9635ea13388f5afe66ed46439a980870a323000d7b74441235f09922f348f67b

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 16:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
melis.html
Size 153KB
Sample261102-ty3fhsdw8k
SHA256 9635ea13388f5afe66ed46439a980870a323000d7b74441235f09922f348f67b
MD5 8448480da1542bb55d3712711199e787
SHA1 1d3fb628b4227a37293fa33dce4848890bc46d61
SHA512 f50b6cbd66e3b16ac2dead292c48ca7f4b2696c520cf99bd713c68e7050c633da15379ed57286ba42dad489d266c2764eceb9fdac73a12fd219356a3398bb439
SSDEEP 3072:MsBCn+VUBa4zCVheR987XTFkBgCPiwSpiReDdfhDtFbEUASM5F0Ke/GKiXeD9ODM:7K8UBa4zCVheR987XTFkBgCPiwSpiRed
TLSH
T111E3C8B1B034913E026F29CAF6B0A71493E7A317DA4966E9E03FC2B493C6CC5E65345D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4164	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2304238888-3968896904-642854331-1000\{19A5DD80-8D74-492B-B43B-FFAE633077AE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5364	msedge.exe
5364	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4184 wrote to memory of 1876	4184	msedge.exe	89
PID 4184 wrote to memory of 4164	4184	msedge.exe	90
PID 4184 wrote to memory of 1316	4184	msedge.exe	91
PID 4184 wrote to memory of 1316	4184	msedge.exe	91
PID 4184 wrote to memory of 1316	4184	msedge.exe	91
PID 4184 wrote to memory of 4868	4184	msedge.exe	92
PID 4184 wrote to memory of 4868	4184	msedge.exe	92
PID 4184 wrote to memory of 5112	4184	msedge.exe	94
PID 4184 wrote to memory of 5112	4184	msedge.exe	94
PID 4184 wrote to memory of 5112	4184	msedge.exe	94
PID 4184 wrote to memory of 1880	4184	msedge.exe	95
PID 4184 wrote to memory of 1880	4184	msedge.exe	95
PID 4184 wrote to memory of 1880	4184	msedge.exe	95
PID 4184 wrote to memory of 4888	4184	msedge.exe	96
PID 4184 wrote to memory of 2868	4184	msedge.exe	97
PID 4184 wrote to memory of 4888	4184	msedge.exe	96
PID 4184 wrote to memory of 4888	4184	msedge.exe	96
PID 4184 wrote to memory of 2868	4184	msedge.exe	97
PID 4184 wrote to memory of 2868	4184	msedge.exe	97
PID 4184 wrote to memory of 1820	4184	msedge.exe	99
PID 4184 wrote to memory of 5300	4184	msedge.exe	100
PID 4184 wrote to memory of 1820	4184	msedge.exe	99
PID 4184 wrote to memory of 5300	4184	msedge.exe	100
PID 4184 wrote to memory of 3784	4184	msedge.exe	102
PID 4184 wrote to memory of 5924	4184	msedge.exe	106
PID 4184 wrote to memory of 2820	4184	msedge.exe	107
PID 4184 wrote to memory of 5704	4184	msedge.exe	108
PID 4184 wrote to memory of 704	4184	msedge.exe	109
PID 4184 wrote to memory of 704	4184	msedge.exe	109
PID 4184 wrote to memory of 1744	4184	msedge.exe	111
PID 4184 wrote to memory of 1744	4184	msedge.exe	111
PID 4184 wrote to memory of 5364	4184	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\melis.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb47e1c188,0x7ffb47e1c194,0x7ffb47e1c1a0
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,9366702273358006108,5104005802579352205,524288 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,4460474661813150494,14264730782611188403,262144 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,10899349698638368047,9468232692722767888,524288 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=1916 /prefetch:13
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,12911276564964239985,17382726457515558536,2097152 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,9371527220573613177,16486592179506061818,2097152 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4376,i,4351590873782951785,6612958893220965373,2097152 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:1
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4404,i,2583356474474224191,4242340961575811468,2097152 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:9
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3240,i,7023869548151138951,15137559205330297114,524288 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,4255788472652324038,11732652877403030897,524288 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:5300
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,14367967871414763519,11036218817026610184,524288 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,14367967871414763519,11036218817026610184,524288 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,2625793988720833661,7852413861590145435,524288 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
  2⤵
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4800,i,8069288952708342661,9936390675934544022,524288 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:14
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4804,i,13684885142763707554,10488655545494505991,524288 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5616,i,2112297389456184612,12903873652155969413,524288 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:14
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6276,i,16359888515522365956,3341401089639737011,524288 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:14
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5832,i,7583035270039669887,14983296577943337254,262144 --field-trial-handle=2228,i,13313996288545748328,1971614240132407344,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5364

