6fa0a31b54b9053c98fc86a82d78fbfcf19a1b7877b59ea700803fba5dd85b71

Analysis

max time kernel
148s
max time network
137s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 06:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cyber-security-ubs-en.html
Size 781B
Sample261113-g1mrmagw21
SHA256 6fa0a31b54b9053c98fc86a82d78fbfcf19a1b7877b59ea700803fba5dd85b71
MD5 c74c39f7e1c3940d1d098653bc28b77f
SHA1 563f359c933b182b2ccf45629f2b86007fa9c879
SHA512 cff8644ea5c06f34251cc262e22dd4058ecb0e825b914ac626f84e7bd992fc0c49e9d37f94ef59eb9b06e0cb5ef073d4ec07b44d9c4d4fbb4fed5788263f93f3
TLSH
T15A011077FCB6037542112F6B0755533AA7B330A1149FF3BD66E3A1544541D3803858C9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5792	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{C15E60DF-3CCD-4F93-90A6-3560B103F9F0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2616	msedge.exe
2616	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4896 wrote to memory of 1708	4896	msedge.exe	91
PID 4896 wrote to memory of 4312	4896	msedge.exe	92
PID 4896 wrote to memory of 5792	4896	msedge.exe	94
PID 4896 wrote to memory of 4312	4896	msedge.exe	92
PID 4896 wrote to memory of 4312	4896	msedge.exe	92
PID 4896 wrote to memory of 1556	4896	msedge.exe	95
PID 4896 wrote to memory of 4680	4896	msedge.exe	96
PID 4896 wrote to memory of 5520	4896	msedge.exe	97
PID 4896 wrote to memory of 1556	4896	msedge.exe	95
PID 4896 wrote to memory of 4680	4896	msedge.exe	96
PID 4896 wrote to memory of 4680	4896	msedge.exe	96
PID 4896 wrote to memory of 5520	4896	msedge.exe	97
PID 4896 wrote to memory of 5520	4896	msedge.exe	97
PID 4896 wrote to memory of 4464	4896	msedge.exe	98
PID 4896 wrote to memory of 3264	4896	msedge.exe	99
PID 4896 wrote to memory of 4464	4896	msedge.exe	98
PID 4896 wrote to memory of 4464	4896	msedge.exe	98
PID 4896 wrote to memory of 3264	4896	msedge.exe	99
PID 4896 wrote to memory of 3264	4896	msedge.exe	99
PID 4896 wrote to memory of 2156	4896	msedge.exe	101
PID 4896 wrote to memory of 4428	4896	msedge.exe	102
PID 4896 wrote to memory of 2156	4896	msedge.exe	101
PID 4896 wrote to memory of 4428	4896	msedge.exe	102
PID 4896 wrote to memory of 4868	4896	msedge.exe	104
PID 4896 wrote to memory of 1108	4896	msedge.exe	109
PID 4896 wrote to memory of 4256	4896	msedge.exe	110
PID 4896 wrote to memory of 6000	4896	msedge.exe	111
PID 4896 wrote to memory of 1928	4896	msedge.exe	112
PID 4896 wrote to memory of 1928	4896	msedge.exe	112
PID 4896 wrote to memory of 2616	4896	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\cyber-security-ubs-en.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x234,0x288,0x7ff981f9c188,0x7ff981f9c194,0x7ff981f9c1a0
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,2340451248883335544,8907203783683503280,262144 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,11773449340711041604,12662645863337255101,524288 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2452,i,11067949211460219523,5761338090932433106,524288 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:13
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3364,i,10335879455100559451,10464694305946220066,2097152 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3368,i,14661730765514592025,8321131042095297674,2097152 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,9939264589266113988,16786217405725110411,2097152 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,1314950532178612127,5018935639750570303,2097152 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:9
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,880758459530017295,6016787902966468349,524288 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,2167731136052858333,8014807085761765055,524288 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,774779338381919632,14844367432261404029,524288 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,774779338381919632,14844367432261404029,524288 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3352,i,16243958755422983221,3467882195891052343,524288 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:14
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,7787595726318653737,858508103318426828,524288 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:14
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,9088346568035601267,17006315255796872623,524288 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=604 /prefetch:14
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,17535123976934238504,1327343028723931352,524288 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6420,i,3610715842407326028,8905675158325727685,262144 --field-trial-handle=2272,i,8100947873610596787,7063475230162809638,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2616

