6116abe62c19e2685794c1de09b1b9b2757bc352643a2c5b0afb820b4797be7b

Analysis

max time kernel
148s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 16:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MonitoreoSilos/build/reports/configuration-cache/3mgjr0nsq75uiivex861k3agt/6pqz9vnuds3gj9wauire1o53u.html
Size 215KB
Sample261107-vbmbfsdt3s
SHA256 6116abe62c19e2685794c1de09b1b9b2757bc352643a2c5b0afb820b4797be7b
MD5 716dc8df9663d8b746f1eff3b7acf8da
SHA1 bc584cfbd9e901e148dad307d69b599b24c29cd2
SHA512 9efdbb19abc2af8971abb96be762f9dd2aabbbe1b318814a39dc0417912a65dc9c8dd4aa16c552fae1da880d4de9f3dbf4da6417c49703d38e98cafe3dc7435a
SSDEEP 1536:NzpnlZkXXKtdTEBk4hVO4+W1DaeThXqCLJDHZUuksvRuCUY:c8kDO4+w5TllLJDHyuksvRJL
TLSH
T1CF24638A63D6B199228EE461846F2587B1BA01CE84AC8058F725DFCD7FD531C4273EBD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5844	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{CD9A3184-63C2-4986-9429-D45AF46DE6C9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe
3060	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3060 wrote to memory of 4592	3060	msedge.exe	88
PID 3060 wrote to memory of 4432	3060	msedge.exe	90
PID 3060 wrote to memory of 5844	3060	msedge.exe	91
PID 3060 wrote to memory of 4432	3060	msedge.exe	90
PID 3060 wrote to memory of 4432	3060	msedge.exe	90
PID 3060 wrote to memory of 6104	3060	msedge.exe	92
PID 3060 wrote to memory of 6104	3060	msedge.exe	92
PID 3060 wrote to memory of 6104	3060	msedge.exe	92
PID 3060 wrote to memory of 4220	3060	msedge.exe	93
PID 3060 wrote to memory of 1088	3060	msedge.exe	94
PID 3060 wrote to memory of 4220	3060	msedge.exe	93
PID 3060 wrote to memory of 4220	3060	msedge.exe	93
PID 3060 wrote to memory of 1088	3060	msedge.exe	94
PID 3060 wrote to memory of 3900	3060	msedge.exe	95
PID 3060 wrote to memory of 1800	3060	msedge.exe	96
PID 3060 wrote to memory of 3900	3060	msedge.exe	95
PID 3060 wrote to memory of 3900	3060	msedge.exe	95
PID 3060 wrote to memory of 1800	3060	msedge.exe	96
PID 3060 wrote to memory of 1800	3060	msedge.exe	96
PID 3060 wrote to memory of 6096	3060	msedge.exe	98
PID 3060 wrote to memory of 2836	3060	msedge.exe	99
PID 3060 wrote to memory of 6096	3060	msedge.exe	98
PID 3060 wrote to memory of 2836	3060	msedge.exe	99
PID 3060 wrote to memory of 5828	3060	msedge.exe	101
PID 3060 wrote to memory of 2004	3060	msedge.exe	105
PID 3060 wrote to memory of 3004	3060	msedge.exe	106
PID 3060 wrote to memory of 4372	3060	msedge.exe	107
PID 3060 wrote to memory of 1296	3060	msedge.exe	108
PID 3060 wrote to memory of 1296	3060	msedge.exe	108
PID 3060 wrote to memory of 1216	3060	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\MonitoreoSilos\build\reports\configuration-cache\3mgjr0nsq75uiivex861k3agt\6pqz9vnuds3gj9wauire1o53u.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7fff2e35c188,0x7fff2e35c194,0x7fff2e35c1a0
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1964,i,657216285599614803,5436456986847190263,262144 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:2
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2056,i,15020886682096086517,14219513701433514014,524288 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=3104 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3320,i,9010561025693002160,1169685313449254153,2097152 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3324,i,15977607285117750583,10474544872570764854,2097152 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=3172 /prefetch:1
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2552,i,9625597434249771652,6267745520394899640,524288 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=3340 /prefetch:13
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4016,i,3983152004317434126,3143324771752231536,2097152 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:9
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4004,i,13900113366096912214,4547589093576722615,2097152 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3500,i,1879800944987161869,12915272748461385421,524288 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
  2⤵
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,2300266308468198706,11907138842243632788,524288 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=3196 /prefetch:14
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,12137809482094752001,5251330134009194607,524288 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,12137809482094752001,5251330134009194607,524288 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1240,i,6703782928299492113,5262438677648463818,524288 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=1352 /prefetch:14
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1244,i,12535125962929261806,8048763457209297621,524288 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1248,i,17302384369942179025,18073889615931795515,524288 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,6514882418189636923,1386766789154872118,524288 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6384,i,7866850739160952919,10501069065480167716,262144 --field-trial-handle=2488,i,9296534184707909119,18293479967652732124,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1216