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:480

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

239a40d0-04f5-4c4d-8c3e-58f33213346d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\239a40d0-04f5-4c4d-8c3e-58f33213346d.tmp
Size 38KB
SHA256 9dad18e8a8e5cebed18cec0ed1034173f477b26a9fa84154d83f5b91392f2577
MD5 89edcc3f894baf53388e545077c11ee3
SHA1 eaedf88224c7829a3c3bc09ea013893e15bd75c3
SHA512 635b425d5ebba2059168e1fb64e9757caf58a5b3438ee5da0dd47db7f23d508479f2d3a335c7a0e0aa9b668e1bdcfbbab63563b7efc4afcb753dff9bd9787f6d
SSDEEP 768:d6/UxvxjgC+23wVSO5XvxexMIYNa8S5oYklnALlSH8L4:tZj3+23K/0PTWRdARS04
TLSH
T10E03B03A99A4A8639CF663C4720AA347EEE55223D1C56EF88DEC2F0D07C77AE5303455
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4cb2a97c-24a3-481a-90ea-bae612c83402.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4cb2a97c-24a3-481a-90ea-bae612c83402.tmp
Size 34KB
SHA256 e4b19621665a76b4e36610564393d0a264b2c345f5da78886e7074ddba56208b
MD5 9c840178d631401991eab1f41075750d
SHA1 a962fb01daa6a3d0bff26dc1ea25ea5b7906749f
SHA512 f68dd8fcf7c57bf4723420392b8b979f889646a9f4d62b9c50bfc91132ffa1f74dc459fb28297ba24be26bf4a7fc57ffa07659f4fb48a3beda8e4b45d34894fc
SSDEEP 768:MI3E3DSO5XvxzMIYNa8S5oYklnA+lE75ENLv:MI3Q/LTWRdASk2j
TLSH
T1BBF2AE35E9E4AD678CEA53C5E20A3796BEE05213D1D80AE4CDDD6A5D02CB6AF1303825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

634ea20f-7537-4f53-b2b7-db987e314a7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\634ea20f-7537-4f53-b2b7-db987e314a7a.tmp
Size 36KB
SHA256 51ac2c2a7401253f5c9a559204ef3f551ee9d52c8e9d1724485add9b28589a31
MD5 a9969e988fee45104f8f5e023dd0391d
SHA1 6e0c87611f5009a9f3ac55f075afd61c6996254f
SHA512 c25b7e2476dddd0039fe6a9dd55f8b61384e9571339865f379c0a1846cfa81213693fc171a83e3fdd79679d6aa611a71c84bd3c345544e56f215375884a16d4e
SSDEEP 768:oFd334wgf3DSO5XvxaMIYNa8S5oYklnA+lE75ENLv:c33m/aTWRdASk2j
TLSH
T15D03AE36D8D4DA779CEA57C1F20A3352FEE04263C0D85AE4DADD6A5D02CB2EE1303865
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 84d025c8484a1ba1eae075fe4fb60ee1013d5e3c0fe4757f9d23c77a5ecf4bff
MD5 40a03f8f45ceb83458e7ff6718e8114c
SHA1 3aee2deed85e7e1b8a1a9090347606288ce5f90c
SHA512 011f7c1ff606c9271e176c099ac19361c51f6a3eb7ee8dae4e0bead781595a3fa38a006247688a203ba11818d1de1b9066033932d5d22ba79d5a19f921cf6159
TLSH
T164D02B316CDD4D23C08CA27C0056004117617400FE10404011211048080824142823AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 72a43fbaed1cd4a89462ff759b5bb2f6f6d1a7a9c08002937c809c101fc685e4
MD5 b04c9bc22d86d65999036cf784bd7a42
SHA1 74f3b96e34181e491a9fd238877d82f72fce321d
SHA512 9bbf9224f5546df81a26e79932518e2c3bea2fc0e37127e4af1f02d1a5543680b5d9370365c28b8bb5427b3bb4f27eb12737d158490216ff77859483f95a6b00
TLSH
T189D02B316CED4C23C08CA27C0057004117517400EA1040401221504808082414281399
MD5 SHA1 SHA512 TLSH

