hxxp://happytoys[.]ae

Analysis

user interaction
yes
max time kernel
148s
max time network
152s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
02/10/2026, 06:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://happytoys.ae
Sample261002-heaqlsbb93

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4848	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4095433250-3121633380-635025574-1000\{429C6B12-CA6F-4150-82E1-466477F9FAC5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5116	msedge.exe
5116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe
1332	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 1332 wrote to memory of 2632	1332	msedge.exe	83
PID 1332 wrote to memory of 440	1332	msedge.exe	84
PID 1332 wrote to memory of 4848	1332	msedge.exe	85
PID 1332 wrote to memory of 440	1332	msedge.exe	84
PID 1332 wrote to memory of 440	1332	msedge.exe	84
PID 1332 wrote to memory of 4952	1332	msedge.exe	86
PID 1332 wrote to memory of 4952	1332	msedge.exe	86
PID 1332 wrote to memory of 3628	1332	msedge.exe	87
PID 1332 wrote to memory of 3628	1332	msedge.exe	87
PID 1332 wrote to memory of 3628	1332	msedge.exe	87
PID 1332 wrote to memory of 5340	1332	msedge.exe	88
PID 1332 wrote to memory of 5340	1332	msedge.exe	88
PID 1332 wrote to memory of 5340	1332	msedge.exe	88
PID 1332 wrote to memory of 6108	1332	msedge.exe	92
PID 1332 wrote to memory of 6108	1332	msedge.exe	92
PID 1332 wrote to memory of 6108	1332	msedge.exe	92
PID 1332 wrote to memory of 5860	1332	msedge.exe	93
PID 1332 wrote to memory of 5860	1332	msedge.exe	93
PID 1332 wrote to memory of 5860	1332	msedge.exe	93
PID 1332 wrote to memory of 2020	1332	msedge.exe	94
PID 1332 wrote to memory of 2020	1332	msedge.exe	94
PID 1332 wrote to memory of 2020	1332	msedge.exe	94
PID 1332 wrote to memory of 5072	1332	msedge.exe	100
PID 1332 wrote to memory of 5072	1332	msedge.exe	100
PID 1332 wrote to memory of 5072	1332	msedge.exe	100
PID 1332 wrote to memory of 3028	1332	msedge.exe	102
PID 1332 wrote to memory of 1032	1332	msedge.exe	103
PID 1332 wrote to memory of 3028	1332	msedge.exe	102
PID 1332 wrote to memory of 1032	1332	msedge.exe	103
PID 1332 wrote to memory of 5296	1332	msedge.exe	105
PID 1332 wrote to memory of 3632	1332	msedge.exe	110
PID 1332 wrote to memory of 5284	1332	msedge.exe	111
PID 1332 wrote to memory of 408	1332	msedge.exe	112
PID 1332 wrote to memory of 1784	1332	msedge.exe	113
PID 1332 wrote to memory of 1784	1332	msedge.exe	113
PID 1332 wrote to memory of 5116	1332	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://happytoys.ae
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffcdaafc188,0x7ffcdaafc194,0x7ffcdaafc1a0
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,16014883951764125917,2320918417707262209,262144 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,5137908400884376736,15939787126502901471,524288 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,11205215224360376503,18013614030787186968,524288 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,10526948116899876586,16862731775003892031,2097152 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,7415844596014560768,16118694826475277205,2097152 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4936,i,7419086215404263033,13356218553195960693,2097152 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3752,i,14531159249291390749,3493878411022591379,2097152 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:1
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5224,i,16610718220644819068,15186255814983619783,2097152 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4836,i,8195749343712994946,799710461275511961,2097152 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,7041959239233086032,16385313056835254117,524288 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:8
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,3024286986925765643,8602413102371974836,524288 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,4268305571196652912,3255361683692710630,524288 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:8
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,4268305571196652912,3255361683692710630,524288 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:8
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,8737667750080262784,7460518169907465677,524288 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6480,i,8536836598863353701,1673784470932608194,524288 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:8
  2⤵
  PID:5284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6476,i,11448309672711644630,9769113505711429967,524288 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,14118160248932413760,8197381752273911478,524288 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=6672 /prefetch:8
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6036,i,11468867809367052634,9065286121597581890,262144 --field-trial-handle=2320,i,13217496242953700549,3897307892408138811,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5116