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3200

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2456

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0d76c806-45bf-403c-bb0c-5b2397d75660.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0d76c806-45bf-403c-bb0c-5b2397d75660.tmp
Size 39KB
SHA256 5548aaf78c7067a715aa3862f9eb27c383a43be373de9bda03dc3f712c9fb4ff
MD5 2ece2d5e0a938102d7902e9136fbaa0e
SHA1 200f919d6e14420a6e8da5e381d0cfd7690f494e
SHA512 b780621561e68ac86edc9a124d24e7f2e3683a06e3fc2f2ad5402fa40481d6b90fb51b31077df530acb40ba4c53cd660a81faee56a22b34f1a0d6ab01a1a4eca
SSDEEP 768:c/UxvxjgC+B3Bj9gm1VXwcFDmGA5b65Q92RQMPq/Fj0O:JZj3+B3TPAF65dQvFQO
TLSH
T18903C036EC94AE739CF996C1364BB346AFB84473C0C956E04DE96E1D06C769D430B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

17783c86-1031-4348-ae99-d067d806d7ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\17783c86-1031-4348-ae99-d067d806d7ea.tmp
Size 37KB
SHA256 8fbf3ed6f98af5ff9fbaac2b35d796bd1df039d189ef5a9eed118327221b440e
MD5 65c3d9cd6076e99d7dda087b08ce76ad
SHA1 f514cf0c1988c4e75e367899c0ae674740113a36
SHA512 8939548498bd19086444a285062fab2f61ec9e071c145fe1d19618a8e5b0b3786fcf4eeff785bc41cfb97cc8d407ce61750e7002eb23e0bb94a54238cacbe2b3
SSDEEP 768:DIFd33bwgGHWjgm1VXwzDmGA5b65Q92RQMPb/Z75EHX5LP:D833YH1AF65dQsdkX5L
TLSH
T13103B073EC90DE7B9DB95AC1774A7206AFB48167C4CC9290AADDAE1C01C75DE034BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36d7de25-4e4f-4814-82e9-e6418f2ec054.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\36d7de25-4e4f-4814-82e9-e6418f2ec054.tmp
Size 39KB
SHA256 d437b72738e414e3f88e47b891635b490f70a7947c7b2f592abd14b482ffa12c
MD5 965d6fa3d2b7b241aeca3743a2226a67
SHA1 3b3d2980902831f3c8030af8d55144dd51cb8e7f
SHA512 556891b212277d5a7523c37b63ac1dd48cd8ffca80621fd3b7d51bda3c4fd8170c112158f0cc7df47ebf4ff3bbfa6773a8693e0a69ac8b06cbcff5f95f646a8a
SSDEEP 768:U/UxvxjgC+B38imMgm1VXYtDmGA5b65Q92RQMPbRFj0O:BZj3+B3BO3AF65dQaFQO
TLSH
T1CD03C036EC94AE77DCF95280364BB35AAFB88473D0C856A049ED6E1D06C769C430B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5ada986c-44c6-4ff3-94dc-2fc71f526566.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5ada986c-44c6-4ff3-94dc-2fc71f526566.tmp
Size 35KB
SHA256 04efaaeea92a015480eec603584432bb54a822bb447670aa47bba44f2e12cb58
MD5 6abfaa8646ee034fc6e4fca0f45f26ec
SHA1 29f81701d2c216ee3e88786dc2b805528065aa9a
SHA512 e1ae369b063a7c0c35f9d6d0b1324c462d797e8544112a261a6a1c6ace405cdb9d83f881a7e9eae5f67ee21b4f4f8b05255cd378ef3030d810cf8c7b6c103c30
SSDEEP 768:uft3bHtjgm1VXwcUDmGA5b65Q92RQMPb/Z75EHX5LP:uft3bHx8AF65dQsdkX5L
TLSH
T14FF2BF76EC90AEB75CB9A2C172467246BFB88127D4CC479099DDAF1C01C76DE430B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

