hxxp://WIZINK[.]PAGES[.]DEV

Analysis

user interaction
yes
max time kernel
299s
max time network
288s
platform
windows10-2004_x64
resource
win10v2004-20260911-es
resource tags

arch:x64arch:x86image:win10v2004-20260911-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
07/10/2026, 14:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://WIZINK.PAGES.DEV
Sample261007-rsvsdaat31

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5516	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{07D800CF-9190-4D44-8655-09A65BEF0BAC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1660	msedge.exe
1660	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
656	Process not Found
656	Process not Found
656	Process not Found
656	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe
3020	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 3020 wrote to memory of 1668	3020	msedge.exe	83
PID 3020 wrote to memory of 5764	3020	msedge.exe	84
PID 3020 wrote to memory of 5516	3020	msedge.exe	85
PID 3020 wrote to memory of 5764	3020	msedge.exe	84
PID 3020 wrote to memory of 5764	3020	msedge.exe	84
PID 3020 wrote to memory of 5612	3020	msedge.exe	86
PID 3020 wrote to memory of 5612	3020	msedge.exe	86
PID 3020 wrote to memory of 2284	3020	msedge.exe	87
PID 3020 wrote to memory of 2284	3020	msedge.exe	87
PID 3020 wrote to memory of 2284	3020	msedge.exe	87
PID 3020 wrote to memory of 6084	3020	msedge.exe	88
PID 3020 wrote to memory of 6084	3020	msedge.exe	88
PID 3020 wrote to memory of 6084	3020	msedge.exe	88
PID 3020 wrote to memory of 4704	3020	msedge.exe	92
PID 3020 wrote to memory of 4704	3020	msedge.exe	92
PID 3020 wrote to memory of 4704	3020	msedge.exe	92
PID 3020 wrote to memory of 2004	3020	msedge.exe	93
PID 3020 wrote to memory of 2004	3020	msedge.exe	93
PID 3020 wrote to memory of 2004	3020	msedge.exe	93
PID 3020 wrote to memory of 5572	3020	msedge.exe	94
PID 3020 wrote to memory of 5572	3020	msedge.exe	94
PID 3020 wrote to memory of 5572	3020	msedge.exe	94
PID 3020 wrote to memory of 3312	3020	msedge.exe	97
PID 3020 wrote to memory of 3312	3020	msedge.exe	97
PID 3020 wrote to memory of 5836	3020	msedge.exe	98
PID 3020 wrote to memory of 5836	3020	msedge.exe	98
PID 3020 wrote to memory of 4840	3020	msedge.exe	102
PID 3020 wrote to memory of 3516	3020	msedge.exe	117
PID 3020 wrote to memory of 6032	3020	msedge.exe	118
PID 3020 wrote to memory of 6020	3020	msedge.exe	119
PID 3020 wrote to memory of 5296	3020	msedge.exe	129
PID 3020 wrote to memory of 5296	3020	msedge.exe	129
PID 3020 wrote to memory of 1660	3020	msedge.exe	131
PID 3020 wrote to memory of 3136	3020	msedge.exe	132
PID 3020 wrote to memory of 3136	3020	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://WIZINK.PAGES.DEV
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ff9f1c7c188,0x7ff9f1c7c194,0x7ff9f1c7c1a0
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1840,i,2079599327392888068,9200524466468066431,262144 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=1340 /prefetch:2
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,977952134347315806,11470799077639941158,524288 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,7159901772951763089,7217557731989519815,524288 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,3834086395056025416,11899403553644102899,2097152 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,14758254000410358822,8721491069491770597,2097152 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4988,i,8995727877408999683,5941731118419543917,2097152 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3660,i,6903075436627662656,5944844803023712183,2097152 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5128,i,5151881368462395298,9242886207027121415,2097152 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,7857741999163804445,11223943612780470518,524288 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:8
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,6023765173001876043,10678261547657080657,524288 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,7795347000341395497,15655183231307418326,524288 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,7795347000341395497,15655183231307418326,524288 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,13036009149674828325,4636698210630568171,524288 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,13648775919028146136,10493836664447818289,524288 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:8
  2⤵
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,3178503329594021097,5246693636188694742,524288 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,6711383352187038776,3850597148757866261,524288 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:8
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4784,i,2220593614439981209,3556034542390648701,262144 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5620,i,10864818407445729552,12563609646801957975,524288 --field-trial-handle=284,i,3722111623304741950,10798509741334701425,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:3136

