45f1c6a3c6dd8b37937be946a69df1623c1d2bcdac28a6cebab1cb09944b9ead

Analysis

max time kernel
148s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 06:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261102-2259421-85eypr.html
Size 96B
Sample261102-gyapaaft2y
SHA256 45f1c6a3c6dd8b37937be946a69df1623c1d2bcdac28a6cebab1cb09944b9ead
MD5 5a07f0f00a767e25c5d280055e584501
SHA1 53092dd03d83a8a042fdc6115220c614dbd8ebb9
SHA512 d5621e5fa02b4586609600042fe3bc0e90bef95e900659dbbabd1052a966dfd7602fb119d22f8e27760d1ca0b81328379a12242df63ed1973bc91fb624681895
TLSH
T1EDB012797081004C7C19C0A469E100C40C4DF0950C4D2500248098BF8515018CD4134A
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5444	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{B45DFD15-998D-4D25-9147-8A6EEBDF6D3C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5736	msedge.exe
5736	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe
2772	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2772 wrote to memory of 3420	2772	msedge.exe	88
PID 2772 wrote to memory of 5444	2772	msedge.exe	89
PID 2772 wrote to memory of 2736	2772	msedge.exe	90
PID 2772 wrote to memory of 900	2772	msedge.exe	91
PID 2772 wrote to memory of 2736	2772	msedge.exe	90
PID 2772 wrote to memory of 900	2772	msedge.exe	91
PID 2772 wrote to memory of 900	2772	msedge.exe	91
PID 2772 wrote to memory of 4196	2772	msedge.exe	93
PID 2772 wrote to memory of 4196	2772	msedge.exe	93
PID 2772 wrote to memory of 4196	2772	msedge.exe	93
PID 2772 wrote to memory of 3644	2772	msedge.exe	94
PID 2772 wrote to memory of 3644	2772	msedge.exe	94
PID 2772 wrote to memory of 3644	2772	msedge.exe	94
PID 2772 wrote to memory of 2316	2772	msedge.exe	95
PID 2772 wrote to memory of 2316	2772	msedge.exe	95
PID 2772 wrote to memory of 2316	2772	msedge.exe	95
PID 2772 wrote to memory of 2480	2772	msedge.exe	96
PID 2772 wrote to memory of 2480	2772	msedge.exe	96
PID 2772 wrote to memory of 2480	2772	msedge.exe	96
PID 2772 wrote to memory of 6112	2772	msedge.exe	99
PID 2772 wrote to memory of 4896	2772	msedge.exe	98
PID 2772 wrote to memory of 6112	2772	msedge.exe	99
PID 2772 wrote to memory of 4896	2772	msedge.exe	98
PID 2772 wrote to memory of 4728	2772	msedge.exe	101
PID 2772 wrote to memory of 2860	2772	msedge.exe	105
PID 2772 wrote to memory of 2504	2772	msedge.exe	106
PID 2772 wrote to memory of 932	2772	msedge.exe	107
PID 2772 wrote to memory of 3932	2772	msedge.exe	108
PID 2772 wrote to memory of 3932	2772	msedge.exe	108
PID 2772 wrote to memory of 5736	2772	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261102-2259421-85eypr.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x244,0x27c,0x7ff98905c188,0x7ff98905c194,0x7ff98905c1a0
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,13271144541341919760,12378822212637863597,524288 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=2812 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,8237496726870986793,8507620449660808317,524288 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=2820 /prefetch:13
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,8478165879076867569,16581661399937310850,262144 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:2
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3628,i,10873784749510707987,3953894898554778137,2097152 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3632,i,10428745107676912717,5184842031446503108,2097152 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,13611766407670309544,4939206801376833040,2097152 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,11500930717855340072,9694963415464251331,2097152 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:9
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,16383654656319862114,2680438305376390151,524288 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=3824 /prefetch:14
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3792,i,14135871291217093177,9238254716498155555,524288 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:14
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,11923634418482314503,3209463454757963101,524288 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,11923634418482314503,3209463454757963101,524288 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,7466291970133342890,8470125617408101392,524288 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:14
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,807788903300430303,4703128033324915732,524288 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:14
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,16744442492687285395,6140222228213655990,524288 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
  2⤵
  PID:932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3356,i,8494106901370145378,880883710927464698,524288 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=3352 /prefetch:14
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6092,i,15512609932731304176,8566277953280426468,262144 --field-trial-handle=2768,i,9205447367207455993,5720986835270884643,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5736

