be7ea3234a829c4f34ace7ba4cff470f50ac34f9f0b553b5a83b51fcd5960e2f

Analysis

max time kernel
148s
max time network
151s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
10/11/2026, 03:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
njRAT-0.html
Size 171KB
Sample261110-dppv3acf23
SHA256 be7ea3234a829c4f34ace7ba4cff470f50ac34f9f0b553b5a83b51fcd5960e2f
MD5 acfa1025f046bb195680d1f6f25488b0
SHA1 0fb8e9658dd4790d90ac497bd4f59901bfae1761
SHA512 9a484cd02e616d49a976339457fccf74e01660020a645669ecc3b6fda6b10f7096a8505504d73029ed06c929028db1f580bb432898ecc206daf092928bd152c0
SSDEEP 3072:U3cdFvWUOapgFnlTE3t/n80NB4G9p+H2WSM4MgwB9WRmH/EeLfWI0tGcQpZN5Zuh:LOUOapgFnlTE3t/n80NB4G9p+H2WSM4P
TLSH
T1BA04B5B1B035A53E022F26C6E2B1671493E7E31BDA8966F5D52FC2B452C7CD8FA53048
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4816	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3202520547-175870679-441661622-1000\{E61FD8E6-908E-43BB-A94C-9337973A028A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2168	msedge.exe
2168	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2464 wrote to memory of 5088	2464	msedge.exe	82
PID 2464 wrote to memory of 4816	2464	msedge.exe	83
PID 2464 wrote to memory of 4784	2464	msedge.exe	84
PID 2464 wrote to memory of 4528	2464	msedge.exe	85
PID 2464 wrote to memory of 4784	2464	msedge.exe	84
PID 2464 wrote to memory of 4784	2464	msedge.exe	84
PID 2464 wrote to memory of 4528	2464	msedge.exe	85
PID 2464 wrote to memory of 1300	2464	msedge.exe	87
PID 2464 wrote to memory of 1300	2464	msedge.exe	87
PID 2464 wrote to memory of 1420	2464	msedge.exe	88
PID 2464 wrote to memory of 1300	2464	msedge.exe	87
PID 2464 wrote to memory of 1420	2464	msedge.exe	88
PID 2464 wrote to memory of 1420	2464	msedge.exe	88
PID 2464 wrote to memory of 2304	2464	msedge.exe	89
PID 2464 wrote to memory of 2304	2464	msedge.exe	89
PID 2464 wrote to memory of 2160	2464	msedge.exe	90
PID 2464 wrote to memory of 2304	2464	msedge.exe	89
PID 2464 wrote to memory of 2160	2464	msedge.exe	90
PID 2464 wrote to memory of 2160	2464	msedge.exe	90
PID 2464 wrote to memory of 3684	2464	msedge.exe	94
PID 2464 wrote to memory of 3684	2464	msedge.exe	94
PID 2464 wrote to memory of 2588	2464	msedge.exe	95
PID 2464 wrote to memory of 2588	2464	msedge.exe	95
PID 2464 wrote to memory of 1284	2464	msedge.exe	99
PID 2464 wrote to memory of 4880	2464	msedge.exe	108
PID 2464 wrote to memory of 4716	2464	msedge.exe	109
PID 2464 wrote to memory of 4136	2464	msedge.exe	110
PID 2464 wrote to memory of 3084	2464	msedge.exe	111
PID 2464 wrote to memory of 3084	2464	msedge.exe	111
PID 2464 wrote to memory of 2168	2464	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\njRAT-0.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ff80ff8c188,0x7ff80ff8c194,0x7ff80ff8c1a0
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,9410499211918916562,11961069843555743900,524288 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1888,i,10336158171560893210,13627799115595959885,262144 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,13959058560068288245,6218429083588738507,524288 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,5812124972608473639,6445474326606916959,2097152 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,3928457456374011599,436800338848115010,2097152 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,16581893857167283398,17565984387108930288,2097152 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,13817391350644768961,17607127492580390635,2097152 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:2
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,13458854836365319658,12119305285910291994,524288 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,94517062529533112,3363606821478451106,524288 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,9065231485530259315,10994609677200173478,524288 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,9065231485530259315,10994609677200173478,524288 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,14254173395606504805,10932248380156026878,524288 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,16853169318152201545,16327125731783980632,524288 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4592,i,3096375292358138905,2936807272645337831,524288 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,16306206447235199706,6659352449213227630,524288 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1068,i,5600172934932104952,9225034688245808573,262144 --field-trial-handle=2356,i,16773324502807543855,10870894409628506159,262144 --variations-seed-version --mojo-platform-channel-handle=772 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2168

