to memory of 4256	1308	msedge.exe	99
PID 1308 wrote to memory of 4332	1308	msedge.exe	100
PID 1308 wrote to memory of 4256	1308	msedge.exe	99
PID 1308 wrote to memory of 4332	1308	msedge.exe	100
PID 1308 wrote to memory of 3172	1308	msedge.exe	102
PID 1308 wrote to memory of 936	1308	msedge.exe	111
PID 1308 wrote to memory of 3016	1308	msedge.exe	112
PID 1308 wrote to memory of 2000	1308	msedge.exe	113
PID 1308 wrote to memory of 536	1308	msedge.exe	115
PID 1308 wrote to memory of 536	1308	msedge.exe	115
PID 1308 wrote to memory of 1604	1308	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\literasi\application\cache\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffafa1dc188,0x7ffafa1dc194,0x7ffafa1dc1a0
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,1984174340127206638,3808683245977674682,524288 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,11027738747264482889,7186546200699886597,262144 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,9046448826161396595,16444551062967852389,524288 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,9450936477174640287,10362872025088254393,2097152 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,14829304159189011652,5052360821758658624,2097152 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,15872528455634827502,2261282617011004461,2097152 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,5598322568527757202,7181781807609985990,2097152 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:2
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,1436161732276284326,8207514904688906579,524288 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3444,i,5393127923481749753,11887643718111048839,524288 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,4738690452424650849,16993244284213307934,524288 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,4738690452424650849,16993244284213307934,524288 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,11999786888858444432,3507648631694075475,524288 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:8
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,15743171766446644167,9812988215399594927,524288 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,6758303089200860615,4646242150813381824,524288 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:8
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3996,i,10987430530669651274,11510610168777439338,524288 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,4667355692254002511,296993742016055472,262144 --field-trial-handle=2280,i,2023792228302123450,15943154266383175238,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1604

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1df9d02a-8bdc-4bdd-affb-5c474fb11231.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1df9d02a-8bdc-4bdd-affb-5c474fb11231.tmp
Size 18KB
SHA256 2a1928939714a14e6311add175d1d7d72eb21e6a73568b22a991f4651465f025
MD5 dcb2774ad5f80cb121eca1fd82fb58d8
SHA1 a44dfd78f2c83795afa7d29b24a2950292c23f4c
SHA512 aaf63014e012969ada9985e463a8f77859d1d1d25f120ea99ea16b32407955e0380901dd7987eb24aa370cc2cf6cddffc8004fecd1deccfe392513303b5899db
SSDEEP 384:wQkUSv0sN5FXzubZF9h//oT5VekIIH7vBEbQIIlW:Y0Dj/AT/RIIH75EMLo
TLSH
T185828D71A8A9AD7B49A3E610F1473A13DFB4C077D7D41F90D5DEAB1C01CA298234BE22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

60b8e714-b639-49db-b1e1-8d64eab90af5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\60b8e714-b639-49db-b1e1-8d64eab90af5.tmp
Size 18KB
SHA256 994e41895e4eef0172512a7e45ef36689e26da14d78f926c3d8b9fb1448a1dda
MD5 c2dc99150242db3f31278925eb9a8352
SHA1 4898a221d018019117197bd477e78940df2ef3d0
SHA512 f390c9ffc801008a22f63dbed08b22346b3b071835713929333067026b95412a6f1bb64874940eeab81e26c676eb9528bcf69913baf8ab5a6ccefc20565db947
SSDEEP 384:ZQkUSv0sN58XzubZF9h//oT5VekIIH7vBEbQIIlW:70oj/AT/RIIH75EMLo
TLSH
T191828D75A8A9AD7B49A3A610F0473A13DFB4C077D7D41F90D5DEAB1C01CA298234BE22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

