2f3d90f76d9dcf2a0b51602995e58e9088ec3176960221e34527635fa6cb0b85

Analysis

max time kernel
148s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
category/creativity-design/business-marketing.html
Size 773B
Sample261107-phackscz4m
SHA256 2f3d90f76d9dcf2a0b51602995e58e9088ec3176960221e34527635fa6cb0b85
MD5 eff2769910e001def3da3aa1b37e3768
SHA1 0b4d02c4ba8700d25961eb8ca7e3f52b97d5d819
SHA512 be79e8fb26a04413e839c9df4cb23359f50b5ba078b0db82cad69606534bdfca444d3a6a3b117e8110ebc52620b936f6c0ef415ee331d5bf073b21a00fc13816
TLSH
T1AB01F1EE69ADA2123321E268CDECBF40637302AED600DC8290054CAC51A055785CED7B
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5112	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-53044966-3830981193-2402648431-1000\{A23D0FEA-B91A-43CB-AF54-4D6E1F267AC8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3872	msedge.exe
3872	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4340 wrote to memory of 3288	4340	msedge.exe	89
PID 4340 wrote to memory of 5692	4340	msedge.exe	90
PID 4340 wrote to memory of 5112	4340	msedge.exe	91
PID 4340 wrote to memory of 5692	4340	msedge.exe	90
PID 4340 wrote to memory of 5692	4340	msedge.exe	90
PID 4340 wrote to memory of 2516	4340	msedge.exe	92
PID 4340 wrote to memory of 2516	4340	msedge.exe	92
PID 4340 wrote to memory of 1936	4340	msedge.exe	94
PID 4340 wrote to memory of 1936	4340	msedge.exe	94
PID 4340 wrote to memory of 1936	4340	msedge.exe	94
PID 4340 wrote to memory of 4396	4340	msedge.exe	95
PID 4340 wrote to memory of 4396	4340	msedge.exe	95
PID 4340 wrote to memory of 4396	4340	msedge.exe	95
PID 4340 wrote to memory of 3584	4340	msedge.exe	96
PID 4340 wrote to memory of 3584	4340	msedge.exe	96
PID 4340 wrote to memory of 3584	4340	msedge.exe	96
PID 4340 wrote to memory of 3928	4340	msedge.exe	97
PID 4340 wrote to memory of 3928	4340	msedge.exe	97
PID 4340 wrote to memory of 3928	4340	msedge.exe	97
PID 4340 wrote to memory of 3344	4340	msedge.exe	99
PID 4340 wrote to memory of 2908	4340	msedge.exe	100
PID 4340 wrote to memory of 3344	4340	msedge.exe	99
PID 4340 wrote to memory of 2908	4340	msedge.exe	100
PID 4340 wrote to memory of 1056	4340	msedge.exe	102
PID 4340 wrote to memory of 976	4340	msedge.exe	106
PID 4340 wrote to memory of 4964	4340	msedge.exe	107
PID 4340 wrote to memory of 2044	4340	msedge.exe	108
PID 4340 wrote to memory of 3760	4340	msedge.exe	109
PID 4340 wrote to memory of 3760	4340	msedge.exe	109
PID 4340 wrote to memory of 3872	4340	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\category\creativity-design\business-marketing.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7fff489ec188,0x7fff489ec194,0x7fff489ec1a0
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,4447264902693309212,15803760056622699272,262144 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=2532 /prefetch:2
  2⤵
  PID:5692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,8778199506580928161,17592003223528958870,524288 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2172,i,2793516672281547582,4654279462124785382,524288 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:13
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3652,i,11310099499251265184,5016407577741748166,2097152 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3660,i,10124271434679797863,7681619350423569252,2097152 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:1
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4344,i,11866588993548377857,12879313635753929750,2097152 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,1161807227689496688,10468289807259107100,2097152 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:9
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3844,i,401599814732348480,1227690041986509830,524288 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:14
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3800,i,4461706085349447559,11157850320547348154,524288 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,8629390182225583912,17135355019139781245,524288 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,8629390182225583912,17135355019139781245,524288 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,884307090553871307,1618281030455339952,524288 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:14
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,1328306745154506848,6530650712115624200,524288 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:14
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,1091227551419362215,742082699246691461,524288 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:14
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,16702618023509831639,17561271512785045164,524288 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6260,i,3232275575036883302,7219798332952644515,262144 --field-trial-handle=2520,i,452869173572299232,11902168756855208615,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3872

