1c89389c7d29a95ac13dac09fff734ea19d27b804bbd63745ce58377647cbc3b

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.html
Size 180KB
Sample261113-phy1yabv8x
SHA256 1c89389c7d29a95ac13dac09fff734ea19d27b804bbd63745ce58377647cbc3b
MD5 44f4305b163cedbb46869a0f0bf6de2b
SHA1 70323e9ccf10c0207d5a0fd8ee084511339cf004
SHA512 0a9417bbdeec37441ca0622d2f6bc950d89ee5807fcdef4c77c6bdf4da23dd6e7d89c861b79791a521a754ef5f7751dff86af88130fc5de93838599a8c64f2fe
SSDEEP 3072:SfflPpInnRTzDiFGOk0h06YyH3cTT7bHtQEGwHPGg:8FpInRTzCGOk0h06o
TLSH
T182044211BAB6187A317F32CFD003274C658BDFE7D291ABF6B5B3002192B5C947A93196
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3252	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1704430598-3087477806-3297458608-1000\{1ECD5983-49B6-40FC-8F70-A5881B10D2D5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4212	msedge.exe
4212	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3420 wrote to memory of 592	3420	msedge.exe	89
PID 3420 wrote to memory of 4720	3420	msedge.exe	90
PID 3420 wrote to memory of 3252	3420	msedge.exe	92
PID 3420 wrote to memory of 4720	3420	msedge.exe	90
PID 3420 wrote to memory of 4720	3420	msedge.exe	90
PID 3420 wrote to memory of 4232	3420	msedge.exe	93
PID 3420 wrote to memory of 4232	3420	msedge.exe	93
PID 3420 wrote to memory of 1300	3420	msedge.exe	94
PID 3420 wrote to memory of 5592	3420	msedge.exe	95
PID 3420 wrote to memory of 1300	3420	msedge.exe	94
PID 3420 wrote to memory of 1300	3420	msedge.exe	94
PID 3420 wrote to memory of 5592	3420	msedge.exe	95
PID 3420 wrote to memory of 5592	3420	msedge.exe	95
PID 3420 wrote to memory of 2632	3420	msedge.exe	96
PID 3420 wrote to memory of 2988	3420	msedge.exe	97
PID 3420 wrote to memory of 2632	3420	msedge.exe	96
PID 3420 wrote to memory of 2632	3420	msedge.exe	96
PID 3420 wrote to memory of 2988	3420	msedge.exe	97
PID 3420 wrote to memory of 2988	3420	msedge.exe	97
PID 3420 wrote to memory of 5564	3420	msedge.exe	99
PID 3420 wrote to memory of 5564	3420	msedge.exe	99
PID 3420 wrote to memory of 1464	3420	msedge.exe	100
PID 3420 wrote to memory of 1464	3420	msedge.exe	100
PID 3420 wrote to memory of 5752	3420	msedge.exe	102
PID 3420 wrote to memory of 1228	3420	msedge.exe	106
PID 3420 wrote to memory of 3872	3420	msedge.exe	107
PID 3420 wrote to memory of 4508	3420	msedge.exe	108
PID 3420 wrote to memory of 4064	3420	msedge.exe	109
PID 3420 wrote to memory of 4064	3420	msedge.exe	109
PID 3420 wrote to memory of 4212	3420	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffd48f3c188,0x7ffd48f3c194,0x7ffd48f3c1a0
  2⤵
  PID:592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,6942826707396425715,6576536565307526630,262144 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,7746615392691287111,7202636078428383053,524288 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,11273870479218084608,16077063087525602371,524288 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:13
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,18149061536843503859,13287302426267268965,2097152 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,3145976721103965904,3743282196257100458,2097152 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4336,i,8787012674704085512,16231890973524482108,2097152 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:1
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,6237805964486478024,1849518363498331749,2097152 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:9
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,3976716275213847230,3884543471785520931,524288 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=4064 /prefetch:14
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4076,i,13284893008552234603,5863895229214274441,524288 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,14883250961564504871,3722089679155443171,524288 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:14
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,14883250961564504871,3722089679155443171,524288 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:14
  2⤵
  PID:5752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4088,i,14519577017673816572,14833384922185434895,524288 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=4080 /prefetch:14
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,17075927469409589068,7682387178640013334,524288 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,12194679408225115181,6409155772315090874,524288 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:14
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,17017611034828970371,32479352414308559,524288 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6204,i,15870155996802781420,3700380813117648725,262144 --field-trial-handle=2212,i,9291160671619215978,17490102461555763589,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4212

