ee7e8891d4f1b7ba2f3df2bce206f7b5e677c75207ab27f8d16f287f6a9e4eec

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 46KB
Sample261107-plefpsby2x
SHA256 ee7e8891d4f1b7ba2f3df2bce206f7b5e677c75207ab27f8d16f287f6a9e4eec
MD5 28b179e9c28c7c464ef6fbc2659c3ca3
SHA1 c0fdb64607c7c1bec375690ad1f5696a44edf801
SHA512 af48f8d398066231b92e6904758f4ba515fbf70a8d9c245d2abc5754625f3e82cffec82017e0eda27b120939b5ca842ef2792be3f51681773d4736f5de4636ce
SSDEEP 768:jPWHz/xXiK8FZFUvGgmykSke7l5oUinW0R/Q0olukrBrUZRBxbJXLIQmOK4ROE:7El0h40uTE
TLSH
T12B23D673658C603A322B8353A4E0B7ADF969C502CB334959F5BC77AA8FE7D425933214
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4748	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{5EB90C52-6968-486F-B967-292799C8307B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1440	msedge.exe
1440	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1700 wrote to memory of 4104	1700	msedge.exe	88
PID 1700 wrote to memory of 4748	1700	msedge.exe	89
PID 1700 wrote to memory of 3320	1700	msedge.exe	91
PID 1700 wrote to memory of 3320	1700	msedge.exe	91
PID 1700 wrote to memory of 6056	1700	msedge.exe	90
PID 1700 wrote to memory of 6056	1700	msedge.exe	90
PID 1700 wrote to memory of 6056	1700	msedge.exe	90
PID 1700 wrote to memory of 4068	1700	msedge.exe	92
PID 1700 wrote to memory of 4068	1700	msedge.exe	92
PID 1700 wrote to memory of 4068	1700	msedge.exe	92
PID 1700 wrote to memory of 1424	1700	msedge.exe	93
PID 1700 wrote to memory of 1424	1700	msedge.exe	93
PID 1700 wrote to memory of 1424	1700	msedge.exe	93
PID 1700 wrote to memory of 4364	1700	msedge.exe	95
PID 1700 wrote to memory of 4364	1700	msedge.exe	95
PID 1700 wrote to memory of 3404	1700	msedge.exe	96
PID 1700 wrote to memory of 4364	1700	msedge.exe	95
PID 1700 wrote to memory of 3404	1700	msedge.exe	96
PID 1700 wrote to memory of 3404	1700	msedge.exe	96
PID 1700 wrote to memory of 1276	1700	msedge.exe	98
PID 1700 wrote to memory of 1268	1700	msedge.exe	99
PID 1700 wrote to memory of 1276	1700	msedge.exe	98
PID 1700 wrote to memory of 1268	1700	msedge.exe	99
PID 1700 wrote to memory of 4164	1700	msedge.exe	101
PID 1700 wrote to memory of 3700	1700	msedge.exe	105
PID 1700 wrote to memory of 4416	1700	msedge.exe	106
PID 1700 wrote to memory of 1776	1700	msedge.exe	107
PID 1700 wrote to memory of 1432	1700	msedge.exe	108
PID 1700 wrote to memory of 1432	1700	msedge.exe	108
PID 1700 wrote to memory of 1440	1700	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff83324c188,0x7ff83324c194,0x7ff83324c1a0
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,12178465853515980351,262842698077691654,524288 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1536,i,5306776165959342644,11739159358977610962,262144 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,2314989778482596235,3547945359888229307,524288 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=3140 /prefetch:13
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,1064765780578224782,3083776940393918532,2097152 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,7153227301910980473,11314069459303777363,2097152 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4352,i,16434891402031477599,2396126074136121109,2097152 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:9
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4368,i,8303689061531848207,17597102966929066366,2097152 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3836,i,7952713156178337995,18214587284910405874,524288 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,15909265596200661923,13030945349651133125,524288 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:14
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,8534369529080999346,3055262637976281305,524288 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,8534369529080999346,3055262637976281305,524288 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,7928654519887028762,2654026626406427237,524288 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,2091834535162183703,2418152322434994088,524288 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:14
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,11430149192178290244,78138425496436414,524288 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:14
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,12462784794623295631,12735082878410910508,524288 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:14
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6424,i,16958901397207917490,16861138116549376267,262144 --field-trial-handle=2272,i,3677274680556782240,6011759943467988492,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1440

