40ada20bfae72dd48404c67bf2f3889a1d620958b5c158697b31e027cfe5545c

Analysis

max time kernel
149s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
client.html
Size 4KB
Sample261113-pec93avt8l
SHA256 40ada20bfae72dd48404c67bf2f3889a1d620958b5c158697b31e027cfe5545c
MD5 73cf795e29ad0f02286fc08eef098d73
SHA1 9be3742dfa14d70e99b678c117ebb333b72267de
SHA512 2e1f4232bc61c2874344621395fa1324dd769577ded733e8cc686c69a3aff0924920a5cca37e5483b5f5a14b1bf640072f121c1bce94a975f7dbbfb50f530588
SSDEEP 96:fjFj7jOjEUDK/D5DMFLzLeiO/tjGw5VeZNeBup7RslvaQxvbzM:fjFj7jOjEIK/VoPnOVfeZyup7qlCejzM
TLSH
T127B18572F9BD117F2093427361BDB70A3AA5C147CB9B08903ABCC1755F8AF55AA172C1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2840	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{E915BB77-B668-4D66-A6D6-E42737877465}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4944	msedge.exe
4944	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
812	Process not Found
812	Process not Found
812	Process not Found
812	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe
2696	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 2696 wrote to memory of 4280	2696	msedge.exe	89
PID 2696 wrote to memory of 2840	2696	msedge.exe	90
PID 2696 wrote to memory of 4440	2696	msedge.exe	91
PID 2696 wrote to memory of 4440	2696	msedge.exe	91
PID 2696 wrote to memory of 4440	2696	msedge.exe	91
PID 2696 wrote to memory of 1580	2696	msedge.exe	92
PID 2696 wrote to memory of 1580	2696	msedge.exe	92
PID 2696 wrote to memory of 4392	2696	msedge.exe	94
PID 2696 wrote to memory of 5480	2696	msedge.exe	95
PID 2696 wrote to memory of 4392	2696	msedge.exe	94
PID 2696 wrote to memory of 4392	2696	msedge.exe	94
PID 2696 wrote to memory of 5480	2696	msedge.exe	95
PID 2696 wrote to memory of 5480	2696	msedge.exe	95
PID 2696 wrote to memory of 4688	2696	msedge.exe	96
PID 2696 wrote to memory of 4688	2696	msedge.exe	96
PID 2696 wrote to memory of 4688	2696	msedge.exe	96
PID 2696 wrote to memory of 2484	2696	msedge.exe	97
PID 2696 wrote to memory of 2484	2696	msedge.exe	97
PID 2696 wrote to memory of 2484	2696	msedge.exe	97
PID 2696 wrote to memory of 4880	2696	msedge.exe	98
PID 2696 wrote to memory of 4880	2696	msedge.exe	98
PID 2696 wrote to memory of 4880	2696	msedge.exe	98
PID 2696 wrote to memory of 2568	2696	msedge.exe	100
PID 2696 wrote to memory of 2568	2696	msedge.exe	100
PID 2696 wrote to memory of 2568	2696	msedge.exe	100
PID 2696 wrote to memory of 1948	2696	msedge.exe	102
PID 2696 wrote to memory of 3640	2696	msedge.exe	101
PID 2696 wrote to memory of 1948	2696	msedge.exe	102
PID 2696 wrote to memory of 3640	2696	msedge.exe	101
PID 2696 wrote to memory of 4860	2696	msedge.exe	104
PID 2696 wrote to memory of 4728	2696	msedge.exe	108
PID 2696 wrote to memory of 1508	2696	msedge.exe	109
PID 2696 wrote to memory of 3516	2696	msedge.exe	110
PID 2696 wrote to memory of 1204	2696	msedge.exe	111
PID 2696 wrote to memory of 1204	2696	msedge.exe	111
PID 2696 wrote to memory of 4944	2696	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\client.html
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7fffbe36c188,0x7fffbe36c194,0x7fffbe36c1a0
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1688,i,8803975969745803302,1325353417253431467,524288 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,15421502789692167445,5564596415879856462,262144 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,14577262321748065833,13207918826856071126,524288 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:13
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3672,i,7221419360749802343,8858377312324806836,2097152 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:1
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3688,i,7643910196250731088,3150685959959677241,2097152 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:5480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,2693761777556587743,13508918613134968249,2097152 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,15085445064448435975,11250926236984065340,2097152 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:9
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5388,i,6135755841669322049,8357657050173539711,2097152 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5344,i,4636099750575206879,79660468719855622,2097152 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,18288417889958750097,15276298010639850708,524288 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:14
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,9958594202634467021,10705242567998513075,524288 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6688,i,14777967872610978531,938081107391308688,524288 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:14
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6688,i,14777967872610978531,938081107391308688,524288 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:14
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6688,i,13112895589407098520,9070905162306951093,524288 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:14
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6864,i,11407603469981954521,3617983491283025239,524288 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6868,i,10572450832897546645,3944630524345813531,524288 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,9132992676641733624,3429082600342480854,524288 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=1048 /prefetch:14
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6308,i,15816310854213289840,36698430233375737,262144 --field-trial-handle=2184,i,5328255142674431380,7169729323796134165,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4944