621f277e-7375-4519-b225-1e102973f727.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\621f277e-7375-4519-b225-1e102973f727.tmp
Size 21KB
SHA256 bb2924d7b1abdcdf3d2ddb558f7c0bd25531ae9fae20d2f03d81099dd243aa0f
MD5 7712666761ca65d6f62a7eda4ca8d292
SHA1 c7c9091d2b1bb229e12155ce8c0a53a99a9c9aa5
SHA512 ceba75cd7c5e97680ec9126eaf0cbb91099b9226cb016959957638ffd528f6382162628bbb13126bd6719f7f65dbc1e68b8615ca540245c5e3841b9bea91fe90
SSDEEP 384:giFzQkUSvgzsNb8TUNTUlIlFXzubZF9h//oT5Ve+IIH7vBEbQIIlW:7Fd82wgij/AT/dIIH75EMLo
TLSH
T12BA26D729898DD7B9EB39B50F14A3613DFB08077CAD59B90E6CD9A1C01D61DC234BD21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44a2df1f-efb7-4f8e-bb96-3341819c1cb3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\44a2df1f-efb7-4f8e-bb96-3341819c1cb3.tmp
Size 105KB
SHA256 baa37fb90b22728e8621cb1e0cd8370d14339295fb597cb899c58908f1d9ea43
MD5 3cf096da5ebbeb243b3cc63b1ce61c42
SHA1 ca076b08c459cee4e3c214a706dff7f9e182cb83
SHA512 9947e993a1b05c95053c60c8e5a9c544169c0476f5ca113971ea72db5ce4a94442075b08a2a9e36d34e5f00f8b4a8b4233e22fa2a713e941c9d3b5cc8e620092
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7K:fwUQC5VwBIiElEd2K57P7K
TLSH
T12EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

2fa27668-1f27-4a2e-8a17-31afa7e89ea8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2fa27668-1f27-4a2e-8a17-31afa7e89ea8.tmp
Size 10KB
SHA256 e77d44fbab5d1ab8ae500fb343c33f28b2ab12b16bddf57c0b951848d6642c08
MD5 dcc3420581622c0b9c69801f5c38bf47
SHA1 829135de18c2d74d446c0d29dd73c4cf890c5d4b
SHA512 0154567f9d1916bc8c3963d77debc41b09628a0763365c42115e5d40053b0982c84a8fa405e8e7a1a0d74fe62c163e49f078e74b16ffe60092671712f100f8c0
SSDEEP 192:sxZERyWX/ftsKVIdpHVHW6+WNGY36+27MIg5HJ:sxZE/X/ftsKm1HbGXQn
TLSH
T19322C7566E74697B8CC7E21DBA15BF13E2FA503261D01E48BAFC8A1C05E67CD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

432da869-a229-45a0-b1ac-7dcd6eaddeab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\432da869-a229-45a0-b1ac-7dcd6eaddeab.tmp
Size 9KB
SHA256 2e10d9b04863005a47e1044048a4b930aff180cda1d09a07107564611a36eb46
MD5 a1bdf94f59b9bb79d96cd99db953ee21
SHA1 80f028774c51cf48fdfc53ca5bd60153140ea3d6
SHA512 2a16f3bb04b9b82357574d4ca345282aeb2b81ee7721b0b03c7c1d79153cd3725232e2e2c3e3787a9aa1e5aea70dc007c5dcc9405d673e833d2877027eb79fcf
SSDEEP 192:sxZERyWX/ftssVIdpdVHW6+WNGY36Wd8MIgrJ:sxZE/X/ftssmvHbGXM9
TLSH
T12922C8556E34A97B8CCBD21DBA25BF13D6FA503261D41E48FAFC961C05E66CD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

55a5324a-eae7-492e-9cfd-137d106742ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\55a5324a-eae7-492e-9cfd-137d106742ac.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 72cde3dcaec9f161aa7ff033c1106a60eb964e7045a37992fc9748cfeca54ad9
MD5 10e1eb5815f2c397e56af9e9c9765806
SHA1 41010ee0f36c92c0ab0f5ef3e738a6945e8c5c39
SHA512 dddb9ad506d90a9b9d27cdc0deb7cc4fd7fc0be90d53d2f0fb5e26c8a06d69626fdc4233c779a9cf0ee2472304db9587f8327be2459dd05b06e56812dade6090
TLSH
T1E4614075F45888E9F7E8A47096D61DBBB2347A744E8B5F5270E4FA78018AB8E4C02047
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bc338def14ec758b7546d963ad6f3bab7c71d9e67470d416ab94a5c35b0a9d4a
MD5 752ba5e93ed2b0c9d900c95d96e1762e
SHA1 0d473626431ef89942b3cfdd243dc975001e447f
SHA512 5e0d27a445d7f614fff6b9535d190d18f0de5425b6b18214f1e4a57cd77a929e3d57fd73a4106fc4cfd608fc857209f5a9a49e6ead0c7b96bd8a07c82633d6d9
TLSH
T1A7615075F89888F9F7E8A87096D61DBBB1347A744D8B5F5270E4FB78018AB8E4C02057
MD5 SHA1 SHA512 TLSH