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5928

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3885865c-2b10-44aa-ba7a-5fdac561003f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3885865c-2b10-44aa-ba7a-5fdac561003f.tmp
Size 26KB
SHA256 b695094d38ab7caf899876e9b7a93e027257e9b71d6e123934e6409571505d7f
MD5 1941ff5bb18dcb2c32db7222c5b6a989
SHA1 93f5e114d726d5787670cd9af28316ff64fade24
SHA512 b712941fd0ca6988b077f9ef837fb208dcab0c5bab5301ecf5abccb36afe652940cbecfeb8900fdec5426c0f8b2bf93a8d5c3b34bb8805e8cdac93c8d346f5d5
SSDEEP 384:nMiFiZcI33sNy8TUNTUlI4kzjh+WlVthf6fpU3HE4XTKrtgOIwZOytIgL/7IzhoI:3FQ33ZwgD5EC3fmrXsXD
TLSH
T1E2C24B36DCA4CABBBCEB4B96B74A7603DEE05123998CAAC4D9D85D1D00971DE030BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8357176c-6264-48b1-be0c-995dc03861e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8357176c-6264-48b1-be0c-995dc03861e6.tmp
Size 25KB
SHA256 d35791857578bbe74b643a42ba915b19984f60b4ad849e5a23c99e328a0ecbe3
MD5 ae9723c35b127fea30379f2019ad1d88
SHA1 a87f621be35c8f94598ff39be1f847ea3d38ee70
SHA512 5e258e890ec6388a187de9918b90ee767dc52aa782618ccb1908f068c9819625b64c546d030ffdbe650f719cc9d36c96d8bf60061b8fa9e667f12be87fdb136f
SSDEEP 384:npiFiZcI63sNy8TUNTUlI4kwjh+0lVthf6fpU3HE4XTYr5kn5gL/7IzFo1:AFQ63ZwgezEC3fcrwLK
TLSH
T196B24B36DCA4C9ABFCEB4FD6B64A7643DEF44123998CAAC4D9D85D1D009719E030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

918174fb-a928-4463-9834-5e5bc19430fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\918174fb-a928-4463-9834-5e5bc19430fc.tmp
Size 25KB
SHA256 7576934b6095fe65e18751c9d041c1b79e4503a81dc12dd0e709f8a9bc7c05c6
MD5 d80d3a1e4a6c7e9734143850807ca441
SHA1 c53049726cadf964f5d9c9d8dfcf7a459d503d41
SHA512 311f800465675ae72b1fcd2eb1c2070ae644fe77255ce48f9c48a9e7dcbf0df8a627a7c6aeca14c9ca8e0558873a78943cf32d8ffbbc2bb5f015f9a2c25f9234
SSDEEP 384:niiFiZcI63sN68TUNTUlImkrjh+mgAthf6fpU3HECs7O6R2FeotgL/7IzyoS:pFQ635wg5QJC3Ts7TRdx
TLSH
T195C25C36EC94C9BBECFB5F9AAA4A7A17EEF00163859C5AC0D9D45D1D008359E1307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

