14a1edbd95a6e4aee9a7470963a68e61fb108d8c5eb09e5d3f9e2e023c4498bb

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
prime.html
Size 1KB
Sample261102-plw1rab16p
SHA256 14a1edbd95a6e4aee9a7470963a68e61fb108d8c5eb09e5d3f9e2e023c4498bb
MD5 62dfa5477b378bbd82868882e5b169fa
SHA1 5609ce3a1bfb5f14889a0f832bb0e452bd25da9d
SHA512 e80ce1c1eb674394e2c32b569638fe028fd6b69572baafb04520003740bebc752911d01d6e0e63d58149ec337d9f1ace7ad93a72d925eb9c6a9a81dcec8b5c25
TLSH
T1DB21F1B5D440B06D44728AF2AE79F60D40DFFC5DAD30D860A2AE431D06F6FF4461B652
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5264	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{7A36FBD9-A8E2-4C22-9A32-960FB39F28AA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2972	msedge.exe
2972	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3344 wrote to memory of 4288	3344	msedge.exe	89
PID 3344 wrote to memory of 5264	3344	msedge.exe	91
PID 3344 wrote to memory of 4464	3344	msedge.exe	92
PID 3344 wrote to memory of 4464	3344	msedge.exe	92
PID 3344 wrote to memory of 4464	3344	msedge.exe	92
PID 3344 wrote to memory of 992	3344	msedge.exe	93
PID 3344 wrote to memory of 992	3344	msedge.exe	93
PID 3344 wrote to memory of 5576	3344	msedge.exe	94
PID 3344 wrote to memory of 5576	3344	msedge.exe	94
PID 3344 wrote to memory of 5576	3344	msedge.exe	94
PID 3344 wrote to memory of 6096	3344	msedge.exe	95
PID 3344 wrote to memory of 6096	3344	msedge.exe	95
PID 3344 wrote to memory of 6096	3344	msedge.exe	95
PID 3344 wrote to memory of 5168	3344	msedge.exe	96
PID 3344 wrote to memory of 5168	3344	msedge.exe	96
PID 3344 wrote to memory of 5168	3344	msedge.exe	96
PID 3344 wrote to memory of 4960	3344	msedge.exe	97
PID 3344 wrote to memory of 4960	3344	msedge.exe	97
PID 3344 wrote to memory of 4960	3344	msedge.exe	97
PID 3344 wrote to memory of 2140	3344	msedge.exe	99
PID 3344 wrote to memory of 1548	3344	msedge.exe	100
PID 3344 wrote to memory of 2140	3344	msedge.exe	99
PID 3344 wrote to memory of 1548	3344	msedge.exe	100
PID 3344 wrote to memory of 1372	3344	msedge.exe	102
PID 3344 wrote to memory of 3164	3344	msedge.exe	106
PID 3344 wrote to memory of 2696	3344	msedge.exe	107
PID 3344 wrote to memory of 2828	3344	msedge.exe	108
PID 3344 wrote to memory of 2756	3344	msedge.exe	109
PID 3344 wrote to memory of 2756	3344	msedge.exe	109
PID 3344 wrote to memory of 2972	3344	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\prime.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffd12b9c188,0x7ffd12b9c194,0x7ffd12b9c1a0
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,3984505350982180801,13317303966926122825,524288 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,1130277768093127805,10905828813966386687,262144 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:2
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,16643115042098001872,16362906135137314020,524288 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:13
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,17312648085778761072,11925504914848756686,2097152 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,2507515753896300352,12101721637218389239,2097152 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,11715083095123147969,10090459192799068447,2097152 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4356,i,10635588350041095009,6519032550341773845,2097152 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:9
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,13332367817210659175,9330956530831919487,524288 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,15395665679171725962,1162939417393464911,524288 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,3251392666697381058,2894933212768760319,524288 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,3251392666697381058,2894933212768760319,524288 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,4773763241621967950,6770989409749021994,524288 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,10978228361648874249,10315729570817848058,524288 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:14
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,2360058456957577295,10422141827722841916,524288 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:14
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5608,i,11949313149491016512,17796835062184534672,524288 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:14
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,13183217407792812533,4807927222570558018,262144 --field-trial-handle=2568,i,4693539687185329883,854111128948147186,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2972

