8ee9d063b007c5b7ad484b7336df1e076340e56a9a86230fe7c299da0bac4161

Analysis

max time kernel
148s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 18:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
modlist.html
Size 15KB
Sample261107-wvss1sff47
SHA256 8ee9d063b007c5b7ad484b7336df1e076340e56a9a86230fe7c299da0bac4161
MD5 e013cd0decd29840ab86be8abc0026fa
SHA1 4943de301bfad827e903c92034a3d809e2c6a0cd
SHA512 1e2fb16d68dd2dcf5c3f6c05a28fa50813cd4c114846d3738376520803d975a7f1d1bb95992bb1a28942133ea25c54f75ef8210a9d9e5b3bb8c86f08ed471437
SSDEEP 192:GVA8FFmU9QpXYgUyU+6yw046sW0fby8z5OrTOAXI4dnv0kjcWjYcM0+hTUOwluW7:10pJqmWErkxMgthU0VyG4NiJYE
TLSH
T101621FB79DAFB9166B6EC2BDA4303B1DC52391F35A4D4EE7A0A20C477BC01D308155AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3748	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-650287814-2715975232-1279715623-1000\{F22B62DC-6A14-4502-AD46-7479B43D038D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2488	msedge.exe
2488	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1836 wrote to memory of 4224	1836	msedge.exe	89
PID 1836 wrote to memory of 3292	1836	msedge.exe	90
PID 1836 wrote to memory of 3748	1836	msedge.exe	91
PID 1836 wrote to memory of 3292	1836	msedge.exe	90
PID 1836 wrote to memory of 3292	1836	msedge.exe	90
PID 1836 wrote to memory of 4512	1836	msedge.exe	92
PID 1836 wrote to memory of 4512	1836	msedge.exe	92
PID 1836 wrote to memory of 236	1836	msedge.exe	94
PID 1836 wrote to memory of 236	1836	msedge.exe	94
PID 1836 wrote to memory of 236	1836	msedge.exe	94
PID 1836 wrote to memory of 260	1836	msedge.exe	95
PID 1836 wrote to memory of 260	1836	msedge.exe	95
PID 1836 wrote to memory of 260	1836	msedge.exe	95
PID 1836 wrote to memory of 4676	1836	msedge.exe	96
PID 1836 wrote to memory of 1564	1836	msedge.exe	97
PID 1836 wrote to memory of 4676	1836	msedge.exe	96
PID 1836 wrote to memory of 4676	1836	msedge.exe	96
PID 1836 wrote to memory of 1564	1836	msedge.exe	97
PID 1836 wrote to memory of 1564	1836	msedge.exe	97
PID 1836 wrote to memory of 5560	1836	msedge.exe	99
PID 1836 wrote to memory of 5904	1836	msedge.exe	100
PID 1836 wrote to memory of 5560	1836	msedge.exe	99
PID 1836 wrote to memory of 5904	1836	msedge.exe	100
PID 1836 wrote to memory of 5492	1836	msedge.exe	102
PID 1836 wrote to memory of 1208	1836	msedge.exe	106
PID 1836 wrote to memory of 4548	1836	msedge.exe	107
PID 1836 wrote to memory of 760	1836	msedge.exe	108
PID 1836 wrote to memory of 2072	1836	msedge.exe	109
PID 1836 wrote to memory of 2072	1836	msedge.exe	109
PID 1836 wrote to memory of 2488	1836	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\modlist.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff800d1c188,0x7ff800d1c194,0x7ff800d1c1a0
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,5812891766353656218,9798221351471001525,262144 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:2
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,12850442300858146190,2168011962270329385,524288 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,10539201253131718578,14857290546783797355,524288 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:13
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,16026459637398570106,18090511054981189621,2097152 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,7290334588248451840,10339378384694077848,2097152 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4128,i,15198357660355004771,5498169296284135222,2097152 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=4132 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4168,i,13119552999097550962,4325235094845028389,2097152 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:9
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,13268432564304943903,8047833965174852782,524288 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,16052424684643043188,14836186721457899102,524288 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,204230183822412099,5292849884982333724,524288 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,204230183822412099,5292849884982333724,524288 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,3143360535553642808,1755211534576025085,524288 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:14
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6680,i,496351119400832091,6416532646320310157,524288 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:14
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,6245351227667508661,1944754563761039345,524288 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:14
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,4066815977458679638,18007551876424470176,524288 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:14
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5424,i,6262720217712587152,4474131202283368254,262144 --field-trial-handle=2152,i,8213710435946784492,8575604443892344716,262144 --variations-seed-version --mojo-platform-channel-handle=3244 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2488

