hxxp://GINUS[.]NET

Analysis

user interaction
yes
max time kernel
149s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/10/2026, 11:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://GINUS.NET
Sample261020-nl2essyzht

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4028	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{C7EE3DBF-648F-432F-BD3A-42C5C0974792}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4616	msedge.exe
4616	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 4088 wrote to memory of 464	4088	msedge.exe	84
PID 4088 wrote to memory of 4028	4088	msedge.exe	86
PID 4088 wrote to memory of 1708	4088	msedge.exe	87
PID 4088 wrote to memory of 4344	4088	msedge.exe	88
PID 4088 wrote to memory of 1708	4088	msedge.exe	87
PID 4088 wrote to memory of 1708	4088	msedge.exe	87
PID 4088 wrote to memory of 4344	4088	msedge.exe	88
PID 4088 wrote to memory of 2880	4088	msedge.exe	89
PID 4088 wrote to memory of 3620	4088	msedge.exe	90
PID 4088 wrote to memory of 2880	4088	msedge.exe	89
PID 4088 wrote to memory of 2880	4088	msedge.exe	89
PID 4088 wrote to memory of 3620	4088	msedge.exe	90
PID 4088 wrote to memory of 3620	4088	msedge.exe	90
PID 4088 wrote to memory of 1204	4088	msedge.exe	91
PID 4088 wrote to memory of 1204	4088	msedge.exe	91
PID 4088 wrote to memory of 1204	4088	msedge.exe	91
PID 4088 wrote to memory of 4736	4088	msedge.exe	92
PID 4088 wrote to memory of 4736	4088	msedge.exe	92
PID 4088 wrote to memory of 4736	4088	msedge.exe	92
PID 4088 wrote to memory of 4864	4088	msedge.exe	96
PID 4088 wrote to memory of 4864	4088	msedge.exe	96
PID 4088 wrote to memory of 4864	4088	msedge.exe	96
PID 4088 wrote to memory of 1704	4088	msedge.exe	99
PID 4088 wrote to memory of 4288	4088	msedge.exe	100
PID 4088 wrote to memory of 1704	4088	msedge.exe	99
PID 4088 wrote to memory of 4288	4088	msedge.exe	100
PID 4088 wrote to memory of 1576	4088	msedge.exe	104
PID 4088 wrote to memory of 2348	4088	msedge.exe	107
PID 4088 wrote to memory of 2348	4088	msedge.exe	107
PID 4088 wrote to memory of 2348	4088	msedge.exe	107
PID 4088 wrote to memory of 3096	4088	msedge.exe	111
PID 4088 wrote to memory of 3316	4088	msedge.exe	112
PID 4088 wrote to memory of 2828	4088	msedge.exe	113
PID 4088 wrote to memory of 1372	4088	msedge.exe	115
PID 4088 wrote to memory of 1372	4088	msedge.exe	115
PID 4088 wrote to memory of 4424	4088	msedge.exe	116
PID 4088 wrote to memory of 4424	4088	msedge.exe	116
PID 4088 wrote to memory of 2144	4088	msedge.exe	117
PID 4088 wrote to memory of 2144	4088	msedge.exe	117
PID 4088 wrote to memory of 4616	4088	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://GINUS.NET
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff83016c188,0x7ff83016c194,0x7ff83016c1a0
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,5856667617531862166,12683427380489761488,524288 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=2712 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,2588844045868321246,5985982742820425300,262144 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:2
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,15442067432939055320,11930334179115203576,524288 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,7741472188968288951,11839346427418924363,2097152 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,11518695784269752776,12738055036016598642,2097152 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,13940377129792297759,8416254761348503289,2097152 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,9382366328919606137,8910352279932605266,2097152 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5072,i,18229176688514042907,2036660695713313667,2097152 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,14724541275138076652,1597866183860910303,524288 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,8249597397656290678,4577255837742068118,524288 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,3811471152440107764,14215746999841612125,524288 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,3811471152440107764,14215746999841612125,524288 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6268,i,6272213065251215376,9571958047542215031,2097152 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,12194918729878001737,16302143167287605021,524288 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,6520760011454307026,10848457252603784201,524288 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,14493691009478536309,1238659160478903740,524288 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=4620 /prefetch:8
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2180,i,8642425941696924300,10560894199312925886,524288 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:8
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,14844859334884521610,10769575711257662694,524288 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=748,i,12327495762314121473,4799936805402990842,524288 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6152,i,2135631523294425091,8367111929613224746,262144 --field-trial-handle=2676,i,10181163687435499168,16332138236943679615,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4616

