7d5106a91f89ae6b94c587440c99b2e55f56c8cd362e0e96453276d8152cdcb1

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/11/2026, 16:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DynoSim6/DynoSim6.html
Size 267KB
Sample261110-tys7vagg29
SHA256 7d5106a91f89ae6b94c587440c99b2e55f56c8cd362e0e96453276d8152cdcb1
MD5 f5dc31004ff9d8767c112ade9a0a2e9c
SHA1 7176d534599f1b61f3b88ec7c4d7965b4805ea9f
SHA512 dc5e88c56011a08cdb757e098c38ad50fb1a8fe00de83c6d5ad07040e48f19c09bf69d6918e289cf1fd77ae10454f247d977adbaa6b4ec2dc1e0135f853394de
SSDEEP 6144:9bODh5xVQO0/dC0Od6uIRINGwQ1eKD8Go1Pl4a18ct:9b+dqEYMnt
TLSH
T187442B8330BC032354E314E587D632863AB856313B45B890BF5835558D9E2FEF97EEA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3596	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-696679853-3915825385-3233721679-1000\{3730258C-3F7A-4C13-8B35-806C46F284FD}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3512	msedge.exe
3512	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3648 wrote to memory of 2832	3648	msedge.exe	89
PID 3648 wrote to memory of 3596	3648	msedge.exe	90
PID 3648 wrote to memory of 2768	3648	msedge.exe	91
PID 3648 wrote to memory of 2768	3648	msedge.exe	91
PID 3648 wrote to memory of 2768	3648	msedge.exe	91
PID 3648 wrote to memory of 4908	3648	msedge.exe	92
PID 3648 wrote to memory of 4908	3648	msedge.exe	92
PID 3648 wrote to memory of 2820	3648	msedge.exe	94
PID 3648 wrote to memory of 2844	3648	msedge.exe	95
PID 3648 wrote to memory of 2820	3648	msedge.exe	94
PID 3648 wrote to memory of 2820	3648	msedge.exe	94
PID 3648 wrote to memory of 2844	3648	msedge.exe	95
PID 3648 wrote to memory of 2844	3648	msedge.exe	95
PID 3648 wrote to memory of 384	3648	msedge.exe	97
PID 3648 wrote to memory of 252	3648	msedge.exe	96
PID 3648 wrote to memory of 384	3648	msedge.exe	97
PID 3648 wrote to memory of 384	3648	msedge.exe	97
PID 3648 wrote to memory of 252	3648	msedge.exe	96
PID 3648 wrote to memory of 252	3648	msedge.exe	96
PID 3648 wrote to memory of 4120	3648	msedge.exe	99
PID 3648 wrote to memory of 4640	3648	msedge.exe	100
PID 3648 wrote to memory of 4120	3648	msedge.exe	99
PID 3648 wrote to memory of 4640	3648	msedge.exe	100
PID 3648 wrote to memory of 2448	3648	msedge.exe	102
PID 3648 wrote to memory of 3932	3648	msedge.exe	104
PID 3648 wrote to memory of 5692	3648	msedge.exe	105
PID 3648 wrote to memory of 6088	3648	msedge.exe	106
PID 3648 wrote to memory of 3520	3648	msedge.exe	109
PID 3648 wrote to memory of 3520	3648	msedge.exe	109
PID 3648 wrote to memory of 4308	3648	msedge.exe	110
PID 3648 wrote to memory of 4308	3648	msedge.exe	110
PID 3648 wrote to memory of 3512	3648	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\DynoSim6\DynoSim6.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x264,0x268,0x234,0x2b8,0x7ffd709dc188,0x7ffd709dc194,0x7ffd709dc1a0
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,16295963757799115735,10741909715073318821,524288 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,9642139113588505001,12385469364965620409,262144 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:2
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,18287124077863886841,14517399750981767515,524288 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=3048 /prefetch:13
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,7547264188860399813,3334783441532862181,2097152 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3632,i,180259823487412180,10025003207766869351,2097152 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,14688249379114178568,18068456185472984586,2097152 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:9
  2⤵
  PID:252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,6696579623456641438,9838459018574543872,2097152 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:1
  2⤵
  PID:384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3708,i,8311227599324835999,1293430920940275684,524288 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3772,i,9882425994485004593,12428565748058180830,524288 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,4458311458851402117,14591550368394049260,524288 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,4458311458851402117,14591550368394049260,524288 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,4036989440382064970,12565069696210645495,524288 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,8598027011147829550,15500091051683705247,524288 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:14
  2⤵
  PID:5692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6192,i,10032870780456321506,2015164545824117741,524288 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
  2⤵
  PID:6088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,18329035356639519088,5631254169526446175,524288 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:14
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,3628297960882895001,7464535371257761644,524288 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:14
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6364,i,6617437881725073754,16908773764435530475,262144 --field-trial-handle=2636,i,1367576787858618211,6055173970547703326,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3512

