2fbfcad9d64a958ff810428ec86cb6848fab0737c0600f6280608d9732a7dc24

Analysis

max time kernel
149s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 16:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MonitoreoSilos/build/reports/configuration-cache/5euu4xxzsk8xwl0xkfvrpqkqs/3i0snl52hhwt3vwvyda2abg1a.html
Size 215KB
Sample261107-vbmbfsdt3s
SHA256 2fbfcad9d64a958ff810428ec86cb6848fab0737c0600f6280608d9732a7dc24
MD5 3b212c15f2cdfbc79f7c88509bbb97ee
SHA1 515f5ddcd4fb818ff05118a93cf8f4db3bda789e
SHA512 1587520737d71c7abf8d72af91699c3a737ecd03a9417e2686ac0817477f7eb7ea2ee44fa1bce56d0a9c4fb2ec7c4a7e49e58bee6551681c55503e0b5e1799ad
SSDEEP 1536:NzpnlZkXqKDUUEBk4hVO4+W1DaeThXqCLJDHZUuksvRuCUY:XckDO4+w5TllLJDHyuksvRJL
TLSH
T10724638A63D6B199268EE461846F2587B1BA01CE84AC8018F725DFCD7FD531C4273EBD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5140	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-53044966-3830981193-2402648431-1000\{0C882EF5-7D84-4051-988E-0C1A5A61488F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1512	msedge.exe
1512	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2412 wrote to memory of 5828	2412	msedge.exe	90
PID 2412 wrote to memory of 5616	2412	msedge.exe	91
PID 2412 wrote to memory of 5140	2412	msedge.exe	92
PID 2412 wrote to memory of 5616	2412	msedge.exe	91
PID 2412 wrote to memory of 5616	2412	msedge.exe	91
PID 2412 wrote to memory of 4864	2412	msedge.exe	94
PID 2412 wrote to memory of 4864	2412	msedge.exe	94
PID 2412 wrote to memory of 756	2412	msedge.exe	96
PID 2412 wrote to memory of 2420	2412	msedge.exe	95
PID 2412 wrote to memory of 756	2412	msedge.exe	96
PID 2412 wrote to memory of 756	2412	msedge.exe	96
PID 2412 wrote to memory of 2420	2412	msedge.exe	95
PID 2412 wrote to memory of 2420	2412	msedge.exe	95
PID 2412 wrote to memory of 4484	2412	msedge.exe	97
PID 2412 wrote to memory of 4484	2412	msedge.exe	97
PID 2412 wrote to memory of 4484	2412	msedge.exe	97
PID 2412 wrote to memory of 896	2412	msedge.exe	98
PID 2412 wrote to memory of 896	2412	msedge.exe	98
PID 2412 wrote to memory of 896	2412	msedge.exe	98
PID 2412 wrote to memory of 2656	2412	msedge.exe	100
PID 2412 wrote to memory of 6124	2412	msedge.exe	101
PID 2412 wrote to memory of 2656	2412	msedge.exe	100
PID 2412 wrote to memory of 6124	2412	msedge.exe	101
PID 2412 wrote to memory of 3132	2412	msedge.exe	103
PID 2412 wrote to memory of 472	2412	msedge.exe	108
PID 2412 wrote to memory of 2152	2412	msedge.exe	109
PID 2412 wrote to memory of 5696	2412	msedge.exe	110
PID 2412 wrote to memory of 5868	2412	msedge.exe	111
PID 2412 wrote to memory of 5868	2412	msedge.exe	111
PID 2412 wrote to memory of 1512	2412	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\MonitoreoSilos\build\reports\configuration-cache\5euu4xxzsk8xwl0xkfvrpqkqs\3i0snl52hhwt3vwvyda2abg1a.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7fff41aec188,0x7fff41aec194,0x7fff41aec1a0
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,7915041432606897859,15766498805478573318,262144 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,7661257087372988352,11994440557641003581,524288 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=3192 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,11537850205847611265,12884845255605210275,524288 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=3336 /prefetch:13
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,2705637320052166452,3873512807196675421,2097152 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3640,i,3340339606590156309,13833719829983201566,2097152 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,10427220011905471104,6875897167445715418,2097152 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,4121273061629284828,11448602403399998663,2097152 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:9
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,12847929472538933963,7150925895194409012,524288 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,6964986657048265837,13066201714638646762,524288 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,10204174850465102032,7568129073831184668,524288 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,10204174850465102032,7568129073831184668,524288 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,7232383970477809562,15320389630288335791,524288 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:14
  2⤵
  PID:472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4852,i,5221404663946324951,10790430755123783242,524288 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,5733043579158979151,9475199802603244635,524288 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:14
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,3264967730073860256,9232954420740972779,524288 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:14
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5704,i,5974521294990488063,8398024197913973133,262144 --field-trial-handle=2444,i,8945004883255206596,16042049335199432429,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1512