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6084

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

020259ba-37fa-4ab7-8a38-da45400daafb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\020259ba-37fa-4ab7-8a38-da45400daafb.tmp
Size 34KB
SHA256 448963c408b2ddb27b07b9d7d268ebf88423213ae774df9a89534a67aad0b270
MD5 2936fe5c08971431d0cf8b73a23fa8c9
SHA1 bc58ffbec04669b360efcf42ee00a3557320b4ad
SHA512 7dacc4429dae00969adf80f5ac4fe621739cb692c47653bc49cc7347ed77f9cb72238ba2ef73154a162e86c4fb39225b61d308e710e2681efb6c4c04b4009ec7
SSDEEP 768:ZD3gwZqwOC1rqWu5fgGM1TnXMqOaVE75EiLC:ZD3Djcfgt1TnxOuktm
TLSH
T138F2AE31A8559C735CF2D381F21976A2BEE18157C5C91EA8E9EEAE0D01CB24F534B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15806105-3a1b-47fd-9807-a9f0a0324208.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\15806105-3a1b-47fd-9807-a9f0a0324208.tmp
Size 38KB
SHA256 14235708d11f9030006aec8a6b9d3e915dd71b3a40180c90e2e6f77ca3dd7a16
MD5 abc0304a11e268ff2b75cf788df1b039
SHA1 695b8bf2278b1334edf459a79067caeb8a1e0168
SHA512 9e6d451f5ef3d4b191290171145cbe5691e2dc2245528c6e32677eda73564ef7dff678329785d416f40c8e27f567347423321b8cebde198183d12423541a9c19
SSDEEP 768:j/UxvxjgC+33XwmqwOC1rqWu5fgGM1TnXMqOaV1Ub:2Zj3+339jcfgt1TnxOuyb
TLSH
T1D803C036A855AC635CF3D280B21E6397AEF18463D5C52EAC99ED7E0D05CB25E434BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8135bd77-fdee-4d5e-878e-e4e7df338b64.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8135bd77-fdee-4d5e-878e-e4e7df338b64.tmp
Size 36KB
SHA256 d66f51b922f5c6be1a928e6c9fb3e6ed321c5dba22c74f30fb32892201b1bb1d
MD5 30975e5ecdcc5dc52b0119184ebbfb5e
SHA1 77184a077f6da7652e329812c3710295e4327d73
SHA512 e4a8ef8b1fb939dccaac755ee5d84ae2647f2294660a9ef9169333068d3ca6aeb1a224cf6976bf25b4628e54ce919f60d7b2e5242e092fb8f5fa26b2aa9d5a92
SSDEEP 768:hFd/3NwgywZqwOC1rqh5fgGM1TnXMqOaVE75EiLC:9/31Mfgt1TnxOuktm
TLSH
T1E9F2AF32A845DD779CF3D781F21D72A2AEF18157C5C52EA8EADEAD0D018719E134BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

1c20b8a4-7ade-41cf-8a70-0de044be4895.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1c20b8a4-7ade-41cf-8a70-0de044be4895.tmp
Size 11KB
SHA256 13b9d97749a26eed9c819b653137c11122a8aaea841e2bf9b3209b1b97c9a6e5
MD5 7c5ee3d0bd3fb4bbc811decf64f54471
SHA1 c2d8aadaca3b0b210c96fb00bfc27454227d93af
SHA512 5d3940cbf30e5c30086a980ce8bf015040afa3c2819af132484edcb5362c4f4f6853f704e329b4a27008f8917bb2f73ec442774fba73e0ab55a59900ac361a92
SSDEEP 192:sxRMRVba/f4sRqRzoA8p4R/g6+WNIYRLFIijFG1IgDGJ:sxRMXa/f4sRBA/5I8qu
TLSH
T10F32C715AD28A97B9CCBD21DBB657F53E7F95032A0D12E08B6FCC61C14E66DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