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3100

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3852

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

37e708fe-fbb0-4ffb-a57b-ab9c7d99e432.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\37e708fe-fbb0-4ffb-a57b-ab9c7d99e432.tmp
Size 37KB
SHA256 c97e74e1c71edd71429b0128ec2b90cb00f364b3fd9bf549e1eb7f30b1fb403c
MD5 c37da2cd6865f499c19e0cf2ae5784f3
SHA1 ccb5ff509870a9c6899fa503ce0f21ce79ffb5b4
SHA512 9262f3c7b6c5113debe8272442a94c5fb0fb8a90ad9b490d574a006d88578d272a61f548efe745a18c18bd53b90381dc11c6e9b1de61fc91f62842e0dea586f5
SSDEEP 768:z/UxvxjgC+k3dy4ybNbLhmtSOeRFZD1fTos7RzO/+Pu:GZj3+k3dZTY1fT/RSKu
TLSH
T14D03BF3AF8D46C338CF6E244B20A764BBFF415B395C91A9809ED2E0E159BB9D1307856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

41340694-50cb-43f0-aa8e-319ef6bccade.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\41340694-50cb-43f0-aa8e-319ef6bccade.tmp
Size 38KB
SHA256 ae4aaafcba4aeeca0b4ddce982bee42ed09855cb55a106159df78520b5bddf94
MD5 e314f33974adb1f138edc724151eea1e
SHA1 456f3d34549ee7c79f525dc34958ad0bb0fe0964
SHA512 6e6dbb014372150404b0972d7d36a069032e1512e01100a3a27d0890dacc70e3319e6851b6498c068da3016b10b1e69397d1e3b2bc9d67aa44b4bc27836f43f5
SSDEEP 768:h/UxvxjgC+k3AOpybNbLhmtHlOeRFZD1fTos7RCb/+Pu:0Zj3+k3Ac2Y1fT/REKu
TLSH
T13203B03AF894AC339CF6E254B20A764BBFF055B385C91D9409DD6E0E05CBBAD130785A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a697197-c4ac-4512-bbd9-856d072a90bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6a697197-c4ac-4512-bbd9-856d072a90bd.tmp
Size 33KB
SHA256 6e12d6e7a12ae1ca3afb15eb41c5abc7c7f682c32fa329c027bec6882a36581b
MD5 cc5712fe160818f46c1a42c008bbee6e
SHA1 a4c75d23879da1837cc429124f9e1a065f324a58
SHA512 af53febeb63268335504d1262f28623410564bdad4144ffc0a7faca4bd1aa3751f277475ba2a8239016ed786d403c9857c41bcee819f0ccdcc47282f5490bc3a
SSDEEP 768:l83Es/ybNbLhmtH0OeRFZD1fTos7RjbE75EQLr:l83E0dY1fT/Rvkbv
TLSH
T108F2AF35F8949D334CF6E250B20A3A47BFF05563CADD1A9495CD6E1E04CBBAE134B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