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5160

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1616

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0a5338e8-5837-467a-827c-363c1adc911d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0a5338e8-5837-467a-827c-363c1adc911d.tmp
Size 26KB
SHA256 ff7d8ecfcf830bb2613dcf843a5a76852fe98353bc0d5f783035a6846c48b95b
MD5 609725ceb592b49e285a0be51f74f2f2
SHA1 69ff640432111c1f1e0065363839223f3c118719
SHA512 8cbd4b90eb085e28b3654b40a39fdb13ec1e3a6c45667b8392f19369c1e8c52158d44ede294581965eb642fe6cd658fa3b30b5a4bfb3b2a025bfce5135880e17
SSDEEP 384:nYiFPZcII3sNy8TUNTUlI4daKMMu6i0w2f0BCXtsb27DoJPJAxJ+zChwgL/7Iz8Y:jFHI3fwgrtNBCloJPkJ+zC3Y
TLSH
T1A6C23972EC98DEBBECEA4F96A74A3603EEF44123958C9AD8D5D91D1C00D71AD430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a564a83-d3f7-45c0-86d5-fec4d917e259.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6a564a83-d3f7-45c0-86d5-fec4d917e259.tmp
Size 26KB
SHA256 3a74d6a56915a9b6ddb691313790ca0d6221504ec2e6840aee23102db7cff7c4
MD5 a862d765d25044916a6ea0f9d425842c
SHA1 4f2ba0f294bb371f623abe2fb29f03f3c4807c5f
SHA512 40887c2fc86b62984303b964c26bc457e4b794a5dc1b413624dcd431536448290e8f88b9e79834cb23e06e507cb1875fb20011fb17789ffb0a1f5e4a203fd745
SSDEEP 384:nYiFiZcII3sNy8TUNTUlI4RaKMMN6i0w2f0BCXtsb27CoJPJAxJ+zChwgL/7Iz8Y:jFQI3fwgPkNBCcoJPkJ+zC3Y
TLSH
T19EC23A72EC94DEBBECEA4F96A74A3603EEF44123958C9AD8D5D91D1C00D71AD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e444007-45a2-48e5-b465-a840d11595dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9e444007-45a2-48e5-b465-a840d11595dc.tmp
Size 26KB
SHA256 ce07445a91f23fea7144811d043ae3b54d15386dd72e2602db38bb2955d499a7
MD5 c84ee7e7bc69b762839e60067392ccc4
SHA1 b4b70c79e8ce1dfa0b54b758cd38d2162ab8345c
SHA512 d4079bcc7c53f105ce79883eba3eb99685f5be190c63a944fe4a08ee568e38c68cbafd58c1dca1647fffefc2132c7d9fea1a39f91877e92342f1d36c2d4cb553
SSDEEP 384:nkiFPZcII3sNy8TUNTUlI4daKMMu6i0w2f0BCXtsb27DoJPJAxJ+zChwgL/7Iz8Y:/FHI3fwgrtNBCloJPkJ+zC3Y
TLSH
T1B8C22972EC94DEBBECEA4F96A74A3603EEF44123958C9AD8D5D91D1C00D71AD430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 853fa69aace8e639d8917a9879b7d3c4cba800df97b423cc2656a7fd34ca4d20
MD5 632232532963079c064ddd5f9eac9753
SHA1 b17d6415a4f16622b574809b72d9399223a97e40
SHA512 ff8ce47df85fc894e68d56b7f43a5b563cb4bb0b3fb30b07454a05955ddeb4791ea8178c2030c917dd5c729576fc5451f7afffe77bee9763d7ee50959593cb33
TLSH
T1E0D02B20B2A87754E006343C0114428C30CE5570140BB400805413941FC163201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

152e4708-7788-47bf-88b9-2ed866cec6cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\152e4708-7788-47bf-88b9-2ed866cec6cc.tmp
Size 649B
SHA256 8f14e3e306b71b402ecf8958c8a17c136051f396974aab25c402ddb693d990ba
MD5 e39b596f54a241a37a3931b078efa67f
SHA1 9c0557f74d8a7322d0a000362b66bca26bd30f95
SHA512 1ab60ded737bb0c297b7adf47e5511848bbc3b3e9004580d757b4c285d0bd5da8df1b4a9afd609fc05bfe4ac834f7bd6eb99d170acfbf501dfd5f969ed41cf14
TLSH
T156F0F4B9C921EC3B18FD0B3924A80746F750236B2A419D8F3B3D810C8FB153B868986C
MD5 SHA1 SHA512 TLSH

