397fffd4a41a59cbe0abd4dbb9521821f4d4d15e4d70976ac3474f96bd74cf79

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/11/2026, 16:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
inventario-ip.html
Size 63KB
Sample261104-tpjxtady8m
SHA256 397fffd4a41a59cbe0abd4dbb9521821f4d4d15e4d70976ac3474f96bd74cf79
MD5 666253d8516039aace37c20a480f535c
SHA1 d66283a9c601177ff48ba4b53362237a4156a496
SHA512 c220a34617769b7b7b8076fa6e2917d6b891b7db6679774209027e3724597617a0e47f560823b4fad1b919666f555c2908a6ed860bb630438bb64e59cf561e37
SSDEEP 768:L6YvoKLCp43PDQizkiF35YtEt55AOwhS2M/bs1uVdl6n/B6zPsoarN98Eit21iPt:asCOUizVxeet5wc2/JXCSwE75DU
TLSH
T1D853B7347122613CB53385A6E3BFC5592928145BF806D990FABC38A04FCB59DDF76B88
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
35	raw.githubusercontent.com
36	raw.githubusercontent.com
42	raw.githubusercontent.com
43	raw.githubusercontent.com
44	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3548	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{09083C40-7BD3-4EBD-BF86-30849F7159F2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4576	msedge.exe
4576	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe
988	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 988 wrote to memory of 4056	988	msedge.exe	88
PID 988 wrote to memory of 3632	988	msedge.exe	90
PID 988 wrote to memory of 3548	988	msedge.exe	91
PID 988 wrote to memory of 3632	988	msedge.exe	90
PID 988 wrote to memory of 3632	988	msedge.exe	90
PID 988 wrote to memory of 5192	988	msedge.exe	92
PID 988 wrote to memory of 5192	988	msedge.exe	92
PID 988 wrote to memory of 4460	988	msedge.exe	93
PID 988 wrote to memory of 4460	988	msedge.exe	93
PID 988 wrote to memory of 4460	988	msedge.exe	93
PID 988 wrote to memory of 4224	988	msedge.exe	94
PID 988 wrote to memory of 4224	988	msedge.exe	94
PID 988 wrote to memory of 4224	988	msedge.exe	94
PID 988 wrote to memory of 4176	988	msedge.exe	95
PID 988 wrote to memory of 4104	988	msedge.exe	96
PID 988 wrote to memory of 4176	988	msedge.exe	95
PID 988 wrote to memory of 4176	988	msedge.exe	95
PID 988 wrote to memory of 4104	988	msedge.exe	96
PID 988 wrote to memory of 4104	988	msedge.exe	96
PID 988 wrote to memory of 1600	988	msedge.exe	98
PID 988 wrote to memory of 3136	988	msedge.exe	99
PID 988 wrote to memory of 1600	988	msedge.exe	98
PID 988 wrote to memory of 3136	988	msedge.exe	99
PID 988 wrote to memory of 5108	988	msedge.exe	101
PID 988 wrote to memory of 5064	988	msedge.exe	105
PID 988 wrote to memory of 860	988	msedge.exe	106
PID 988 wrote to memory of 1688	988	msedge.exe	107
PID 988 wrote to memory of 6020	988	msedge.exe	108
PID 988 wrote to memory of 6020	988	msedge.exe	108
PID 988 wrote to memory of 4576	988	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\inventario-ip.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffce7ddc188,0x7ffce7ddc194,0x7ffce7ddc1a0
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1548,i,10089386725963402383,4302397759525930103,262144 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1680,i,11680820769395643910,3359327209921098325,524288 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,2676539938845814199,9333756923508679759,524288 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=3172 /prefetch:13
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,4078224870608502127,972341454861629191,2097152 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,8565806774048280468,5464789910804536934,2097152 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,2847284481559462139,8785994016141450988,2097152 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,5134213601864127959,6812239253018598625,2097152 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:9
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,13571224827734163043,12855683310684907069,524288 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,4186222516943862727,457195504039114828,524288 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,16239282404255581789,6482619859725430300,524288 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:5432
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,16239282404255581789,6482619859725430300,524288 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,12264408217697038022,16797763591347341484,524288 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,8061104021568412730,5134713491126441577,524288 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:14
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,3446039053263038883,13766432416201969113,524288 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=3848 /prefetch:14
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,866624342927429679,12122837885675078509,524288 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=812,i,7905293568740708722,2745995876926075233,262144 --field-trial-handle=2280,i,7514828290245148958,10789486898272844517,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4576