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3564

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

248bce19-fb30-459f-8636-7363fb81b438.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\248bce19-fb30-459f-8636-7363fb81b438.tmp
Size 38KB
SHA256 2f7ffd847130f86424a12d752ad08b8198ed2666e8f9838b7ad19ebd2b65709e
MD5 d66eb3206864932aa44f908e96114bbb
SHA1 9ec4c29a712c89c84513d123051a4a2936d6d6fa
SHA512 31454bbe27dc7803753aafce50094a0954d1bd423261402ce0e7eea9bea3144196787f0895129bb70d62e240d9c71d894904318867be929869bf21180dc2fedc
SSDEEP 768:vm/UxvxjgC+5j3wVUx8NieOjohUjFnUPO4Qp7cPAiSm2eo4w4cciGrTFIvAgZbCl:vbZj3+5j3w2xWAjFwQpYoimeoR4ccFFZ
TLSH
T12803CF75D8A8BE239CF39680361D6383FFF1415395C16EA48AE92E0D028B7AD430BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4a27bbf7-f401-4fcd-9810-30cdd6bc62ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4a27bbf7-f401-4fcd-9810-30cdd6bc62ac.tmp
Size 37KB
SHA256 c7df4ffd45e9da9df544c0163aa40075b4cf22137da65a3583e11bcd78332b2d
MD5 5aa0ef2ad79a0080abae2fa2eff754f4
SHA1 c4f1bc502e5f3e044f627da3d1736912ca2497e8
SHA512 ba1bef7421d789877da62e8f64c321ea01471567c3026a97efa5e2e40d35014cc5620bc0c2d18d491ead34927e8dbf0ef0adb2c45877fbec969ea244fcdca36d
SSDEEP 768:vw/UxvxjgC+5j3GViS8uieOjDjFnUPO4Qp7cPAiSm2eo4w4cciGrTF5LAgZbCM3s:vdZj3+5j3GUSxujFwQpYoimeoR4ccFFA
TLSH
T1E403BE7598A8AE77DCF39684361D6382FFF1416395C12AA4CAED1E0D428B3AD430BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6938336d-6c45-4e1b-95b4-51ebd19ec6fe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6938336d-6c45-4e1b-95b4-51ebd19ec6fe.tmp
Size 34KB
SHA256 4f53c77182ab9fb89452674d72f0b6332c6b31f8c1c94d99b1a3e6cf968154f0
MD5 547f8339d35c4e4809d8cf7502e74f13
SHA1 74f65adfd5e9c96d126d2082e3de6ce26da11771
SHA512 71f3f131e00841e78349147bc7c6c83ba12d99e79aa147104a24481942a1b7f4da20d81594ae4a523c8d58b300263e8e8220db6fed51d908816a95cc17ec294f
SSDEEP 768:0A3shUnieOjohUjUnUPO4Qp7cPAiSm2eo4w4cciGrTFlvE75EezLF:0A3AkAjUwQpYoimeoR4ccFFZkHzR
TLSH
T1E1F2BFB0E8A4AE378DE29681721D3782BFF18153D9C55E94DADD2F0D028B6DE134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8647e934-dc18-4af4-a891-7eaf00797384.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8647e934-dc18-4af4-a891-7eaf00797384.tmp
Size 36KB
SHA256 545d322f57efdadfd8cedb2d7bf8282685d3b7a48af5debafe88fe8bbe8ad649
MD5 b7a23c117c96771712a0b0eea8615498
SHA1 f65e7e30e418156c87419874496c1d779c54f0f1
SHA512 def727dc5a2a596d1d950b44ad58c6f75922badf6500c93259f513de9bf1906d46f599f120b0dc78385abc063b25e5e4acb85d9cc8bbe178ce3eecca7729f396
SSDEEP 768:VFdF3gwgNhUnieOjohxIUnUPO4Qp7cPAiSm2eo4w4cciGrTFlvE75EezLF:RF3OkNIUwQpYoimeoR4ccFFZkHzR
TLSH
T170F29EB2D894DE3B9DB29B81B61D3782AFF14153D8C59A94E6DD5E0C028B2DE034BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 648887a89dac8888df245d8758dcd78e85ae79931c9464f19b0967fcd69c3d2f
MD5 b053e18c94ac6f6c60a9e0a281e1687b
SHA1 17ed2d8ae6844c2878132336a2fea7d044381f8b
SHA512 abf3d05979a55f573445c0c7a95529a5899c0d9f55f350b3eb35132d8502e23e6c764ffc98e92f4374754aa22e9292fd03f8e6e8113c0e919f428e797e339bfa
TLSH
T151D02BB9DFECCD62D54820B402508E116095B4156D490040D903BC04DD110814D03569
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 68f353a62995fc87917d7d1eef768abe00ffab02e1d3e469100f99b6987f6488
MD5 5ba62d3fe2ddefdf87e8dd139f3e421b
SHA1 1986deda7bda2ac5b490eacb9fe2784fb6d01648
SHA512 4e6a767b24298d2e01c8dbefa41509e1bc67cf2c2f34fd0bf866fc1017e1d15a470a5a95feb8ee1cccf4b8ccf5fa9054bcbb93919c00de89eeffec199b68baf9
TLSH
T19CD02BB5DFFCCC62D54820B802518E116085B41519490040DA03FC04DD110814D03555
MD5 SHA1 SHA512 TLSH