938cd2c4-850a-42c0-b8ee-f092d797e2f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\938cd2c4-850a-42c0-b8ee-f092d797e2f9.tmp
Size 26KB
SHA256 deb30d6f08b363943eb7fee47080e9dbe2cf5bfe4a64e8991388f8f4e15d0d6f
MD5 4a0ad8f422b42fde3eef43591c65a1b3
SHA1 ec69946890998fbdb846ed4474331de39d73cc4f
SHA512 cb537b795d144078d8873c50b36f4b80779e590afd5f4a6f6483a9c22f6fc7df0dd23cabd811f4ff32fa5ca8c9856abe47eaf0a5ca807829806fce78e0ce7069
SSDEEP 384:nOiFiZcIJB3sNy8TUNTUlI4kzjh+WlVthf6fpU3HE4XTwrtgOIwZOytIgL/7IzhD:lFQP3ZwgD5EC3fcrXsXD
TLSH
T150C24B36DCA4CABBBCEB4B96B64A7603DEE05123998CAAC4D9D85D1D00975DE030BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 35bfe8411fef5cfb5e836a009d986a443cea8a767a24a62c88b76fff1445d4fe
MD5 7a1868737ff3b37a41fb1012d04e5317
SHA1 68663bf5d3a6b7b5ec10929aab80449de703c46a
SHA512 aab22617c95c8283d6909703835f5f8c127f54c6ca8c76ca1dca713266b8bbbd7738adc47493793e9dfab0c295fe255b678ea1be77229fadf2f3ae7ffbb01d31
TLSH
T143D02BA896CCD8C0C85520361318420830C8D63448A3404244E00244CE9126212A70E0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27341f426aa0efd6c484bc21b43d92cf90ca72c2333c8e492f256c83fd880a23
MD5 5e7e3b8030681bdf6022439fe49f75f8
SHA1 0ff916bc55fa603e71947fca76af181bf6a176af
SHA512 f028e8f02a0deeb001818c82b1b058d78b877b08dfffccd53e7636c6b399cea4a3f75d2e7d48b81a7bd267b29da417e86f7b980e8764b264d26bc3942cb86bac
TLSH
T192D02BA49AC8C8C0C84120361358420831C8D23448A3404244E00254CED126216A70E0
MD5 SHA1 SHA512 TLSH

Submit Download

2c63ecd0-d976-4f75-ad7b-809e2cac03f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2c63ecd0-d976-4f75-ad7b-809e2cac03f2.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

587fbb36-10c7-4c10-a22b-76143f3ad3e4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\587fbb36-10c7-4c10-a22b-76143f3ad3e4.tmp
Size 12KB
SHA256 9d99ba0e8781723b87fbd3b602ee3417924ecd282bddbad5c81fb29d7b2f9d26
MD5 c171a0a80032b523cbc84dc7e7202728
SHA1 52ceec53db96195ec4f898a7ba99563633d62133
SHA512 25689b3870e364c9a84674bb76812abc63ad2ffc5a86b951d3a5721b0a8e66e68573a847b017b0ffe383f563d8563d51481c88621e8ec9761e1ea1529530d5a7
SSDEEP 192:sxZaR7kQ/fSstXQczVzodp0v8wWHW6+WN1vpuVYC34IHDIg56ZJ:sxZaOQ/fSstXd+0EHHb18VbbUD
TLSH
T1AB42C6596E38A97B8CC7D219BA59BF53D3F91032A0D01E48A6FC8A1C15E77DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

790c96ea-5590-4b25-8536-5cbeaee4736d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\790c96ea-5590-4b25-8536-5cbeaee4736d.tmp
Size 649B
SHA256 d9701a5f363bc00040786cd42e2e917fd0129ca71ed6302ec1fd7a135aa7f014
MD5 7462b33dd8ac2e7f46f4be39bcb93456
SHA1 59c2ec70a229b3ec6ac0789ecfc4b32cc0f63766
SHA512 7a90c78b3f2562392f977fe8af0cb138f6803bc8089f3db2b1e32c4cf10eb0684d164170300c1200902f438e404020cb8e6bb1f717ba1ed5a51253039a415d4b
TLSH
T1BEF0F4E9CD21FC7B18FC0B2860A54B8AE751135B3B80884F3B3D510D8FB563B868686C
MD5 SHA1 SHA512 TLSH