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4592

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1140

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

47ef17e6-0b83-4c3b-8874-e1d85e18beed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\47ef17e6-0b83-4c3b-8874-e1d85e18beed.tmp
Size 40KB
SHA256 9c741ac8088456ed2941a99cc5c1c9049afc9b48d3c13df89e90eab5ea5a11c9
MD5 3a61902478e2a5e61cb73f50cf2961b6
SHA1 40227b64484f3e6c69a0c97ce95cfb61e2843b2a
SHA512 9360d07c669498d48424f184ce3041697d724696cfd77f4754940eb0ace03873c74da264c680b9de8ab6af355228a2fc3acbb13164360e9c0a19f315434a523b
SSDEEP 768:W/UxvxjgC+Z3QZVybNbK1DztVOeRFZD1fTos7RjwE75Etv:LZj3+Z3QPMY1fT/RUkMv
TLSH
T15B03CF3AB8A45C334CF2E254F24A7A47FFF455A385C919D849DD5E0E05CBBAD034B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f83d661-0c0f-47e4-b742-e57182223e46.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9f83d661-0c0f-47e4-b742-e57182223e46.tmp
Size 37KB
SHA256 2b0110aa12e0bc9503a7573ca3ce823e4a759f2e28ee7a86c58e0da1ea637428
MD5 e43f0de40c491c52184c8b43786c413d
SHA1 d551fb7df40678dbbd4d166fb8ace412ee295933
SHA512 6c2303eb3b608d3acd963842bd1ac7acc358803814d7241d603d019714e30e1848422046ac0a9ed709e2d631244268b81cd70714b528d9f1af8c8bdc1cbbde0f
SSDEEP 768:z/UxvxjgC+k3rn+ybNbKDOeRFZD1fTos7RzgL/+Pu:GZj3+k3r+OY1fT/RmKu
TLSH
T16503BF3AF8E45D378CF2E244B24A774BBFF455A386C91A9809DD2F0E159B79C130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6931fee4-eb3d-44a2-b1c0-afe005887a19.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\6931fee4-eb3d-44a2-b1c0-afe005887a19.tmp
Size 105KB
SHA256 dcc5e5a44077d428b0e344ee45b3099e7eff2ebbdd8273ef1ec772721b41a5af
MD5 2b868614fa0b813f62a2463cf5176c67
SHA1 81b9a2da4d126d229190379b81cd945cd7b5b900
SHA512 34e1f30cbfede4f1f7f1c635e707b7391a5a20f0cfa6a316714dca4d73ebf5b8fc4dbe0bb321a92d46b6cfe02713df76143a1642643c1fe3dcf2ca3319f0ecb5
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7P:fwUQC5VwBIiElEd2K57P7P
TLSH
T16FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

0a5984c3-b8ac-48cc-b7dc-120c8fb16dec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a5984c3-b8ac-48cc-b7dc-120c8fb16dec.tmp
Size 11KB
SHA256 70a8de9c114979fccff16643436a65c22e1792fa9dc73070f8d49377eb7f6efc
MD5 fb3f42b53b1b713dafc4226f052d89b7
SHA1 17add91571061a1959cac31e6447af688b35496c
SHA512 06992191c03a9bfdbe6c8b9d492edf3f9255b6c512da219fe1d8bb13c1e3c85534f40e3d182648b04976758e2bc929ed49eb2046be28ae94e54409271a5a6fee
SSDEEP 192:sxRGRFbf/frseK7xWXzoA8p43/g6+WNIYDoF4+GVIgDpJ:sxRGLf/frse6ru/5I+3H
TLSH
T17F32B615AE68A93B9CCBE219FB55BF53D2FD1033A0D11E48B6FC861C04E66DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3a78ff2a-08f5-493b-9d29-3699caeb2618.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3a78ff2a-08f5-493b-9d29-3699caeb2618.tmp
Size 11KB
SHA256 485a0d90d64bc4f8bb5f12ce4d20f177b850c3b21404e702de1310e6071f1919
MD5 3953ed9d972fbb0e9519a498c6aa1cc2
SHA1 b08097807fd7a943ef61ada49cf1d3ae3454b669
SHA512 79ee64d7f185d5ee134a67465a082e014d1cc304779dee162408cdd8792b930c98b69b4fda28fa8a6daf14c49f2a30d20825ff3b1a48351da120e9a530500abe
SSDEEP 192:sxR9RFbf/frslK7xWXzoA8p43/g6+WNIYDoF4+GVIgIJ:sxR9Lf/frsl6ru/5I+3s
TLSH
T1AF32B615AE68A93B9CCBE219FB55BF53D2FD1033A0D11E48B6FC861C04E66DD620781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

