f3d85aa13178a940e6682b8ec7188fb37d38a1c5995c37f0398b9f6b72238282

Analysis

max time kernel
148s
max time network
139s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/11/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
account-remitt.....html
Size 193KB
Sample261110-phfvcsaw2w
SHA256 f3d85aa13178a940e6682b8ec7188fb37d38a1c5995c37f0398b9f6b72238282
MD5 c5244495fffe5b92e216a11c6202d66b
SHA1 952a941a5ff45d2691923229166c2b4449d48e16
SHA512 3a8ce84b5f6cb799196d66c569e3c19d8c6b2c6d2281105886dc177eeb4409dcbe6b775daf7a246523ccb9a43b2057bda077c5a272b7d9ba86c6209bdd0cdb52
SSDEEP 3072:PyvSq/gWxHvD7LMJgNgXYzFJhVI5rmoUnUCHxPjcLt0:P0D7vHLMJgNgXY5JvHRUQxPjb
TLSH
T159142E61D7B65F2B05921AAF140633D5A838B7B2D2DC81FB31B6AE67F1779A2C35C100
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
368	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{BE805416-1250-4FDA-9081-4AA0DDE64A8C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5520	msedge.exe
5520	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe
4628	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4628 wrote to memory of 5032	4628	msedge.exe	89
PID 4628 wrote to memory of 368	4628	msedge.exe	90
PID 4628 wrote to memory of 2668	4628	msedge.exe	91
PID 4628 wrote to memory of 2668	4628	msedge.exe	91
PID 4628 wrote to memory of 2668	4628	msedge.exe	91
PID 4628 wrote to memory of 5352	4628	msedge.exe	92
PID 4628 wrote to memory of 5352	4628	msedge.exe	92
PID 4628 wrote to memory of 2012	4628	msedge.exe	93
PID 4628 wrote to memory of 2012	4628	msedge.exe	93
PID 4628 wrote to memory of 2012	4628	msedge.exe	93
PID 4628 wrote to memory of 5936	4628	msedge.exe	94
PID 4628 wrote to memory of 5936	4628	msedge.exe	94
PID 4628 wrote to memory of 5936	4628	msedge.exe	94
PID 4628 wrote to memory of 4920	4628	msedge.exe	96
PID 4628 wrote to memory of 2244	4628	msedge.exe	97
PID 4628 wrote to memory of 4920	4628	msedge.exe	96
PID 4628 wrote to memory of 4920	4628	msedge.exe	96
PID 4628 wrote to memory of 2244	4628	msedge.exe	97
PID 4628 wrote to memory of 2244	4628	msedge.exe	97
PID 4628 wrote to memory of 3732	4628	msedge.exe	99
PID 4628 wrote to memory of 3732	4628	msedge.exe	99
PID 4628 wrote to memory of 2588	4628	msedge.exe	100
PID 4628 wrote to memory of 2588	4628	msedge.exe	100
PID 4628 wrote to memory of 5876	4628	msedge.exe	102
PID 4628 wrote to memory of 4536	4628	msedge.exe	106
PID 4628 wrote to memory of 2576	4628	msedge.exe	107
PID 4628 wrote to memory of 1624	4628	msedge.exe	108
PID 4628 wrote to memory of 4760	4628	msedge.exe	109
PID 4628 wrote to memory of 4760	4628	msedge.exe	109
PID 4628 wrote to memory of 5520	4628	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\account-remitt.....html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffdabc5c188,0x7ffdabc5c194,0x7ffdabc5c1a0
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,4340268741469170609,15719575958972508572,524288 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:11
  2⤵
  - System Time Discovery
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,8329476141643081008,4208024965459659190,262144 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:2
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2220,i,10949731647839357480,17282413618365517892,524288 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:13
  2⤵
  PID:5352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,2006352470936642194,3027370392645096208,2097152 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,2275030038869526737,11389592134023000005,2097152 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,7199681940563735467,9182398551771427911,2097152 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,460248265512055192,2616976971459953477,2097152 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:9
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,12846528724048245566,15642249428500534760,524288 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:14
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,4645348695949555828,5942343484931616140,524288 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:14
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,3247035132784140449,11426179981655653869,524288 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,3247035132784140449,11426179981655653869,524288 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,10371621149957523432,6004983310502604845,524288 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:14
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,10744465799260096040,13114674057075868437,524288 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,9650641809444119173,7219145996316798388,524288 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,1154054444820740841,15361109434437238345,524288 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:14
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6056,i,5946523602616555601,5670753046503087882,262144 --field-trial-handle=2628,i,556462694610064491,1181400914651537562,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5520