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3196

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4fe8d1dd-76c3-443b-9e24-d95e032c5ca3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4fe8d1dd-76c3-443b-9e24-d95e032c5ca3.tmp
Size 8KB
SHA256 8b998b8be2d0947456ffaffbaf0d9e0588696186493e96c806916bc5dc75dcd6
MD5 779186c37ed13533ba17bdeb59889d75
SHA1 bae7a50caa72de5258ed184e0c45b86bf7a8bd7f
SHA512 98082589a64c927647982e7d5e2402ff6af9421f1bebeca9dc0ae07b6dce08211ca1a477cb19163dfe78dd9295dba86b0851cc85c8d0ec17b0f4877fef6f7ccf
SSDEEP 192:BONO6JUm0QmiUyEhso//OywtvCxBCY2U6:BONO6+mE9so//at6WjU6
TLSH
T1F502E839BC28BC7B8EF3AE45B08777239FA4107BAA911F84DAD92E1C01D715C1302C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56531693-5555-4c32-bc60-3e4706d2bd3b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\56531693-5555-4c32-bc60-3e4706d2bd3b.tmp
Size 18KB
SHA256 9e83b67f5a0a34bf753579ca21956cfe5dba087b4d7094d83c4a703277fd1f11
MD5 99ad1924ecabe4c2beff9fbbc82e49d7
SHA1 0157800acbb505b8aec496c20d7c7fd9e179e451
SHA512 367f928ea07a75fea6a54cba653ab4ffda5bf6876babc8409e5a6441c0224f7417289be03b8328817396a733d65d7e50e06073f2ddb944440a53ffa31d04139d
SSDEEP 384:FQkUSv0sN9QB5ub+nnh//at67fPvhXIIl0:f0nh/LPvhLi
TLSH
T151828E356C78BD3B4AE79250F08A36439FB49067EAC51F50D9CDAB2C02DA1DC2307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

761544b7-9224-457a-aeb5-21f1dda977e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\761544b7-9224-457a-aeb5-21f1dda977e3.tmp
Size 8KB
SHA256 0d7a7ba012a3c240516951d98c981327e196962ab720d2be4c76ab81f84c7fa2
MD5 abe2f48d52afed4e591a90c86859ea56
SHA1 fd22ec5ae5c9dbfdf8852f69882572909f378239
SHA512 e2bfe505b5af3d614235138c2673cfc469225dd06732c58ad7fb5c9ed4f40662dec373145fe257ad492353b394c223563e279b4a79d560747e823cad2c9bfbe0
SSDEEP 192:5ONI6JUDQmiUyGhVo//OywtvC7OezfDNxsqZvU6:5ONI6+1jVo//at67VPvU6
TLSH
T1C912F835B868BC7B5DE3A595F08336239E644167EB856F80D6DC6B1C02EB1AC530BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7af398f7-83fa-40aa-8e50-6306c663bee7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7af398f7-83fa-40aa-8e50-6306c663bee7.tmp
Size 21KB
SHA256 b24b121a63dea103e0f78d7898e21f9182f3decf4c6d961d1a3ba653a8376b62
MD5 59eae6e4700a9b3a4b8ee7029a28898a
SHA1 dbc15a52c111958721777f7c54954b9c80517977
SHA512 076a3bfce7de0320a5eb5f4d840f22a64239eec1ae751fd77cc47bde540a736b59dfaee36ba87720163e586be71bec1aa3bdb4dd9e61ede75ebe414cde2e0244
SSDEEP 384:ciFzQkUSvgqzsNH8TUNTUlIltB5ub+nnh//at67dPvhXIIl0:HFdPqwg9h/ZPvhLi
TLSH
T11CA25C325C58ED3B9EF79B90F54A3643DEB090A7D9C55E60E6CDAA1C01DA1DC2307D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8caf962c-8a0a-4e91-bbdd-200b8293ff79.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8caf962c-8a0a-4e91-bbdd-200b8293ff79.tmp
Size 18KB
SHA256 ef699559a4ac958b59ccc634ea605189bbd429e8b1ccd7ee66baf8e16983e18f
MD5 de5a45aa4c456fbc7171155e775bfe6f
SHA1 fb5ea79a2e236fe5eb52a9bd5ee1b4503165101c
SHA512 826493ed473bdeabf50244fc3bb4d4bcc5f238a3db6298f427dcc6e1bd4ae27f349c066ba594d8020a2bbba8a4c9aeadffa36e521c2d36c6c5d9bb22c500db47
SSDEEP 384:dQkUSv0sN9tB5ub+nnh//at67fPvhXIIl0:H0yh/LPvhLi
TLSH
T166828E352C79BD3B4AE79250F08A36439FB09067EAC91F50D9CDAB2C01DA1DC6307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