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

01f07585-a4c8-4d85-b239-b208ae39f3fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\01f07585-a4c8-4d85-b239-b208ae39f3fd.tmp
Size 38KB
SHA256 e5ce5f0496fc8a7ecee1bd4b39e090cff73c45e09f50a95f0b37f1f216a7a120
MD5 fc3410bc30986b6c6ea3052ef046e3fa
SHA1 9d0d8aef4b5f8ed154f0343116145efeaf1dd6e4
SHA512 b6b9458f74eb890eac11af1717c71c09da6166cbade2fc2a12105350cc63cfdd6095fea8912aac56829c59382e20dbdca0ec07f50d0f0549544fad5ec3f60c13
SSDEEP 768:S/UxvxjgC+b3csNcZ0rfZW7VM5Bw4Ot5AEl94BHYjegAFTN/:XZj3+b3Bv5BVa5AEncHYj3AFB/
TLSH
T1A803CF39DC659923CCF79794770B338BAEF69463E5812DD08DDC2D1D0A8B25E134B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d329b45-766a-43e2-be6b-7913240bf237.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3d329b45-766a-43e2-be6b-7913240bf237.tmp
Size 34KB
SHA256 11a8d39f2b40251ea9b4f8ec06ae368beba111ae0cf98c2624b5166443b36364
MD5 3a7f0ed909ace5b5417797c168a21da2
SHA1 1199468069315c0802a0919e09b5c5cbaf2e2e6b
SHA512 b866e0eb8bda2300538d42ded8ff177a890d632c6c9e9b22e76a54e2b112866973f16dccca3a27077f54386a60362c37de0dc6f54e13497ce434b310da689251
SSDEEP 768:Ei3CRqsDcZ0rfZW7VMFBw4Ot5AEl94BHYjHgoaTZcuTL6:Ei3CR7dFBVa5AEncHYjA9HO
TLSH
T17CF2BF79D8A699238CF797D5F20B3247AEF19157E9C01ED0E9CC291D068B29E2387817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4706b6a3-8472-4576-ad96-53fae475d865.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4706b6a3-8472-4576-ad96-53fae475d865.tmp
Size 36KB
SHA256 270427f967567c7baa5bcd0e0b2ff19bb5898ab76d4ea217bd66bc41a59b62dc
MD5 df905d67d4be7e756778fbd2554523b5
SHA1 d5fc14b662940df55054b0313a782dfdd00bdeb2
SHA512 2c56da3ea30cdeeb23d1febd09cde8c734771e7602953953ca770364b4305fce5d96ab39805b3d1f0da04a596e115ed8f56cd1770585a1a045f94781de3cc504
SSDEEP 768:xFIM3hwggRGsDcZ0rfZW7VMdBw4Ot5AEl94BHYjHgoaTZcuTL6:4M3ARXddBVa5AEncHYjA9HO
TLSH
T1C203AE76C895C9279CFA9BD1F20A3247DEF19167D8C05ED0EACC681D068B19E238BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