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6032

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2808

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

34b02031-2de0-4dfe-9a48-368c0bc92ff7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\34b02031-2de0-4dfe-9a48-368c0bc92ff7.tmp
Size 39KB
SHA256 b7273f578ba01e7b5fb33f7e7f52401a1f75f6824231380da333eed6c9db6674
MD5 afd42e1d9cfc369e60009c5197490721
SHA1 65e762d18fa454dfeb27c05ac7a0de260075b16e
SHA512 0dd2c1e524b78bd3b8ddcae60e27e540cb66d493ca76614999f03cd75fc46d9597586aea3efbbdd2cac873b0a54587b9212adbb127f6f5cfe95f1cdbbfa184b8
SSDEEP 768:U/UxvxjgC+B3XSNZgm1phtDmGA5b65Q92RQMPbAFj0O:BZj3+B3id3AF65dQ7FQO
TLSH
T1A703C036EC94AEB3DCF95280374BB35AAFF94473C1C552A049E96E1D06C769D830B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36e529ac-1f2a-4c29-b0f6-6522193e49eb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\36e529ac-1f2a-4c29-b0f6-6522193e49eb.tmp
Size 37KB
SHA256 e2c5e3c8ea33eaf7315baa84425cf41f5f696a95237c843c14f21c2f4bcd1b06
MD5 a4a7bc933afb140584b2b2128cb25e11
SHA1 8fad4fa6e1fc6d9fada1194455b34fb580d00439
SHA512 58621c1fb59e4234eb62e9099f348488bf28d1d51300f105753b861236269c398bca6d7887978ee66a3b303be233f6a76a31d2b3127d44959d2cd40b099bcb96
SSDEEP 768:WFd23Mwg5T1Jfgm1pQsRDmGA5b65Q92RQMPb65aTZcgH8LT:m23qT1BDAF65dQ1MJc3
TLSH
T1BD03CF73DC90DE7BAEB95BD0764B7206EFF48263C5C496A09AC9AE1C01875CD034BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68839976-4c48-43ca-9203-910848480af4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\68839976-4c48-43ca-9203-910848480af4.tmp
Size 35KB
SHA256 c5f70a99a6b1b4e651480d79cb510b6c66095d6093b8a20b62ce44df4535d652
MD5 a609d27772e92814fc7e35f5b528b1e2
SHA1 d3dff90baceef33858282088ceb79f3ff832ad0a
SHA512 b84f18f42adbe4e587336ff84f8cb462f34260c58bb2d5ed6fd754f2955ff358443676372ed36fd97c331490207aa8ee11218bc89dde0e93300c83464df58c43
SSDEEP 768:uu3zT1ffgm1pQs9ADmGA5b65Q92RQMPb65aTZcgH8LT:uu3zT1n9gAF65dQ1MJc3
TLSH
T1B2F2C072ECA1EEB36DB552C0364B7206AFB49223D5C8469089D97F1C01C76CE034B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