Submit Download

89bba9e1-f8e9-4973-9b5b-202dca82b90d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\89bba9e1-f8e9-4973-9b5b-202dca82b90d.tmp
Size 27KB
SHA256 a3c0dd094bd95ae39d71c189ff9ab8c81c02de11d490dc8328156e348fe37e7f
MD5 2003a47f3b61ad35974063c6e3776179
SHA1 1107e3ecf6c46baa8a7aff37203e3aac94a0b2b1
SHA512 0168f530c2f248656f8355d19d5f0022498009a5111e094398303cfb818982bc05955fb0d6a35ab65b5fb3c836a884f5d1bd71491cf2e7e2f746ce974c0e185e
SSDEEP 768:d8+S3v9WvhL3b8F1+UoAYDCx9Tuqh0VfUC9xbog/OVcwLle4ZvWrohMYUF:d8+S3v9WvhL3bu1japwLQ8vtKt
TLSH
T131C2F92F380CCB7E5FC01E9D9C1A6FDA6D9802C7A6588D4047FA994C03D77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 6KB
SHA256 eb0c66d833241a9f8bff4f630d25071c3d161ea03dc2d88b9d91c6036d3ef0ba
MD5 e194eb011536c13cff21da2967255cbc
SHA1 2399470e3f961990e04e3d065d5d42a7fb321967
SHA512 f23c2e97a8aa01becd765283f94a6c82ef7886683efa8c3c07254e391cd4392eb4e1bf44e7f6557899226f7fee62cd3aec6659d510faf432c00bb9ca93c3f2f7
SSDEEP 96:Av8eteVp2DErRjOtFCmUZx3mK90HAU5rds3rRf6sk:AEe4p2DErpOUmKeAU5rdsbRf6sk
TLSH
T17DD1E94726915E29CFAA45F85993295E2D70FD8A50420F3F2143E4BCBF6B7E6C4BA340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 6KB
SHA256 45e82053f6c548b892af20d617c967a6395d061ef617f7caf1d3c0848505795b
MD5 0a655e00571f1b23f1e791db6bca8364
SHA1 446657cf0202c5d241501117597a917e6b0717f4
SHA512 3e1fbc721dd756872d5ba3b44062d3efe1c9f64410bba2f1adac3416e6e7b78148fcf210119bbfd1f300f33c8f5462d130e7509b7ee274ab0e4321b5b445bcb7
SSDEEP 96:cz8eteVp2DErR9OtFCmUZx3SK9YHAUuMdh3rUf6sk:cYe4p2DErnOUSKKAUuMdhbUf6sk
TLSH
T155D1D84726915E29CFAA45F859932D5E2D70FC8A54420F3F2143E4B8BF6B7E6C47A340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c37f25fcca86d75a37888860a6453c9967dbcdcfdaf3d6232dc61f6cac84ee9b
MD5 4ed83cf56a77356e2dfe1b4ef2569897
SHA1 9e9fa8d3c207d89108278a9f80735e98db91e5f4
SHA512 b7f03a1eafeebb09a8dbadfdd9159d415f9fc0df9c078c07e27ff2ae98cc188299ffb0c58ffefab3c751534ec2c5a350bb509895e754dc4045fbba186769abeb
TLSH
T132615C8537508CBCDBA804BC9AE7419F3E70DC8D15930D2F36A8D9BDAB5A3B5C28B044
MD5 SHA1 SHA512 TLSH

Submit Download

b9bd08f4-d5dc-4a6a-807f-f1838ed43b2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b9bd08f4-d5dc-4a6a-807f-f1838ed43b2b.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

00975600-e998-4279-a78a-99d3c28bc11d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\00975600-e998-4279-a78a-99d3c28bc11d.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

bcd527d6-92a4-4298-a7ed-40ca39cbbfa0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bcd527d6-92a4-4298-a7ed-40ca39cbbfa0.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