540f80cb-8112-4005-b1cb-a2a07a07d3d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\540f80cb-8112-4005-b1cb-a2a07a07d3d3.tmp
Size 39KB
SHA256 74128dce9a502b0336e8d5aa6f8ae0c1ebc0cba23969b3568d03c9eaf61646d5
MD5 a6fde88115b9696c8db1444d8f84f442
SHA1 219667daf135a6692878c179983a314fc32511b3
SHA512 a4ec0ad3f1fc482f204f49bdb1e07ac7336acb43ed267c0aac5e1df14d44e5a06c95cdeddfb317094c9d82d12f66a1e94f83183445f9e392e048cd0d23aee39c
SSDEEP 768:H/UxvxjgC+G3WRSsDcZ0rfZW7VMpBw4Ot5AEl94BHYjHgWq:6Zj3+G3WRzdpBVa5AEncHYjAWq
TLSH
T11A03CF39D8659C238CF7A785B30B3397EEF59563E9C11DE489DC2E0E0A8B25E1347816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6bcc5fd2-2752-422e-be8d-4a961d0c08f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6bcc5fd2-2752-422e-be8d-4a961d0c08f6.tmp
Size 39KB
SHA256 0e763fe5b81a80f8ce00b1e89b5ae22354f84cdc69744d0c6777e3b19903dddc
MD5 f71582e76d5d270cbd29972cb9bb3fd7
SHA1 f32faba57e750638865f7f9c0eb4e070c275944f
SHA512 58a342b648b223d801014cdd67d2d2c09a066d49cc9c6b333780e79f93b79e2539877d6c5ef71071915e63fd521f33999a6e6aae58dc9c0940e5184ea57f1699
SSDEEP 768:6/UxvxjgC+G3VRSsDcZ0rfZW7VMTBw4Ot5AEl94BHYjHgWq:/Zj3+G3VRzdTBVa5AEncHYjAWq
TLSH
T1C503BF39D86598238CF7A795B30B3357DEF59563E9C12DE448DC2E0E0A8B29E1347816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 59619e39464102fa53912dd9a15237954c5125d546c48a72b8bdb58ad9eb9753
MD5 f80a0057aa895d42a15b594d07d09f76
SHA1 2478a67794a5362ccf809b7a2c8f64a03c72fa32
SHA512 4a9ec8459a11d9e573883d5eacfd5386cf838bad2bd0b33ff1b37017f5f2cf6bfcef877344a87892e3c49ce624e0cae52791ded1593b8233138de87fd2e5e634
TLSH
T1C6D02B75F668E9D2C140043C00410920706035066F6801C206030038040324B55022C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 91a032a4ffcdd10503afdeb5220904a7e7cea899c3a55606bb3e90180ed9472e
MD5 f04321ebc7aa4a8f91bb5362a6c4c79b
SHA1 c98d3283204e4a0453e416a04c3ae56e4c3feed8
SHA512 c2faa7fae738d85299e6f63b9eaf33c25db5a255ea3f5f6a8551842b7e0cec73c7e8b5e86a9cfb9714287d2b382b57b7249bc70671dbfde2815d5937243570af
TLSH
T1DED02B71F678E8D2C140043C00420920705035061F6801C207034038040324B55012C3
MD5 SHA1 SHA512 TLSH

Submit Download

1c3224f4-d993-44f2-9cfb-e64d9f522aad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1c3224f4-d993-44f2-9cfb-e64d9f522aad.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5028d87b-df94-4122-9527-20a695734968.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5028d87b-df94-4122-9527-20a695734968.tmp
Size 11KB
SHA256 38f2fa3ecc6501ee4fc7169e51b40a91fec2d571b2e952d097d72901bf2a1966
MD5 3fadc7e5f4cff4fc3ec8195c00a79526
SHA1 e624d165f9b63aaa9e1a1568a0a23fd324bdcb71
SHA512 94c7907a94373c2c5aff2d5f19f01996b98bddf650b4232694db944a2518591f4a6c299e294ed8016128495ec99c3b61c86d52c6952faee83a52cb9755458d91
SSDEEP 192:sxRnacR6UbKD/fCssKMk2KY9YzoA8p4nn/g6+WNIYionIaUKG4KQIgD9hJ:sxRXBu/f3sjPZ/+/5I0B
TLSH
T17832B655AD28A93B9CDBD20DBB65BF53E2FD5032A1911E48E7FC861C04E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