109c00af-cb80-4aae-9b70-d22e369db4e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\109c00af-cb80-4aae-9b70-d22e369db4e2.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e32d937-04bf-4f5b-afe5-2eb12915fecc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1e32d937-04bf-4f5b-afe5-2eb12915fecc.tmp
Size 10KB
SHA256 98e3b06bba112b22b31a2e8ffbe505fff2b90b5f55ecfc2b04c0a28f77f429b5
MD5 6b33ee66cbd8470b129256a4d7dda416
SHA1 8f0c82de3aa57be9c863b5b99447076e8d25110e
SHA512 81e89884d69219ef1de0fe8d06e928dbcfe8dc58307871c99cdae1f2870cbb57e64675a82810583117a2b6f13cec2ee092ae40dd75aa26d15d578d08cc6b6e21
SSDEEP 192:sxZgRZWS/fBsb8IdpcUHHi6+WN7dz/Y36GYYJIg5pJ:sxZgeS/fBsblZHvN/Xwd
TLSH
T1DE22C8526E386A7B4CCBD30DBA55BF17E6F95032A1D01E44A6FC991C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

73f5d3cf-3181-4eef-b43a-cb1167278ea5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\73f5d3cf-3181-4eef-b43a-cb1167278ea5.tmp
Size 10KB
SHA256 14fa19b1a64ec3a4e0c6ec44ea37655250bcddcc9b2181be5521d0f4e0a922cd
MD5 affc87d18b007c4ceaeea0cbcaef5b9f
SHA1 4094da02fcec9c0b88b4ce02a82134f2e4ae244c
SHA512 3b69ab550d8388cbaca182a48e6316171dc5f25d9d859e81f4d8624112db274d332bb950a3490e6724211ee9c77680d04679eea0777325a6902ec478fcf2ac33
SSDEEP 192:sxZgRZWS/fBsr8IdpcUHHi6+WN7dz/Y36hMyYJIg5TJ:sxZgeS/fBsrlZHvN/XhST
TLSH
T10822B8526E286A7B4CCBD20DBA55BF17E6F95032A1D11E44A6FCCA1C05F6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e373b03-cc6f-4aa3-b045-334b078aaa47.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8e373b03-cc6f-4aa3-b045-334b078aaa47.tmp
Size 27KB
SHA256 ef2ccf97520428479c82a7287ec3070614be1bae763cd0f76c97763fbfd2273d
MD5 2caabebde90e9e233d977e7720b78392
SHA1 6eeb3d1217bd0e0384d1d77aff940c3eb6781c7a
SHA512 07f67c32deb170646eb73ca727fc76b5e870e54a9df5a3c658e257e0d39780f586f1add071c222bb5c430f64ac9646207af8d373f1ce6411514e49e5ed0e1031
SSDEEP 768:kSKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/HroXkk:kSKlm7QWvUYe0u1ja8/L/E/UXkk
TLSH
T1B2C2FA3B740CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 070322dcdc7142cd6227e37a925331de4b449c2e2ab5e25dc463bca5874381ee
MD5 6e4151e61388aa35b0b82b36d0704af7
SHA1 2616ee5347b2a4ac218b5defaa6a49423b051a3a
SHA512 855f200812180d9fac35932c5802c6e82a3b19cd8841f55ffd6a06299c5b6a6f2d453f711af8faa53947fa4470f8280ee6b87aefa84e7c901113f99fbcc08df1
TLSH
T1E7E07D8945C8CA7EE208765F417C670C8FA0362AE7C0AD0E3705C5897249140F3C6E90
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 fb3222cad7b5efdbfae3970166ecf8d088c6f9d46023002d8d3c50a746db87e8