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2900

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

10c8e9eb-bc6f-465c-9fde-a72b964701b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\10c8e9eb-bc6f-465c-9fde-a72b964701b3.tmp
Size 35KB
SHA256 180aa9502f136bf29265b1d328c57604e529292daee2e0c4dc361c1376286189
MD5 e573fd05983999c030106b00ef8111d0
SHA1 ad1a78b6f2daa27e3791868ececfbe945641a455
SHA512 4ccceb765829eddd1cf822afe19b0479ed5b28eaccd759ff7747cef7cf9e3baec0241bedc3666e69874db05fca59c134eff5fe8c01261285c511c7f6c00b6127
SSDEEP 768:Bu3RFFgm1+mFcMBDmGA5b65Q92RQMPb8Z75EZQLl:Bu3nzAF65dQPdSQZ
TLSH
T1D6F2BF72ECA0EEB75CB591C0765A32567FB48227C5C90690D9DD7F1D02CB68E430B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1cac312e-2a2c-4cfb-a737-741edfc14f4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1cac312e-2a2c-4cfb-a737-741edfc14f4b.tmp
Size 39KB
SHA256 d5250735701ec844eb625ae7b4bfcff90d809fccd357fa0637e8fd7b5fedcc57
MD5 a84f7861136b7f64ac1ec9305ffc37fd
SHA1 6b5ad873a59c7068ef42c7233024bf28b19456d7
SHA512 931f75d77b2a378916fcd11596c2fa5e67bddc17f5c92c6170fef21e92f64d50073a30d2ec986c67a996ff8a155b9dc7191a28cd5ba5ac68441f7ed8b00c4d93
SSDEEP 768:U/UxvxjgC+B3vLbRgm1+mF6tDmGA5b65Q92RQMPb/Fj0O:BZj3+B3j63AF65dQIFQO
TLSH
T11703C036EC94AE779CF952C0364BB35AAFB88173C0C556A049E96E1E06D768D430B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

40846cfb-f2bb-44f4-832e-22a9fa079e4e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\40846cfb-f2bb-44f4-832e-22a9fa079e4e.tmp
Size 35KB
SHA256 661751cd61cfc3ed284d94a9a1d280116976d2bb384dc7751b3e1c9f0bad143c
MD5 0aa27ce81dae7b66d3034235421d682a
SHA1 1e1315b96b19f55ad755b4447aada307e0dfbe08
SHA512 594edfc12d1b30b0004e63ae34998509fa696792e40943163b368b7ac97c4dc21de97f818abe4db3662be76b65b9f9602334da8521bbba30edf385f62b986ae5
SSDEEP 768:bu3uFFgm1+mFcMBDmGA5b65Q92RQMPb8Z75EZQLl:bu3WzAF65dQPdSQZ
TLSH
T1CAF2BF72ECA1EEB74CB591C0764A3256BFB48217C5C90690D9ED7F1D02CB68E530B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8746b9b3-d958-49e7-8e00-6869262a3122.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8746b9b3-d958-49e7-8e00-6869262a3122.tmp
Size 37KB
SHA256 cac953cfae90df56489e935bb1a1e404c42ca46eedad4be3dbfccdb30abefdc0
MD5 23fb6fe9784d456af514efbb1243118d
SHA1 95bc5583d9f683efef8b276b731aa3f78e774c4b
SHA512 c1dc04abfbc959803d2545ad22f98a7ddc4ba000ad567e57c555970be2aa27fe4ebad37ad14a199aa10fc53f7edcf40a8aade435e14f5ae9c31fed7233470ec3
SSDEEP 768:cFVg38wgjFFgm1+mFcxDmGA5b65Q92RQMPb8Z75EZQLl:ug3bAF65dQPdSQZ
TLSH
T10603BF73DC90DEB79DB996C0B64A3211BFB48267C4C99290EADD6E0D028B5CD030BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8f490a8f-42cf-456e-8778-2129b9acab6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8f490a8f-42cf-456e-8778-2129b9acab6e.tmp
Size 40KB
SHA256 dfad2d8e0bb0ffb222070c1bbcf8b11e087815004bce723dabcd30e40f25f3d6
MD5 217317019be4c1a60d7ce6c25f8c6f5c
SHA1 fb67f4fd57c0d0916a5e0f49a6e8690051647371
SHA512 a2350c47e3388d2bf188701ee0c71df0251f3a6e831206f42b6ffbdcfb928e7d5589ae0d4fd7cca53d05421d9e387c74a9d49c59437a7bd54350c65e26024c74
SSDEEP 768:8/UxvxjgC+C317Fgm1+mFcMIDmGA5b65Q92RQMPb87qf:pZj3+C35oAF65dQP2f
TLSH
T14E03CF36ECA4AD735CB9A1C0364BB35ABFB84523D0C955A059ED6F0D07CB69D830B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