687c9288-39e7-43fc-abbb-83b7bf95faec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\687c9288-39e7-43fc-abbb-83b7bf95faec.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6d619337-f6e7-4b4d-a49d-a5f06105c3b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6d619337-f6e7-4b4d-a49d-a5f06105c3b9.tmp
Size 23KB
SHA256 5f9aac91388a2007dd1588b96b09737ce47d7d3451f24cbfc4a13e9844e6aee9
MD5 7788cee543b4cddaa094c686c53bb07e
SHA1 3778f02d72dbc458e6743c78278a0ee7b19f8725
SHA512 3c8dfbebc87b36f0c91a60ca9a90a92328e1bc699439d98e2290be73165c69d0a65a68081052be1604510e9b96099be1b0ec16008e24b30f6433c2e095f2c2a2
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRk6roqY9:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0Vv
TLSH
T145B2DB2F644CCB7E5FC10AAD9C1A6FD76D9802C79B548E4047FE994C02C77FA921A4CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

747a27ab-8a25-4eaf-a725-7708fa5f4a92.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\747a27ab-8a25-4eaf-a725-7708fa5f4a92.tmp
Size 11KB
SHA256 3281162ba0a0dd73f7b89589f84b0175eb938d40218825c9e205ad8802aa94ae
MD5 f9bbe4e3378784108af199ac145f64c0
SHA1 fb094052ebe1a89f1653cfcbbcb9d87416bcde71
SHA512 b19315b04450999161b76a7c21294dd6ad6d71f3f1c430f771ac98036d60760cd15dc5b30111b4732b167e82be7d984fc6760e6fbe8d2d0163e9df5b39b7e8b0
SSDEEP 192:sxRMRVba/f4slqRzoA8p4R/g6+WNIYRLgAijFG1IgDcJ:sxRMXa/f4slBA/5I9qs
TLSH
T1F042D715AD28A97B9CCBE21DBB657F53E7F9503260912E08B6FCC61C14E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

946cff65-b02a-4f8c-8630-e6bfd1828981.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\946cff65-b02a-4f8c-8630-e6bfd1828981.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 05dc74ef301a76e463b6745f7e6eedc6b6825167624ef42fa447725b757cc4e7
MD5 596cf906c56ec7ea6d51bc70f6cec07c
SHA1 50a82d84ef4b6f99f1262abf9c76cbe7e17fd7fd
SHA512 e8534be2c2485a729d4e7fd43e4517ad86c8b6388d71a5df594881cfd8425b5ebe385b54107f6bb27bd2bde1828b72fb8ebd90367b0377c1f77491d5250029c1
TLSH
T106513EC4824BCA66FBD8607498E6CCCFFA747BE1A143EF1929B4CD355CA2366405507C
MD5 SHA1 SHA512 TLSH

Submit Download

5afd9379-864c-494a-a008-c81f01d39b65.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5afd9379-864c-494a-a008-c81f01d39b65.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

20b7754f-5a79-4b8c-bc3b-e5b88d82a846.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\20b7754f-5a79-4b8c-bc3b-e5b88d82a846.tmp
Size 1KB
SHA256 4d8e6775a019791bdb98a5cf1f55b5c290d8fd2a8e185a68d9104e3dd62a81f1
MD5 bd3d52d4a87d49fe1575a046c1f3f278
SHA1 a6e3541e5df9597e4f78ea80cc5fcb1eb01315b2
SHA512 74f2d8386d42b9c693354256501d3eb5a538c3ca9e671583b81fb70ccc5c69e3593ba34826b8daa9126667eaaf94245593083972c1fff58b5e7a690270ff7165
TLSH
T11D31A0F783F4956EDA1196F0AA14AE1FCE1D0511431C7C6AC9E0AE2793F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

4f0f2bc7-656f-4a9e-8a92-7da8dbfd807b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4f0f2bc7-656f-4a9e-8a92-7da8dbfd807b.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

9566ddeb-0cf5-4c9c-abdc-49d4af52acb5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9566ddeb-0cf5-4c9c-abdc-49d4af52acb5.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4f751d4370f134a3aa6fe4cbc3adf85ae702036ad56b4410e4001f08914bf28e
MD5 dcc84978a14c121320396138f06c6579
SHA1 f737c8877993c9fa2801befe8636f0f7680d946e
SHA512 b74ae24fd17cdfa084736b94ba4f34bf7ec7d2b79a74e137ffee4eb74806b38cbaa523876c896cb8e80835e79b9f1e1b9f1244cf53b0da20f824188200834358
SSDEEP 48:KIZIpKyM87yt/IR+gKW1+QgKOwXFwHlIlKmAYXyy:KIZGKyMKW/mKKY1leKmAal
TLSH
T1259141A2713B57003A7D3A0C91E8A66A465131F33038E56F7BF994A14E2BE154CFC5DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