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1292

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5532

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

10dd85c1-78ca-4b90-b5d1-244779c2f74d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\10dd85c1-78ca-4b90-b5d1-244779c2f74d.tmp
Size 33KB
SHA256 7589a41413ac57ec052bba7f3549a69d20f860ded257958ccea3cf66c59d922b
MD5 ef8af60458917ce7ab78a28af0c95bb8
SHA1 c57316fe642acd3c1816156effab39efd40c8c32
SHA512 8f087520e85c8f45632caa2f6050a1a69e872db5aad189ee432c7ef22c22fe5cd84e41b7e43865e6ebdbb95031780f0de7b690ae6007cd9c7db1f9cefe68d531
SSDEEP 768:0s3Fmn9TOfqfxfitMtyJYe1ELsAvC8/YEGTeE75EIuLh:0s3nfqfxfSYe1EQujY9ak9uF
TLSH
T106F2AE71EC649D375EF19699B24A2B57FEB4C203C9CC4A54D5CE2A0C01C76AE338F46A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36beabac-76d5-473a-8c8a-9784fe9968a7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\36beabac-76d5-473a-8c8a-9784fe9968a7.tmp
Size 36KB
SHA256 fc6bcac1548720bfad0ccd46d57c405ac80dcf35345349f73e10cd4719ff6e9a
MD5 f8c693c54bb72f2e0cc515b1d1f0dfcb
SHA1 23e6c28875f597c38c1632cafe427016d4a1057b
SHA512 bb89b135979b72be2c7c56d572f21ff172771b0919987d4fac4b70602a104af5657b69a759f70f611c6b0315d7a8bffb8a04f069ea7a9e2c7b2c33d1b8f6a3b7
SSDEEP 768:BAFdn3kwgkmn9TOfqfxfitMiGJYe1ELsAvC8/YEGTeE75EIuLh:BEn3dfqfxfnYe1EQujY9ak9uF
TLSH
T1B0F29E72DCA4C93B5EF69B95F24A2B57EEF48213C8C99654E6CD190C00C72ED238F859
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

61963d4d-8e59-4e22-9f68-0d55c074d7bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\61963d4d-8e59-4e22-9f68-0d55c074d7bc.tmp
Size 37KB
SHA256 fbd83a5c69b48ad24697dd58a55a268f8dc31c77f19fe5d0e54aa2e27181dc4e
MD5 c5d0be7ef85c975815816cad4aa0d85e
SHA1 71e160a9624a4bf2dbe64b0b9550c065ade1f819
SHA512 1e7c4d241c58a330fc203910f4de4d96a2e5a0f8bdcd47c0d59c43098e90a829c6c647fc181592d691906c63d84088d7cf5d56fc655d29848c28864f74e99289
SSDEEP 768:h/UxvxjgC+i3FL9TOfqf6KJYe1ELsAvC8/YMGi3SHrkw:0Zj3+i3Kfqf7Ye1EQujYFGS4w
TLSH
T1A903CF32EC649D375DF2A388774A4B57FEF4821394C42AA486DD2B0D16C73AC630F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7521b687-1852-462a-983d-e08b2ec7c20e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7521b687-1852-462a-983d-e08b2ec7c20e.tmp
Size 38KB
SHA256 01cc0e494a13c6211f82fe10b7a9301b3c88e9905d54108b7668c1ad3926dd16
MD5 a68e7c610117daa02ccc5e41a6c7d790
SHA1 fff74ed286b60b399b1772802119919ae2e37577
SHA512 4a16084f77ad8ea8be581fb0cbc62bf5e6ff4dc8631768e86af1245b7151afdb4a291e6f7eae09fade2e048d9c74dfe1685bd34b09353fac6ca281f2b9c4590c
SSDEEP 768:M/UxvxjgC+i3TB9TOfqfxfitMjyJYe1ELsAvC8/YNGTeSHrkw:5Zj3+i3qfqfxfwYe1EQujYgaS4w
TLSH
T16203C032EC749C375EF2A2C8768A5B57FEF4821395C45AA486DD2B0C05CB3AC634F45A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a0c3840-7dec-46fb-9a97-ff0763482b76.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7a0c3840-7dec-46fb-9a97-ff0763482b76.tmp
Size 33KB
SHA256 70a4ca3b4266e9153f5d5079cfbe9898bcc58752e4d263e931f26716da698acc
MD5 8187ecf13c35ac06c354ec4f76dea784
SHA1 6d508a56a85b89cf82f07232ce492647ff2a93d7
SHA512 b25b9c8a595f663eaba3cc6271f01ff8c4c33ca2a080676c79e1ed23907b9ac46e4dd91892dfb2b2c18d66872cf4ab22e7ed686cd7d3b4dbf9cc13f2f586e8f8
SSDEEP 768:Es36mn9TOfqfxfitMtyJYe1ELsAvC8/YEGTeE75EIuLh:Es34fqfxfSYe1EQujY9ak9uF
TLSH
T113F2AE71ECA49D371EF19699B24A2B53FEB4C203C9CC4A54D5CE2A0C01C76AD338F46A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2664448b8ab4f4edce89a8c875c31ed1e748ff3060fa1567c434149210bb4fc5
MD5 35b0bc3bbbf168c9b6c74d3bc119d3eb
SHA1 3dde0e79982d9dbcf2dbd3045bae0a5bc63e14cd
SHA512 9c5f83f731b8e4bf7f7e64c2e51191192b13fa5260950a1fcade843318dbf7d5b99057f3ca893e35cb6c19942f5b5852e7124ed01f7c46e7de9bcea70152fc0d
TLSH
T173D02BB4B76DCDD3D00310FE0014AE0421B37015EE040280230248484400104110236C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a9db3b181fe23d2da858b764c2d3bc2baae4a7e217d8cc5885ed34c7b21166b7
MD5 c2e18a2143bb27e5b37e2d5b65c09643
SHA1 43bb7d235630acc17d81e04e37f3cd25e299ecc7
SHA512 08f1e7fa966122b22bea5e316c89298987fac4c53be675ad48a1c1c8a784dc7b1d8789be8d1abdb8cdb59c14d6757e0f1934d0a56d919c8fb08e311621fe4d9c
TLSH
T109D02BB0B77DCCD3D00310FE0015AE0421A370159E0402802302885844001041101358
MD5 SHA1 SHA512 TLSH