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1476

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2472

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3df8fc2d-b12a-4cc0-bbab-b4017ccf04a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3df8fc2d-b12a-4cc0-bbab-b4017ccf04a8.tmp
Size 37KB
SHA256 0a330f0f1bd0cb4a8b6b9adadc9b23245e8f63e1ed7793ed067c9675987d6b07
MD5 793c83bd1bb8aac5950d20026c9e7b23
SHA1 2e00a48920a0d7ed23d5cff7f5716601dfe0d768
SHA512 bd379eefb79c09a010872dd0c09ec8226c0f19b552034a1fc8197b0236070b553d2795cb54c8abdd0056df2bcd7f09adbab8c71d9123dcd65b0419a5988ff50a
SSDEEP 768:p/UxvxjgC+k37If9cjvyEMbxyJugQVTJ7vvmevmSHtBk:cZj3+k3GyvyEmxyJJq17vgSbk
TLSH
T17B03CF39ACA55C7388F392843649E787EFF506A394C62BA485DD6F0E129B3BC5307817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e0217c0f2953c25b5ecacbfc82728d57c809cf5450e9203a48d2faaff8836c2b
MD5 04b3b3f543557524e135a08dac44efda
SHA1 4f856c66c17971828ff8fd245186ea6b1b303bc7
SHA512 a11f6ce9f676e6157f7d9b86de7e7c3f0b7758052de5b00121c54342e363951818cf7787ed1baf39e636241455a76f6b90dc0405f5eaf0361a7c1056c3560c1a
TLSH
T1F5D02B71EFBB6C03D184207C100182C01620FC40BF6902C4170001A4042C5444313205
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6ff73de37e74e04bc32af0dd2dd926bcd2d6c623deb8eb066c65071254002178
MD5 a569aede49695d8fc8b039ab7024fd75
SHA1 de14644ea578b78d3cd08753552602517297fd30
SHA512 b87c4dc8e3e3be51d402a4d2d6166ca389ae05ea059903425483e2dcc38b0f2394d29a7a81921700d62e2a403e94a7b3e6c02c186966742a945996df580c0065
TLSH
T18FD02B71EFBB6C03D184207C100282C01610FC406B6902C4170041B4042C5444313201
MD5 SHA1 SHA512 TLSH

Submit Download

1394dda5-487e-40e8-ae0c-1c3c466a6f44.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1394dda5-487e-40e8-ae0c-1c3c466a6f44.tmp
Size 23KB
SHA256 11a745a04fbf94a6db8c32caee8018e7ce77d9126b088c4c26d4f401c5c43114
MD5 8b5381a1fedfb7663b387e1d912496a0
SHA1 6f5dbf20144e321ebc834583d174e726bb0c225e
SHA512 cd007063dbc7677f82b9a274ef635f6bb8149281f935756be0ea0a3643994af8bdc4ad44683d35b881611edd9a7abac76e657bc763d6f13d280686e5fd88c659
SSDEEP 384:+0e2P7wfCtgwiFf4eKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVS29aSRnfro+PV:+l2P7KWgwef4e8F1+UoAYDCx9Tuqh0V8
TLSH
T123B2D92F640CCB7E4FD04A9DAC196FDB6DAC02C796588D4047FA994C03C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

13eb4ec2-6afa-45fc-b67d-38fa4f7f98a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\13eb4ec2-6afa-45fc-b67d-38fa4f7f98a4.tmp
Size 10KB
SHA256 f486ed969e9d7798b9383ad04adaa82843493370b846cf47f8e42ba8bfe060bd
MD5 a10c28e3c84e2a982504939f91ac40ac
SHA1 c6a8752932d5da5e8e7b118857bc0e0706ceabf0
SHA512 2b37e4e43b073420ef6a6f270d27b4ef6aedafc5a6cd071b340130ab6f2cce7a074f7e18dca1b0ab83550f5d29a8766bb40eb5979dd359afc1343a93dc1d033c
SSDEEP 192:sxRYRPbF/fws9T+zoA8p46/g6+WNIYF61P+G5IgDeJ:sxRYpF/fwsVj//5IHfe
TLSH
T12232C715AD68B93B9CCBD20DBB56BF53D2F9503361D52E48A6FC962C10E76DD120380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 6e6b6f5ef1b46879093e88deb56da49b4bbf92330c6659e4395b8c6270663f72
MD5 85b712436736213c29a9d5d44586e5b0
SHA1 9f1055bf00e9eba23d015adfd0ebfe1af408c229
SHA512 30fecdf9412ffb750451f8e56bf3f8e9e744e9260540d0bace042b56677822a052e2a2ef49a907935fc0a650a927f6942d0b53ab015db4739f95fa00a66a5a51
TLSH
T1CA611A476A81B045FB9E21F295F01EC33A3496CA078B3E331988E938747276872BC1CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8160ec6d6bec57e90c31c29786546d57bc22b1b5efd1b6c8be0291f7456dd982
MD5 9a3eddd223aa87375a4f8c9dbacf583f
SHA1 2fe8239b4aa590a4a61cfece07e3b38305119571
SHA512 250d568514f363eab2e6e8e505a47d3f0369aacaed7e420df35fe9946bea2e20ab2b2b98971c6f254ba5c7ff996652bcae1dd1aa4ab0396083975e0b0551d107
TLSH
T14D61E9476A81B055FB9E21F295F05EC73A3496CA078B3E331989E938757276872BC1CC
MD5 SHA1 SHA512 TLSH