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2788

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0175602c-c9b1-429f-8ea9-b8011175edb0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0175602c-c9b1-429f-8ea9-b8011175edb0.tmp
Size 33KB
SHA256 d1908ac76e2e3174e99406ce6ee3feec4fad0c357517090c9f6ab7821e20a7eb
MD5 e786d390d30873b76921814cfbfb201d
SHA1 1eb6f1db55e7979354beee1cf031176f6f06cab7
SHA512 3529cea66b24b6db87ff61b79d77029e6052294576fe5abae30d2e1831c95fa461fd97718e31f6a57f243098cda1823e04445b60437edf92581f2b51bfa5c93b
SSDEEP 768:8n3L9Jsc7fZrK9C7p5XSwQs88uBkiT2zE75E9L0:8n351trSCFILNBukmY
TLSH
T1ABF2AE38E8909DA39DF29342B75A3717AFF09107C4C80794C9DEA61E02CB75E6787857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3b5706c3-e052-4bfe-9e2e-fc69474e3d37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3b5706c3-e052-4bfe-9e2e-fc69474e3d37.tmp
Size 33KB
SHA256 338e81eb810fe3c295fb29cff535a10a4cb853912e6f97038f6dbba73bfe188b
MD5 3de4d7f857375d75f2dda5fc975af486
SHA1 a33e1c4c40d34fe333294488e338adb50506ee4c
SHA512 60ab8265ebee48128e7c58c50b99a4539393408e43182239f41b89d7451d500df5cc328f17d009d315e06ac867e5ce376314de1a7431adcc76401961ab0ac976
SSDEEP 768:Fn3s9Jsc7fZrK9C7p5XSwQs88uBkiT2zE75E9L0:Fn361trSCFILNBukmY
TLSH
T164F2AE38E8909DA39DF29342B75A3717AFF09107C8C80794C9DEA61E02CB75E6787857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92c2c177-1f0b-4125-a65e-5b8c4fd5f9d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\92c2c177-1f0b-4125-a65e-5b8c4fd5f9d6.tmp
Size 38KB
SHA256 e30387bbcb7dc409a365fcb02c8a9b72dfb93733de323be5990438ce6d69db9a
MD5 93f982424ba7b2fbe9f21723f9d1ae11
SHA1 563049471fd189dd6eff27c5d26817379432a4a5
SHA512 d03a0afc1be38dc58a4c3b2f65aed04b1ff1ac4472262726710862788cb496072ccfacb13554894f82bad80720a1dacfb66f3d2612b8e37f8b056f9ebeb13c88
SSDEEP 768:9/UxvxjgC+W3LgGc7fZrK9CMp5XSwQs88uBkiTzz/P84g:gZj3+W3LGtrSCSILNBxHg
TLSH
T10403C03DE894AC63ACF29385765B275BAFF06053C4C80BA449EE7A0E038B35D5747897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

0cf3c837-3c6e-4c74-820c-9e6e4254cb4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0cf3c837-3c6e-4c74-820c-9e6e4254cb4b.tmp
Size 23KB
SHA256 757642ec47bd8b31eba885b94938f98bd01129db2ede86b7d56b00a1d584a152
MD5 4a99edbcca443c4485ef7166acdab332
SHA1 e376de71fd678572e879fc2f299d28161a02b6f0
SHA512 047ff24b21ce77b4195f807f14fd5df730b3f3ae2ba056e6405cc9da2738eba75c7dca6852766042b70f558eaa9d338f4358e0e43004fc05b4d321aa8c4aa17d
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXDroJen:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0VC
TLSH
T134B2C92B640CCB7F4FC04A9EAC196FD77D9802C79A588D4047FE995C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

