1befbc6ca1eb041d0182aec8f353b59a0b85b05a370f05605e02417ee123beeb

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 06:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1befbc6ca1eb041d0182aec8f353b59a0b85b05a370f05605e02417ee123beeb.html
Size 85KB
Sample261102-grsxaafs2y
SHA256 1befbc6ca1eb041d0182aec8f353b59a0b85b05a370f05605e02417ee123beeb
MD5 25976db69a6681a2cd77b4bc548849f2
SHA1 6089a01e9b4e949da20905e4ccda002b11403e4d
SHA512 9a9c3c03ad2b151336e8239d51708e366111a67b7190bc55ea47d588875e8822d4aaab16f6c3fcc8255c92755ee4d09260482c386f81bde6307a8c96928dc0d9
SSDEEP 1536:dgs4AfQ5hqOHUU0/69/RmJaFU/zHc6GjD0QqQJ3/ulF:t20/6955RjXw
TLSH
T15F83F9B9F1A170335A13F970412F400FB97B646BE44C0DA8F294D8E1AEF588A8577B6D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5692	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{9CB9D40E-38F8-4019-B0E9-DA6213EBE6E8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2360	msedge.exe
2360	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe
5868	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5868 wrote to memory of 4820	5868	msedge.exe	88
PID 5868 wrote to memory of 5692	5868	msedge.exe	90
PID 5868 wrote to memory of 5476	5868	msedge.exe	91
PID 5868 wrote to memory of 5476	5868	msedge.exe	91
PID 5868 wrote to memory of 5476	5868	msedge.exe	91
PID 5868 wrote to memory of 4984	5868	msedge.exe	93
PID 5868 wrote to memory of 4984	5868	msedge.exe	93
PID 5868 wrote to memory of 4984	5868	msedge.exe	93
PID 5868 wrote to memory of 3788	5868	msedge.exe	94
PID 5868 wrote to memory of 3788	5868	msedge.exe	94
PID 5868 wrote to memory of 3788	5868	msedge.exe	94
PID 5868 wrote to memory of 2532	5868	msedge.exe	92
PID 5868 wrote to memory of 2532	5868	msedge.exe	92
PID 5868 wrote to memory of 2184	5868	msedge.exe	95
PID 5868 wrote to memory of 1064	5868	msedge.exe	96
PID 5868 wrote to memory of 2184	5868	msedge.exe	95
PID 5868 wrote to memory of 2184	5868	msedge.exe	95
PID 5868 wrote to memory of 1064	5868	msedge.exe	96
PID 5868 wrote to memory of 1064	5868	msedge.exe	96
PID 5868 wrote to memory of 4132	5868	msedge.exe	98
PID 5868 wrote to memory of 4132	5868	msedge.exe	98
PID 5868 wrote to memory of 6096	5868	msedge.exe	99
PID 5868 wrote to memory of 6096	5868	msedge.exe	99
PID 5868 wrote to memory of 936	5868	msedge.exe	101
PID 5868 wrote to memory of 4412	5868	msedge.exe	105
PID 5868 wrote to memory of 3408	5868	msedge.exe	106
PID 5868 wrote to memory of 248	5868	msedge.exe	107
PID 5868 wrote to memory of 6120	5868	msedge.exe	108
PID 5868 wrote to memory of 6120	5868	msedge.exe	108
PID 5868 wrote to memory of 2360	5868	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\1befbc6ca1eb041d0182aec8f353b59a0b85b05a370f05605e02417ee123beeb.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7fff2e35c188,0x7fff2e35c194,0x7fff2e35c1a0
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,7542315465917898909,4847863906927828790,524288 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,4780986209175252852,1774825221739271776,262144 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,10102478809081309240,3155605217817781944,524288 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=3152 /prefetch:13
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3500,i,18047917700264046956,986269691106585335,2097152 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3528,i,3376382219530270558,4425353679430408255,2097152 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,15524549791221480311,4001669145411013520,2097152 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,15701370569571122993,8504591560614012335,2097152 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:9
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,1287320002316809937,14010198806942847076,524288 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,2604857216192000358,17130700565067459708,524288 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,785202815621281561,4523618368893085175,524288 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,785202815621281561,4523618368893085175,524288 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,1966605487234337492,163072498814708890,524288 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:14
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,14463099072919063993,8214454814008348735,524288 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:14
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3480,i,788050605245500363,11071130250958233541,524288 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:14
  2⤵
  PID:248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2812,i,15869032551447451569,7163657584805060824,524288 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:14
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3688,i,523956835025387702,222999858633838723,262144 --field-trial-handle=2312,i,9933060521352698264,8135716099778441753,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2360