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4836

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1096

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

299d59f5-04ef-411f-9ce4-9ffa58b6cceb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\299d59f5-04ef-411f-9ce4-9ffa58b6cceb.tmp
Size 40KB
SHA256 2de70852325cc3d6d4fa40d0387f126087a69952e49b2639457cafc68ad74377
MD5 cdabfd0b6a0392a3f6980ba45dc1d834
SHA1 3f8eb692dec625e1e56839f95c57cb4bbdca8c72
SHA512 efde3062776078503331dc817585cc03102100899b57a650553a27d5f995fe918b3d4da78417cbcd92864bcd19fad44974323ada307288813899cf64561fadc8
SSDEEP 768:d/UxvxjgC+63l6DybNbwbJOeRFZD1fTos7RjvE75EwX9r:AZj3+63lSKY1fT/R7kPX9r
TLSH
T13C03C036F8A46D334CF6E244B20A7B87BFF4566389CE159448DD5E0E05CBBAD134781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6512493f-2635-4d3f-8dc4-8884a4df3c8e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6512493f-2635-4d3f-8dc4-8884a4df3c8e.tmp
Size 38KB
SHA256 5110e1b17ac647142fc17136674de73348b89e20dc38f989d8e84960368e1ba4
MD5 1db8232a429c9f0c404684c4165e59cf
SHA1 c28cc3ce5bfd1beefe803333952083e94c91393b
SHA512 ba7e40125867ed9c681c57d9c1fb346d5c47f8e738fbfa2355fa5be46fce2756a882ac14e262cc101411b6e42f4dde7ba6dac18e51b0713896e9d99b74b8c1e9
SSDEEP 768:D/UxvxjgC+k3FYNybNbwbtOeRFZD1fTos7RCv/+Pu:WZj3+k3FimY1fT/RIKu
TLSH
T12803C03AF8D46D338CF6E240720AB64BFFF45663C9CA199409DD6E0E158BB9D134781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

0a1c0d74-b008-46ab-8140-d90f704016d0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a1c0d74-b008-46ab-8140-d90f704016d0.tmp
Size 23KB
SHA256 2d1f700482090d24cc262a105a26f9cfe088afc9a7088e07954d9ab026a8ed37
MD5 83074d01e7712e3113114eb07f494425
SHA1 b6b6ebd28a679ccda9d42b5505e3f2fd31e2790b
SHA512 c05a300ed9f51787f58b8753d3cd8960cd766c9c1f2a1b4544bdb301b9afc1432376267586e091ef42426cc48cdf5a1c40b569bf1c947147a427b3d82de8fe91
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R95roTyH:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0VY
TLSH
T152B2DA2B640CC77E4F804AADEC1A6F977D5802C796988D4047FE995C03C77EBA11A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

127caa2f-674a-48cd-b3c1-97ab3132e7bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\127caa2f-674a-48cd-b3c1-97ab3132e7bc.tmp
Size 11KB
SHA256 931ed49437cdd8aab283c1c18abb70f9a4552062e6193fbae464886b6fbb1c1f
MD5 8e6a9c69abe673f3e9a8248b2e4762b7
SHA1 f82fc82ba33d77e6aa4c7d3602caabcb560c1422
SHA512 38f549a4d7d771dc21a22d48bd82ce6431cd401c99460ef2aa5d6516a6db74de9fa36808606cd1d0d5a64a86d6a99bbc3fa2c11ba3b9f7fb54f31d73e7163d4a
SSDEEP 192:sxRkRhbd/fas3riK7xnDzoA8p4L/g6+WNIYDk1Y+GZIgDQJ:sxRkfd/fasO6ke/5ICLw
TLSH
T1E242D815AD28B93B9CCBE20DBB55BF53D2F95132A0951E48B6FC8A2C14E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3596a9e0-1595-4ab6-a304-95d879edcbab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3596a9e0-1595-4ab6-a304-95d879edcbab.tmp
Size 11KB
SHA256 b3d92cc8dd2cc380671add18232dc9109070c9b2fcff9dc6782841f87a21d54e
MD5 73d1e4078f41af40afc16275d2216716
SHA1 6427d48b7972b93fde38e6fc01e5430750536574
SHA512 c0ae8f7db656c2095a3c595d327dd1ead0bd33af7b151302ca58d787685e682cbe64212cdc301aee14982fd2b3e7b50dc64185d18495084fa846da37db83c064
SSDEEP 192:sxRnRhbd/fasBLiK7xnDzoA8p4L/g6+WNIYDoLY+GZIgIJ:sxRnfd/fas46ke/5IsLs
TLSH
T11832C715AD28B93B9CCBD20DBB65BF53D2F95132A0951E48B6FC8A2C14E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5560a19c-62b7-40e7-b5c8-fd15431eb702.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5560a19c-62b7-40e7-b5c8-fd15431eb702.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