538fe0f5-eded-4669-99f9-72837f60eea6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\538fe0f5-eded-4669-99f9-72837f60eea6.tmp
Size 11KB
SHA256 92ad1675928071b8ff4a515c391ae7e867bd947a249ccf30aa83bda550c936f9
MD5 ffef91a98f833c72b962f3d10d5fa2b9
SHA1 59ad312af3c10b45c7faa9b8cdbe53c2f6fcd625
SHA512 e11c943d327d525741cbae47893fda4cd9e07eb980b7d71cf1294f29f05ff0b6f159ea0f34aada48e6f8d73f4145c8a3cbe9cdcd6ccb8d25ee927f2ea27d9964
SSDEEP 192:sxRjkRmbC/fKsUHRdqzoA8p48/g6+WNIYEQYDGgIgDDPJ:sxR4yC/fKsU3l/5IJPR
TLSH
T1F732B715AE28A93B9CDBE20DBB557F53D7F95032A0D01E48B6FC8A1C14EB6DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8045da25-b72b-4244-b131-d72aca944aa2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8045da25-b72b-4244-b131-d72aca944aa2.tmp
Size 11KB
SHA256 0dcd47aeb558fa00c2716622314c15635d97a69ff689b1ac0ce6cfaeded12307
MD5 a02572de6dc345e96239c9b2ebafe6fe
SHA1 4b24056677a8e422d05429b1eb1e6aaedd4af978
SHA512 9c7b2282614c84577d1c763139a8acd8db9dd999b81d0cafb4bc757d770eea1e72e272cb4e6921bcad26c0e9a934729297a0a84fe0142a48a95abb4f38655903
SSDEEP 192:sxRjkRmbC/fKs0HRdqzoA8p48/g6+WNIYEGQDGgIgDDpJ:sxR4yC/fKs03l/5IFPT
TLSH
T18B32A615AE28A93B9CCBD20DBB657F53D7F95032A1D01E48B6FC861C04EA6DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 378522fe5d1188c6aa08be080be6549377ca882afa3aa266b99c094810eb854f
MD5 ae3deedc52619d74f5711c9f686e8fd3
SHA1 a3234f8b02e689dc4df3f113e94784dc5613e6ce
SHA512 36203a1fb2ecece70068bd9073376cb005a6ed2dc0f1405e9b849ae8b3e7c2ca8a4df5641f50d181bf42e0c472467ce0f1325c0e5df1d5fd6b69b8b2dc9a3958
TLSH
T12B51EB8795A27647F7FBC23549EC12CB3AB059409E873E4218A7E4B45A0BF58E70C13C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 900d1ff96a66babd2cf9189938545b36e145c4e7736dd702217e14456add7f7e
MD5 e23c117b24815944cac09b4b9667eccd
SHA1 bf15bd8f505a8210d76a5f94dd013b6cc847e96f
SHA512 90a29fe87a1114dfaaf7aed21cfa4ccf86ef3c00ca8066bc0e131bfcf672d9f65bcd2e09826d8b757f01d6cb717602cca741994a5705666ed200a0245a9d826b
TLSH
T12C510D87A5627243F7FBC23049EC12CB39B059409E873E4218A7E4B45A0BF48E70C13C
MD5 SHA1 SHA512 TLSH

Submit Download

7f7b8a53-3653-4500-a775-fa6fd9a17812.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\7f7b8a53-3653-4500-a775-fa6fd9a17812.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0784e661-3155-4570-8869-429fdd1f4ea4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0784e661-3155-4570-8869-429fdd1f4ea4.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

5edbf7c8-6333-4582-94cd-0acbe3b58e01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5edbf7c8-6333-4582-94cd-0acbe3b58e01.tmp
Size 2KB
SHA256 bad363cff76cad91f64b7fa0559f52ebd9d918dfe2b593f3b9cdd7547766efd4
MD5 9ea732d221e8f8496de23a088362af7d
SHA1 32c3e84bdb1682b2611447b5700d91c5e21a96e3
SHA512 a27d234c094d312330fced877e762d5957d44db088f4a26c3df613eb80ca4da8e67c324d24782cd12f00910670201520c068f75357ceba025cfcc7f7a4bd9569
TLSH
T10F51BCF787E4867E8A0196F0AA147E2FCE2D0515432C3C5AC9E4AE1B93F2471E14179F
MD5 SHA1 SHA512 TLSH

Submit Download

7cc420b5-4945-4d7c-95f9-c60b2f360eec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7cc420b5-4945-4d7c-95f9-c60b2f360eec.tmp
Size 1KB
SHA256 7f0e48b5289902958f3d39fdefc57ae711fb478eedf05b6dc8e3aaad5b450714
MD5 de07ae6d17ab198649f81a05e4fd45db
SHA1 9d56d9ee29c5a5254f95994e75a3666827550404
SHA512 0704843219e58df395166fa4e2ae9b03dbc9563284a4e48a8161b61895a928d781949b90f36792a5cc890d0671b4209c6e3ea4cfb2f93b724813ccf090a7242e
TLSH
T14B31ADF3C2E8467D8A0156F87B282E1BCE2D0854532C3D56C4D49F5F93E18B1E28099E
MD5 SHA1 SHA512 TLSH

Submit Download

7dec96dc-3e18-48bf-935a-356294d1d2ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7dec96dc-3e18-48bf-935a-356294d1d2ea.tmp
Size 1KB
SHA256 fb037cc6a4657f905838db930fe58b5bb3309ef7505253b8031d869b9e337213
MD5 bf88b610baa7600a7d202c21ad69e931
SHA1 bac13c14c04f9b7fbc1b0f029e60f7e4a411052f
SHA512 84470298abc7978c17a59ea4d40e99d736bd3d98aa1bace08e239a78ddb77dd7c37483871fb52448c28e4f6e46a1a1246db5f15b7a38a4e7e9fbdfc22c5dbe22
TLSH
T18F31ADF3C3E8467D8A0156F87A282E1BCE2D0854432C3D56C4D49F5F93E18B1E28099E
MD5 SHA1 SHA512 TLSH