95b59a14-35e1-4a05-95b0-be8622b3e915.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\95b59a14-35e1-4a05-95b0-be8622b3e915.tmp
Size 10KB
SHA256 a252c2d7b786417926297082d730202cb4a4be0465e52506f493298e59d6c3a1
MD5 586dce50fc8ee411ba817ffb8e9c30de
SHA1 ed32ab5e3f3b8224eb6b5ff003671c4ef4bfd7ea
SHA512 2ece15da4f00551f9cc0bd427993023ade90eb9661776fe9fa8ae60c17994c487bc4dd2169601e6996d311c2f823af0a4209fbdef9d4adb6de7108788ba957a7
SSDEEP 192:sxRnacR6UbKD/fCssKMIKY9YzoA8p4nn/g6+WNIYisaUKG4KQIgD9hJ:sxRXBu/f3sjIZ/+/5I/B
TLSH
T18C32B555AD28A93B9CDBD20DBB65BF53E2FD1032A1D11E48E6FC9A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 85ef6327da9c5ac0d30f9e68390a49b30d099869391778eaac19aa8d9d6f2f2b
MD5 b91bfafb54cd01f0fed18fe80e1d2a71
SHA1 ea06a4aa5808e0fd54334fbbec92545958b63fd3
SHA512 34696f0f7e210a00d84246e602b6b3d5c91efaf0e0b6175c16edf6fcdd1486430bbf52f710e1744ebb2baf39870cb90542a905db71db893dc2d8b6e508c6c5ac
TLSH
T1D9E0809917D5C61FD30CA7C702EC534DD590369AA7C4AD4D1704D8C4B54179C6695650
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 651db923c764eec63984bd72697f6219d0bb27fecc33c959f3b61ad343c15bbb
MD5 b55ad3c94595eed3b996afcd7516500c
SHA1 06659d4454108042b97d4a6478c2cb9d76836428
SHA512 51121819bd733d65b6ca43a5b73343055063010d684134777c76461810e15b7751da5a0ecdbe3f241420547035499d7a3483016254e486b6d413f66989140e9f
TLSH
T183516681D3B16493F794C03296E02F8B3B30CD4196E36E162E94F77CD98BB164B58324
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 72b9040288cb827c4bdfd3b51f14557f41ba2d503705e39016a9130496541399
MD5 42f3df0a489bca3bd8953c8031d7a705
SHA1 e43a2c5c200a2678c29f4b4a0bfde9952bef509b
SHA512 a070ca8f6de93cb4c78b016243c5415cba825d4a5beb8cdbebb7a5ca4f9392fb91e57b6516a2ead4c902e09ecd1d50e6e677f64b58848396f331ca8219c7d9d5
TLSH
T153514685D3B16593F794C0329AE02F8B3B30CD85A6E32E166E94F77CD987B164B58324
MD5 SHA1 SHA512 TLSH

Submit Download

131fce56-5244-4a12-8968-9c62f7b9ef36.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\131fce56-5244-4a12-8968-9c62f7b9ef36.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

ab490c89-b10a-4cda-af43-b86a82d1f241.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ab490c89-b10a-4cda-af43-b86a82d1f241.tmp
Size 1KB
SHA256 731f97cf3181f88692b07eec391064861b78860e466e643c4d5d71f1193703ed
MD5 32a31b4be3601bbfd1a286204c50f0a6
SHA1 f99b58ecdfc6b356b6dc1a7008d7c38171db2dbb
SHA512 cc1063e244f38c82f98a108b2879f4ac84fd89093f69d6e5f7cb78014bcdc536d2c71d82b5fac2a888fc7297af98b441830f6fa901b9e8f1b8b4ccebe5262084
TLSH
T11341BEF783F4867E891196F0AA14AE2FCE1D0516436C7C6A89E4AF1B93E3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

