c0d9ce87e2a99508c66670c92c61fca0e46c21545a0de979f02b2db37487b257

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 00:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 30KB
Sample261113-amvfzsys2q
SHA256 c0d9ce87e2a99508c66670c92c61fca0e46c21545a0de979f02b2db37487b257
MD5 3d6042a7bd2c9a36ce16fbb157e51720
SHA1 0908f1461833aec32211570856aff88cf44121d0
SHA512 5d9e8cdb552944b137810c2a42afdf510e3ae85685f680c7d875f6c794ae7ed2453414b9ba50c28324c662785463284ddbfe56fb7a91245a7ed592db96ec821a
SSDEEP 384:hKCaCyVfxCFLt4oj+XrkLwXLpIqN0sL3W6J6BOZ4Xh9kFxtWPDPf+7Pbz/H+JUYo:h9xJMLLeos34oCb/ejIf
TLSH
T1E2D2623F90680D3E412F2FED7496174C525BC70EC7CA62E4CAE882C547E7EEE5966188
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5876	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{21F0AB83-0372-4538-8070-EB2C8025AD63}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5228	msedge.exe
5228	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5960 wrote to memory of 3068	5960	msedge.exe	88
PID 5960 wrote to memory of 1012	5960	msedge.exe	89
PID 5960 wrote to memory of 5876	5960	msedge.exe	90
PID 5960 wrote to memory of 1012	5960	msedge.exe	89
PID 5960 wrote to memory of 1012	5960	msedge.exe	89
PID 5960 wrote to memory of 4956	5960	msedge.exe	91
PID 5960 wrote to memory of 4956	5960	msedge.exe	91
PID 5960 wrote to memory of 4180	5960	msedge.exe	93
PID 5960 wrote to memory of 4180	5960	msedge.exe	93
PID 5960 wrote to memory of 4180	5960	msedge.exe	93
PID 5960 wrote to memory of 1452	5960	msedge.exe	94
PID 5960 wrote to memory of 1452	5960	msedge.exe	94
PID 5960 wrote to memory of 1452	5960	msedge.exe	94
PID 5960 wrote to memory of 1976	5960	msedge.exe	95
PID 5960 wrote to memory of 1048	5960	msedge.exe	96
PID 5960 wrote to memory of 1976	5960	msedge.exe	95
PID 5960 wrote to memory of 1976	5960	msedge.exe	95
PID 5960 wrote to memory of 1048	5960	msedge.exe	96
PID 5960 wrote to memory of 1048	5960	msedge.exe	96
PID 5960 wrote to memory of 3684	5960	msedge.exe	99
PID 5960 wrote to memory of 3808	5960	msedge.exe	100
PID 5960 wrote to memory of 3684	5960	msedge.exe	99
PID 5960 wrote to memory of 3808	5960	msedge.exe	100
PID 5960 wrote to memory of 3980	5960	msedge.exe	102
PID 5960 wrote to memory of 5676	5960	msedge.exe	106
PID 5960 wrote to memory of 2708	5960	msedge.exe	107
PID 5960 wrote to memory of 3424	5960	msedge.exe	108
PID 5960 wrote to memory of 1604	5960	msedge.exe	109
PID 5960 wrote to memory of 1604	5960	msedge.exe	109
PID 5960 wrote to memory of 5228	5960	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b4,0x7fff4ec4c188,0x7fff4ec4c194,0x7fff4ec4c1a0
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,7145331594210070291,17306605925632706308,262144 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,5669622085704453840,5074547069447416269,524288 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2352,i,14221839945636353576,14688143729575837477,524288 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:13
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,12004659183485063755,12311420902108459294,2097152 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3664,i,13344413452442443354,11026291383633384384,2097152 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,15591531638208553216,1219888784566626357,2097152 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,9245070507820343956,6718920522894087783,2097152 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:9
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,1100629408292880126,7867224917411293876,524288 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,11924318066132117505,16847599161791998524,524288 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,10638397653090218303,15338086618519843048,524288 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,10638397653090218303,15338086618519843048,524288 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,17864656145077131859,15081167200308177600,524288 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:14
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,12359171048965063981,1513867277606903558,524288 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:14
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,11435470077858369803,14854520364912428390,524288 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:14
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5664,i,5784991771474263851,5296025586976406781,524288 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:14
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6092,i,9220313072032612567,16160774902229201191,262144 --field-trial-handle=2196,i,10081557192857688810,13788430383056749513,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5228