695dfb82-1690-46b8-9e18-6fc061afd178.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\695dfb82-1690-46b8-9e18-6fc061afd178.tmp
Size 11KB
SHA256 d446d417bb05773a6d0122bb2ee750a9694af155c3efda78d5af41aec240dca2
MD5 44a91824221f43723b593619050a48c1
SHA1 5d298cfbfb745593e478dc14dfbc065351e0bceb
SHA512 3e1851f12db70933f617a40b6c6e760d17184d2ff9288972f736d13ced56c22825ef24f4ccd90d59b518ab60980db2bd33e54c0de8f7f3e038785c20bf9e9d8d
SSDEEP 192:sxRGRFbf/frsqK7xWXzoA8p43/g6+WNIYDKD4+GVIgDPJ:sxRGLf/frsq6ru/5IS3F
TLSH
T1AB42B515AD68A93B9CCBE219FB55BF53D2FD5032A0D11E48A6FC8A1C04E66DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 e378a0b6af948a713d21b29bcea42904c8f8729f262abd5addf957748d4928ba
MD5 ac893783120b2263dceaa7c3ce0fb415
SHA1 78fc8cfd345726059e4f694c72e0e17f136480c5
SHA512 c483d163d30ec06f46490544c586ac32b1340137db1efd045b3623a33a736171c46ecd3ce2ed410c9d373ee7e4f59da5bacc23fbefb0e2c8e5b9b606e8c8eb7d
TLSH
T11D51CC735593C093FFFBD53280C52B9737309D8AD5A79E928D68E4BD9D0EF11A284090
MD5 SHA1 SHA512 TLSH

Submit Download

b879995b-783b-48af-ad4e-4f213f68dd20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b879995b-783b-48af-ad4e-4f213f68dd20.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

8fba0200-5064-42f5-ae79-14588fe3a3ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8fba0200-5064-42f5-ae79-14588fe3a3ea.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