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3348

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5048

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0a66d7b8-ce65-477a-a1df-a099a80a6f75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0a66d7b8-ce65-477a-a1df-a099a80a6f75.tmp
Size 33KB
SHA256 591c2fcd3389307326c14fee6150f7f7969e92aa94525c3784cb4abb9f1d0e58
MD5 9f07118282f79cd60fe9d2ff4d5ac070
SHA1 8931824b30a3cb061037296ab4da406a04ba8edb
SHA512 a92fba5db79d5deec7c07152caeecfb9ece8c63efeb960f156ae16f4edbb29dd3b28d50151006f1896671ec8c7a8567676ec6ec20ff96ab05b2a73bccd84c92a
SSDEEP 768:LQ35349TOfzfM1rtyfM1ByJYe1ELsAvC8/YEopE75EuX9Le:LQ3FfzfMSfMsYe1EQujYHkVX9q
TLSH
T132F29D71ECA48D375DE1A699B24A2757FFB4C11399C84B94D6CD2B0C01C72EE634F82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5c542078-786b-47e8-9ff7-ec1723062c48.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5c542078-786b-47e8-9ff7-ec1723062c48.tmp
Size 38KB
SHA256 96adc4a6bab57b7cd584465f8bc3817fef1e47ada36e91ae3009f5e1b8962dec
MD5 26d3d494bca517c61c3f22b7074cee0d
SHA1 6b66282481f9f42bcb53b254a73601f707324f80
SHA512 6414f21616762aa50def38ff17dc91cb4a377a3326cfb233acc65ddc15597fcacdaf5865ab70d4713a8955b9ecf65185e153e40c81323196e0ad8905ac9773aa
SSDEEP 768:2/UxvxjgC+i323m9TOfzfM1rtyfM1yyJYe1ELsAvC8/YNopSHrkw:rZj3+i30fzfMSfMdYe1EQujYMS4w
TLSH
T1C403BF32EC74CC375EF2A398764A5757EEF8811395C45AA886DD2B0C05C72AD630F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6344406d-339f-4e7b-b37f-17eeb3f559ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6344406d-339f-4e7b-b37f-17eeb3f559ae.tmp
Size 38KB
SHA256 fc717a67b4bdf037e7e42f8042fb910f135311ec29fad5a5bdd2bd5467f7eabf
MD5 d6bc88ae0c328e8d43f1133975adccc9
SHA1 8681b69b98f92a7d3692aaefcbf432f06e727a1a
SHA512 5034cabd599dad32a26b14786b812839b4f3fbc866fad5b953224fb8dbfcfb6e1af35becb169a4cb86fbedc11e7baef306ae637186bcf6ade388f3bcc83aaaa4
SSDEEP 768:A/UxvxjgC+039349TOfzfM1rtyfM1hyJYe1ELsAvC8/YEopcM:tZj3+03JfzfMSfMsYe1EQujYHcM
TLSH
T17B03BF32ECB49C335DF2A698B24A1757FFF8811385C45AA886DD2B0D05C72AD534F86A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