Submit Download

1ac9f4a4-8f3a-484d-9b54-7b9f299cc9c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1ac9f4a4-8f3a-484d-9b54-7b9f299cc9c7.tmp
Size 11KB
SHA256 5e65f71e5c942d8488e3f5a0e1aa6ef11efe9525bf6dfb1f18df3e6bfaca0d41
MD5 a89f57151c546ccd9f21fa952f0dc93f
SHA1 5c38a35a50131a10569b78b0abffbcbc91f0ccfb
SHA512 7cac1fdc9c5364d7f0f07e78382c2df98aee3cc1bd87a04c64bf152faf4725dd14a58d4bb90a846ecfbac3e66f3f7d151deb8677f8341770498c474f478d1b0b
SSDEEP 192:sxR3R+bV/feMsGpzoA8p4ny/g6+WNIYcDBXjiThGdIgDLJ:sxR36V/feMsG0Oy/5I1TiTOx
TLSH
T14D32C8196D28A93B8CCBE20DBB657F93D3F95033A0915E48A6FC8A1C15E77CD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4897bcba-c962-4bab-befc-483ecb622ee3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4897bcba-c962-4bab-befc-483ecb622ee3.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

606db4b5-2040-4792-bd5f-573acff3d25d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\606db4b5-2040-4792-bd5f-573acff3d25d.tmp
Size 11KB
SHA256 61789b03c04b8b8bbbe1dc8a38c6a9632082df07e33788e5b1327ac9f1f83199
MD5 ee25128a0f42256665a216e1822fed5d
SHA1 9de732ee5f454ea4d78179bc1377f8e3e18a8f19
SHA512 23ba1c2674e0c9c69de4a2843387dcfd12eecf593db9718659e401a388a3b6e863bb4f22e2ec7a1e72ce7b85339d0ee3d4efcf43fd96cf6b6d2d60bdae54bcb9
SSDEEP 192:sxR3R+bV/feMsBpzoA8p4ny/g6+WNIYc1NXjiThGdIgDFJ:sxR36V/feMsB0Oy/5IbTiTOz
TLSH
T1AE32B719AD28A93B8CCBD20DBB657F93D3F95032A0955E48A6FC8A1C15E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9bdc21f0-e31b-45b5-8236-1e7734b8789f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9bdc21f0-e31b-45b5-8236-1e7734b8789f.tmp
Size 10KB
SHA256 6f15210a8f58a780d11eb4e0ed2cebdfe7f7ecd15e05edc2524fb0ebc8a29fab
MD5 5a0df6bd77c76d47f0b9fd8bb4290ecd
SHA1 941ee150ae8656ab75e43ba3c679a773117caecc
SHA512 4076d50963b506b4cab44241738447014e90da705a48c01ea66f77c46267e8b23d58bf65f20817be83d7e25b012c142e31ada753f6054a64bbc5a916c3a06d1b
SSDEEP 192:sxR0R+bV/feMsqpzoA8p4ny/g6+WNIYc1NXjiThGdIgIJ:sxR06V/feMsq0Oy/5IbTiTOs
TLSH
T10632B7156D28A93B8CCBD20DBB657F93D3F95033A0955E48A6FC8A1C15E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 afbee8631e50fe74f1037e666f0598ace0cdaa0165edd5c45a01cf6ee5239b49
MD5 eaff2a225f643ab5981a409a0ab6bc96
SHA1 72b3fcea336fb6a7d4a1267b9645d48a44912186
SHA512 b8a6c4c257539a3fdee0ea2a07a792c28f0ed3284a596e59a4eef97e20d14c247156609b9e622309028e4a97b8cf5c2f8574771cad32673bf8ea61c495c3f92e
TLSH
T1996170E45DE98F45F7184870BEC30C8B3F3C46A96B835D56C9A9C938F8417E12B5C08A
MD5 SHA1 SHA512 TLSH