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4460

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7c76d193-54af-467b-8b7a-2eaa8ccf44a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7c76d193-54af-467b-8b7a-2eaa8ccf44a3.tmp
Size 33KB
SHA256 d90687dcc27cb3de4ba0ff4d339bd7ea5004498ac201cfed5d0cca4267ec78d5
MD5 73273a31cf8cb983bca0dcf71213ee47
SHA1 c921b38a27cd35b528cae83d3ed40ab29bbbec18
SHA512 660148d87cc0bcb8770bb5e233b3509ba171619dbba62ecda3d54ec05aafea7c0fd0c6014f9d98b381e2482ec7a08b9612bdd38625b0fc6be6a3b117313a0949
SSDEEP 768:RC3266ybNbwbPOeRFZD1fTos7RjpE75EHPLp:RC3274Y1fT/RdkQ9
TLSH
T1FDF2AF36F8A09D774DF6D251B20A3A47BFB09553CEDD058489CC6E1E04CBB9E234782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

6ac0506f-f21f-44b6-9b33-e68b6ed46b87.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6ac0506f-f21f-44b6-9b33-e68b6ed46b87.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

7831ddf7-097f-4f61-99dd-0e9b2f2a5da5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7831ddf7-097f-4f61-99dd-0e9b2f2a5da5.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90b765d3-bffb-45f6-bd1f-fe9e8d642157.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\90b765d3-bffb-45f6-bd1f-fe9e8d642157.tmp
Size 11KB
SHA256 81c028bf8ade0f2a903dcc0ce5dc68298f38cb842f5226f77a8e71a5d63865d2
MD5 b3c251396a7c8b849db776e2c3f4a2bf
SHA1 bd54466b6c486ff915892cea6d35afc7568672de
SHA512 61e91c8248f9fcbf15f7febc9fdf5f6433a355ba4ec5b68809918494aada7e34f05fcbd4bfa0f779a71f850ca0848f67eff65883bd025b8ed44fcafe59e751cc
SSDEEP 192:sxRkRJbd/f2sOK7xnazoA8p4j/g6+WNIYDoA3GmIgIJ:sxRkXd/f2sO652/5I4s
TLSH
T12632C815AD28A93B8CD7E219FB55BF13D7F91032A0915E48FAFC861C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

93cbaa54-3375-46b5-ab08-bd71b4daf2de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\93cbaa54-3375-46b5-ab08-bd71b4daf2de.tmp
Size 23KB
SHA256 f6294a341ace1eeb6b9dca9141b09e11aaf3aa9538a409957eeac82e917f106c
MD5 c34209e5dcda074aec4395354a233c5e
SHA1 c0f01261246b86b959728fcd648a53d71b56c8b3
SHA512 eaa6f257249ec36b7538c5243573bbe726b36a19aec86e94845555201924e73182cd89f526eb705275f46bd5e770731734e3c45a9078f9c78313ef1d4c925211
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R93roTyy:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0VL
TLSH
T152B2DA2B640CC77E4F804AADEC196F977E9802C796988D4047FE994C03C77EBA11A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9eb09e2b-3c80-4f5e-aeeb-19c3461c9fec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9eb09e2b-3c80-4f5e-aeeb-19c3461c9fec.tmp
Size 11KB
SHA256 9a449addfdaba3284428f981cf2d3660d7efa75e9a6cde21f6124d68935a5ff2
MD5 b6a45b1f5533eb319416effb5935079e
SHA1 fc3db70622ba1b8d4802a8854c967b4d8ca6a216
SHA512 f801f3df476e8daa8cf54b7735a1fe6c46ae4c02e6ec36814740b688a1de97dc49f545d02c9a77768c76fa8a640b825a3117747cb3eb116372f3bc3aa7e5a0b9
SSDEEP 192:sxR7RJbd/f2sTK7xnazoA8p4j/g6+WNIYD5s3GmIgDSJ:sxR7Xd/f2sT652/5IJC
TLSH
T1FD42D815AD28697B9CDBE219FB55BF13D7F91032A0915E08BBFC8A1C04E76CD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 05a886cc42979c4ade139efee7754908513062caefa143c9380895f079eae5e3
MD5 8f207a67cecf19c91aacd37274309e86
SHA1 e89f8e398a4126f6221bc98097543d1111b6353b
SHA512 b2f77ea7150c2c6d15cf5c61d71a36261c5f6920d611f4b6e48d1f204cc716c7c862846b0d6a22d739ddc4113ce8283a3e913c08d1b6d02f6eb95efa40f641ec
TLSH
T11931DD8CFFA864E6F398057140DA3B4BF674ABE1D9CB1F0A146CC5FE9B567200100396
MD5 SHA1 SHA512 TLSH