935ba90a-7ad6-4cfb-99fa-b7c542e7afd3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\935ba90a-7ad6-4cfb-99fa-b7c542e7afd3.tmp
Size 33KB
SHA256 545ddd6d66e239544da53b3f70636745b1b9d941acd239877df93e2a30ba8ad5
MD5 1c824aa8ca265d422dc541e8f05ef5f2
SHA1 e6db76538cb04affe4b5832f45ba695e899e58b2
SHA512 c15abc7a1309ea08220a55c38cc76747d33ecaad22c783af7b16353cb4a8aec0b4303fb932b82183c3ab2aadd53a86755c539c270209d31fa81c7d9d94b510d8
SSDEEP 768:9Q3c349TOfzfM1rtyfM1ByJYe1ELsAvC8/YEopE75EuX9Le:9Q3ofzfMSfMsYe1EQujYHkVX9q
TLSH
T1DEF29E71ECA4CD375DE1A699B24A2757FFB4811399C84B94D6CD2B0C01C72EE634F82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97e66e9a-3de4-4ca6-8eab-fed5736130ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\97e66e9a-3de4-4ca6-8eab-fed5736130ee.tmp
Size 36KB
SHA256 2f7e13e06e539dc94330cf73e2b31c9c3e51f6bbea2021a9b21fef3348db7045
MD5 f5bdceea0953d59350eee1ba5b0cc1e6
SHA1 79a37fa2af104ca4f1cc62d38a628b6318fb7016
SHA512 a0b4ca07d4aff64ad763c50e06311e97c8d12e7330c50b119d2f5a186dbfd2167f288ee275f675f94ce8859468803af20dcf1f8c6ba44e8863299fdb3ff4bd04
SSDEEP 768:OFdQ3bwgV349TOfzfM1rtyfM1SGJYe1ELsAvC8/YEopE75EuX9Le:uQ3vfzfMSfMFYe1EQujYHkVX9q
TLSH
T1DBF28D72DCA4C93B5DF19B99F24A2756EFF48113C9C85694E6CD2A0C01C72ED134F869
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2664448b8ab4f4edce89a8c875c31ed1e748ff3060fa1567c434149210bb4fc5
MD5 35b0bc3bbbf168c9b6c74d3bc119d3eb
SHA1 3dde0e79982d9dbcf2dbd3045bae0a5bc63e14cd
SHA512 9c5f83f731b8e4bf7f7e64c2e51191192b13fa5260950a1fcade843318dbf7d5b99057f3ca893e35cb6c19942f5b5852e7124ed01f7c46e7de9bcea70152fc0d
TLSH
T173D02BB4B76DCDD3D00310FE0014AE0421B37015EE040280230248484400104110236C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a9db3b181fe23d2da858b764c2d3bc2baae4a7e217d8cc5885ed34c7b21166b7
MD5 c2e18a2143bb27e5b37e2d5b65c09643
SHA1 43bb7d235630acc17d81e04e37f3cd25e299ecc7
SHA512 08f1e7fa966122b22bea5e316c89298987fac4c53be675ad48a1c1c8a784dc7b1d8789be8d1abdb8cdb59c14d6757e0f1934d0a56d919c8fb08e311621fe4d9c
TLSH
T109D02BB0B77DCCD3D00310FE0015AE0421A370159E0402802302885844001041101358
MD5 SHA1 SHA512 TLSH

Submit Download

082e466e-f53b-4906-8131-3754f3b8f9df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\082e466e-f53b-4906-8131-3754f3b8f9df.tmp
Size 11KB
SHA256 db1fc0ff93ce8540a9941a8604e658e76ea5d148c76deb6f9b327a671287e0d9
MD5 9eaab18342383e1734f7d2ccbc6c3204
SHA1 22ec4216b2f3786014825e6e23bc55cfcfdf8412
SHA512 829892d51c72e7042acec85614771b13c494c14e79affd0cf914eb6708cbc30a692d53f73e8f86937bedbfa773def8908cc92b40bac91cf205f00cecb027d462
SSDEEP 192:sxRvRwbq/feSsSqrViEzoA8p4f/g6+WNIYx6fqU1GIIgIJ:sxRvgq/f3sSeilG/5IwU7s
TLSH
T17332A6156E28A93B9CD7E21DBB66BF53D2FD5032A1951E48F6FC861C00EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2687b773-a0bb-4e2d-99a3-32ed977327f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2687b773-a0bb-4e2d-99a3-32ed977327f6.tmp
Size 23KB
SHA256 ea15630aef64705c54427b2a008b255f893944178bb7fb3190db45ef9cdbcbab
MD5 1c318be657a10c37694432ba9c355008
SHA1 6136185c441099ba4ced72136b54786fcc08cebe
SHA512 a4725345c775951ee89daa502a3df4aac739576a3c97b26d9afaa505eb4bd7b7ee7386a53c1dd0174b26a0e859af49b9921f9b8ee3f1583c9ec03d39f3965b01
SSDEEP 384:z/ZDnwZfCtgbRFfkWKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnL9K6RMhrowcp:zBDnwFWgbjfkW8F1+UoAYDCx9Tuqh0VE
TLSH
T16CB2C92B644DC77F8FC00AAD9C196E9B7D9802C79A548D4047FE994C02C77EE922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