0a6e7cdc-d21d-4d06-bca2-e0431eef099c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a6e7cdc-d21d-4d06-bca2-e0431eef099c.tmp
Size 11KB
SHA256 13635017605018ca90d3e8ee22c80ed2dd9dd8ff40468f95de0feb3c8f3ada55
MD5 43e439004596b5d5c3ba995dc51c0506
SHA1 fb1a4c36a30a969a9693cb0cf10a8883b33be5b2
SHA512 d8c58b2c9d23a06fa941106134ba89a7ab5264c8718a0e9f2aecc77f57ca9b769d846d8d4b8cd985a3c8d5c2d534f22515c5419ea67ed05f537e509d5c858fcd
SSDEEP 192:sxRgRsbD/fsssYyYhCzoA8p4M/g6+WNIY2qNbwGOIgD4LJ:sxRggD/fsssYbPt/5IGyO
TLSH
T19442A6159D68A93B8CCBD61DBB65BF53D3FD5033A0941E48A6FC8A1C04E76DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0d98f08f-5002-46ba-9739-be55bd454858.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0d98f08f-5002-46ba-9739-be55bd454858.tmp
Size 11KB
SHA256 2964c85a23ba2e61156c583132a0d3841ea1fcc75df40cd5dd127f844b509494
MD5 a89a945f6ef286981d164778dd2b3660
SHA1 4d3bd375c0f3930c22adef5ce3d506db97036ecc
SHA512 f857f8143404d7cb6abe3a0f0acc0d1b1d2ecd2362255fc0c225500ba0a812d17a21ff268ce1d027f0faf0a2950044e188c4d181fb8e7a2fd2bc525d4199f21d
SSDEEP 192:sxRjRsbD/fssswyYhCzoA8p4M/g6+WNIY2F5bwGOIgIJ:sxRjgD/fssswbPt/5Ixys
TLSH
T17D3296159D68A93B8CCBD21DBB65BF53D3FD5032A0942E48A6FC8A1C04E76DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e6b3bd7-fd8a-4445-a0c1-6f2f7f56c047.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3e6b3bd7-fd8a-4445-a0c1-6f2f7f56c047.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

65fd6706-7d51-4e5d-9e3a-f4218fc1a20f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\65fd6706-7d51-4e5d-9e3a-f4218fc1a20f.tmp
Size 23KB
SHA256 4f1240dff4dc214985c87b28c06c4bed5566d344cb8a8ce3d88349eadf344938
MD5 75efbfbb031f9dea46eaad12132bcc13
SHA1 0f3f0831fb214f7040c8cd9c37e1d08f1d321d63
SHA512 e25d26de27e17fb7b0a928bc22faf1f519433dc4f05d545987c23b0fef59d8ede3b4a0bf541a70c0f1dde04666ace8328512ade84224ec7ab0866da76857e320
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRW0roHrq:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0VE
TLSH
T1E0B2DA2F644CCB7E8FD00A9DAC596F977E9802C796588D4047FE984C02C7BEA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a1101cf-6507-4f6f-a325-0767e4d627ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8a1101cf-6507-4f6f-a325-0767e4d627ee.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9cd00c4f-f72b-4b6b-9e90-daee6729a3ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9cd00c4f-f72b-4b6b-9e90-daee6729a3ea.tmp
Size 11KB
SHA256 cef71808cd749f75f3e65208da5bfffe8f199cc2895e9fb1e417af158232d309
MD5 8d3a53dce07ce89c60875e7aa53c460c
SHA1 8cd4268b17cd6eeca108993386aa476ec5a957c4
SHA512 7fd65eea966235b04be54003fccd7d088af70a8b2a1d269e07d121adb64c0643318700b336a72ac75b6fdb6c1a079f621bb6ce18d76ee7c2c7d253cdb5ce2793
SSDEEP 192:sxRgRsbD/fsss0yYhCzoA8p4M/g6+WNIY2F5bwGOIgD4FJ:sxRggD/fsss0bPt/5Ixy0
TLSH
T149329715AD68A93B4CCBD21DBB65BF53D3FD5032A0942E48A6FC8A1C04E76DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 16b2e345cbfec0bb268eca67c191cdbe54bb3e7bcfb0040ab8f6a100a81d5567
MD5 fe8b225b8e849b6472b16d1eb1e6a8a5
SHA1 b54696d141e3b52197c6a709a1b97a65f82893e0
SHA512 d10c7c20e87ae3782cd28f62f2f2584bf46e3b2be552b2f04c4ab2745305496b0358736cfb340ead7f03db6129146d65390e5c30d3ef687e3e6c450ea1a9aa13
TLSH
T1E941928482B57295FFB93A71C9C036873AF08A81E4C3AE430594CCB98F093D883D0304
MD5 SHA1 SHA512 TLSH