Submit Download

63c17730-5b0a-481b-9539-836225435c90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\63c17730-5b0a-481b-9539-836225435c90.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

7dfbc280-b241-4ad1-9601-1efd6bb3c741.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7dfbc280-b241-4ad1-9601-1efd6bb3c741.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

b0265a78-5dcb-47a9-b5ed-34816cbb8c4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b0265a78-5dcb-47a9-b5ed-34816cbb8c4b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

eb2de24d-e2ea-486b-b13f-42665b2bcbcf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eb2de24d-e2ea-486b-b13f-42665b2bcbcf.tmp
Size 2KB
SHA256 fae76f59233eba6d44546474a578d189e3d9bc8dd832c0dc39beae6975966637
MD5 fef1bddcf6d45fdb5b79bb3c4d300166
SHA1 a7005700abc12cd3416cdf44a44114079fa12294
SHA512 788ad7b10460034529e44decdeeef8f809616d614241c32c40e01aa626f07a567d90b813decb8b3eb429939c85e6fd4aea9f96717a3ccd43b910b67f7123b43a
TLSH
T17D41CFF787E4867E890196F0AB146E2FCE2C0516432C7C6688E4AE2B93F3471E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 8641b6720949011aa4ecd4ddca447db85eee3cfb04f9eaac0c9e638e73a07462
MD5 d37927db0be891ac5d19032265a6239c
SHA1 07efb4b22d538653cd95e8c25c3c0343616be40f
SHA512 0be6612d7715108dc455b992d47fb436398938a93d80d53ae414e2760a3510bef680d7eed6d62bbf3a0f507f3566f4f1ab500b77a2c4a37f414543d632b7950b
SSDEEP 48:KYfIlKI8MHyNfIFKc0YsTI1KEsQryVrI9KQ0o4:KYfKKI8u+fGKc0DTqKEs+GrWKQ0v
TLSH
T1BEB1B2107ABE020039BE290981B4D72F11927773755AE63B7FBC40A59A67E046DFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f25711cf-98d3-43d8-9973-6d258bcd5093.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f25711cf-98d3-43d8-9973-6d258bcd5093.tmp
Size 11KB
SHA256 bff8c487f4354a544a44dcb5ce1accd322291da55dede4f42752d26f4629ade1
MD5 1797bfbb5c38a3232be9589149cce109
SHA1 b1ff2818eed80ed70ad303aba27f16aae6b22ecb
SHA512 e4c6002769bce24fa31b11fcf95694d8ba7b4f4adebc4ef31ba600f96088eb2886cddfb5a7c9c1ba107f8848030d62b67df207a6dd4246c52184a913a442c6e2
SSDEEP 192:sxR7RJbd/f2s6K7xnazoA8p4j/g6+WNIYDoA3GmIgDwJ:sxR7Xd/f2s6652/5I4I
TLSH
T13132D815AE28A97B4CDBD219FB55BF13D7F91032A0915E48B7FC8A1C04E66DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