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

22f54ac6-ab8f-4ac0-b5f1-454d3f5e8ec8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\22f54ac6-ab8f-4ac0-b5f1-454d3f5e8ec8.tmp
Size 18KB
SHA256 42d8685d2e6b321b70476b5338f3a0a9358dec917079983c60921cac0368fb6e
MD5 209be48603fb7005be67e88367be86b4
SHA1 0c68dbbdf22aa4d24a8b7f3b1d504fbb82bf07b1
SHA512 29d1f2e9661a0f10a2db2482b3b3c182606f8a3f592317f7727d0b56817da6385d06585fd045d16bc3ef4c9c150f66b45f84b01602d8b399fbaa9194d817a3f7
SSDEEP 384:FQkUSv0sNtkmO0dLpqxF4We8cVHhaY6vaTZcsH3IIlb:f070mDHIaY6vaTZcsH3Lh
TLSH
T1AB827C35A8BD6C3B5EA79510F54B3603DEB4812BDBC81F90DADDAB1C01DF298134B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3a986007-7f20-497c-918e-b4545d75111f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3a986007-7f20-497c-918e-b4545d75111f.tmp
Size 21KB
SHA256 034c460ca03309d7e63bcc1695c8f2df37458f64cff7953f1f2cbaa97426e9d2
MD5 2edda34730ec3fa074dae4882f65d455
SHA1 bc3194e20d96527d9dae8dece970c89bff08c98a
SHA512 59ed0b51eca64bd79c2a78e3f094fde92875f4ccfbaf5fa7072289638cc8f3475c2c3edc303e632d9ce0b1d8484ff9996f9de2cc54a0c218dedc6701e85b35fc
SSDEEP 384:fiFzQkUSv3zsN38TUNTUlIlkJO0dLpqxF4We8cVHhaXp6vaTZcsH3IIlb:qFdj2wgr0mDHIaXp6vaTZcsH3Lh
TLSH
T169A26D766CA8A83FAEA79A50F94A3207DEB04177CAC4AF90E7C9A91C01DF1DC1347D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