Submit Download

32298956-2680-406e-b0e9-c726ffe7c81d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\32298956-2680-406e-b0e9-c726ffe7c81d.tmp
Size 10KB
SHA256 1de0fcdcb2e62436d884a0a0a56b01b44542df995b1dc79cd5f4f2ebe0743bfc
MD5 bfd565a912d8d5a030dac0039d825ee9
SHA1 66b52e0d3659975c5ee847283a3d3e792ebc92d5
SHA512 b0e4ce04fbb257fb30d1d55eea2b1a8b9b506d6a662b6815beaa809c79244ca985450094824ec8d5fef4414093890e6ffc46ec4797a09475418db536c07db252
SSDEEP 192:sxR4REb+/fms6DzoA8p4s/g6+WNIYueKibGQIgIJ:sxR4M+/fms6yx/5IGs
TLSH
T18932A515AE68A93B9CCBD20DBB55BF53E2F91033A1D11E48EAFC9A1C05E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7c920c26-4738-44b7-b80a-8f06d9e68f56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7c920c26-4738-44b7-b80a-8f06d9e68f56.tmp
Size 11KB
SHA256 821b950602c11b0e0e1221ab41d1ae912cfeb0597027d0926ebd4e7fe181d553
MD5 28a8a1003b4550ec80b571f0dc115397
SHA1 bcd429c527090d00b921d21dfc864581575db8ee
SHA512 dd8822b81452acb0e8e28c8d6464a1a6be128435e085b706d99b1b2e8327e520d2623fdcc250aa2cbb87c125fa0d4366bde81cecf0dc3908bb3525f0f39165b5
SSDEEP 192:sxRHREb+/fms6DzoA8p4s/g6+WNIYuvkibGQIgD8J:sxRHM+/fms6yx/5I9c
TLSH
T18732B615AD68A93B9CCBE20DBB55BF53E2F95033A0D11E48ABFC9A1C05E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9245966f-a31f-4692-95c9-6f27e907d058.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9245966f-a31f-4692-95c9-6f27e907d058.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 65fb7aa765e2fde7f111a8d2dc8c8ec76d0df8b87a200caf86c4b14c2a829c56
MD5 9137152e15ce8e71d5e6a994ccd11ef3
SHA1 4251e133116f6d9a50064d37280fd45799074af8
SHA512 e43772bd4b0b4a31a2618c63115ab7d1ae087bade10b9614f9d6ac12f19e3efe210ac13e9a2d0d8aaa8d9c1cdcd08709ffef5f38a588aa7e933625deb71ecf68
TLSH
T154E026CE05CACB2EA20CA4CB01E95B0CD2C0361B97C879AE6B05C5847242190E2C76A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 235c685c60f3c211cd82c0c106e911c2544726b0d65e20728ff5790f3fa8cc7f
MD5 e54f409b2121c712f8aca4413e1eb939
SHA1 b7de31ae81276bcb4ea366bdae394c3e0fb2ead0
SHA512 e4e516ca16c22906f9780c0797859f00d52eb56294c0f86307662d5ed8e2ecac5bdfe3a4168649e69198b394a107d66839f185a6466d38be2d297b740c7ce33e
TLSH
T1F651A59686E14E97FF540030B7D48E673637BE8E5B833F120154D6BE6A4AB6040BC0CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 0f7ae8d570992f7e62023c746817ae9f02f23bc1cb1702385f8ed0ce77858bc5
MD5 388cc34d2b7668c8a94a6e5d25442af7
SHA1 0d200d974fdebdef7a3199f58f19818e56b3834d
SHA512 b0de45b5c183d18637414c11691594852c10f830b14d9efd1719afc3176bffa2b224476e3008eb6d1c9462cb16fbba419bef3f2f7d861e60f99b1bcd2ed30713
TLSH
T12351A59686D14E97FF540031BBD48E673637BE8D5B833F120154D6BE6A4AB6041BC0CC
MD5 SHA1 SHA512 TLSH