Submit Download

2929237f-106a-4e8a-94ca-49c7b9c54275.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\2929237f-106a-4e8a-94ca-49c7b9c54275.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1d3c643e-25d4-4ecc-bf8f-5c8af3c7928a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1d3c643e-25d4-4ecc-bf8f-5c8af3c7928a.tmp
Size 1KB
SHA256 d1609d10cd35f9b6df6d93a2f02c6ad536fff0dcbbc75f5983e304997e7cec3c
MD5 0a0bd83e5d794b47cb087f6f737f4a71
SHA1 101da7cf135a6a9a9c8fe46b332e77791446f3a8
SHA512 ea469032f28dc96bbf9f152d48ffdf6813d0155fe0deaab930e41f7dfcc6d49d75a0324b3b3e057ad9264235d9cf02e626565b2332dfd03903722b1d9b9ec960
TLSH
T14F219CF3C6E8467D8A4156F876143E1BCE2D0824532C3D96C8D4DE6F93F24A1E28095F
MD5 SHA1 SHA512 TLSH

Submit Download

5384bf50-ad30-4ea9-9682-eb43328ff4fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5384bf50-ad30-4ea9-9682-eb43328ff4fb.tmp
Size 4KB
SHA256 6d5cfdc9c1efa9ab9ee066446b4bf0b27f96a6b214ee0dbc764bc998b14010ed
MD5 be78f073734ddbdf0ec5d4d98ecc4e6d
SHA1 ac162d299616f6d163ce72b3f6875ecad004038c
SHA512 44c309552e6e201faeff96686dce80b8b9c66f6abe8323165f010f7944c47fd107656ed4077a72942ac59552b097ba5a0e64f5afc416e5e882f30bc576c7cccd
SSDEEP 96:DcOv2jXl9FE2VaaZijhxzE/FNc9KS/6EuC//qwQ:DXv2jXlg2VaaZijhxw/FNc9KmfuC//qT
TLSH
T175A19CBBC7E4472E891256F09B24AE1BCE1D051A422C3C568DF4AF1F63E24B1E14169F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8b548c5-7254-4ea8-ba49-81db94b4b823.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b8b548c5-7254-4ea8-ba49-81db94b4b823.tmp
Size 1KB
SHA256 1c3a9f1ae8e2cad8e69e9d0f94d41a6140c41be58bcbea5e5d4ca519f357389f
MD5 594fcf001068f87e69312383ed046c08
SHA1 20e6f5083a5e6bc7637b7e791007cdb56e84158f
SHA512 5923aeb94a9849d312dde8bfad70c7bd7c072abb75540bb07b46d9a655c23780a6e05800c162256ee4bc5178f14a933a8f1e290566f7597a27e61a4d043c695e
TLSH
T1B9219CF3C6E8467D8A4156F876143E1BCE2D0824532C3D96C8D4DE6F93F24A1E28095F
MD5 SHA1 SHA512 TLSH