970ddcd6-36b8-40bc-9d03-dd2718f647e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\970ddcd6-36b8-40bc-9d03-dd2718f647e7.tmp
Size 11KB
SHA256 14d0089557399faee2ed92ff062442e326507fec0fc795dd15546c95224b8044
MD5 535741b15ced3dc0fce2a52e3164c2d9
SHA1 5078ede26f28e2eee71ab09f307f2ff211643ee3
SHA512 5efd2d6ceb96dd10411c6bccbb782d482576e3e35ff6b69030efa9ad3eb393718497dabc5608e47e93fa1511318e3cfeff31cfdf2f7507138402c5a40fd8957b
SSDEEP 192:sxRkRhbd/fas3LiK7xnDzoA8p4L/g6+WNIYDoLY+GZIgDqJ:sxRkfd/fasu6ke/5IsLC
TLSH
T12632C615AD28B93B9CCBD20DBB65BF53D2F95132A0951E48B6FC8A2C14E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 8db8ee5ada3d20c5c80da93b69bc14bd942d50a9a065a8314b303ee0a8826df7
MD5 aa303380a64fcec118f264bbdea11957
SHA1 89b338902b67639ccddad36666cf0a894146fcc5
SHA512 88340d28570ef5cfa99dbb43925aae39a25b57a067eca028976b45436f478d9d3d708c0d3005530a3362b66110d660fdd9331e798f958a5f48b27f9c2c2a4faf
TLSH
T10631EE8CFFA864E6F398057140CA374BF634ABE1D9CB1F4A146CC5FE9B467210200396
MD5 SHA1 SHA512 TLSH

Submit Download

b5649c54-996d-45a0-9919-cde2f90da76b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b5649c54-996d-45a0-9919-cde2f90da76b.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

38139be8-22b2-4ac3-8a55-0146a2a1b305.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\38139be8-22b2-4ac3-8a55-0146a2a1b305.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

95a9575b-5978-42c4-a30b-cd87eced455e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\95a9575b-5978-42c4-a30b-cd87eced455e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

f45523e4-c615-4aec-9dd1-322a77c085d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f45523e4-c615-4aec-9dd1-322a77c085d7.tmp
Size 2KB
SHA256 4b90bf4a22da6cc68ccca02258994c4191b0c51854c9e314f1212d6197695ad5
MD5 07374e4c3c26b1a18145dcea1455429b
SHA1 be9062f7287b9ae944e6d3cd8813f714e9fd12d1
SHA512 2cb10bb328378ef8dec8c908e795f4cfbf619efcbc664d97a7a465d25ec440c407db625a03e491169d905afebff5f34d9297bcfc0fa8d0876fe4f6008d1a01e2
TLSH
T15B51D0F783E4867E8A0146F0AB146E1FCE1D0516432C7CA6C9E4AE1BA3F3471E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 b12f10ae40a799ab7891394f025af0c752831e28f68bcd2ceb40ef218ac8e8c2
MD5 a030945190ed77660bcb4d0ca07e4e7d
SHA1 3302cc6fc09a3d3d6917b4198c38fca6d71f6561
SHA512 c5440c5dc02405bf671e8dc14fa4154bac72e8913c18958e8dc3f38ee142df69184188fa840d05dd3845833b557fa22413447b875a6a14b0119936f4be064ce2
SSDEEP 48:KYfIlKI8MHyNfIFKc0YsTI1KEsQryVrI9KQ0oy:KYfKKI8u+fGKc0DTqKEs+GrWKQ0F
TLSH
T121B1B1107ABE020039BE290A81B4D72F11927773755AE63B7F7C40A59A6BE046DFCCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a992de19-c7d5-4b58-b7a3-3a77da71ff2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a992de19-c7d5-4b58-b7a3-3a77da71ff2a.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