Submit Download

73e89d29-77e6-43cd-a9e6-a2f92457a9f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\73e89d29-77e6-43cd-a9e6-a2f92457a9f3.tmp
Size 11KB
SHA256 707cd0833cfe4d6f8411bea1badf8c5c20bf1d437d8dc6f5ddbd211a347f459a
MD5 1094077d72b7331055a8fdcdf262fbe6
SHA1 131a8faa003f04c0802146a10e703f6128192af1
SHA512 55ad2105c76d00621b9aa8147e230cb4e6488c1f1fb76f95f99523f62f7f96093d220554de12f36495db0439ad712466df32b88daa0683b34642e75a09873255
SSDEEP 192:sxR7R4bF/feYsaFqrVi0zoA8p4k/g6+WNIYx1mqUdGRIgDfJ:sxR7cF/ftsoeiVV/5IeU61
TLSH
T14B32D715AD28A93B9CCBE21DFB55BF53D2F95032A1961F48EAFC861C10E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

79efc80d-ca21-4402-9c63-ecd230cbfdc8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\79efc80d-ca21-4402-9c63-ecd230cbfdc8.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7eed23e2-7028-491b-bc01-dc171da7373d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7eed23e2-7028-491b-bc01-dc171da7373d.tmp
Size 23KB
SHA256 fcd412e6473f523296707aef5ae1cdbaf1077e770eb26f1d87d095091b431d31
MD5 3c8bfdd538b99d10198dd0ec0fb65a30
SHA1 bdf6d2abf1906b7e425e0cf151264bd14d20184c
SHA512 27976ac421b70d4cfab6dc37764adbec42b715dec471fa314ecb3d1e22e9cc905155c6cb260eea6f2c0f22c10cd161ae1b941918c1ab58ffb2886855faacf322
SSDEEP 384:z/ZDnwZfCtgbRFfkWKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnL9K6RMyrowo9:zBDnwFWgbjfkW8F1+UoAYDCx9Tuqh0VP
TLSH
T1C5B2DA2B644CC77F5FC00AAD9C19AE9B7D9802C79A548D4047FE994C03C77EEA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 1684b86868c856db2531321c56f7af42973f28bc54c1dc8a39ea078a429ba5f5
MD5 b31964b04db152befe9fe916dfd2f6f9
SHA1 270505a4d93044196af3f51e9d74ffe95266db39
SHA512 9adc2cc918fec9955cba3039cc5513fe8f6aa382250ab8b2411aac90d167bd69db517bb9bbf67b29fb6866201a5c93cbfc88dc9a25416bc67223b46e028ee29a
TLSH
T1BD6181845F6A78A5DBCC01F685D1D4CB3A329EBC147B2E121395E97F2B8732C319C464
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7fbdd2e9bf96ca98ed038b8487f730e69cf606753856902b6fb4dca256983009
MD5 4ed9eeb7ed014cf6f9152e68f769a1a0
SHA1 811f9b244bf3ce2264c4acf907fc85f77bd3e852
SHA512 810b7ae9bcf1d1b659e94dd951980f3adc126bbe1970b1cea5ede7fd6ab5b1ce1f37be8b513ffc465a78d7896919cb83deefee91794b724f1cf14b948d897211
TLSH
T1756181855F6A78A5DBCC01F685D194CB3A329EBC147B2E121395E97F2B8732C319C064
MD5 SHA1 SHA512 TLSH