Submit Download

7c66652f-da5c-4c76-93d0-23d97c97da77.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7c66652f-da5c-4c76-93d0-23d97c97da77.tmp
Size 12KB
SHA256 1cc0a68065e4bd27b3894138c36d88ef72aa4022a0b220042f37536d8f8af799
MD5 3f7ce4ba068a1b4e43d6932fc6f14d96
SHA1 71d9598593abb9371a1c9f8c595c6fbf3a8e5c06
SHA512 166e67d5fd60d44d05e2d28b08cb2975a1bde9487923925a843e772498f7e89e8950a82c30cd96c0b1c7af2313b93e6f8ab3004fe1ab365fa151cfa9909401bb
SSDEEP 192:sxZ8lRBk4x/fYHsVaQZL787CzodpImHW6+WNZTXXYo+hbSPh8Ig5Ut3J:sxZiMQ/f8sIO81nHb5XySPqStZ
TLSH
T11242D955AD28697F8CCBD619FA55BF53E3FD103260811E88AAFC8A1C14E76DD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84198a20-dca2-4e72-8e12-f575f6897f32.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\84198a20-dca2-4e72-8e12-f575f6897f32.tmp
Size 12KB
SHA256 60202a7571bf68f2df631c3e6673a545080f5e07cfa8085914b5b76d46d882d9
MD5 eb0fe9a515005c7939c0736a99b155c5
SHA1 9e1240288d99b04d257e5b2bdd3e686e69701e8c
SHA512 cc66366a819d227aca64ceedcd29f65e8b0c33faae9c8438aad1b40417c52102ed8e3a126e232931f26823d9906773845fb4b14f67ba86a19f511afefb3b97f4
SSDEEP 192:sxZ8lRBk4x/fYHs7aQZL187CzodpIRHW6+WNZ6p/YobhbSPh8Igjt3J:sxZiMQ/f8s+Ou1oHbC/XSPqjtZ
TLSH
T13842EA55AD28A97F8CC7D619FA55BF53E3FD1032A0811E88AAFC8A1C14E76DD120741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92f2d0f0-8a6d-4f0b-b2c7-c134bda70795.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\92f2d0f0-8a6d-4f0b-b2c7-c134bda70795.tmp
Size 27KB
SHA256 1ded177db8190967b4530d2813844b4a77ae5a7f4672d10a44aac4a84451070c
MD5 06126dd016231a749beddf3a2af79a70
SHA1 9a31b5100b07868a1c050eb5963166237c1f8a1e
SHA512 b71b2f550179d397c51f43eeeb86a4e2a5e3b664c167c6313df03096135a0b98344a160681f261642bc95ef1bdd63fdcf8a259ecfde3ed6fdfc8741441fde172
SSDEEP 768:Px6r8j+Wviy8K8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYrooWYbgno2:Px6r8j+Wviy8Ku1jaqpLd4jjoWgg/
TLSH
T1ADC2E93B740CCB7E5FC41A9DDC5A6F972DA802C796588D408BFA944C02C77EA912B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 67aefa45e200ea276865d0fb1cbae98a9b0a00d3d42af3c189d56ccacce7b409
MD5 7ab87b08e7844e6a074bab2b0a33c625
SHA1 c4a67ae96b6899e0d4c2be6cec17b2a57e107f0e
SHA512 a7906343ad1be036d1040ac8ecacb0aa34ad2afb0105ebb84f00ee1f1b474a2e2e0a924a82d6a72d17baddf74ccbce8111cd1ac9e5f95115196d4cc044068af2
TLSH
T1ADE0DFE444CAC23FA20D6447016C630CD7E13B1A93D07A8E1784CDC9B606440A7E7AA0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 be1090ec464c7cd92af69e913f0e32ab8075e36b525774a6312fce0c031192e2
MD5 6ecc6e2d1291698b9211b09979ffb1e9
SHA1 72e4b02867c5a7cbe7c254c098540af64308b434
SHA512 d1b3d03d64c19df31a1f33dd47673e21d0ae4002947997c7da3251316c3e50d27b2a533cd57bafc2e4671421f474af2011477670dafc3952b51e164e6ac4247b
TLSH
T1D851C37A456750D5DB8410B080C60D8B373197B81EB75FD24D64D4B8ABD6362F7C4B86
MD5 SHA1 SHA512 TLSH

Submit Download

113afa14-e3c4-40c3-9155-59871c55923b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\113afa14-e3c4-40c3-9155-59871c55923b.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

56b8dc92-1025-4290-8f26-025023a4575c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\56b8dc92-1025-4290-8f26-025023a4575c.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