04b3669c-ad11-46be-94dc-c6f5d62f43eb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\04b3669c-ad11-46be-94dc-c6f5d62f43eb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd02dd53-3f8d-4ce6-82a9-94f2923efb4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cd02dd53-3f8d-4ce6-82a9-94f2923efb4a.tmp
Size 37KB
SHA256 e91611b317f89883c04328cfcfedc8d89799da6ef99786f5a15b3b3ff25eb27f
MD5 d11070e6cfc01086d8532d9e6898b946
SHA1 ebc4bb533c62aa9036f308b5da6e97dacf64cc4f
SHA512 fcce078be9bbaffa982361a326449ed4623e3b8a61604770b479b1df3b9ad0a6a015b5e0b9a02cecc5c7c76989d8c603b29485ef83a6d0cdae58d1750d6e90e6
SSDEEP 768:z/UxvxjgC+k3z+pybNbwBOeRFZD1fTos7RzJ/+Pu:GZj3+k3zI+Y1fT/RtKu
TLSH
T13103CF3AF8D46D338CF6E244720A764BBFF015B389C91A9409ED6F0E158B7AD1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6dd6f94-c9a6-49b5-91d2-535e8f91f111.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d6dd6f94-c9a6-49b5-91d2-535e8f91f111.tmp
Size 33KB
SHA256 fdca47f67e03e8c64140bb92442758d16c3aa3090ec014915747e5fc90611c76
MD5 eb494ff810a6a7e4058ede68da5465ee
SHA1 49935d55674344c536ff8ff7c0c9c168d77af9da
SHA512 a811356ed51d2a7d2123cce3ba91639fa843b8f2aa3b2910971f1fddcd2a16dfeea90d2af0a0b1b453c960e81e952c61f036d4bb12fdf7257ba78f17bc73e552
SSDEEP 768:q23ldDybNbwbJOeRFZD1fTos7RjvE75EwXvLX:q23lVKY1fT/R7kPXvL
TLSH
T107F2AF35F8A49D334DF6D240E20A7A47BFB09653CECD058495DD5E1E00CBBAE238782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e323b0dd-62f5-4c79-93fd-d9e7d78fd6c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e323b0dd-62f5-4c79-93fd-d9e7d78fd6c5.tmp
Size 36KB
SHA256 f9c0051edaca1ec77bcd6dd014930f442bf4bddb777256574b4b1149074556f4
MD5 7363a2ad81e7364b867ee101abf362b2
SHA1 40a1050b180d54608f55820b95af9a608bf0404c
SHA512 5d2d56b0025c2aa064d575c58caf323b9d0dc747c7c7aa8bde945457533f5909e41b59f2f84e43abb6405600505c93c23fc9a0ca12dc6401050bde0fb471c86b
SSDEEP 768:mFdh30wgTdDybNbwbPOeRFZD1fTos7RjvE75EwXvLX:2h3gVQY1fT/R7kPXvL
TLSH
T128F2AD32B8949D379DF6D740E20A3A47BFF08263CDDA559496CC5D1E00CBAEE138B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d97135a1-21cb-40d9-a9ee-90b078a243b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d97135a1-21cb-40d9-a9ee-90b078a243b0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ff81647b-69bf-48c7-bb66-b169424b7a4f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ff81647b-69bf-48c7-bb66-b169424b7a4f.tmp
Size 33KB
SHA256 2b8cdeffc321ed8126ad7a6555291ec8fef08931bb840d91d8f7be536c67cf06
MD5 a378c168e97a457c087cdc75defe3ead
SHA1 3931cf0ee16a7a82175d44ad34957bff86f0703e
SHA512 32fa8f2e9361adeabf62c0967e4ef69ae130f0ccb44117c502590b3438fa94792f08d5356ef405be96748d473a6e28714d3c86c027492fcc16ee19d5024d00cf
SSDEEP 768:V232dDybNbwbJOeRFZD1fTos7RjvE75EwXvLX:V232VKY1fT/R7kPXvL
TLSH
T172F2AF35F8A49D334DF6D240E20A7A47BFB09653CECD058495DD5E1E00CBBAE2387826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download