949ac5a3-c7ef-4ae2-ad7b-46f8e001864f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\949ac5a3-c7ef-4ae2-ad7b-46f8e001864f.tmp
Size 18KB
SHA256 e311b2ae48099a965ce6e796b4c3a55173b194a77958575b08fa8c4b9e38473d
MD5 0137629f168eb261c402616e99f590b9
SHA1 7f581b812323ff1b37c1c2d86381c3d57affca8f
SHA512 2d077fd0787aba4de123ad67d96144a6f950600b3a891d3c336b7cf1a07b9047b30e1bc36925732cb67ac521e02892714ecd98e15899983c725d075ffc2c6dae
SSDEEP 384:tQkUSv0sNtkJO0dLpqxF4We8cVHhaY6vaTZcsH3IIlb:X0m0mDHIaY6vaTZcsH3Lh
TLSH
T11F828C35A8B96C3B5EA79510F54B3603DEB4812BDBC81F90D6DDAB1C01DF2981347926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ebfc27c-eca2-40bb-bb24-6cf2352ae6f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9ebfc27c-eca2-40bb-bb24-6cf2352ae6f5.tmp
Size 8KB
SHA256 93373bc9b248df1cee51049f9c5c30cdc72441d166a23f31fd119a8aba68b4ab
MD5 48ee4750d9aff00fe696d83e5e0daf53
SHA1 998d9dc3946cb0709eb869e40107c75efb8e05f8
SHA512 1f7d07afca1d11c44c13f2421e42664202e3c2408bb6e8fa544988ab3d568240dfdead577feb9f9121f1ebd5b14c7aaedaf7ba1db787658a2e96423573ca2852
SSDEEP 192:3OND6v6mtdQmiUyBvRe4WeJRYcp1bQBLuU6:3OND6C80Re4We8c/5U6
TLSH
T19902D734BCAC787F9EE39E05F4873B179EA4113BAA952F94DAE81A1C00D725C1347926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e540ff94479edeafbd2f52590dd9a8011e45e365c17d276ef0a72a73cf8703b0
MD5 34381c2be9e66e3a3f2106d98929cb65
SHA1 9dbace176fd9f60199e5fcdc1cf19399a18947dc
SHA512 715895995299450f87643e3c2823927f88e88c79d2e3fc83048a5aabc884b75a08b9125c07807996b45cd41a0667c3bd0cf692e72178d58addd93f4d0b89b947
TLSH
T1C7D022B0E3302230EAE8B23200E0C3328802EA020F883F000003E008ACF8BB020C330A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 545af60fd6f1babcf34d2de8406a8898f07180a583381549ec487c82a6f509f3
MD5 7b5eb721ca48ebb6bc5397c2c4c2d434
SHA1 6c13a0bcb87a73f71ced5fcc3d204c6a12b49c3e
SHA512 00a3ce72da4dda55acc4616d7d32ddecb923c6c964799294e08be9c4bf0e113fbb7aecf6c206e691a0927e77adcdbf806d416954441b8362b83b1b1215a3a988
TLSH
T1DFD022B0A3302230EEE8B23200E0C3328802EA020F883F020003E0088CF8BF020C330A
MD5 SHA1 SHA512 TLSH

Submit Download

2faaec3b-ea26-4407-b205-8e2341e56e3b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2faaec3b-ea26-4407-b205-8e2341e56e3b.tmp
Size 9KB
SHA256 ccf30fa8474ecf6be9ce9f5d61a80c752a9989e581ed18a799b90fa5b45462c8
MD5 2b542dbabc9aba388d739bedd098af32
SHA1 c588ce92a25662a4dc2eb7134c0e745fc5a3d409
SHA512 941c6a59cdb826c3db008dac5ec74be0bea61a028d3a978b16d19344bec0c08e8cf98000efd43f4fad61e9b001f436dc0877c6bd5ca9045c546a4b6ff6bdc1c6
SSDEEP 192:sxZNRWWh/fGsfCaIdpdaHW6+WNGYtq5mIIgrJ:sxZNvh/fGsfCzIHbGL9
TLSH
T1AC22A7516E24A97B9CCBD20DBB65BF13E6F9543251D11E88AAFCC61C04E76DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4abfc0b4-c7c0-4c6e-8ddb-edff30f1b448.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4abfc0b4-c7c0-4c6e-8ddb-edff30f1b448.tmp
Size 27KB
SHA256 15f47750b76b96ca63567882230114b94b9a46040ecce51e4ffa0b0859db5bfd
MD5 de361363edc9b41d88175716aaf34864
SHA1 a3c6ad96a4985414c029e27eb2c7e6fc758f2df0
SHA512 48d1e61e5cae36d0b148583a3f93735571d46afe1e24f00a60c651df77b163128a42bb7986c33ebf1681cdc3bc13ddbb6aa1ca04c994db700fad8cc82acdc121
SSDEEP 768:V1OtS3IWvUgqc8F1+UoAYDCx9Tuqh0VfUC9xbog/OVp3LlTtsbqroaCY:V1OtS3IWvUgqcu1ja83LNWbBaCY
TLSH
T114C20A3B680CCB7E4FC01E9DDC6A6F973E9802C7A6689D4047F9984C02D77EA51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7002b8fe-abee-43cf-b6d4-3c8a2b6957a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7002b8fe-abee-43cf-b6d4-3c8a2b6957a6.tmp
Size 10KB
SHA256 ad1cb1ddcbaacac3c56363f1c60a114a48cf074a8a16be6c3f000f81c806e460
MD5 521961e99e7b5dcebce9f90b595bb871
SHA1 c766e05cd3a458ed47cbf128d8e52d84c6ce097f
SHA512 070ffc3c4b9bfc35569201902444749b8569056cb75c4343b2af549c2d2f78ab05e26f6486880e081a9de4538bbc40daa5015b6544be4fcb6633801882f36d4f
SSDEEP 192:sxZNRWWh/fGs8OaIdpHaHW6+WNGYt+UmIIg5KJ:sxZNvh/fGs8Oz6HbGy8
TLSH
T15F22E9516E24697B9CCBD20DBF65BF13E6F9543251D11E88AAFCC61C04E7ACE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