Submit Download

ce48706c-d73e-4aee-a967-946ef8fb7f47.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ce48706c-d73e-4aee-a967-946ef8fb7f47.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0fa820a0-f806-4962-a008-d073451167fe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0fa820a0-f806-4962-a008-d073451167fe.tmp
Size 949B
SHA256 71ee64f5a3bebb3512999a1008b64ffe2f814ee87c22e69319cd015743cd50f7
MD5 94a5748d7531679b8f2d04e93a5bd906
SHA1 7b5acce3779cfe27b08bd7924b786974a53b86e2
SHA512 f4b480a751773cd41045a48fc0d39cdd42f40f6f5133a12688f30f5898e12c47ad5de0cde8afb97dc8b0e6613326f4d9f672db9ba586be2f6d06f83a9c703eb0
TLSH
T160113DF3C3E595AEC94157F05A28AE2BCE2D0A05431C7C1589D8EF2797E3475E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

8b8c2431-4588-480d-b6df-2939144d52af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8b8c2431-4588-480d-b6df-2939144d52af.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

bf6b06af-9ca8-4820-a20b-5bab1204d9bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bf6b06af-9ca8-4820-a20b-5bab1204d9bc.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 00fba4f6cc5368aae80279fe354962c32d3bf207936751a1a1d1b0a6df480e56
MD5 94ec42ffc103ef429672928caa7d5c30
SHA1 bd34da35913a5f464e08b1c4989fa863d1555ddd
SHA512 2e0bd333717ca21bc0c666db74da71aaf1f16b32cd0a790df1c125fb2737d70add75bbfd0dbd095a166e9cb40e03791ece2994bcb02cb0703655f03fdd6e5d3a
SSDEEP 48:K0tMBdvbfAbzGTISVAK9V13AxFQYWXNNyLmBcAeEE9bI/wISY9K981+9xWtYXo0B:KcmEKbKWu9yKmIBwgKNm6Y
TLSH
T121917450307B16013A7D288C52BAB66A164171F33014F5ABBBBC94B2DE2EE041DFF9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a178392b-a617-4be3-9e91-85c641ced85d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a178392b-a617-4be3-9e91-85c641ced85d.tmp
Size 27KB
SHA256 fc31ff3e787eac265e5267da4ec697f9f97f5a1d398c079d41e4eb47068742a2
MD5 4f02d0601778b0de5bebf8cdfa6687dd
SHA1 c890eec7d5744ad44144758a19741bea8fee126d
SHA512 9fd4b35026880b6284e4364f8e090a4cf8e5325dc89ed0454f5dfa6e5d7ff830e412f61b5000284a7e65ca7af266329d978011570a52df8137952029443abf93
SSDEEP 768:LpVKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/kCroTud:LpVKlm7QWvUYe0u1ja8/L/E/kZyd
TLSH
T11AC20B3B640CCB7E4FC05E9DDC5A6F976EA802C7A6588D4047FA984C02C77EA91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd8b0251-52c1-4ee7-b0f4-b1f7c68dcc84.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bd8b0251-52c1-4ee7-b0f4-b1f7c68dcc84.tmp
Size 10KB
SHA256 69b8f37f46405c91433c48b2c0f004da75c02124263cd6fbfd1df5fa0a63c06d
MD5 3c32386b0063bcdb58b906e482c997f6
SHA1 cc130eeae61e589349edfdf56a3b19d5217097b1
SHA512 824cb08a85838e41ed5d95bafbd918b7dd5c849499144d6379842609b38c413a83b6425df40950327ea1fbe188ffcbb4d65cad1874099ed24bfca7b9e05af9f7
SSDEEP 192:sxZERyWX/ftsdVIdpdVHW6+WNGY36Wd8MIg5tJ:sxZE/X/ftsdmvHbGXMB
TLSH
T15622C7156E74A97B8CCBD219BA25BF53D6FA503261D01E48FAFC961C05E67CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e4cd57d3-c14a-403f-9935-e39bc9f43371.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e4cd57d3-c14a-403f-9935-e39bc9f43371.tmp
Size 10KB
SHA256 99bbdc474503890d86b46cbe9888fd5b65f42ca3b9e56af8e64f62107fa0e337
MD5 6dbb300e720c981999042f7436d6197d
SHA1 9d1dc293f69ddcb829deebd5f45b5d187212e754
SHA512 0403827f32649125be01ee5a1e19abc615265ce1c6db4f8ebde4521964c372b5ff7feb685e391b0a75351dcd2c92035fd8d290a9fd97dee066c07c2ad0fcf25b
SSDEEP 192:sxZERyWX/ftsKVIdpdVHW6+WNGY36Nl8MIg5HJ:sxZE/X/ftsKmvHbGXln
TLSH
T12E22C7556E74697B8CCBE219BA15BF13E6FA503260D01E48FAFC8A1C05E67CD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