815bf475-9199-47e2-8d15-36c11d3142c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\815bf475-9199-47e2-8d15-36c11d3142c3.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

912d15ac-4ce9-4115-b910-2fc5f62e9e33.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\912d15ac-4ce9-4115-b910-2fc5f62e9e33.tmp
Size 11KB
SHA256 b1ffa46e62f58432044235b5a4dfc76296aa6eaf1a050401bf6e0a5985f0d0cb
MD5 5821c59d684f09136f68d2ecfbb27a5f
SHA1 b8749fc04c8aa4e25364d753b78276001aeeaed8
SHA512 b2375608c2f88e5bb6a4a6b9d94aec4c6c7b911787c4ab7bafa16751c3bb4d6695bc64bc620b28b5e0c7816861d387d902a460387b5a302b17df66f91ec87f79
SSDEEP 192:sxRARwbq/feSszqrViEzoA8p4f/g6+WNIYx83qU1GIIgDSJ:sxRAgq/f3szeilG/5ISU7q
TLSH
T11C32B715AE28A93B9CD7E21DBB56BF53D2F95032A1951F48B6FCC61C00EB6DD220340B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 5a60a0fa1e9eb0839ed67af62410675d7d27109ffd38fc04cda32472849df3aa
MD5 f33a20854a36e80cd4405232a5bd4b0f
SHA1 20fa1052b97365bf8aedc92ca62f44a39904f212
SHA512 79081d2449ce9ad4ef37db80c37a2a37da6999830e014f627e1f112dc6b8d871eed1efd43ee524fc96a63b5123071a71ccc0f477982c2dfa06a5b4c7779eb038
TLSH
T12B51A5119AE04096F3E78073C6E4AFC7B7336D811683CE261EAAE8BC59423174468D82
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a6410621bc6228e0ba8277d31e8bfe160c5f1c48de6245f4c1c3e1bb187282be
MD5 cf70d55445aab4b51a5ffdb62e94b691
SHA1 55d17a7d8b613efee38d23ab52b698381cc61e41
SHA512 df421b6c599539c07937c4a84222f0a83b7e1960cb73ab0f0e35e09c07a2f1f811292037d444ff658c1c4ff3f54bef9e2e476df226d29cc05d32255aa21a93c9
TLSH
T19F51B6119EE48096F3E78073C6E4AFC7B733AD811683CE361EABD8BC58423134458D82
MD5 SHA1 SHA512 TLSH

Submit Download

a03288c8-ad18-44c6-ba93-633dc0ce662c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\a03288c8-ad18-44c6-ba93-633dc0ce662c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