135c2dcf-42e8-4414-9004-25dbd70cc344.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\135c2dcf-42e8-4414-9004-25dbd70cc344.tmp
Size 11KB
SHA256 eae1311f95e45810e67523d04b8f2630f4306b69f95d7036de8692639911a1d7
MD5 9c5047b6fb4f32a042d6d48c35d5e6a3
SHA1 d9722a39e4c844b4586d2ad1c6277a614ee3ab38
SHA512 4d0d03b4a79580d62232683ab642299978c033423a6788f12fc70e27deaeb55407090b9de6fa3afb2b19978adce2fa4880dc3981e4fc10dbddc5b69c895e11ef
SSDEEP 192:sxRTRzbN/fnsJq4K7xu9zoA8p4b/g6+WNIYDn6JnGyIgDjJ:sxRTxN/fnsU46Ri/5IwSJ
TLSH
T18432B715AD28A93B9CDBE21DBB55BF53D3FD1032A0952E48A7FC861C04E76DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2730b4fd-d0f4-4651-bb32-56feeda15910.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2730b4fd-d0f4-4651-bb32-56feeda15910.tmp
Size 11KB
SHA256 f2c0e685716c0ae539624de3f1a171faf25ae709c83f61dba4af1cb566d2e6e6
MD5 b2b22451416cee53aeae3a1af6586f05
SHA1 6ab21863803d029868149219e6578305f70742d6
SHA512 eb68a9f2dff0658d3874a00c41d0337739c4a73758ef4d8880d356b7f6b93aa661586a7082d5e68e24aee09f25a7d2388dc6eefcebf7119d741efbd64568eb19
SSDEEP 192:sxRTRzbN/fnsJ94K7xu9zoA8p4b/g6+WNIYDoXnGyIgDNJ:sxRTxN/fnsX46Ri/5Izb
TLSH
T1E932B715AD28A93B9CDBE21DBB55BF53D3FD1032A0952E48A6FC861C04E66DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ef07252-76be-4427-bd78-c99181db1009.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7ef07252-76be-4427-bd78-c99181db1009.tmp
Size 23KB
SHA256 93d19fcf047fa1da62e5a4c94375dcbe063f00d7f7964bde579332bdded042b2
MD5 2eb2176875bf77c55d61f6368d3d9105
SHA1 d8dd296dd8e28ed0f4a3a068ebda7a3dd7198f0b
SHA512 fba0c752858035d01ea778256a1cb35143269aa8b843b035e4faf0d092d06a6e27b1a311faba811926f9c08ac06a6b983719e7017a13e52760e3f10fa4452d6d
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R9AroTyk:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0VY
TLSH
T1B9B2DA2B640CC77E4F804AADEC196F977D5802C796988D4047FE995C03C77EBA11A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 e6b98fd42afa577ef97e340647237c6e5b784d0c99e01e5d3ad818569b766172
MD5 0bc606e01c2c90179b7bf6d30d373c00
SHA1 623bd864375ed2785ea21bf0b9f6560e891e25cf
SHA512 27e9ca25d991f06b921ed946b03c888d539acb248718d85045e2651743c7b2c5b51efbc860409b4eb8bda01e4305c415f2d4000c1772f40d197eabd25e74f312
TLSH
T1985186D161598A9CC7B8E471C1D14283FDFF26F0A74B9F1138B6C2B66BC63E46365841
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 e30724753fd1c0ea69a8fc4456647a273475a6039fe2e10365805a6a3b633397
MD5 187170b7b76b5ff714b6efeff5b99342
SHA1 4903276798f583884125206d721bafb05d81666f
SHA512 a23567afb5cbea45f34c264cb16dd51bbba6c5a9d9b36aff7f8562a1596fe66e918f3a16f5c50a6a261a8f4ac1376835bd6c82eed5e252a19b6759184a523394
TLSH
T1A151A6D161598A9CC7B8E471C1D14243FDFF26F0A74B9F1238BAC2B66BC63E46325841
MD5 SHA1 SHA512 TLSH

Submit Download

3f9eb711-6f3d-402d-a0c8-67fdbae0e197.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\3f9eb711-6f3d-402d-a0c8-67fdbae0e197.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