df4048d4-14aa-4fd2-9d25-8f8cc7a41aba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\df4048d4-14aa-4fd2-9d25-8f8cc7a41aba.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b96811d6-98f3-4fd0-9c29-2aad83bea945.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b96811d6-98f3-4fd0-9c29-2aad83bea945.tmp
Size 10KB
SHA256 be8fb2358d1ba7369796a1dcfe87c6c4131e2e09ecc0d052244cd02db91fbd6b
MD5 a070f2df563c600bf0712a7b6d3cf114
SHA1 71f651b38e110999222c4869ba51fafdc4a5bd05
SHA512 85eb2716679e8806d196157e75952f47d63f92091d2a87464f8677eea5745feef9a9365111732f596cbb4ee1b5d52f495ed3777d25ebbbd32fe2ef932fcaafd4
SSDEEP 192:sxRnLcR6UbKD/fCssVIKj9YzoA8p4nn/g6+WNIYiVaUKG4KQIgQJ:sxRoBu/f3sVIM/+/5IM0
TLSH
T14322A555AD28A93B8CDBD20DBB25BF53D2FD5032A1D11E58E6FC861C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fd65ec6b-021c-4aa3-82b4-410da327d2bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fd65ec6b-021c-4aa3-82b4-410da327d2bb.tmp
Size 23KB
SHA256 34f551659f5709c1a8e84a2d805ff64d8735cf4f19a1d6297fe4977e1f3823ca
MD5 dc7b9440176ae6fc18b624ba5a93fd00
SHA1 436abab7f7f06ad0d2123dcc47e741294301ce32
SHA512 88bbf8df02cfaffe90e5e75462553e2289ac568f3678530729e5556db6d9ebc90afe9aae6c64507a4442eb3c5e4311dd7b9152c539d0f6ca83bca610a43fdcac
SSDEEP 384:XLMDmVifCtgvdFfnvKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVC69lLRRIrohZd:XIDmVoWgvHfnv8F1+UoAYDCx9Tuqh0Vq
TLSH
T180B2DA2B640DC77F4F800A9DAC296FD77D9801CB9A588D4047FE994C02DB7EA921A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a63eb221-f0be-42ee-8bae-0321bd9b42cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a63eb221-f0be-42ee-8bae-0321bd9b42cf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 af0612ebb326fc14711371eb91c8a8bbe4adc25657a1ec92d99ef1d8e356ea51
MD5 a48b5072101507d13b0a0701494ba4e3
SHA1 6d1bde25392db8fe70c0989bd39a1db927fc8dca
SHA512 37a8baa507a7dc4c7fa7ccc1ad28fa4f6f3a8dfc573e5bf240b9485bf0b874477595e1efe8257a0c926407c5560bdb105cae4a01c62fba8ecdee48b34a857702
SSDEEP 768:T/UxvxjgC+G3VRSsDcZ0rfZW7VMpBw4Ot5AEl94BHYjHgWq:mZj3+G3VRzdpBVa5AEncHYjAWq
TLSH
T12F03BF39D8659C238CF7A795B30B3357EEF59563E9C12DE448DC2E0E0A8B29E1347816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c4713934-c412-4af1-b492-41970b6b643f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c4713934-c412-4af1-b492-41970b6b643f.tmp
Size 38KB
SHA256 f49ae60fa5c9c2e9ab7e666851c51b44f61a2bf35dc54f5a927c9f1be96090c9
MD5 f616aa66cffd0ff9ac49d3bb2ee02ae2
SHA1 89353a3f65c4e62962fef7b576fe81c65bcc4cea
SHA512 965607b2c4545373bab4ef957c8e5ef7331ec361a9afc1086fb9f1d9571f5e53197feb54f29fb9eeb3a1109c5afd9ef37ca0101b7fac35c5f319c82c7a45dd36
SSDEEP 768:z/UxvxjgC+b3vgcZ0rfZW7eBw4Ot5AEl94BHYj/KAFTN/:GZj3+b3wBVa5AEncHYjCAFB/
TLSH
T14D03BF39DCA59923CCF7A785770B739BAEF19463E5812ED489DC2D1E0A8725E130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a60b1d01-2b3c-4280-ba0a-c42bc80963a7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a60b1d01-2b3c-4280-ba0a-c42bc80963a7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download