e8ecef9c-257b-4523-a44a-6f3fd48a3971.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e8ecef9c-257b-4523-a44a-6f3fd48a3971.tmp
Size 13KB
SHA256 6013818adfa63706824c22bdf4c93f34472ec8a1dd09db11b30e5c2d9f85041e
MD5 7730f72ef5ab2088c7ffd3171c4a9420
SHA1 1eea9d54810f38010191c0943364d88ee92d20c5
SHA512 8d4074b7c5cf0733e3a0d2c0ea1737cf6ac28112344ca31067f881db9795bdb5590a3148b63937aeede4f9ef16bf56a0e14d75d915d1c32d6c1c10b4ba1e04d8
SSDEEP 384:DW+15HpLs3KBGP3ECfHHrN6STL77U3/M613iwl6kiv3upPtCwxyQvXz+tE23rBGJ:cO8b/vqL
TLSH
T14752ABF2C7F88A6C8C6191F2AA35BF1BDE2D1D1852283D2EC9D49F5B97E1071D101A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 3KB
SHA256 0f6b20d30fe98497662c04bf0294f294820d1bf487ad91e8a6a3c4491bad9627
MD5 6e10ac4e2728737d6ca4abf513601fcf
SHA1 3afdc5509c027719af26480b81751340c9b4e352
SHA512 54d2d78a7064fc9e835dea8e924b5e98651b7f8654780816a09779664f7d42ff2a8318f335b3ec420de63af6fa3fb05fdefae7c0d5febfdc9bbbc7eae2ecc2c9
TLSH
T163811B6DC492AB17EABC0B35D8DF0CD03B399ECDDB0F0693019844B2365736498032B0
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 dc308fa562bccb4db57a449de7a80aa4330d2f605c7e0bfd581e3dd1eaad9bd0
MD5 99ff63314a26f68f67e8c99c0c9d644f
SHA1 07700af9c90a59b3ab353ca0ef3a912607d783d0
SHA512 94585e049a1be31cd2b1b0120d2e1e4ce1be7f86b60c5aaf830b3325f99c6656deb0b1a5c59d6d48faa79eb780978ee528a3ec1689f3eeca49d3a8cb0b91f7ad
SSDEEP 192:yjNB/XORbkJNlzjk517HNRZh3vF1XwtZnJ8:yZBvOFk3lPk/7tRj3N1XwtZnJ8
TLSH
T11AB2E11571BB0200387E2D1881B4976F9A4271A37068EA7B7FBC14A6CE6BE055DFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ab19ab2e-25bd-4a55-9fee-81b500e2fdc4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ab19ab2e-25bd-4a55-9fee-81b500e2fdc4.tmp
Size 11KB
SHA256 62c29703a2c4ac935b379b4414d487522c327b803612e8b31e7839a88efe1ac8
MD5 8b192081915d595df389cc0312483a4a
SHA1 974e16278fa5e54407f7231297a1cf07d5673d65
SHA512 730aae24768c2fd87c13de250442c2a1d55241915b7febb7e1953ee08f86522d946b1f3997bf6cf032be2f06248bdfaa2dacf36c00f374c040ab98ce0837c39e
SSDEEP 192:sxZaR7kQ/fSsoXQczVzodp0v8wWHW6+WN1vJJ/YC3IdHDIgjZJ:sxZaOQ/fSsoXd+0EHHb1v/IbjD
TLSH
T1FF42C7556D38A97F8CC7E219BA59BF53D3F91032A0D01E48A6FC8A1C15E76DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b6531b50-85a5-484f-a08d-efba950308c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b6531b50-85a5-484f-a08d-efba950308c1.tmp
Size 12KB
SHA256 f73299d2c47aff92ecf6d6dac78c9ebf3f1abda5eef884c5062114068b696276
MD5 0df7abcfc3774148fe4109f700b3bed9
SHA1 ba2832112d1dc79fea2dcd79c7cd595289e546b2
SHA512 1eba1c1549f3dbfa4070de7ecc25ce021ee045c8729f850c161b563aacb5b08ad59c1131a2413d225f3f84b517efefc7a5ff8faca49df6491168249754c122f6
SSDEEP 192:sxZaR7kQ/fSsaXQczVzodp0v8wWHW6+WN1vth9YC3gIHDIg56ZJ:sxZaOQ/fSsaXd+0EHHb1b97bUD
TLSH
T15542C6596E38A97B8CC7D219BA55BF53D3F91032A0901E48A6FC8E1C15EB7DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 88cca8a8f277c8fd4217bfe2bdcdc29fc4ed13d6300366468b9ed99671794067
MD5 9a54453f622d725e1bc7bcad5d35d7d1
SHA1 bf8724b5a0eebc8300ca2d7bf73b06172d0df1e3
SHA512 9eb4e8b6905f6461b7348ce3ef51a1e27a43d990a57c533cf462444db4ab6e1a5794c8c16402d97da7066c4508913af4301c4bde945c51ff42707527e01002a8
TLSH
T1BD413A6CB6F91158B3B76E4A9BF7686E447BBC772E06D49D10110D4E0A22E40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download