1bd67ee2-7f41-4bd1-b4bc-eb455a40beba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1bd67ee2-7f41-4bd1-b4bc-eb455a40beba.tmp
Size 11KB
SHA256 bf9ac344a7135e475cd159694da2e5c915dcc438c4b11ce36d22cb119313d8d1
MD5 1e584234f1daa26efd5d904781aa2847
SHA1 1c21f1017cdf5d31f8c3cc6ee618c0ff076f2395
SHA512 d24ba8e07a956d18de1ca38a89a466258a389ba1223e8641a88330b0dff09d4d006b48d287725fe2b6947c7cbe3cb59f219816c0f6add3a2cbfbc27dbce66447
SSDEEP 192:sxRXR8b5/fsUsPyYh7zoA8p4h/g6+WNIY2ImcH+GFIgDYJ:sxRXE5/fsUsPbak/5ImHn4
TLSH
T1BE32A715A928A93B4CDBD25DBB657F53D3FD5033A0911E48E6FC8A1C05EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e3e86c4-ce37-4bb9-b4b3-e7122f6a7890.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6e3e86c4-ce37-4bb9-b4b3-e7122f6a7890.tmp
Size 11KB
SHA256 8acdfc837f5256255afed8cdbe288037aa295a6efe135d90d0c77ee21736029e
MD5 1b13ff6ec6e8b68ec3aa6068fbc96800
SHA1 57362928ca454da20686e338636812c32360ac4a
SHA512 e20b108542466fda6e332b56f5717b9e9423623d9925b7db7c81827267f08bb4926f8dc5db116583be3df67c3faae5cade8af74ec40696b023701055689f47c0
SSDEEP 192:sxRER8b5/fsUsgyYh7zoA8p4h/g6+WNIY2FAcH+GFIgQJ:sxREE5/fsUsgbak/5IxHn0
TLSH
T14832A8166D28A93B4CD7D25DBB657F53D6FD5033A1902E48E6FC8A1C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 2b1a921229e0253b10c7ac44a2fda5de8da9dad592061b9f8af1406a22a64fa2
MD5 c1f244ac80f1372f6787e3bdf82614cf
SHA1 819853487706887b26f49e3e8b21d02fa2e6c335
SHA512 0861ffda7641e781c0c887587b8bede9ad7f9914ada03e651f8e636a0ad260ecd1aa0188aef18b3b104ed574e6794276a416907cbfec72ab89fafca560fb3f27
TLSH
T17251C84997D205DBDBA570B19DC50C9BFD3426F08483DF5205A5D979AB0B3A8C1CD3B4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b2f307800595af23b48fc9784eff9f08c6cfabdb47d4a2bb635ae4118c1918e7
MD5 5a0bbf5b5b4effc7d7eb4e772ca8bba3
SHA1 067c9d98bf851248fd73f77b39cb7ef908f106a4
SHA512 d8cb3014d438cd0bfa4da4b55cc1185db48dd0127b5884f872de858283f80c69cb1038dcf97522a327c53692f5eb9399bcb1fa769c442c7d01d8304288db03df
TLSH
T1E251B64997D205DBDBA570B19DC10C9BF93426F08483DF5205A5D969AB0B3A8C1CD3B4
MD5 SHA1 SHA512 TLSH

Submit Download

eb7906e3-5ee1-483f-90a3-245b2b205b76.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\eb7906e3-5ee1-483f-90a3-245b2b205b76.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

a22d972c-ed95-4a97-8d36-150e5b5eed56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a22d972c-ed95-4a97-8d36-150e5b5eed56.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

abb2e51c-1f00-4cbf-9ce6-ed27ea18b033.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\abb2e51c-1f00-4cbf-9ce6-ed27ea18b033.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