74570b45-9366-49db-a06b-bf4368e6a17b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\74570b45-9366-49db-a06b-bf4368e6a17b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c625f550-3d2d-4cd8-a968-1e9e55ca4eee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c625f550-3d2d-4cd8-a968-1e9e55ca4eee.tmp
Size 3KB
SHA256 55eb7bc6c74e6cf6f1812c37bac05ebd82968b37a07c0d224e431779084e12a6
MD5 a22e15c400f3bf686637d2744ae0ae73
SHA1 4bd8a4f95a214ee7e6e1aa0c19f9b0d1427a4f71
SHA512 db9ae3aea6ae1257de0cd90428ea6b176633baba5404ebf16028301a3736115e1689229e8f1b15d9ece768d77927efded1143d02c1243419e6d9dc3475576871
TLSH
T1BB819EF7C2E88A5ED81167F06B243D2BCF2D0D5846283C5E89D4AE5F93E3871D20255E
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 77886d5ceb8de16b13028b27e90520003f53961928ffd047cf19549d3f222d21
MD5 3a006c25d3898d2f6dcf9ce047caae3c
SHA1 5308e2b885f8148808a3ebe3a0c4ac984edf6dce
SHA512 c633f58fc5dfc170eab628a13678d6b5bb55045d60d90839d080dcc7ca0bde5f91cb24a716821824c3172dac1bc416e53129d76bfa5c0cd765189a766e821db6
SSDEEP 192:ST/2dXOJhJlpfnpp3tNXVJDn2WrFKIJmKI2mVaX2SsQ54vA4/CmYot+x9/rXc7If:SL29ObJffppdNlJT2WZvrr
TLSH
T1E0C2015571BB021039FE290991B5972E02823273311DEA7B7FBD10A68E67F085DFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

fbd6bab7-f73b-4fce-9f01-9289c2959083.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fbd6bab7-f73b-4fce-9f01-9289c2959083.tmp
Size 12KB
SHA256 6062ed412034e7529cae0a6c34a067f258173716d1f0f5ebc047a2b9214abddf
MD5 a4c7ae88b8be7b5a69f8a6c0d2cfd227
SHA1 0cf3d2d079b28858afd69e18302092a06ff86e0d
SHA512 2da0f8f36c82763ff8ec5b99133c9c6b55beb1790a038d8be4920074494fb961348f99cfbe6970bb3b08e5c5c98dc40a0fcea5097a4343b2444ca9768660e563
SSDEEP 192:sxZ8lRBk4x/fYHszQZL787CzodpImHW6+WNZTXXYozhbSPh8Ig5Ut3J:sxZiMQ/f8szO81nHb5XvSPqStZ
TLSH
T19E42D955AD28A97F8CCBD619FA55BF53E2FD103260811E88AAFC8A1C14E76DD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fcf3789c-8ce2-499e-a244-4d824b9c887b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fcf3789c-8ce2-499e-a244-4d824b9c887b.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

a3e32989-b743-44c3-9a41-15f55530fce0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a3e32989-b743-44c3-9a41-15f55530fce0.tmp
Size 32KB
SHA256 d04e27b114426e298d682006afd350e4ab6f580c87b5ae86cb09e0a2de1edbb4
MD5 e1bcf37d46df7df7684775f4e2398cd0
SHA1 fbc4dd55538d82a02d44fb8e2ccad90ad8a16de0
SHA512 ed713d6f64ac4356c698d552040eda2106a215fe3a6577473afb97244c9f00bb577419ee0a96073e5ebb70b91db46cb852927831814a64a8ac3b768b9e4d8999
SSDEEP 384:nWiFPZcI/q3sNy8TUNTUlI4daKMMu6O0w2f0BCXtsb27+5JPJAxJ+zChwgL/7Iz9:9FHS3fwgrpNBCY5JPkJ+zC3Y
TLSH
T1ADE2A3F198D79976E8EE4B87A73E2D029AFCC113B5885684B7D81D1CCC961BFC30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da7a4fef-e987-47fe-90a9-a5111f547170.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\da7a4fef-e987-47fe-90a9-a5111f547170.tmp
Size 25KB
SHA256 6e9e9e9254f8d5965aa2f058fe493deb6a8893cde1511044bc085a42f73c8465
MD5 391debdeb350b54db05ab7412827f2b7
SHA1 effb03224387bb4a5e2daa04182a961b68350efb
SHA512 ff05d89696f26816cb11bcbc0637d6fe7b42d8faf9c6f161ddf4a2ed7d7bad991fa91398d5dc09daad9c967a07d6d42a6b14f4905b22064a51fe2300bf1f2564
SSDEEP 384:nWiFiZcI63sNm8TUNTUlIm2aKMib4w2f0BCXtsb29nxwC7O6R2FeoMgL/7Izooy:9FQ637wgc4ZBCDnxwC7TRKp
TLSH
T16FC24B36EC99CABBECFA4F96AB4E3647EEF01163948C9AC4D9D81D1D009359D1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f69f729ed138e29ec83c399233ea4dcdf19ef9ddfc243a6867b2caef06a73102
MD5 f4c2a211c520e1c8b28bbd1bed4a6518
SHA1 c5096612d7b30975762e51fde126f8fc2b99a11c
SHA512 3b7726ec0960cecb54f47eb9843552bc8b87da691937243d22f9958fd3494a68d7013614639a295bab3a8d9fe045d423a18425307ec85f2a68041bd4bf361cb0
TLSH
T154411C5C66F9110CB3B77E1A9BF7986D487AB8372E06D05E11110E8F0A22B41CDB2737
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4840-205-0x0000024A646E0000-0x0000024A656E0000-memory.dmp

Download