Submit Download

b8dc9471-4a40-43d1-8462-2b3827348735.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b8dc9471-4a40-43d1-8462-2b3827348735.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6dad585c-ad55-4e45-b7a1-c9a6af64c7fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6dad585c-ad55-4e45-b7a1-c9a6af64c7fd.tmp
Size 1KB
SHA256 028fafb3b8390bbd7d971d7964a400dc2a9e31960bd19e02d274006926530d3b
MD5 01ffb9ea06924e3095c1b888ad51138d
SHA1 906da00dad63b573431b3cb0d190baf915701502
SHA512 f520b7736fde77e9702445afdd7b7053bd69cdfa7e6bf99bf817311af33c65d18eafefb641bf181ee6bde5fa618d1205eecc1cf28dce0822ab88624cd8f6700f
TLSH
T17431CEF383F4856E8A0186F0AA18AF2FCE2C0511431C7C6AC5E4AE2793F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

7b9fba6e-3f18-403e-a1eb-8eb54bff3119.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7b9fba6e-3f18-403e-a1eb-8eb54bff3119.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b481615a-7f36-4c31-9fdc-5e961ad2a423.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b481615a-7f36-4c31-9fdc-5e961ad2a423.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a9bd3c67-ed58-420a-9649-3ba99964bcbb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a9bd3c67-ed58-420a-9649-3ba99964bcbb.tmp
Size 10KB
SHA256 0164e0af5e5bb31554f082e809f0711bae692ab9f50ccb224b01d20f9f86801d
MD5 338e930fd3796a054ae940c8aa59bd49
SHA1 f8d4f658700fefcd3e97978ebe4ca927d87900f3
SHA512 d08b3707123faed32c48dc1139d7d55d5e49634bb636879bac70d466e35d8fb35f8d87e117a3f049202fba7751dd47da5d2576f88e03845bf232d06ae1faff8f
SSDEEP 192:sxRjRPbF/fwsMT+zoA8p46/g6+WNIYF5xP+G5IgIJ:sxRjpF/fwsGj//5Igfs
TLSH
T1F932C615AD68B93B8CC7D20DBB66BF53D2F95033A1D12E48A6FC962C14E76DD120380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b6a2a715-a758-432e-8315-a138b2625efe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b6a2a715-a758-432e-8315-a138b2625efe.tmp
Size 10KB
SHA256 ec172e7dc4322001d4a15c63b43cd3f400c9badb7e3b1c5e490be1d92231c803
MD5 8995b7cb4ff919832e0e879a154ddfda
SHA1 963e2fee2b6aa98047fb38f9cd5d6962101b32f5
SHA512 22b189333ba78ee122abf1a0e1df82b6f3cdd3728c35fbeaf4bdddcc03be4eb8ce36d115a7a18c5467314dac2e7c600810074ddb90ea312cb3ebc2871c63a264
SSDEEP 192:sxRYRPbF/fwsIT+zoA8p46/g6+WNIYF5xP+G5IgD8J:sxRYpF/fwsij//5IgfE
TLSH
T12632C615AD68B93B8CCBD20DFB56BF53D2F95032A1D52E48A6FC962C14E76DD120380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d7fbf2d3-3e68-4705-a16d-ce20d76f8095.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d7fbf2d3-3e68-4705-a16d-ce20d76f8095.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a3e7fdb9-6bec-41b6-8e62-2e1169e65ac2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a3e7fdb9-6bec-41b6-8e62-2e1169e65ac2.tmp
Size 34KB
SHA256 ea4b0b7df61eb9fe4fc324d4ac7d784d90218f46e3bffa78e83827e07b93da0a
MD5 2b09aa7a6686148e094d04350916e1ee
SHA1 b06a49fdf95fa99ec019d148ab73ab3572ffd77e
SHA512 2cfa02248ba40feafa00dad8d535d4653b3c95d84cbd447bbb1518e0d7a24264339e752c20779cc1cfd3b9061b68b6905d95244aa8079c712bf73d13faea4202