232f9f90-5206-4004-b0de-89fb1e4317f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\232f9f90-5206-4004-b0de-89fb1e4317f0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 e14cfeab096412862e4313ff054f5696cf5e8f327d55577b75bc15f77a1e91a1
MD5 367fb34fc9a5a00499c7d1f534275f11
SHA1 964b9cc3591be0a9363e3fe3db7eac746eb4360d
SHA512 e45dff560a44eee3a8520b6b46f5e3f51a1657a73b6da3cf1cad9bb708b44df09ddb1fe26db07e1ee09a23990b8728e8ac7ecaf25dced9a02d8230d1ba4bcf87
SSDEEP 768:lFdg3kwgE96ybNbwbbOeRFZD1fTos7RjpE75EHPLp:hg3jAYY1fT/RdkQ9
TLSH
T134F29D36B8949E778DF6D750F20A3A47FFF051A3C99955909AC8AD0D008BADD234BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a0067c52-89e4-43a4-ae61-80342cda679c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a0067c52-89e4-43a4-ae61-80342cda679c.tmp
Size 33KB
SHA256 4a8362419a0b81b5a13875a843570c9dd49147fe7b1ba70d3fd26eb5c6ce8a55
MD5 5ce83f4834dd1747fa7a3ccf3d345e45
SHA1 9d5d247c0045fc62b54f3fcaea6f1c60fa55ccb0
SHA512 bbc8f1453f10611f16c056c72c63e3f1ff6ebd60798972d8406bad8b07b0d9f11db4a00a07463296ebc7e0cac4318a5af0b493fb01f7b6791b0b9ad2c4dfd01f
SSDEEP 768:fC3Z96ybNbwbPOeRFZD1fTos7RjpE75EHPLp:fC3ZA4Y1fT/RdkQ9
TLSH
T17CF2AF36F8A19D734DF6D251B20A3A47BFB09557CEDD058489CC6E1E04CBB9E2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

abfb62ba-8d00-4a3e-982a-cfad3309476a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\abfb62ba-8d00-4a3e-982a-cfad3309476a.tmp
Size 37KB
SHA256 95a0fdea8fb05a351066325522a8bcca1c5a8a2e0cf7ae093824a8b2e39b7dcf
MD5 84b3487848307f2887731a87ca3013cb
SHA1 2f6dee238629f4e69e251c6451b5668820fa07db
SHA512 3dbaa8e250a815c00398ee2b280d40ee1ea4281e3172ab679bd025d5ce1e644c5d24ec5ab0e0d30447781f65871a04a674e8dd1f8484cb8af752fa87a7aa0ca9
SSDEEP 768:z/UxvxjgC+k3zJpybNbwBOeRFZD1fTos7RzF/+Pu:GZj3+k3z3+Y1fT/RhKu
TLSH
T15203BF3AF8D46D338CF6E244720A764BBFF415B399C91A9409ED6F0E158B79D130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eedd1f33-a276-4517-bf02-63263d9df240.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\eedd1f33-a276-4517-bf02-63263d9df240.tmp
Size 38KB
SHA256 61ac3a3022327310e6f0f0b0bdf9578ef2bb8a284187eb40070bd23d645d2fd3
MD5 e40cd1866e83da7f6c8a0b7c7274661d
SHA1 e79dc9a9856d2172b39ef3fec950b032e50caaae
SHA512 935a0ba922454b9c99664d210a648a2d39a8607808de120c91713d21d7bf007332012400b7cef263bfda3c2a0f427a34393f941b4fa09f371ecb8fec2d8820a0
SSDEEP 768:y/UxvxjgC+k393oybNbwbzOeRFZD1fTos7RCp/+Pu:3Zj3+k39YcY1fT/ROKu
TLSH
T1F403C03AF8E46D338CF6E250B24A764BFFF055A389C919D409DD6E0E058BB9D134781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8176cb66-e6f7-46ed-a441-e307c48dc62a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8176cb66-e6f7-46ed-a441-e307c48dc62a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download