ae03910e-85fd-42fd-afaa-1380eb6055d0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ae03910e-85fd-42fd-afaa-1380eb6055d0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b3501966-3958-483c-bb35-1ea3b476734d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b3501966-3958-483c-bb35-1ea3b476734d.tmp
Size 8KB
SHA256 9b4577ea42063eb24d42816bb96b102fbba501a18683a4fc06b1c7cc0df88129
MD5 b73af3679426985c6aaba55b0d752383
SHA1 77a9a7ec9407edec6cbb9cd244b6a6081cf103b1
SHA512 189d1be5e9ffcdb10aa0ba8efc27e0266a598f6a702a487da38318a8128043da17ea847686fd5bff00021c0c10ec1907032950e845f7df5ae8a2e61355964a25
SSDEEP 96:KqONkFQsjpfbUmjH5ih/cIPURHl8h4otop53aDABKP4v+Y1xf//ojd2xyY5qsoTU:BONh6JUm0QmiUyskso//oTpBCIglU6
TLSH
T15102D839BC74ACBB9EE3AE45B0877B239FA4107B96915F84DAD86E1C01D715C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d441cb35-4b9c-4970-af99-0b66d4098854.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d441cb35-4b9c-4970-af99-0b66d4098854.tmp
Size 8KB
SHA256 285ce7f7b099fd435aab1b0c70673f829db22c72c848ee4857427ca77d835ad5
MD5 a10ba5d951224637cfa486579fa4fad2
SHA1 8a76d1e1faee90a5499910daccb87ebee30715a8
SHA512 7f1902038ad4959999d47c7569df5dadd46d209be82da565de781dc325c69c39a04ccca91f93014dfb48f3fdca5113a3f6f9d3c16bfe932029a62b1c1ab5e65d
SSDEEP 192:cONU6JUFQmiUyKTkfo//oT5VeqwNxIdqlU6:cONU6+jwfo//oT5VexIIU6
TLSH
T1DF120935A8B8EC7B5D939590F08336138FB48077EB856F90D5DD2A1C06DB19C5307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a461536-7bd5-484b-b1a5-3e5404e06c6d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9a461536-7bd5-484b-b1a5-3e5404e06c6d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 90f2d83620bfa6b3518a186d376c035bf8131cc3305a310e06bf38dc28d630ba
MD5 37b62216048e7fcad468136502a34db0
SHA1 3fcbdf78f531e5a3347af7b4eca4beb79e560084
SHA512 f8e8ebfe9cc983342401f86cfce183cc4083132347a037fdfad936ab89b895b194d02781d68c1aaeac5cdcbb0972c459277963b59c8cdbdded6fd5dccb553f06
TLSH
T102415F5DAAFD1148B3B76F5A9BF2A46D487EBD372B07D49D00110E4E4763A40C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download