hxxp://fftech[.]net

Analysis

user interaction
yes
max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/10/2026, 14:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://fftech.net
Sample261009-scnjssh17z

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3076	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{A45D22BA-BC54-4B18-BE5D-3A70EF5C453D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2900	msedge.exe
2900	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1984 wrote to memory of 1648	1984	msedge.exe	88
PID 1984 wrote to memory of 3296	1984	msedge.exe	89
PID 1984 wrote to memory of 3076	1984	msedge.exe	90
PID 1984 wrote to memory of 3296	1984	msedge.exe	89
PID 1984 wrote to memory of 3296	1984	msedge.exe	89
PID 1984 wrote to memory of 3464	1984	msedge.exe	91
PID 1984 wrote to memory of 3464	1984	msedge.exe	91
PID 1984 wrote to memory of 1932	1984	msedge.exe	92
PID 1984 wrote to memory of 1932	1984	msedge.exe	92
PID 1984 wrote to memory of 4884	1984	msedge.exe	93
PID 1984 wrote to memory of 1932	1984	msedge.exe	92
PID 1984 wrote to memory of 4884	1984	msedge.exe	93
PID 1984 wrote to memory of 4884	1984	msedge.exe	93
PID 1984 wrote to memory of 4488	1984	msedge.exe	95
PID 1984 wrote to memory of 4488	1984	msedge.exe	95
PID 1984 wrote to memory of 4488	1984	msedge.exe	95
PID 1984 wrote to memory of 1424	1984	msedge.exe	96
PID 1984 wrote to memory of 1424	1984	msedge.exe	96
PID 1984 wrote to memory of 1424	1984	msedge.exe	96
PID 1984 wrote to memory of 2148	1984	msedge.exe	99
PID 1984 wrote to memory of 2148	1984	msedge.exe	99
PID 1984 wrote to memory of 2148	1984	msedge.exe	99
PID 1984 wrote to memory of 3716	1984	msedge.exe	101
PID 1984 wrote to memory of 4648	1984	msedge.exe	102
PID 1984 wrote to memory of 3716	1984	msedge.exe	101
PID 1984 wrote to memory of 4648	1984	msedge.exe	102
PID 1984 wrote to memory of 876	1984	msedge.exe	104
PID 1984 wrote to memory of 2900	1984	msedge.exe	118
PID 1984 wrote to memory of 2568	1984	msedge.exe	119
PID 1984 wrote to memory of 1504	1984	msedge.exe	120
PID 1984 wrote to memory of 2824	1984	msedge.exe	124
PID 1984 wrote to memory of 2824	1984	msedge.exe	124
PID 1984 wrote to memory of 2900	1984	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://fftech.net
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ff87387c188,0x7ff87387c194,0x7ff87387c1a0
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,13364842686275774684,5143025153102023821,262144 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:2
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,17350519304136740619,9976839283139061457,524288 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=2776 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,15658596978641567941,6677955484191679695,524288 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,11592075356476803687,10225547252601618668,2097152 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,12579302189526538985,2338689947102945341,2097152 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4132,i,12743469129559166278,8425650874282579448,2097152 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=4140 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4148,i,4424564835380861988,5061260877518315920,2097152 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3572,i,11330878223012793170,16998705064039677430,2097152 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3516,i,15183926475410691860,17835742024273528084,524288 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:8
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3536,i,15940480994915262044,4708903195458256784,524288 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,15271595529195932524,795597701091660711,524288 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,15271595529195932524,795597701091660711,524288 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,5080063361619972647,12568891273214537411,524288 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,2139124823691407513,14672110964398068582,524288 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,17059709666288193946,3347788714794020290,524288 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,7018776556263115647,6935607631079774412,524288 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,13015324593264594188,12927316918318341405,262144 --field-trial-handle=2676,i,15165924761866306712,2150134708555473314,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2900