737678ec-63d7-40c0-93d8-08bf3957bf4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\737678ec-63d7-40c0-93d8-08bf3957bf4b.tmp
Size 10KB
SHA256 9211e34d7151e9fa52924a48a55542de7671c1ba01782aaf060c1439f31a545b
MD5 dd0d94bba5b0fb50b09effc2d7a711e7
SHA1 148b533425f9da8832e354538a8287923e655cf1
SHA512 40c09671d8dd358e12a0e632382fe6b8fd42014030e8f5bf2826562af278e88c4cd683ef68e824aaef3240f5d36e4b107dc7bb353432373ef6b2c8f98b254ccf
SSDEEP 192:sxZNRWWh/fGs8OaIdpdaHW6+WNGYtLbmIIg5KJ:sxZNvh/fGs8OzIHbG68
TLSH
T1CC22E8116E24797B9CCBD20DBB65BF13E6F9543251D11E88AAFCC61C04E7ACE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 84902efe7d557142ba3a3566682ec0c0fd9947888138621e1c9edb46039bcc9d
MD5 0a31e892ac2c6dd433a66f545e3eb26b
SHA1 0d03feb63bc2e9b5b4609dd705c6f248b053c03b
SHA512 e9a8eac89f8bcf45eace49ab5eac13a0f160aca56157fbd487385e28d429a6da1b9b0b6252596503831cafeeee66bbabd67279e469f0ae09346d28d2fa1a077f
TLSH
T1E76160805C41CDA6DBA823B484D653C7BA35DD8D60BF8D9E8969CB7E6BC6F504AE3010
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 607fb78a4ce393ed8f7ea266d2f79e2ad3c39b89ed596107dbb0a861319d6b0b
MD5 6d485d1809661d4f0797729bc98277b9
SHA1 0512b7dd65bab02f59f9e09b21ab8acaec4376ae
SHA512 802e505a0e92d3f7cc7da0cee67766d64db9ecbcb5723019bfaafba0160453e1f692bfe698e431d820a6591579c03b3be5b0a79ba6a73d0dbc3ff94b59810dd6
TLSH
T1136173804C41CDA6D7A823B084D653C7B635DD8D60BF8D9E8C69CB7E6BC6F504AE3010
MD5 SHA1 SHA512 TLSH

Submit Download

4026cc71-8f70-4c9d-bc81-f49226017812.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\4026cc71-8f70-4c9d-bc81-f49226017812.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\file__0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