Submit Download

c34002e0-e625-4e12-89e5-32cb4d4ecff3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c34002e0-e625-4e12-89e5-32cb4d4ecff3.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

dadf7a2b-3375-4434-9d79-ad6d23263428.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dadf7a2b-3375-4434-9d79-ad6d23263428.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 71cfb5c3cfdf86218122e07aa2826fd69b5287e35b1f608f65f0a47321f2c2fc
MD5 71b034b797e2afe3d4a6bd3f1a0b8f5f
SHA1 093efd7bb3601fc1abec363a247db257fb12bd03
SHA512 744adafffcfb20337f063836f3e492c4c289f2ac5d8a19ea445dcb5305c0f2375cc3f7081cafd846c12bcd1164a44d2d57c2a73ec65efc498e749d2cba4b34dd
SSDEEP 48:KM5otJLnzUTHKfIaxUKVR9zURJEoKrpJyDZINprHT0Tnq/IaR0KVx9T0RpkoqLPA:KUO4KL6OSGoKL6QkAKNOed
TLSH
T1F191A151F17B16203ABD790850EAB66B52827273342CE66F3BE964B64E26F141CFC4DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b143a1d0-4121-4ad9-b50b-fca6d920c79f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b143a1d0-4121-4ad9-b50b-fca6d920c79f.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f19e7189-7485-4f38-9179-fd08d4b3c6bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f19e7189-7485-4f38-9179-fd08d4b3c6bb.tmp
Size 23KB
SHA256 6845a4153c599a03d7f243bb8fb7a8cc0f3c2d3da0373ff3653fdbc6504238a2
MD5 2e695e42c33f0f083d5bbd8d250b2798
SHA1 aed5422d6c3cd6642882dcbe18f34c994a792503
SHA512 3161955af8a99cd7e7aaca4a116ad1a341a7aa9a4c288db478775307638bd9d6648907fbd1915e53add7864376557dae90deb8e972966ec39ecc8982abd831ac
SSDEEP 384:D7JakElfCtg17Ff9tKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXn975RwNroMXZ:DFakE5Wg1Bf9t8F1+UoAYDCx9Tuqh0VR
TLSH
T180B2CA3F744CC77E8F804A9DAC196F976DA802C79A588D4047FE994C03C77EA92294DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a3177f2-9cf2-4dfd-89ee-5c6caf2ab647.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2a3177f2-9cf2-4dfd-89ee-5c6caf2ab647.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d2bd25f5-65f3-43f8-8146-5922d7127b0a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d2bd25f5-65f3-43f8-8146-5922d7127b0a.tmp
Size 34KB
SHA256 f00b49590daa0296a57e28f6449fdafa85b233b99eb7a2c1218acd3a06fb3393
MD5 2811c15d6e02dfb2df822c7b3b19effd
SHA1 0df34fe4087abfd6f686cf480bc454e0611bf8b1
SHA512 231910fc84140611d0cda5f8e1302ee6806adcd062f8c887abdaf272f0d0c7499dd2ef4db75824d980614ce24870f63eeb005013b0ad9fd4f57869be82213153
SSDEEP 768:DNA3jhUnieOjohUjUnUPO4Qp7cPAiSm2eo4w4cciGrTFlvE75EezLF:DNA3dkAjUwQpYoimeoR4ccFFZkHzR
TLSH
T12DF2BFB0E8A4AE278DE39281721D3782BFF18153D9C51E94DADD2F0D028B6DE134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3620256-c35e-40cc-99ce-0a938373c12e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e3620256-c35e-40cc-99ce-0a938373c12e.tmp
Size 39KB
SHA256 e9f175f2f530a638d388cfb698f33558408e20aa6714a87047a5377925536201
MD5 34260639501dbff9e0fe5d463ea03ae4
SHA1 89ed645f7b7d43be448f9df44985a9e67fdba99e
SHA512 dfa370709d1c6ff46d227a20e6ac9125c7f37eac9e9f0f2a1bb17c2a81f1b5f9817e05574615c1b84e7d35ee0eed946cad619e6de43cf192409e1b65dcc2ec9a
SSDEEP 768:DQ/UxvxjgC+83jBCnieOjohUjUnUPO4Qp7cPAiSm2eo4w4cciGrTFlv1nMb:D9Zj3+83tWAjUwQpYoimeoR4ccFFZlMb
TLSH
T16203BF75D8A4AE239CF39680361D6783FFF1456394C55EA88AED2F0D028B2AD431BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76ef28df-8fc5-493e-a56d-27c312754e11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\76ef28df-8fc5-493e-a56d-27c312754e11.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download