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3c9a74da-9422-49f5-bf88-48860710cc39.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3c9a74da-9422-49f5-bf88-48860710cc39.tmp
Size 8KB
SHA256 46eef4d16efa163744443faf1351f19e534ccdb8d03b28c9763fa8c601af45ac
MD5 1417a063c8bfcdb001416967af097fd6
SHA1 42951338149923dbfa8f3975fe8575ce983214d6
SHA512 226beeac2c8009e46ff108ed26ab1a2954c47ab9835b3444ee198e6c20ddc949954632c58308b4638d728cee3d4fa6da7ff11c19f11265a23542c7c24fc53f4f
SSDEEP 192:aONW6IE7QmiUy8/TPuIGmXNjzorvRa0UC7sgVU6:aONW6DtRPuIGmXB8oessU6
TLSH
T12E02EB35AC787C6B9FF3AD49B4862A23AFA5102BD6951F44D6E41F1D00DB25C1306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ec6b02e-98d6-4c6d-a758-b0471fcb91fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9ec6b02e-98d6-4c6d-a758-b0471fcb91fd.tmp
Size 26KB
SHA256 1938ae7159ddc0132851e397342b59367d80bff62501fded4013a685f6fb26ec
MD5 222d1e6133fa890f1227533a82319698
SHA1 9fd636d8ebcec7cfe721792cfde9e81ba723d0d7
SHA512 d719770636326cbd55a04e8f9206fe30c912defbd7f55ce996c2afc4d1f9a5250a820f06d61f1e504711f166c91e17dfa18290cd2550f0897d258ec522a3c20e
SSDEEP 384:CiFiZcINzsNS8TUNTUlIlnQf1inrYJzIGmXB8oMcXXkiV/jfG:JFQ1DwgIRVEnM0XkiFjfG
TLSH
T1EDC22AF248E7943ADAAE9B47A77D2D038EBDC063B1855A50B3D8590DCC9B1BFC306911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

800d72ed-59fc-4a81-b8df-c5aab9eaf51c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\800d72ed-59fc-4a81-b8df-c5aab9eaf51c.tmp
Size 105KB
SHA256 4ee1e0056f41a046e8efbfc68a394a9993e9e1572e402e58600b2c2d27cdbad0
MD5 cbb9f3725f3320854f02b5fb7d1eee93
SHA1 9c687195aa5a8f617023a505ab65229bb9a04596
SHA512 a8e728ca1dd3f2320d59c0244f1a4c82c5213ac624c22798462d831fa8936055eccd554951d7106079089867cda6e052f87a3bef24aa908224fd8e90caa6ebfc
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7Z:fwUQC5VwBIiElEd2K57P7Z
TLSH
T13DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

0c3b5637-92e1-4659-a460-ca50824c1641.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0c3b5637-92e1-4659-a460-ca50824c1641.tmp
Size 10KB
SHA256 8c110e8180dbf27d072ed3425f39f8ea68e50ca8cf23f4d478052e8b9a8ba1e3
MD5 5ae8e750e5f934262dec347bba28df18
SHA1 450de5c974f82342df7a5dd34b785c83af187a25
SHA512 2c91baac236acebfc1fda64aa3b03db3120210c8fee1600fd2275d4db02167619eba7b97f9132f43af6d34493042e2a580e2092bb96694a198f84bf42d51f200
SSDEEP 192:sxZTRKW8/fJsqUtMIdpWVHW6+WN1ax/YapGD7Ig5VJ:sxZTX8/fJsBfmHbO/Sh
TLSH
T11922C8526E38A57B8CC7D21DFA55BF53D6F91072A1D11E48A6FC861C04EB7DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f9722de-b8d9-4b2c-8b9b-14268e9cca86.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2f9722de-b8d9-4b2c-8b9b-14268e9cca86.tmp
Size 27KB
SHA256 60b65521a8f87c56256f18098d691bc9159945fee149496ab63d6e1265a8749a
MD5 6b85040780fadc581eedb19013d3fb22
SHA1 21b6097e7a063e120527d41a5d1f04ce3819eff1
SHA512 a1afea3bfadac0aa0c09bc0152a98ae02ed32bef19d3057146777f9d54757048af2211fd957aa05ed5060ee2569bb002860b2c4a70d3f91118217556a0ce14d1
SSDEEP 768:WWWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7tro4IfeNmRT:WWWPcLKWvKeEeu1jaClLiF7G4IWNmRT
TLSH
T112C2EA3B640CCB7E5FC01A9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b0224d3-69d6-4495-8f48-952fa2c68d32.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6b0224d3-69d6-4495-8f48-952fa2c68d32.tmp
Size 10KB
SHA256 362f29b9943dbcaf855515840c173af5356076350644fef72b6ab3ddb7fe4d36
MD5 ecbbcebad9c3d653e4a6af5d1dbebd54
SHA1 d0a2cc5754c6ef724535a727da947f152c86b4b2
SHA512 8ffbec36d0dfff5e58b105483fbbfbc3b63c4b6d2f9cf0b939d7c436d71e7728d0708193423a9ba7e6f54536459c504513af1b0f186fd1e67d21cabbd0753709
SSDEEP 192:sxZTRKW8/fJsqwtMIdp8VHW6+WN1ax/YapG+D7Ig5/J:sxZTX8/fJsVf8HbO/YsH
TLSH
T1DC22E9526E38697B8CC7D20DFA56BF53E6F5507261911E48B6FC861C04EBBDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