740e6f59-c39f-449b-862b-031263a56841.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\740e6f59-c39f-449b-862b-031263a56841.tmp
Size 39KB
SHA256 8f352a5fcc01c446234cd2296f42eabc6e675aaa2b71c191c565e10aebd08375
MD5 e5e9b9ae9bda77e7e86f203f7ad69f6c
SHA1 5e8177e363cdbe67f139fa57a94c965d4ef791bc
SHA512 4a013683878b253b18a1dbb7429103216b9cea16a03f1fa3680977c60e7fbbedb74291ade06116e8ed29f021d4e281eede29f822a0367a73bf1ea63db8e2bc64
SSDEEP 768:m/UxvxjgC+B3b25gm1pQs9FDmGA5b65Q92RQMPq6Fj0O:bZj3+B3+9PAF65dQKFQO
TLSH
T13E03D036ECA4AEB39DF552C0365BB34AAFB84563C1C552E00DE92E1D06C76DD830B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

3c0b21be-6998-4416-acc1-1a4fe0fabd29.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3c0b21be-6998-4416-acc1-1a4fe0fabd29.tmp
Size 23KB
SHA256 52250bd08045d0f41aea9a17b6b8907e37b8aaa7d504b6eae5ff3da83d7169f4
MD5 90ae565035e6a92ae598a64173cb04ac
SHA1 22a29f0f560de56751e8060a8f08d37688ddca7e
SHA512 df4ac363c3fbe41ec056c7f9ca9ce895d2cc2d505bc92b639d30e99f4663a23e273952466545460653e2586ae9780f3f34c0ee227f0da5e745450f1bcf8caa48
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWeroHrJ:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0Vt
TLSH
T1A3B2EA2F644CCB7E8FD00A9DAC596F977EA802C796588D4047FE984C02C77EA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7cf03b3e-2af0-4578-b84d-d7f049b000a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7cf03b3e-2af0-4578-b84d-d7f049b000a4.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8570b9fe-fecf-4dc3-9b90-481347b405e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8570b9fe-fecf-4dc3-9b90-481347b405e5.tmp
Size 11KB
SHA256 762b9e69bdf75f998edfbebd3ddcb795dd3c2cb6b7717169fda94bf852cdef35
MD5 0442d69190cf3570bb40367e62a97717
SHA1 df74411a87926d07ea02e2d3582d958878350536
SHA512 d71a3ea47dfd84bb37f97e216f32fd05fd730f409bd7ef7d5029600c35a58dabcfda3723a72fab685510af63f484c1d90750e609d56367763cecd224b2b33bfc
SSDEEP 192:sxRMRHbw/fsEsvyYhCzoA8p4Q/g6+WNIY2EtchGlIgDCJ:sxRMpw/fsEsvbPx/5IpOK
TLSH
T12532B855A928AD3B9CD7E21DBB6ABF53D6FD503360901E48A6FC8A1C04F76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 c587d0c70597cda8e307366c6aa0f6fa4aeccd6ecb21b03c4053d80364eadcb2
MD5 314dd1a67e57f8464dc31611d11b99f5
SHA1 ee28573cc72039316d813b5909447c3cd91556dc
SHA512 2029691a79baee7a053d31531243964d946988fe0cc4cdca966a28521fc2f0faf0a3af8af25b75e439cc56893172f6e483ea933c0ad8004ba873b2a9c242fb69
TLSH
T1F751738142986A6ADF74017D65CA2EC736B484BC5EABFD71F0E8FD6953C6354003E083
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 952c1d1933f0cb6e5cba30d02cd02c8033325604cf07892d3a81965a7cae09b9
MD5 a39bfec2ce899adf1ab637dd87011ec2
SHA1 195a57b8142df4ac950584f96023819db13738f2
SHA512 cd7cbe3388e69b7ae8477a5b397db83d50d1b49659033eaf972c73d5d1cb4b1867403613b739ab3f1cf192b726893553ba25e88972447937e37da58027f1c404
TLSH
T18651938142986A6ADF34017D65CA2EC336B084BC5EABFD32F0E8FD6853C6314003E083
MD5 SHA1 SHA512 TLSH

Submit Download

c9d8cb5a-73f1-4324-860a-df70f45db80a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c9d8cb5a-73f1-4324-860a-df70f45db80a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0a5a50a3-e5e7-4364-a198-3ff6503a22a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0a5a50a3-e5e7-4364-a198-3ff6503a22a4.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