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5196

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2456

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0b174bf6-456f-4234-b30f-51ca0c9bf323.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0b174bf6-456f-4234-b30f-51ca0c9bf323.tmp
Size 33KB
SHA256 e00784cbb7d3ad2be3853fd1ef53b64eb51b0dd21dca9239309cbaef16a2c175
MD5 0e6f8d6144ebef8384181a756be3c07b
SHA1 eebf0c0fb27cc802d0161eae2003d6d59c2735db
SHA512 1806a9871516480efb89c5e5c876c02eab8432c963ab0ab1834f6aab65f5eaa859c79dbf573fe39a44858b2f3b05c60d3709e210605400eee21c53efa4873fb3
SSDEEP 768:M93fmS0CybNbYs6VOeRFZD1fTos7RjiE75E4RLd:M93uG6fY1fT/Rmk/RB
TLSH
T1D0F2AE39F8E49D374DF2D284B2493E47BFF482A3CAC9069495DD5E1E04C7A9E234B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

256adfd6-a345-4516-a5f5-6325abb5c9bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\256adfd6-a345-4516-a5f5-6325abb5c9bd.tmp
Size 38KB
SHA256 6ede9fb71f14c43d309317ff6272c1c04fa69f52715af5797fe58e54407a8122
MD5 a03ffa866c5f69bb00e312ff1b5f5470
SHA1 652b9bf15fb849af5331b7cc911641efd245bb27
SHA512 cba3dac77dd64bd56ad02437c4ad68a986fdfb9fa966dfc384fc38f80cd125fc6b98a2984c37c99d44bb02444f18e8052f973a5465de23cc393206c02bd5bd80
SSDEEP 768:n/UxvxjgC+J3fmg0CybNbYs6KOeRFZD1fTos7Rji0RIM:aZj3+J3uo6IY1fT/RmsIM
TLSH
T14503BF3AB8E4AC334CF2E384B24A7B47AFF445A385C5599845DC5E0F09D7BAD134B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2bb62d3f-7564-4cd2-99ba-39b9c503d40d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2bb62d3f-7564-4cd2-99ba-39b9c503d40d.tmp
Size 33KB
SHA256 5740bb571a0a3db2094375a4e7289255b67038c8fc06975b1a8c5a843a540c39
MD5 19dfe34f71eed282ee2d972a7e3209c9
SHA1 9c6e7007c2a17476f4daa9751a06acde20ded0e0
SHA512 20f59f66e00c163454d844bd7938f30d88e042fe35667a84666a310551d579dbd68c5481a22337e818b8b0beea9fb79b7f041ec1a0a82ff0cc92f8f2300c91ad
SSDEEP 768:W93smS0CybNbYs6VOeRFZD1fTos7RjiE75E4RLd:W93/G6fY1fT/Rmk/RB
TLSH
T18DF2AE39F8E49D374DF2D284B2493A47BFF482A3CAC9069495DD5E1E04C7A9E234B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44cb27bc-ec79-4c9d-bd6c-09eb5de4e84b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\44cb27bc-ec79-4c9d-bd6c-09eb5de4e84b.tmp
Size 38KB
SHA256 0ff8062c109dfc5d4027b95af59f15b59e32feea0e07352623bc40c08c912604
MD5 3a22b94b4e2086789bcfdd1a7c973920
SHA1 001c88a3603294db91ccae94ac72d34eb4669bde
SHA512 c192fd33732d91932b88caa4ef458516b53eb48604ff13aee3cd17f98ed9215e767e934c8a978c2de64363c0233cd4d9e75bd55026b47a07301dc4194ae71c24
SSDEEP 768:j/UxvxjgC+k3Cn0wybNbYs6HOeRFZD1fTos7RCi/+Pu:2Zj3+k3Cx6xY1fT/R1Ku
TLSH
T10803B03AB8E49C334CF6D244B24A774BBFF455A385CA5AD409DD2F0E158B79D130B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