Submit Download

2387fb0c-c964-4e4f-a0a0-310b86b43b60.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\2387fb0c-c964-4e4f-a0a0-310b86b43b60.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

29ff1a5e-b501-491b-979f-dc53abc90389.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\29ff1a5e-b501-491b-979f-dc53abc90389.tmp
Size 1KB
SHA256 1289a8acbdebc792845531947579fc9733e0355324f0824c6b75cb1265a3d639
MD5 263b929e1e573e39713d48a15ae6b91f
SHA1 bf84b769e20da88f20ea4bf21a866e9c369b8375
SHA512 0511190c1260b6e795a7c40d9bd4621ea34f77e9ab8eddbb8afd835c2d4c8f731de3a1f996b04619f7b5fefc3382bd7a006fe97aaa9da23b1023255786fd1211
TLSH
T1C431C2F783B4857E9A0186F0AA14BE2FDE2D0515432C7C6585E0AE27D3F3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

2da18409-05f4-403f-b152-d5b142f5fd0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2da18409-05f4-403f-b152-d5b142f5fd0f.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

c485a486-5996-4717-b22c-3b725ac29232.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c485a486-5996-4717-b22c-3b725ac29232.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 30524103c25cbe5de1f6701fdf5bbb2eb61f70345716febedf6b7783dd73053c
MD5 2ab3058c214fda2ebda5726c4847699e
SHA1 e6682e07b1a9807aade7b46e99799cc8838e709d
SHA512 0f91d1fb3f0eafccd7554db70f71e97cb95a4b6d556d5a48170bb9558f6ead8626fc985f8aaeaf9c46b8fc723537a01b43085d39801e8e8c26ba23fe518f1050
SSDEEP 48:KsgIzKxSU/yUGBq2MYUkkYXPIXekKiBK0kOW0R3MW5yxyIfKrC0PFyZlzR:KsgQKxSOGvyKAE2SywKrC4FyZlzR
TLSH
T15291B15170AE064039BE29CA90748B7B524232F33014EA7A3F7D54F58A6FE156FBD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

adde3a11-6700-46d2-821e-e03560fcb847.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\adde3a11-6700-46d2-821e-e03560fcb847.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b9d643e7-7d85-45a9-ab84-07fe063dab8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b9d643e7-7d85-45a9-ab84-07fe063dab8a.tmp
Size 35KB
SHA256 64628cdc021a6f25aec56f07909382cc653afbd761cd33f3f56ec81c41838e15
MD5 cba9477d7582b45521394aaae2e77aae
SHA1 ff1b48e670c01cd2e3ecffb5653d1ce34e2e0179
SHA512 68fbb2814c52f1f42d8af024c0dec3aa9d87790a4eed5213776f0406f87b81f412f47c05798fbe78f88130d3fd7fd69bf04e875f2a43807b6ce2190419859edb
SSDEEP 768:Lft3SHWjgm1VXwcUDmGA5b65Q92RQMPb/Z75EHX5LP:Lft3SH88AF65dQsdkX5L
TLSH
T19FF2BF76EC90AEB75CB9A6C172467246BFB88127D4CC479099DDAF1C01C76DE430B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1e45a84-274d-49ae-9e09-c07c5b23e840.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e1e45a84-274d-49ae-9e09-c07c5b23e840.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download