849ed1cc-35a2-45d1-aff7-a76c8cbd389d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\849ed1cc-35a2-45d1-aff7-a76c8cbd389d.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 74f94287f3609279c3c7c6100f1150c5e28adfe7bb86c9e6bdf937768af0a23a
MD5 f10308ea4e0e8823acc7e01adfa43761
SHA1 7754faeb9024aa119758d483010b828db3b8ae71
SHA512 ac483e2dbe7e5554234d96db0cf93d6c49ca34b87afcfb693ba0d38102580053e66c365e972f6b6c0652387712bf4c68c0a50eddc946d2c482cba3360cda3b6e
TLSH
T1E6618FC40640C06AF7E84174B5D6488F3EF7E5BCD2B34EE215A8E97AAB0361240C0E7A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 20932d0dd639283c0a556b8d151c07002dae4ade2c0703a0d8ee7c512a0d9238
MD5 7f6dde419a00d508811577a334f4f616
SHA1 a1753cd251a2a45f485b6deb7f7e7e76168fc8aa
SHA512 aaaa22def0336d135e6dcd526914ad9f341f891d60ef693ca42cdf19c63ade8f7be5157166914124a9711d3cab8156aa4a221781e7794953450656256690cec2
TLSH
T1556170C40640C06AF7E84171B5D6484F3DF7E5BDD1B34EE614A8E976AB4761140C0E7A
MD5 SHA1 SHA512 TLSH

Submit Download

f1552049-8d26-4500-9d56-39e32285cb34.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f1552049-8d26-4500-9d56-39e32285cb34.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3d985f85-8bbe-4819-b97e-f45ad71bae23.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3d985f85-8bbe-4819-b97e-f45ad71bae23.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

93c29732-cbed-461b-8bbc-ac2026f9ad4e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\93c29732-cbed-461b-8bbc-ac2026f9ad4e.tmp
Size 1KB
SHA256 387814e8f10900c29f50ec1c1f6f8c98f5ea67ed664f49d52e3e1d2582da35e5
MD5 08a4a9ae9f9441a06fab91b4788d42fa
SHA1 32b0e89e6b1f6b9a3fedc207775dea67dd985353
SHA512 64852055e78851d93d279f40dfd448e59014e7dfd9a8ea46fc9bb2ff571f7af00745e4b83056364d2c778f6f0f1c19adf5962b8fd88121bf10cde357e377498f
TLSH
T11F318CF3C6E4866DC9111AF05B24AE1BCE1D0D5992283D2EC9D9EF5B93E2071E102A5F
MD5 SHA1 SHA512 TLSH

Submit Download

cc713c43-3166-4ab1-a975-15030bfc096a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cc713c43-3166-4ab1-a975-15030bfc096a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e65a39a040c376bbfa56a58f81b3054fc02ae8fa018f3cb3920dd653d4fbecef
MD5 055d039584b8338042366e7f0c29ec05
SHA1 425d840299aa744c2dcf69f835ac6e4f5af06030
SHA512 113d741d264081e26d4cb0a180155094e9923cdcce8d0a6ceb6363b98fff6708294767e652929b4ec34c79f81690ae9a073f54e2b8d684c2648df8a35b717d69
SSDEEP 48:KAfIRKc4MjyJaI/KnKgYEpA06eykCe/PI/skKoBgSkcU05f6U5yyQ4Q9QMQoP6PH:KAfCKc46qaUKnKMvyKMgaP
TLSH
T15591CC51327B024038BF6A0955B9861E225172F33556F53E3BBC81A66E2BF498CFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c10b6eac-b10f-4b1f-ad62-1dbe327b59bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c10b6eac-b10f-4b1f-ad62-1dbe327b59bc.tmp
Size 9KB
SHA256 ba0dc18f3da34798bb24b785e06a475808ca27af3bd061c382ddba073feeb745
MD5 0e3d9d625c084b54647337b4d8d38e96
SHA1 375cd51798ddc168df027399b0c36e6edbc80dd0
SHA512 03df822296fe1f3652cf07bb0c83334bf07efd0f66cf730532ab6dfda826b127649153b3af8d0fddd3f4d8983cd4dcf4daf290e596a3e16d0aacd60b8c7a678e
SSDEEP 192:sxZTRKW8/fJs2UtMIdpWVHW6+WN1ax/YapGD7IgrJ:sxZTX8/fJsNfmHbO/S9
TLSH
T10E22B8526E38A57B8CC7D20DBA55BF53E6F95032A1D11E48E6FC861C04EBBDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d45b03b1-f758-44a2-8184-677ef67a9be7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d45b03b1-f758-44a2-8184-677ef67a9be7.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f6275d89-d27f-4c2b-a5d8-5a9ee657fde2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f6275d89-d27f-4c2b-a5d8-5a9ee657fde2.tmp
Size 10KB
SHA256 d9702b0164385258565f953cf0d0791e86105f6a5616bf129de4e87c10319801
MD5 dd6c52ae3dd437da5f7bf2775a13f68a
SHA1 a4acb30cfea5cbed19ff7accebb4bb3f02c2d756
SHA512 d811d797c140ed982b20c04af8d543405139695bb130771efd4077bc13b53cf26720872bc27caf89bd03a4822f48d31d290e3be24088eb61d21f63c1e132fcd8
SSDEEP 192:sxZTRKW8/fJsqwtMIdpWVHW6+WN1ax/YapiD7Ig5/J:sxZTX8/fJsVfmHbO/CH
TLSH
T12A22D8526E38697B8CC7D20DFA56BF53E6F5507261911E48B6FC861C04EBBDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