Submit Download

8895463c-6dad-4536-b22a-2f3e1f37f525.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\8895463c-6dad-4536-b22a-2f3e1f37f525.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3a2883e8-3575-48b5-ae36-a68baa44d88d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3a2883e8-3575-48b5-ae36-a68baa44d88d.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

40700adb-b4a6-4c93-bd9e-9a0fb991d241.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\40700adb-b4a6-4c93-bd9e-9a0fb991d241.tmp
Size 2KB
SHA256 af86cc2a51cb51b9df6159da90dfae6af1819c4db7b6e00cc54c07231154d128
MD5 eb85f4f079c999088c71b07c5bb614c8
SHA1 3496771cae16e3dc17337e6149948832da560e9a
SHA512 747c72c5f69beb772766e560b61951d698de3a536ff2236c096aa73cd7c0c0ed792ebd15b31c6aeb7826b3166f1276296f48b42a42ce2704f0665866dbcbed2d
TLSH
T17541C0F787E4867E890156F0AA14AE1FCE1D0516432C7C6AC9E4AE1BA3F3471E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

f1047fca-707f-4c15-a7c4-5e184dc0069d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f1047fca-707f-4c15-a7c4-5e184dc0069d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4e7fe53c4923a82d65228629353c4924eeba9cb4b056568bb785eed26d5e4ba9
MD5 02f4bfdb05a2cecb2314c689decbdc11
SHA1 eb0658c3a0526c9c71b2236b8248a32f5ea16c86
SHA512 20ba042a866fdd3f707df267676eba7099c1b92621c91691126f052088cc370b642b9f82bb675b60629f361aa398e5cb56b24b86814d8b5624f79520a21fd728
SSDEEP 192:sxRIR4bF/feYs4AqrVi0zoA8p4k/g6+WNIYx6UqUdGRIgIJ:sxRIcF/ftsLeiVV/5ILU6s
TLSH
T1D332B6156E28A93B9CCBE21DBB55BF53D2F95032A1951F48EAFC861C10E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

d818671c-cea5-4eca-9854-ced907539391.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d818671c-cea5-4eca-9854-ced907539391.tmp
Size 11KB
SHA256 b48ebaf5fa73cc241ec539e8184dc59a3fc2f73352116d19c416f1c2510b4c62
MD5 928656e17bafd4fef182f164fd57bbfb
SHA1 3efb82e80673da1eaf400adda3c8a2139a5d5333
SHA512 1123472c698def89995bbf4f52585b1a52fb0f0c5522c67368d44146c1415c756f857e62c9bc1c7dc8efecd93f031145ec99bd035b6987cce15cf41ae3b723d8
SSDEEP 192:sxR7R4bF/feYsaAqrVi0zoA8p4k/g6+WNIYx6UqUdGRIgD5J:sxR7cF/fts9eiVV/5ILU63
TLSH
T1AB32C715AE28A93B9CCBD21DFB55BF53D2F95032A1961F48EAFC861C10E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1d9ef9f9-2401-4b69-aefe-5ea520d39ef1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1d9ef9f9-2401-4b69-aefe-5ea520d39ef1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a81533f7-2370-455f-881d-c5638540330d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a81533f7-2370-455f-881d-c5638540330d.tmp
Size 38KB
SHA256 5ff178ad77a31d06dbdeb683d28431eabc31006ad0b496dace32488c78a82e9d
MD5 3a8dfdbfd7d3092c5482bd4d4c426c23
SHA1 d6311eb2cd15ecccccf6f3f280084eac25336012
SHA512 012e4b3df8fce88a9665667e303fbaf4159be91b4f3e0478dfe39084ad4e501c15803ef3607617ebcf3205b93a68f63f84b47dc54b33027efd5e4945f19fc306
SSDEEP 768:f/UxvxjgC+A3A6n9TOfqfxfitMNyJYe1ELsAvC8/YEGTeqR:yZj3+A3kfqfxfKYe1EQujY9aqR
TLSH
T1FD03CF31EC749C336DF2A698B64A1B57FFF4861384C81AA885DD2B0D05C73AD634F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2288423b-0f2b-460b-87b0-38ebdb633f6f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2288423b-0f2b-460b-87b0-38ebdb633f6f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download