fd9c345b-fd56-446d-bf62-239ab78d8935.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fd9c345b-fd56-446d-bf62-239ab78d8935.tmp
Size 11KB
SHA256 a71f0e29af26897925bab2539e427fe0b74beb79e0abe83cfe419488af1f23fa
MD5 570fd68b4f25b2d959a49cf4eecbfc08
SHA1 69b0ae9206aa386db5effde2f0184f718e56453e
SHA512 2bc631ec9691fecac869a62e6294021ae3419257e8010a5402c872d49752c6cc76c58e78ca3d041c796c87104da17d2f521555cc026ef99630919bce3402ae34
SSDEEP 192:sxRvRVba/f4sjqRzoA8p4R/g6+WNIYRLFIijFG1IgIJ:sxRvXa/f4sjBA/5I8qs
TLSH
T13532C715AD28A97B9CCBE21DBB6A7F53D7F9503260D12E08B6FCC61C14E66DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a119b586-eb40-4284-b752-06ab0f82f3f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a119b586-eb40-4284-b752-06ab0f82f3f4.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b6311367-905d-45a4-85c0-5a53b258e864.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b6311367-905d-45a4-85c0-5a53b258e864.tmp
Size 38KB
SHA256 e3fe9ce37aa6b59c37ecfe1cba6624badb28317a8886ff3c61d9472fdd18d1de
MD5 2e015f9fa3dc9ff11586e55b3da015dc
SHA1 09c690ad6e1c61b2f4c052d85c1e68df74e19024
SHA512 fa54146d71290d5394513a81c3fb4924827e3c19891466b6bf015587cc318b34730c0bd9f7d00fac5e9b3686bdc289c8ca2e6f850187feeaa7a10362e68e87cc
SSDEEP 768:z/UxvxjgC+93HMwOC1rqWu5fgGM1TnXMqO/VAaP8:GZj3+935jcfgt1TnxOtAG8
TLSH
T10403B036A9556C739CF2D384B21EA296AEF14063C5C51EA899FD7D0E06CB21E434BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1066560-81b1-456b-89ab-a5a983e1fa9a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d1066560-81b1-456b-89ab-a5a983e1fa9a.tmp
Size 34KB
SHA256 4fef3d965553d4767b001b55fde8e965d502f194de40378cb49e7dff4445c741
MD5 f873c2cc0a7d68fb1ebe434094909e83
SHA1 6801f0a285a087484fd9c04e08cc506b38f77214
SHA512 f7e552bd5c9fd6d73e577f90c88ee64d74f180d1a9e8aa06d25ae13a00675021ad760e220b41f1900f2ee23ff672891ef96f7ce4eb17d115183b98985fdb1788
SSDEEP 768:AD3nwZqwOC1rqWu5fgGM1TnXMqOaVE75EiLC:AD3cjcfgt1TnxOuktm
TLSH
T123F2AE31A8559C735CF2D381F21976A2BEE18157C5C91EA8D9EEAD0D01CB24F534B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9ef8c5a-b14e-453f-8b52-8a9d9bf9799b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d9ef8c5a-b14e-453f-8b52-8a9d9bf9799b.tmp
Size 37KB
SHA256 651c14722785e9547c8a4dc0cdd0fb02f84a8810c350597233925bf28049a7c4
MD5 1cbb5da7aeb4b2cb48d1f50778798258
SHA1 97821aa331f250849bee625a60874104ab41d87d
SHA512 01ae8b720082f3f6eef78e0f484e1c249dc3ca800ffb02d0a5c43c9b93a7d1a9f1b5a594e72830890bed1b22696ebe9674cb8823eae372e7a629e8dc8e844576
SSDEEP 768:5/UxvxjgC+93GBwOC1rRu5fgGM1TnXMqOemAaP8:sZj3+93BRcfgt1TnxORAG8
TLSH
T19F03BF36AC956C779CF2D384720EA2A6AEF140A3C5C51EA889ED2D0E05CB25D530BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f887f97f-ccf8-42cf-9f4d-9954919c15cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f887f97f-ccf8-42cf-9f4d-9954919c15cc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download