Submit Download

9254a3d6-53c3-4a73-a2dd-21c1563d714d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\9254a3d6-53c3-4a73-a2dd-21c1563d714d.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

37890727-cf28-414c-852d-5e138265e4d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\37890727-cf28-414c-852d-5e138265e4d7.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

37e0f532-efd1-40b7-bcd7-ea4579a7b5d0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\37e0f532-efd1-40b7-bcd7-ea4579a7b5d0.tmp
Size 2KB
SHA256 0be765be4bb6a0f69f977d5190ee6b61c237a56c08161e194036917030a123fe
MD5 1c4df524e5e993c0b2dacbdf2f3778ca
SHA1 2069e534c1108f6b66b3d90ea7b0531598b98bde
SHA512 d7d1dd412b9c5daaa744fba0f11935ff40194380d72d8f6e9c5b3dd5036d4beba830d0a775e27c9f0e9e92825365f71969c3d7303b52b25e3534f353ce63238a
TLSH
T1D1517CF787F4467E9A1196F0EA146E1FCE2C0116832C7C6989F0AE1793F24B1E18169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c76756b7-b692-4aa7-bf07-d0ed7f462a29.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c76756b7-b692-4aa7-bf07-d0ed7f462a29.tmp
Size 1KB
SHA256 e11bdffe28ac1a120daaf1c95982e6e4f5d781fc1d8ecd7909708cd279e1fcbe
MD5 a63222f6b263c6e295ea8e21805c714c
SHA1 09b66de694c0cf6190f12d16b0fd74cb69ee8a7c
SHA512 9657e0756e6a572bcf8a1a2d296502299a346f9bd45fc9e7faf8cebde49a50817e2549568c1ccaf16be37115f2d0d8169c572cadb3d817c00d2bce13f2e78d26
TLSH
T1CC31ADF3C2E8467D8A0155F87B182E2BCE2D0955932C3D56C4D49F5F93F28B1D28099E
MD5 SHA1 SHA512 TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 9fd8b9ce0d968ef1c4c32f4c683df4fe899c307dd7a9a700d155d6fcbf4f9cc9
MD5 2b8b28e7890c7406fa4989f4df163ae4
SHA1 fde7e416af00bc441c607e050dba836bba6ef442
SHA512 69021443eb9bbd3b86192f52103f1560335b2fe003ee32d0d9b22e72d3cc4b0ccf79138f7b9feb5baf6e765accc9375c8d44479bd2a437e6605895f7faecb74a
SSDEEP 384:/7fnhUVfCtg6UFfCwKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXb9kMR60rocbk:/jnhUJWg6cfCw8F1+UoAYDCx9Tuqh0VR
TLSH
T1CAB2DA2B644CCB7E9FC00AADDC196FD76D9802C79A988D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 71aa2b60d08846b3a1d7cc5f65633fb61b71ca2a088e741a7cecd1fc1012bd89
MD5 a257ce6a173a86de90c18f4814efa1bf
SHA1 38d4bdb4f72f24a47481c81ff1278da6a99ed280
SHA512 150e74f718a4143514718c1ecb8c978bb5a9156b4ff009bbb3470d0f00266f5f8a40aa7a5557cce9d3c86eb596383d7915224902738662264b09ccc23cc1f1b2
SSDEEP 24:KyYzYY1LgpaIxNWqKxfeB1sIEWxK5Ohx0x1LMhS9TzWDKSyXSVm5kVIvKRhq1uSK:KoWlIRKmcEby5qIvK3q4zOIbKly9
TLSH
T1B0910035323A0641397E240882E6A72B868131AB302CF56B7FED9066DF76E444CFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