SSDEEP 768:+03M9JBf9cjBUyEMbxyJugQVTJ7vvmeXhBE75ELXSLU:+03MvyBUyEmxyJJq17vhkYXSg
TLSH
T1DCF2BF30A8A59D3759F29281A34A7787EFF4865388CA1B84D4DD5B1D01CB7ED134B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad4a6f83-6ba6-4e55-845a-b8bc0689e8d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ad4a6f83-6ba6-4e55-845a-b8bc0689e8d4.tmp
Size 38KB
SHA256 c5d19df687095f5ca752063fd145edae7b5000577d2cc9063fa35163a942e839
MD5 8a1ddac2f5d1691fa873d10ba51dbf91
SHA1 d4e7fc3a83cb3b97fcd7a3ed5efa2686494fb083
SHA512 6b34caebc51efc76e3c39e7ddd546853d78ad83ac4f7546a7d91fb276cb4dc99770bc8ec8f9d13a8be5bb4b81dea770da0be9a72317dfd5c9f6f4b26a43107f4
SSDEEP 768:i/UxvxjgC+k3Y7f9cjBWyEMbxyJugQVTJ7vvmeOhBSHtBk:nZj3+k32yBWyEmxyJJq17vKSbk
TLSH
T12903CF3598A55C3399F29385724AF787EFF546A384C62BA444DD6F0D028B3BC530B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d36c07df-1cfc-4349-a60b-fa4006376a13.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d36c07df-1cfc-4349-a60b-fa4006376a13.tmp
Size 39KB
SHA256 0e32f57c93c23cc83803154bc309b7f97e4e0eaf0febb292c467863a1992de8f
MD5 23284288247f6b9df53e394af6f71e36
SHA1 98536f3424d4a375b98063f3a910f8ec5976fd76
SHA512 197cc5301d594986a26c15b9a068ec15184aeb328db1a6ba45d01184f28b39916b7af6cbf817e108caee56070428f0a7dbade7c9016bca5c9355931ec00367e5
SSDEEP 768:K/UxvxjgC+o3t9dBf9cjBsyEMbxyJugQVTJ7vvmeXhBPu:PZj3+o3tvyBsyEmxyJJq17vhPu
TLSH
T12B03C035A8A56C3799F79284724AB787EFF4456384C62B9848DD5F0E068B7BC430BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e58b783b-35b4-4d7a-a3af-2849e0b36ac9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e58b783b-35b4-4d7a-a3af-2849e0b36ac9.tmp
Size 34KB
SHA256 18ea3493f31f3fe7bb82976a8a52c96ee1c021172de665354012e6daf4bcae4b
MD5 f02584d774269ac3bbea57d51328716a
SHA1 d9e2c728818fcbe732b44a87e483a544966a7656
SHA512 e8a5bda7b27c5a4a3cc3cf4805c18ae1be1eb4bb2a92c82683cdc8c913fa77d8e135cea30e177535e0a7e3acd93d544b6129f9c98b0e7e4ca31a0b805d1bfc73
SSDEEP 768:H03t9JBf9cjBUyEMbxyJugQVTJ7vvmeXhBE75ELXSLU:H03tvyBUyEmxyJJq17vhkYXSg
TLSH
T19CF2BF30A8A59D374DF29281A34A7787EFF0865388CA1B84D4DD5B1D01CB7ED134B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e38fcefe-e2c7-4cd5-9f56-15883f18a34a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e38fcefe-e2c7-4cd5-9f56-15883f18a34a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fcd2083f-90ba-4fa9-9fa3-0bf23119b54e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fcd2083f-90ba-4fa9-9fa3-0bf23119b54e.tmp
Size 36KB
SHA256 06dd3f4fe44cbb409451deae6d172f7e98d6a90a05a945ebf1a896e84d531bb9
MD5 af35885b74e562608b80504750c24077
SHA1 c69404c1f1dcaef2fa81a22b0a50efb67317812e
SHA512 d433003ab12601b0f3be14d28700785d6927b24ca3addb2c269d3a77d9d5a92901b7f2c3ba81b8cade4e766a3218ce1f716e7e4ac6f6111959f9407802bc9493
SSDEEP 768:DFd83Dwg49JBf9cjBIyEMbxyJugQVTJ7vvmeXhBE75ELXSLU:j832vyBIyEmxyJJq17vhkYXSg
TLSH
T180F2AF3298D49D3B9DB68B81A34A7787EFF041A3C8DA5794E5CD5E1D018B2EC134BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download