98bc5086-0a80-44ec-a5b7-3806e6c7c9b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\98bc5086-0a80-44ec-a5b7-3806e6c7c9b4.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a6debec6-39ea-4bd4-8be5-03b1bd726f6c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a6debec6-39ea-4bd4-8be5-03b1bd726f6c.tmp
Size 1KB
SHA256 4b069f1f6c5131b6870d959e2e0e348c00f39a24814a9e7f9315ba19a33f7947
MD5 c7e815bdd573a662f2e0f2ac4d9ce285
SHA1 096096ec7e834a4c3350b8fa03b131b5f85daabf
SHA512 0bf77ff467449d1cd8a23d4bbe5be412b048b1178b7c480d8662a5f8d2be595f22c58ddc0fc3e2a57834d752de38b858eb6e4ad9cd6a2dc2ff1c596bf620e8b9
TLSH
T15D318FF783E4466E8A0156F09A146E2ACE2D0117832C7C1989F5AF1BE7F2471E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

fe81c059-9166-4289-a68b-fca219c39ed9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fe81c059-9166-4289-a68b-fca219c39ed9.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b7e34add-fa97-4a4d-9632-dfd345a75a7e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b7e34add-fa97-4a4d-9632-dfd345a75a7e.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe262f84-948d-4a19-8390-81e7381baf8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fe262f84-948d-4a19-8390-81e7381baf8c.tmp
Size 9KB
SHA256 e8573870575d2fd9cdc1cc9abe8499cbd4e0f390ae28a6a4d96101354b068a44
MD5 5405a9781bab6f27559920351333181b
SHA1 32766355180a00511db78bacb5c72319d77418d1
SHA512 92f966c100ad8f5af29301f33101351cf8f3d26effa39630af0a3ac0e7667ea5d7d42348d16561a10c50444edfeda802c4ca5daaec65bdb16e72d1bda9ccd3f5
SSDEEP 192:sxZNRWWh/fGs8CaIdpdaHW6+WNGYtq5mIIg5oJ:sxZNvh/fGs8CzIHbGLO
TLSH
T11922B7516E24B97B9CCBD20DBB65BF13E6F9543251D11E88AAFC861C04E76CE224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1dc59403-c83b-4b7b-977f-d170be26ea91.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1dc59403-c83b-4b7b-977f-d170be26ea91.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2cc06d2-1274-4769-8e68-f67d48d2b0c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c2cc06d2-1274-4769-8e68-f67d48d2b0c1.tmp
Size 8KB
SHA256 2205394e7fe1963eb0fa6865c20b8728f804b500f09130589c210a1a93befbb8
MD5 436f04cee5de217966f6e71f3c8f411a
SHA1 14ff9575b159ea53784c0a9c59e266f2afd44dd5
SHA512 a0fe001c468ca6118c3e99250c6221c12dd684925f5f1ccdcbdf9ee662199b29cb3827457f2f151f4a9d796c3488adb415ece3fa1afa2e420c5f260decc78162
SSDEEP 192:7ONY6v6mydQmiUygvDe4WeJRYcVHhabpoRqfU6:7ONY6CDTDe4We8cVHha66U6
TLSH
T1B2121935B8A8A83F5DD39851F48736139EB4423BEB896F90D6DC2A1C05EF19C534B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d700fe7c-f106-4e62-bba2-06f77780bb9e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d700fe7c-f106-4e62-bba2-06f77780bb9e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e1e5e78350f4357c792097f7fde4019b596bba06a1ec5dc1e081bb4631047b1c
MD5 ef5cd287ceccc1421e226ac0b0e51d03
SHA1 d7bf06724a398a32bb713ee65396522bf0f33509
SHA512 c3c49fbb94c7923a0144e0236bfac9f7c17b3c2aa312bc9fa576eac91dd75496ba793f2d61ce659efe8829312b70bb22abf333887630c18a9f3fc319547b6d55
TLSH
T12F410658B7E91148B3B76F56ABF6B8AE447B79772E06D49D10010E4F0633A44C8A2737
MD5 SHA1 SHA512 TLSH

Submit Download