43f72e5c-1f0d-4d9e-9763-f73e2a1e6ea4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\43f72e5c-1f0d-4d9e-9763-f73e2a1e6ea4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

af24f4af-e42e-4d7e-ae9d-58787a91f584.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\af24f4af-e42e-4d7e-ae9d-58787a91f584.tmp
Size 1KB
SHA256 39126f21d883a5f893e0e386d92fc2cd52e4080e5e75c393ac84936685822a0e
MD5 7d9fe606dfa9520470f1e7c4df5eaf8b
SHA1 3f1339f802e78615701dd6ef6b478b70e94f239c
SHA512 135a9b242c6ce9121af88125cb07d75ef44b08c163ec0cb871be2774e9368ccb86106f1e658bb9a74fc285bcf45ff57a5e3df4451772709439d83d38d5eeaeeb
TLSH
T19A31AEF783B5957E9A0186F0AA14AE1FCE2D0525432C7C6985E0AE27D3F3472E041A9B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3da2085f81dfe7fcbd981fa47ef1a7ce2b1a3f7d03a807a62a75359a43a21078
MD5 e2e1e347c1dbabe0fcbec5f7fab798db
SHA1 d7486f6ae1079f27f7580c0face5e97cd8bd0e7d
SHA512 0c6a940050d764401dc0fe48dbdf22eb30ba154801f65cf94cd7bd52e15509c36947e680aec4f8762dfd4d3dd2d3141526679999fb99503380790590a1009e4f
SSDEEP 192:sxRTRHbw/fsEsMyYhCzoA8p4Q/g6+WNIY2FZchGlIgIJ:sxRTpw/fsEsMbPx/5IWOs
TLSH
T14A32B855AE28AD3B9CD7D21DBB6A7F53D6FD1033A0941E48A6FC861C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f2dffcc3-694c-4f9a-9487-f2478634b3a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f2dffcc3-694c-4f9a-9487-f2478634b3a3.tmp
Size 11KB
SHA256 16e4045b884ec0685484d0dbbca535433b9b5e11144ffe6f510a243308c27cc1
MD5 17678087e359f98d7550406614ac7ca7
SHA1 b98efdad73ec5731da46ab0733b3267a58300f65
SHA512 23eced6f1602d5486650731aa5f9cd5288f2ecddf2343dbbbc5e6272bb112d826306ca85efef790fb58e1391353f51db6d75bda3a2a9635be6617ef43abdd127
SSDEEP 192:sxRMRHbw/fsEsGyYhCzoA8p4Q/g6+WNIY2FZchGlIgDgJ:sxRMpw/fsEsGbPx/5IWOA
TLSH
T14A32B855AE68AD3B5CD7D21DBF6ABF53D6FD1032A0901E48A6FC8A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ef6a7eda-1da3-49b3-95f5-31fbbbb3506c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ef6a7eda-1da3-49b3-95f5-31fbbbb3506c.tmp
Size 35KB
SHA256 2d82563b3575393237a8b65d19f8b2e3f7c4c8969ac9d0ce70731c6afd04ca17
MD5 d07441dd166a172eb31f98d65b587bb8
SHA1 6a8be3f533cbe4375fda1096ff49ee9f1f02f637
SHA512 2bb70a89f3beef93742dcc1274ef36e27ec93ab65024078f48e7106ce87b0df7dc38facb3f8361d7b6b8a74d4519806095b45c6219b75d3f8a8f3b810482c65e
SSDEEP 768:du3QT1Jfgm1pQs9qDmGA5b65Q92RQMPb65aTZcgH8LT:du3QT1B9KAF65dQ1MJc3
TLSH
T120F2C072ECA1EE735DB852D0364B7206BFF49223D5C846A089D96F1C01CB6CE135B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc1d3dca-6407-438b-9ffe-14ebfb5e08f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bc1d3dca-6407-438b-9ffe-14ebfb5e08f7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download