c747845b-4ced-4285-bfe6-ac7115f5dbf0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c747845b-4ced-4285-bfe6-ac7115f5dbf0.tmp
Size 2KB
SHA256 7aa1457f4fdc93eb45577d932ab32fb4a6c63ed3fc65562410b893cc25bd8f4f
MD5 5c5bf90b0ae9db7b729fc25aa23e5c73
SHA1 e57cd50e412980b11d5de4c6cb9f9be8baf88bbf
SHA512 ce698bd40bde83d765f527e37e2b3d0737051d1f164b4b9b83331e4e3a315e9cc9f8d3a68ac24a211751dc121a953fcdcaebe07f14d1cd0a0d75ad193022ef05
TLSH
T1EB51DFF7C3E4867E9A1146F0AA14AE2FCE2D0516432C3C6689F0AE5B93F2471D14169F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 89abfff3c39bd1694f635480ebf9a43920d5489cecfb3e045e4a6adae57fb9bc
MD5 3d6ad40cf9a21aa7701ddd2f50ce0180
SHA1 35b6046201acc47033348e433d4c0c5989d81f75
SHA512 9438a2606349498f3bfc10b32d3247abfd7bd1fa6af75e1ac6db8089424479d4dab6b18570703fa12da4797f83c89a3a45616db8b0fd44d338e32229d57a7f85
SSDEEP 48:K0nKzHJp5Sbx8hISXSK9X19SxXCY0lHbyLp2Np2sp2hp29p2Pp27p2/p2gbp2TpF:Kc0AKtyeehqKKorFGKW0Kp
TLSH
T114919456307B821179BD298846B4972A024371F33608E53F7FBC85B39E6AE045DFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ac1ae7a0-a34f-4a01-9da5-59a709af2af2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ac1ae7a0-a34f-4a01-9da5-59a709af2af2.tmp
Size 23KB
SHA256 496f817d817d5700a8eaed78d9aab34acc72dd9e4beeadb09076c05d9f5c1583
MD5 57de8fd3daa7fed2fdc805d3101be84b
SHA1 38a97af0c16a6d32d45c67b1066e071dba3371a0
SHA512 24512f16c47c664da485856d01ce839f7f22a1244dc5299a8470dd3733c4e4227bdb114334b13883c18954d9ae87a7fd98c71d7136a00b5d3b5af3a96a2b79f8
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R9yroTyT:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0V1
TLSH
T175B2D92B640CC77E4F804AADEC1A6F967D5802C796988D4047FE995C03C77EBA21E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fbda8db2-a578-465b-8084-27cd35ddb746.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fbda8db2-a578-465b-8084-27cd35ddb746.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53c96276-6e47-457f-a979-c056ae7a508a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\53c96276-6e47-457f-a979-c056ae7a508a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aca11316-04ff-4449-85d2-71f36c7432db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\aca11316-04ff-4449-85d2-71f36c7432db.tmp
Size 33KB
SHA256 665b22ef82a6edbf10065daf38643e17f982e874fe6a96bfc4de467505991550
MD5 1a79d3f26f621787f4768eaf63278c8c
SHA1 813c0363937dc3ff08a2f3172c30b4e2124da8e7
SHA512 dbcf3ec98049851d9f4744d2bbeba302c0d43df1a59ba4aa0026646eb85bcdc065e7d77f8114e3eb8a896ed6c08b5f56c7fac053ed5ffb807c170c6887e34d89
SSDEEP 768:2N3lWVybNbK1DztVOeRFZD1fTos7RjwE75EILx:2N3lcMY1fT/RUkPd
TLSH
T148F2AE36B8E49D334DF2E354E2493A47BEF49263CACD0A8495DD5E1E04CBA9D134B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da239c91-3bc6-483c-b9cc-2baf71a60790.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\da239c91-3bc6-483c-b9cc-2baf71a60790.tmp
Size 33KB
SHA256 485d753eb7d7f487454426d9c1413bca7e5a0acc484426f22a41f13a5d54a1df
MD5 4017265be228c265544bf92b045263c9
SHA1 ab86615c3c040bd3ab0b36ef432b7468050b7713
SHA512 7fc2799d2863e95b17d4d669d30c18ed820a6ca800b474bd2d6b49fe30d4a7b71bbc0bf1df84b400777de8ff7542e1e103d56b9631918b2c07d94bef04fb6709
SSDEEP 768:LN3sWVybNbK1DztVOeRFZD1fTos7RjwE75EILx:LN3scMY1fT/RUkPd
TLSH
T1FBF2AE36B8E49D334DF2E354E2493A47BFF49263CAC90A8495DD5E1E04CBA9D134B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dc996d38-9dc3-4a4c-87f2-386342ae6c56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dc996d38-9dc3-4a4c-87f2-386342ae6c56.tmp
Size 38KB
SHA256 edc224c8388ad18db382c6250b6a962ff884b3175e0b492b77f0bbe68bdec34f
MD5 6fa6f8a987647cbfed7c55da354fc832
SHA1 6e55826a5eafe961bd8f7301a25475d280fd6fa2
SHA512 e988a3b1728bede3f4d18bf4895b8da9836eb3f4caa89cfe58fa2237757a15f50e749f93d1bef39b1b9b5cd6d05095bed755d496ae3f530ebd85608d54e103fb
SSDEEP 768:g/UxvxjgC+k30z3ybNbK1DztgOeRFZD1fTos7RCw/+Pu:NZj3+k30z3Y1fT/RXKu
TLSH
T16D03B03AB8E45C335CF6E244B24A764BFFF455B385C91AD809DD2E0E058BB9D130B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46a207f1-96c2-4eda-a042-34c0b8a02268.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\46a207f1-96c2-4eda-a042-34c0b8a02268.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ff82b01b-619e-4190-9d40-806f4a5c37fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ff82b01b-619e-4190-9d40-806f4a5c37fb.tmp
Size 36KB
SHA256 77da16307f869b6cd56a8186b0cc240e0ce295bcb32fd4e15b11bbbd1ba382ae
MD5 733a4d5b8a5b32641376bd2401a1c5b4
SHA1 9a09f9c93974e2682e7984bf34843369ce564e6e
SHA512 a27071b472ce36fcf60c5a303912ea562989c30ee36f401a89265f3303590308be201431572295df0e461a4e9f09fa6bf7474fc89ae8f48220d6b4c86af1dbc0
SSDEEP 768:ZFdf3Jwg3WVybNbK1DztaOeRFZD1fTos7RjwE75EILx:Ff3fcVY1fT/RUkPd
TLSH
T158F2AD37A8E48D378DF6E744E2093647FEF442A3C9D94A8496C95D1E00CBADD138BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download