5e38a6f8-2c1e-4243-bd8e-c3351c430237.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5e38a6f8-2c1e-4243-bd8e-c3351c430237.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 9f346718cba2bc8700b5f138a7db6c74e43a35f966f598f6873799793c3889ed
MD5 c0c7cfe179b82723555e2132aa8aa301
SHA1 9d825c5b425ca13aafb63490c7fd98d59893e492
SHA512 400d35c1261b34d19a1be8cb121e57292227d288b375a8f63eff7dadf28ccd80791c0094e2e2c4b8d209d1bbb99e8aeb2bcfb70957538eef83352778b38251ba
TLSH
T17931C0F783B4857EDA0196F0BA14AE1FCE2D0515432C7C6989E4AE2793F3472E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

eeab93d7-3d82-4c4b-bb5f-d326672044d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eeab93d7-3d82-4c4b-bb5f-d326672044d1.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

bda0ae83-46b2-4cb4-af16-bfcdd9547a4e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bda0ae83-46b2-4cb4-af16-bfcdd9547a4e.tmp
Size 11KB
SHA256 7e1260fde666025574236732a912201c7b25aaec7f0615b17ab4144a3756f871
MD5 69d23a5325710b1af4e8ad268891c6f0
SHA1 11ba119e6ddccc86e7d3c329c024e01baa2da6ae
SHA512 0ac1a18e31fd9a4162d2cdfd99a71681abd08644c089a488e61b27bccb6c912982a7b9b4afffbd1ae73a281d394b31121964852bc344f7fa7179bca0493a250b
SSDEEP 192:sxRgRzbN/fnsB94K7xu9zoA8p4b/g6+WNIYDoXnGyIgIJ:sxRgxN/fnsP46Ri/5Izs
TLSH
T16432B715AD28A93B9CCBE21DBB65BF53D2FD1032A0942E48F6FC861C04E66DD520780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

efa01268-5cc7-41de-8755-e10fb78c4f43.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\efa01268-5cc7-41de-8755-e10fb78c4f43.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

368900b1-6e97-4535-a931-07421dcdef9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\368900b1-6e97-4535-a931-07421dcdef9c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5f35b25-7d5d-4855-b11c-2899577e2d05.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b5f35b25-7d5d-4855-b11c-2899577e2d05.tmp
Size 33KB
SHA256 476fd41a1d9f2aa3c9c6ad7ba20a83036d6189154d434ee3fbab6850fd2770cf
MD5 47e6d68f95946af3d36141efad0c1c89
SHA1 9a6ef6bada08d36e53cce59d635e33cfdb42cc34
SHA512 7aff5ebeab4e33320724cd1ed8c652727044710ce1b8bbec1fc185a45798fc9b69376042ec8d37eea2dd8c35c45c77286c99da7b525a3ac073d0bdde37a5ee15
SSDEEP 768:583Jv/ybNbLhmtH0OeRFZD1fTos7RjbE75EQLr:583J3dY1fT/Rvkbv
TLSH
T1FEF2AF35F8949D334CF6E250B20A3A47BFF05553CADD1A9495CD6E1E04CBBAE134B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f636f38e-bc0e-4cc8-b7a2-3f63564a45f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f636f38e-bc0e-4cc8-b7a2-3f63564a45f2.tmp
Size 36KB
SHA256 408775d5a5f3ffeeb34c4964cdf35bb708df589e2571f11d7247c402502f1f73
MD5 c5e00b21445f7daf7dffdcdc3c7cbc8c
SHA1 882eb75e4bfaf7ef7f935ca43fa8faf690d4ea12
SHA512 0a12750ca67243d5a83a16cda993a2a5dc04ec0689b83fc2a209a7851d07c19a0ee1b2e1b5abae9dab9d38b507006c787520c9ce459e6d7422fd97decadd50e0
SSDEEP 768:gFdj3Rwgrv/ybNbLhmtHwOeRFZD1fTos7RjbE75EQLr:kj373RY1fT/Rvkbv
TLSH
T1C3F2AD36A884DD379CF6D750E20A3A47BFF051A3C9996A94A6C95D0D00CBADD138BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download