792e72cd-31c6-4a30-9bf0-a227ae7a64ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\792e72cd-31c6-4a30-9bf0-a227ae7a64ce.tmp
Size 37KB
SHA256 55fc8bf607fa26b64a4bf44bcb7ae810b46ff435890ce50811d15a7cbeedf0dd
MD5 53742a13893344e589ac54a2f49639dd
SHA1 85ec39d5deae66e0f393336fe26ae5ce4f48abb8
SHA512 1fe81fd9aaddf71877356bf96e54a6353f5081167c5972d4cbb70bd253c92cc6f7c1dd6c27e7ea89fe0fe1c8d6beb0c350a123eadaeae2d26bac2a2600035e63
SSDEEP 768:z/UxvxjgC+k3HpfybNbYspOeRFZD1fTos7Rzq/+Pu:GZj3+k3H16MY1fT/ROKu
TLSH
T1E503BF39F8E85D338CF6E244B24A764BBFF415B396C91A9809DD2F0E158B79D130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

1dfda99e-4b24-40c7-8f1f-46a059ee0097.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1dfda99e-4b24-40c7-8f1f-46a059ee0097.tmp
Size 11KB
SHA256 dcc1b309be9ba33597bc7219dff824640c847dbe0887ae67a052cc1738234c20
MD5 0924800c3097cfb80c8e4fc1e2313783
SHA1 0dd31ef762e369e978cd8ab675e716755e6f1996
SHA512 be039881104982cdd3b472f44692af39e31f05da7074352ff3e242f075588f2294d5f545fc5f05dfd6fd75628b1780a660b2a7a2258fbd5388d7abb82b5b91f0
SSDEEP 192:sxRTRwb3/f0soK7xsxzoA8p4T/g6+WNIYDoHmGGIgDsJ:sxRTo3/f0so6zm/5IAc
TLSH
T1A932B719AE68A93B8CD7D21DBB65BF53D3F9103260945E48B6FC8A1C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2950c422-ae85-4288-b592-fc2308c92d54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2950c422-ae85-4288-b592-fc2308c92d54.tmp
Size 11KB
SHA256 0c0fcc63328bc72d733ae77068ec5404100b27b9f29cfbe484ed1e1ae0de53d0
MD5 9471d20ae496c9033fbbb7fe795a6840
SHA1 1e91230f5b46ba6c3c7027aabf0f80fe699fa34c
SHA512 36f7b81821e919e874595b3ba86a267ef82157146fbf791519a228ee9f12d23ed2d88ef467233612e009591fdafa63cd1888601c5ee90a2be8708f3c0e0b67d1
SSDEEP 192:sxRERwb3/f0s2K7xsxzoA8p4T/g6+WNIYDoHmGGIgIJ:sxREo3/f0s26zm/5IAs
TLSH
T11532B715AE68A93B8CD7D21DBB65BF53D3F9503260945E48B6FC8A1C04EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a775858-b287-43f2-bebe-f165cd4b7922.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2a775858-b287-43f2-bebe-f165cd4b7922.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3adf9b37-660d-4503-8cdf-55f0d9e96ba2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3adf9b37-660d-4503-8cdf-55f0d9e96ba2.tmp
Size 11KB
SHA256 c1e7a7a86fc36b977534252ed943daee89a0211939ecd64d1c376c8733c32f7d
MD5 546ac25ffa567087524dc43250426b3b
SHA1 4967be5226d554485f713455b4ac157aa9007061
SHA512 2a2659a49a1904f4771e22eb29e9220628126cec821e7e31a3824c8e82c79337375e3f72c0b2543f40c1ab0b9145b3ad345e8d5b85c724c66954aa006309416d
SSDEEP 192:sxRTRwb3/f0sjK7xsxzoA8p4T/g6+WNIYDI5mGGIgDOJ:sxRTo3/f0sj6zm/5IuG
TLSH
T1F532C719AD68A93B8CD7E21DBB65BF53D3F9503260915E48B6FC8A1C04EB6CD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