88c630cf-12a3-43dc-95c9-5d1d43935398.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\88c630cf-12a3-43dc-95c9-5d1d43935398.tmp
Size 1KB
SHA256 fe7f04bd929e3fbd11fe56ff6dc0a3fe3d40db9e5b3aff6361dc01dd9706169c
MD5 4f3dbd351c9032c0259855a0f2a61eeb
SHA1 9e2295a31653a48aebca941fa529dec413b45aaa
SHA512 5b094e478d49bdb38ae61b59b0d2345d1581c4424e28dceb0b0b6bc20d7668c121bbff694a00b098f9eaed1ff24cdfdfba32700ce0603d9042e9c853156f24f0
TLSH
T19931CEF387F4956E8A1196F0AB18AE1FCE2D0515431C7C6AC9E0AE2793F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

99aaa7fe-ff45-4a5d-b5af-62f97d04c653.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\99aaa7fe-ff45-4a5d-b5af-62f97d04c653.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

a2834a33-2ac0-4ffc-bd17-f1f3615b7466.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a2834a33-2ac0-4ffc-bd17-f1f3615b7466.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 526b5f08e2ca014c7df764aafe487e9f7c4fcced6ac70467c0e61d0377813148
MD5 be9a1092a169fcd37109f32670594922
SHA1 fab27b82f35cbff09435ca471a3843fcc477a768
SHA512 54e1bfa1ca3ec405061ad5d5d5e540cf22df06877cc7a2b54ae1de6827ff0f30d68678d7ff4bfa35c412696f281f674d723ea91c320ebd77ac4f0f16bea847d4
SSDEEP 48:KM0IzKtaMHyZuIfK/6UHNI1KOYssV26EqGbd2HqIGibKJ:KM0gKtauqu4K/6INKKOYg9qKJ
TLSH
T195912021322B12423C7E3524A5E5B75B478731A33038E92B7BE955A29EA7E040DFC5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

d07143e8-f2fc-469b-85ef-6f0f3118276e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d07143e8-f2fc-469b-85ef-6f0f3118276e.tmp
Size 11KB
SHA256 4216f05bf53422fb788147d249dd979bb5515e7266e0696915e2b40b2a104730
MD5 fa4806dc14e6d3f55af5c64f7d5c64f6
SHA1 d5187bf09552aebb2c8571a80cfd03604749f602
SHA512 27da192d847aedf08f5274369974eaac6d8f31c59a5e7d6229741734a1d0305bf25e957edb2f58b30ece36f1ade182c03cf129853c374ecce5b9ea5c0d774f0f
SSDEEP 192:sxRARwbq/feSs4qrViEzoA8p4f/g6+WNIYx6fqU1GIIgDwJ:sxRAgq/f3s4eilG/5IwU7g
TLSH
T1BA32B615AE28A93B9CD7E21DBB56BF53D2FD5032A1951E48B6FC861C00EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fff9cf6f-8b68-4d02-8c1d-a657f28841bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fff9cf6f-8b68-4d02-8c1d-a657f28841bc.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

81a82e7a-a01a-46a7-a3d4-8a93ce6a96f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\81a82e7a-a01a-46a7-a3d4-8a93ce6a96f6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12b2b328-9d33-4eba-b3c8-b5b83eb2ee02.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\12b2b328-9d33-4eba-b3c8-b5b83eb2ee02.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fbb381ed-12b1-4d54-a421-437bd8590b3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fbb381ed-12b1-4d54-a421-437bd8590b3f.tmp
Size 37KB
SHA256 1c4ea5ec0ff04289943b1f7d185f51fa098b3925688971099ab51a37db475a78
MD5 cf225b4e8eea3cb531c2165d75fa8500
SHA1 ee0ac57c235df679b18d04b66affbc8e91a31daa
SHA512 a019802847bcaf30347b58f097c2180e8da89cc37ba967fb6be72d520595edd3c86773ad834befb895164cd93e7e2f4c807d5bee11f641ac13d92fd2ccc64cde
SSDEEP 768:h/UxvxjgC+i3VK9TOfzfM1rtFKJYe1ELsAvC8/YMwrSHrkw:0Zj3+i3HfzfMKYe1EQujYRS4w
TLSH
T16B03CF36ECA48C375DF2A788774A5757FEF4812394C45AA886DD2B0D05C72AC630F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download