d34db435-b7c7-4dc4-9b14-364f193d0003.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d34db435-b7c7-4dc4-9b14-364f193d0003.tmp
Size 10KB
SHA256 d51aad9d0d28f8770001059693090a2d9dd92adc8244d19240b4c0c3e93c728e
MD5 6ff3210d93037f81de7cf836b4fbd505
SHA1 c41bec137973496b84dfdc54f5362169c5f7b132
SHA512 16b76bdb8e8be3f63793a5c6bd774f11e66eb286558a6810b5a459f6b6509da1ae1971cd80f95599d481e58aae0e3eb7a0f8a81b71b60956377ba63129852e6b
SSDEEP 192:sxRHREb+/fmsaDzoA8p4s/g6+WNIYueKibGQIgDmJ:sxRHM+/fmsayx/5IGe
TLSH
T15832B515AE68A93B9CCBD20DBB55BF53E2F91033A1D11E48ABFC9A1C05E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

febf704d-5e1a-454d-a815-1733571fe737.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\febf704d-5e1a-454d-a815-1733571fe737.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c5fa330-cd0e-4923-81da-5d6383159854.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9c5fa330-cd0e-4923-81da-5d6383159854.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

cdf85100-e970-44e3-9cd5-e5313d424494.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cdf85100-e970-44e3-9cd5-e5313d424494.tmp
Size 38KB
SHA256 44cfff014119a42c0d78e42a9b830dd9fde23ff30df2c3cb1f254c92b9f0e4c2
MD5 3db62deeb1193b14521900840c9cf38f
SHA1 1865c39656adc8a81cef4b79006a55d526ae9500
SHA512 36bcf80ee476b775ca341dd0b2c9fd74588b67f217e5699d6bb5cda74950a275c37c694ec74960b7732ba489ea6c510dde497c1b50de27af9299975c0790eed1
SSDEEP 768:do/UxvxjgC+23zfGSO5XvgJMIYNa8S5oYklnAarSH8L4:nZj3+23LS/gHTWRdAMS04
TLSH
T13803C03AADA4A8738CF663C4770AA357AEE54123D0C16AF88AEC1F0E17C73AD5303451
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d55890ef-0813-4aa7-a624-beef558fb4fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d55890ef-0813-4aa7-a624-beef558fb4fc.tmp
Size 34KB
SHA256 49115102406937186cf7719335d0f02ff6b42d02f5e1173381d892e5a9ec2bb2
MD5 7a1eb7dfaf2f50c613a3ae22d1573a86
SHA1 1b71a50ac4303723504d89820f9f0081aa76d880
SHA512 077fb09da85ed1d51f0a6348cd6f1c448a8ae1a18cc7b99848183c4f60188f8472945b31a3a9f166a5a661c9729618ffc5c870eb3d08e601e7e79e22d4ae48d2
SSDEEP 768:59I3B3DSO5XvxzMIYNa8S5oYklnA+lE75ENLv:3I3V/LTWRdASk2j
TLSH
T114F2AE35E9E4AD678CEA53C5E20A3796BEE05213D1D80FE4CDDD6A5D02CB6AF1303825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1db6483-dd42-44ca-9690-a9d1fd423d3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e1db6483-dd42-44ca-9690-a9d1fd423d3f.tmp
Size 39KB
SHA256 19f510245b4250bbc834fb672476eb20a070a5b4899321515250504fd570f856
MD5 68cfcd06f7bca05fcfa0d19d16411de5
SHA1 52264d94d97ecdd6ed83a15ecff1ef8b36a89f71
SHA512 6d18c33b03b6dd6388677850a63353187d03efac4458a6b3102ac35b0c65913ac1cca6935ffe71e75c37c4e57afb3c0f9315e0f34bc957c370d92d8273553613
SSDEEP 768:dA/UxvxjgC+s3XnDSO5XvxFMIYNa8S5oYklnA+l1JG:TZj3+s3L/9TWRdASfG
TLSH
T19D03BF3999A4AD639CEB63C5B20A6387FEA45123D1C45EE88DED1F4D07C73AE4303825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd0bf7e6-973b-433a-9f3e-7dc11ddc2bdd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cd0bf7e6-973b-433a-9f3e-7dc11ddc2bdd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download