191065a2-779c-4907-a729-f5b9d8ee37e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\191065a2-779c-4907-a729-f5b9d8ee37e6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a1a41975-8fae-476f-bb0b-db2295b4f978.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a1a41975-8fae-476f-bb0b-db2295b4f978.tmp
Size 18KB
SHA256 b1a5d566252722b1dfd8f3883e5f2f0b2658d8314b5e89492ae27767c5658815
MD5 b3e44af5ad74b02c4726a0bfbb77833c
SHA1 983df5bde90af57b78728c34607adf4018f122ee
SHA512 f103c32658011bb944bcca8c2f1474fe227c558afd4432a2a1e42b752c9375727b8eb8a19a7949b600b509469de7640416baad2883428ee654c5a6df429f47a1
SSDEEP 384:XZcIhsNKnQf1inrLJzIGmXB8oMcX/iV/jfG:fhUiVEnM0/iFjfG
TLSH
T1C5828D326C34AC3B9AF7E548F48639039FB59127E3C96F54D6EC5B0D00EF298130A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb68affc-65ff-486a-b074-daad41a494a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cb68affc-65ff-486a-b074-daad41a494a9.tmp
Size 18KB
SHA256 648b479faa9e0f9ce8786ae85aff1191f71adb97e1b1de01ae32d0061481a387
MD5 c10c060b4d522b3125adfca50354d8bd
SHA1 ec904e55ec661502b0f17af521be3e20f91821d4
SHA512 de2650339ebee30265d36e4b94c941378edafc2668769f4104a17b551056734a3a2f16f781b2e15c6655368dcbe6f1b8e3b6c15d3da71721edf425d4c7e529f3
SSDEEP 384:RZcIhsNKSQf1inrLJzIGmXB8oMcX/iV/jfG:5hziVEnM0/iFjfG
TLSH
T10A828E325C34AC7B9AF7E548F48639039FB59167E3C96F54D6EC5B0D00DF298130A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a99dc5ee-23fb-4fbf-ad57-5a3fd0f3df2f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a99dc5ee-23fb-4fbf-ad57-5a3fd0f3df2f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f53cfd6d-7fd1-4d9a-ba12-927d6922e4da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f53cfd6d-7fd1-4d9a-ba12-927d6922e4da.tmp
Size 8KB
SHA256 8f3eda237c33ba8978c13ad02dae37d1317391194baef99fed412f91e43ac8a9
MD5 07f97eacd5b0464acc00bc2423e6d23d
SHA1 2b2664b98be9a5ae8c4c339d5565a32da7a20f07
SHA512 9ca486345528aa8aff2a00065c841df68f193b09c8b3b0f0487692747a4ae87eb024739444eae16bb3e094479656f956126e6fc6b3bc7b3412493bea1fcdd283
SSDEEP 192:aOND6IEsQmiUyP3/TruIGmXNjzorvRa0/cX/eUP3P27HvqA/U6:aOND6D8ULruIGmXB8oMcXUHV/U6
TLSH
T18212FB32A878BC6F5EE3A958F4873513AEA54127E7C96F50D6DC2B1C01EF25C130A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4f23159c0395c5b2975c282e7b66d8632a73379c3bbf86d6b52dab7579d68d2c
MD5 207976ca8f858dc78e4c4a71a9219cb3
SHA1 8cf7bb9df23c1223fa89f9bfa391863c99a91466
SHA512 ab91bea067ad8376fee97a3359cd2e1e517d228b45687263e954684549ca1b33dab358b868412978f74f2a08202169fabb15c6cfa2c06cd3b0e97258d311b27c
TLSH
T145410B58B6FA1148B3B76E56ABF6986E487FBC372E0BD45D00110E4F4766A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download