b349ac5d-5e05-4a58-9a19-42cc3e660b61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b349ac5d-5e05-4a58-9a19-42cc3e660b61.tmp
Size 2KB
SHA256 8b2f17e9658895d83c22447f0c00ae179e31c1f5970b7eb1c16d8c204dc34aaa
MD5 d2c4aae0c98f256ae5ace6935b7bcd18
SHA1 ef08ae3e43701929a7365905b952fca970b484a6
SHA512 c87711c04a9ce7860757c0c2e9f8a426a4cef1a630be407be496157a4d25dfd22e115e88a0e30c765e5adc32e2e025fc588816912a09a9b50fc1dc465bae10fe
TLSH
T17551CFF783F5866E991196F0AB14AE2FDE2D0516432C3C6689E4AF1B93F2071D04269F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c19bb188-1000-42f8-b311-70e736533b83.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c19bb188-1000-42f8-b311-70e736533b83.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd7d23da-5c43-47a3-8aa1-ed55b0800f90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dd7d23da-5c43-47a3-8aa1-ed55b0800f90.tmp
Size 23KB
SHA256 d0c858095d6e98c3e674ef03a5157a0ff5ec044a0094f7da550473d6cc8551e7
MD5 cf24ef7674130ff70d10dc8ae93bf8a0
SHA1 ae52e266ab3622e1e6e55f928f2cf6e85924a46e
SHA512 1ffc6ba419e1ba2875b9791abb0eef1c7d999c6016b815a79f9427f14370dc9aac27a1dcdc18a668f052a08016464d34c72d9eb8737061467a185d5f09533afc
SSDEEP 384:LbnaaCTfCtgp/FfrDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRW6roHr9:L7aaCDWgptfrD8F1+UoAYDCx9Tuqh0VR
TLSH
T1E9B2EA2F640CCB7E8FD01A9DAC596F9B7E9802C796588D4047FE984C02C77EA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e596be71-4bff-4f18-b4cf-7dfd66dfe3ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e596be71-4bff-4f18-b4cf-7dfd66dfe3ec.tmp
Size 11KB
SHA256 f3e06c6d44b8fc8bd43c4922c39a327f9cda8d32b25c6dd3a1a688cc396921e6
MD5 3368f31b16c2610627a16088bc653ef4
SHA1 40641aa0f68320f774cd03c93a42f431b5b44593
SHA512 ccc2e97f0c10a8f9973827da9f2fe77c6e750b23543caa9ff103df509d7f6f5e8dcccbbc772bcec51aed55d2a098ed603236ab440105ed3de71f1f3de95e3105
SSDEEP 192:sxRXR8b5/fsUsayYh7zoA8p4h/g6+WNIY2FccH+GFIgDiJ:sxRXE5/fsUsabak/5IVHn6
TLSH
T1B0329716AD28A93B4CDBD25DBB657F53D3FD5032A0901E48E6FC8A1C05EB6DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

307aa051-baa6-4be6-b83e-2ade66a5f370.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\307aa051-baa6-4be6-b83e-2ade66a5f370.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce39e92a-6667-4ef7-b762-148cc8d09851.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ce39e92a-6667-4ef7-b762-148cc8d09851.tmp
Size 40KB
SHA256 4b97ab70777ba4f35416ddf8045f5094248bf5079e913d765232fe0f38959f97
MD5 08a65a6c9582d8a5358830af6964e5f2
SHA1 8c76903321a500afbdd7d1118761955cd59e1b18
SHA512 10c4d98775f881eadeb5eac46e411078b4b55476d60a386884cd4106c66074a29c7b726cac255e9aaf3fff40b4795bf40ef0eb65b4c5eaee217d38fe185a2cb1
SSDEEP 768:c/UxvxjgC+C317Fgm1+mFcMIDmGA5b65Q92RQMPb87qf:JZj3+C35oAF65dQP2f
TLSH
T1A503CF36ECA4AD735CB9A1C0364BB35ABFB84523D0C955A059ED6F0D07CB69D830B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb691def-e621-456a-92a4-af8078b0b103.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\eb691def-e621-456a-92a4-af8078b0b103.tmp
Size 39KB
SHA256 ca0dfd4405918507ff081d0933b44c11463d8d6c2c0431dd797b23d32130eaa9
MD5 c81032c625e081a6696153fdccaddadd
SHA1 e713c637ae61558c8c9cdeacce5bf3843515705d
SHA512 b82077ef8ee7dad80fc20e7f957fa00b4822291eeb47f54bf5fa8c71573157134c35acc7de3f04767a597ae98c070e89beb5f53865573ee7c5db9a9076815676
SSDEEP 768:j/UxvxjgC+B36efgm1+mFcMFDmGA5b65Q92RQMPq8Fj0O:2Zj3+B3dPAF65dQMFQO
TLSH
T13B03C036ECA4AD739CF551C0364BB356AFB88563C1C955E04DE96E1D06CB68D830B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

63dd3e2e-2bb9-4feb-88c3-ea76de0e1be1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\63dd3e2e-2bb9-4feb-88c3-ea76de0e1be1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download