Submit Download

e9c36c03-5bcd-4713-a77c-faf2f47c9e8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e9c36c03-5bcd-4713-a77c-faf2f47c9e8c.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

dbce7542-af3f-4c6d-87c4-8fee1c944ce3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dbce7542-af3f-4c6d-87c4-8fee1c944ce3.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de9fb31d-430d-487c-8205-2c22bce82649.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\de9fb31d-430d-487c-8205-2c22bce82649.tmp
Size 11KB
SHA256 f966a5422b4ad345e3d5b928992ba57ddf4551c6c363bc65b69902c501ba05d8
MD5 f5d37cf6a7a7efa4b20f8a8413a59fd0
SHA1 95442e927a6c3c6891e7d90f70644fe98b5bc879
SHA512 9e83086fbf6181746101d019205851aca67eb791a9b9bc75b336013d785c3c7a27e12633596e02eab0d7aa4b3887e51eca9805dcb0bd0af6b11fa3f63ae2e6d6
SSDEEP 192:sxR0kRmbC/fKsQHRdqzoA8p48/g6+WNIYEGQDGgIgIJ:sxR/yC/fKsQ3l/5IFs
TLSH
T1FA32A615AE28A93B8CDBD20DBB657F53D7F95032A1D01E48B6FC861C04EA6DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

756d71cf-dc81-49fd-a829-d8f9c9031eaf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\756d71cf-dc81-49fd-a829-d8f9c9031eaf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c01be998-afc0-4aa8-aa27-9eced8270a08.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c01be998-afc0-4aa8-aa27-9eced8270a08.tmp
Size 36KB
SHA256 22c20b29cd9aed37d52941de4ebfd9c05811f2bd0b509a875b1bcd63a7e73a44
MD5 ad8551ed6f34117d8bb58b327319bb80
SHA1 7b24434a05336d607340003cf1b6c53ba70785f1
SHA512 4475b9b279f5ffaacc9fe19c2b2ad76b64e14ef97bf44f30dcac292c2d09123ffc0d40ec5660ceb30cc082638213ccdbb5a7c22d49de373b82d9da38a67fcd9a
SSDEEP 768:BFd739wgJ9Jsc7fZrK9Ctpp5XSwQs88uBkiT2zE75E9L0:d73L1trSCtXILNBukmY
TLSH
T111F2AF39A8C0D967ADF69B81F75A3717AFF09147C8C80790DACEA51D018B39E2387C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0557d65-f6a8-4e9e-9696-b49cf7e665c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c0557d65-f6a8-4e9e-9696-b49cf7e665c7.tmp
Size 38KB
SHA256 df1e449233f7fd54ca909f1ce3406aef479585fd4c9eae8e5fe062c936151943
MD5 48f95716093a750c31103dd4fed1f6d9
SHA1 d87b46f12bf9f7dad57d492cf503fd36f1e03508
SHA512 9d879b8746f347dbbee9d961c46d65cb5d5666d74cdaf017d8cac396856ccce4d0893138348f680abb0ba57f30ddf55b7ecd441003a34a6524762ccf87db6685
SSDEEP 768:o/UxvxjgC+z3s9Lsc7fZrK9CYp5XSwQs88uBkiT2ztt:1Zj3+z36ztrSC2ILNButt
TLSH
T18203BF3DA890AC63ACF6E385775B271BAFF45043C4C40AA889EE660E078B36D5747857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e428e9b9-c62a-4fa7-8f95-05660990b8c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e428e9b9-c62a-4fa7-8f95-05660990b8c0.tmp
Size 37KB
SHA256 1aa77799d7d9623dc2141a36044b0c5bb31640bc1b1266e9bb900106314600e4
MD5 de20002621492dc2ef5584a37bc58747
SHA1 a8032a8df23090f914ba205c335e4417361c5f0d
SHA512 b95af41d248ba8bbf47ef442c4dd63e209cedb92546ae830d385721117713301029aae003eda6b776a0648e09d210d951034fd7760ba76001454be56fcf87ae7
SSDEEP 768:R/UxvxjgC+W3TIxc7fZrK9Ap5XSwQs88uBkiTCy/P84g:kZj3+W3ThtrSeILNB3Hg
TLSH
T17E03C039E8945C63ACF3A385375A275BAFF05053C4C41BA849EE7A0E038B35D6707887
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91e287fd-8435-44d7-ad68-7f3fcd0cf14c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\91e287fd-8435-44d7-ad68-7f3fcd0cf14c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download