428a238f-7140-44ff-bc33-7391a745b089.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\428a238f-7140-44ff-bc33-7391a745b089.tmp
Size 23KB
SHA256 e980926409847d06ec0338c02bd35b6852bb9ede43b92bfccca408ad55aa6ae5
MD5 563fd48465fbcc714f2f4b201b6b9143
SHA1 7f28bbb775a96b34bd959076a9f4e6e4a40f5feb
SHA512 6aefe93bf94ca92ca8c87c163332c58cbd7dcac046e4007635f095fe5c8b4570cfc3b288510630763b15b0249d71d2dc1ef2a000127a92a5f1a2916f050cb0e1
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R9qroTyi:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0Vs
TLSH
T1ADB2D92B640CC77E4F804AADAC1A6F977D5802C796988D4047FE995C03C77FBA11A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 1d62b38778bcd776f3d5f77f3f5ee3a08d3e162723a7fb1d1cf5fb149342f8cc
MD5 ce4469ecc0c6e826893680769852ece9
SHA1 29e0b7ce1a91ddc77fd02a3f06509e32f7bf834e
SHA512 6f213f59ba3104b1225ab240dd3247e2acb7be9f80ea3d79287e6df9ae9d819d0fd0ecf4a3d875aa630501e965c9cfaf7717d46ceeea7e9412d707dac5baa47d
TLSH
T170410C48D59DC469FF6825B180E927873638AE7DDDCB5E4A176CC4BD67737234E00028
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a56f0d8f7dbf9920e0ebca44dde97f662155b0ac18921106e0153e65df8c7b39
MD5 d1c43478a1d4e16b4dd4c2172f8b34f0
SHA1 8dd4523aea2a911746b26557228a2190f565b690
SHA512 b4075daf557635202e11bccfd6a1dd57ce30cf0ae8411b4d9c054cbd5f50b9e155a225ea82dc95a1474465b4820cbf3b43921b3c60d82f3236f0d460eb0b0017
TLSH
T194412C48C68DC068FF6825B180D923873638AE7DCDCB5E4A176CC4BD6B737234E00028
MD5 SHA1 SHA512 TLSH

Submit Download

5fe5d27d-9f20-4e2d-9560-f08fad4b2872.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5fe5d27d-9f20-4e2d-9560-f08fad4b2872.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2bb5e063-be56-40d2-99c7-9353881fcc82.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2bb5e063-be56-40d2-99c7-9353881fcc82.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

e233c365-8c8f-4b36-84ae-f537cc51ac9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e233c365-8c8f-4b36-84ae-f537cc51ac9d.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

ee89402e-1a25-4551-a60b-adeffc021003.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ee89402e-1a25-4551-a60b-adeffc021003.tmp
Size 3KB
SHA256 82d3dd2ea6a554958315c4dbeb4b8c8ef83f060380818029b6a308fdbd8b5e41
MD5 3a7eff1c12a7daadbf9b69a3f8091e51
SHA1 528db297f32361995ea8b14fa522f0ce2b99dfa7
SHA512 bdca884df5a5d0cc4c4a6e3c9e5bac70b507c589ac49d8aab91ce5c4bba785704571536bd4e82f8b281c79ddbc098d691d3d8660a35d8af26235b09ab1083743
TLSH
T17A719BBAC2E9867EC91156F09B147E2ACE1D051A422C3C56C8F5AF1FA3F2471E24179F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

93ca6ac0-97b9-4118-9d4f-4aa36e37aa71.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\93ca6ac0-97b9-4118-9d4f-4aa36e37aa71.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf09c88d-ee05-46f6-830a-ea2a8a58cfac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bf09c88d-ee05-46f6-830a-ea2a8a58cfac.tmp
Size 36KB
SHA256 5cf6cf7f4491c076bf475ca8bd4185f43c5286e47dd24ae860929794cc5fd2fb
MD5 721e7c991f888c7f6517f8736e58556f
SHA1 e8d7d29eb92a6b53080567899a8c1b5315725fc5
SHA512 d8369c8ff43c1465b974c7cd8c020f411b5e25c8033ccba4446a53eeb1fdd0fda6f60078041f6afbf5c998f47a8a204590b5445b54d7f1245bd48f28504d44f0
SSDEEP 768:8Fd233wg0mS0CybNbYs65OeRFZD1fTos7RjiE75E4RLd:w235G6DY1fT/Rmk/RB
TLSH
T12BF2AE3AB8D48D3B4DF6D784F2493A46AFF482A3C9D94694A6CC5E0E00D7ADD134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5efa904a-9797-4d4d-9a7f-52acbd9bfd71.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5efa904a-9797-4d4d-9a7f-52acbd9bfd71.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download