MD5 feabfc85920c1bba8137111874bdb411
SHA1 aa4f4115c29c5fbb4980e22943c457d70c70f73a
SHA512 c3f80401c69ab753d00354bfcc30151ae6ffcded184239f8e28f95129af5742793207c10f4cca3477d4c4f11bef65d3c095ba401fbbf242af536456484be3661
TLSH
T15AE026C545C8C6BEE3487447426C534CCBE2261EA3C1BD0E1704C58A7389048B3DABA0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 575cd06d9ed77eaf17d4d50b15be98c472746d6bf9d2079c7c6f080ec353c9d4
MD5 dd8c91d26c2f5fb36cf135a689a4421c
SHA1 ad7390d12b6eaf9ddd57b836f48058f698b706ce
SHA512 4f687497fe277d8acb0cc24a0310b4015a6f50ca958c8d6edf75e9b0f622a1bcbdf1abfd02f1a72e4b9e495f702e321eea37eab97c949a5bb95e5cbdbc9dc25e
TLSH
T1FC5183829FE303A5FFDA88F68FE529EB373E45C091836E72C598D6B8C9477548095088
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 672d675a33692c472f0716a5ffa45b2809dba11ece3d33a95c8e592817482218
MD5 83d301270fc8c0e742aa0906fd74d9ff
SHA1 054981f1896bf293a1c3ab9f48aa14661e10e03d
SHA512 9f5b34f3134a1e34815fa56f5e7a2d0517b0ddd9853253d59ff250433ba7ff481b558c06b97790f053f9fcf4f7436c3358371206d998f0910263d9699d020784
TLSH
T1DC5183829FE303A5FFDA88F68FE429EB373E85C095836E72C598C6B8C9467548095048
MD5 SHA1 SHA512 TLSH

Submit Download

11f47073-f3bd-4663-b6d9-706b298c3671.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\11f47073-f3bd-4663-b6d9-706b298c3671.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

9c70a848-80ac-4cec-a2e7-b7516ce8129d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9c70a848-80ac-4cec-a2e7-b7516ce8129d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

af62bfd9-7a7d-48ae-9183-620619cf8010.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\af62bfd9-7a7d-48ae-9183-620619cf8010.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

e4bc9a69-3fd4-4bdc-bad6-fbf1e4f6aea7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e4bc9a69-3fd4-4bdc-bad6-fbf1e4f6aea7.tmp
Size 949B
SHA256 a3a5ebf744b66b8727261265265027f90599d96f939dd2a147946cb6e43d665e
MD5 a478492e8b8fc4edc1fbec8a2d07c71a
SHA1 29e0e8e0779e49eb05e5efd7d951b7290e840efc
SHA512 d0f0e3d9f7cdd3e0e64747f9e8ed6b0bf79a705c79d02e64fc783a66bbdc8243026cca52334dfec6d6a0e49e6f348f474f3a942b67a6cbadae6aa73ec286e372
TLSH
T1D1117DB3C3D5856E890556F05A24EE1BCF2D0506421C7C1585D4EF6793E3475E10295B
MD5 SHA1 SHA512 TLSH

Submit Download

d538c7be-667f-430c-910c-1d22da868f5c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d538c7be-667f-430c-910c-1d22da868f5c.tmp
Size 10KB
SHA256 481d43b675e046826fe35b09ff6c62db35fb0f69a98cb08a3ea13c59b50b63cf
MD5 cf42736ae08dd52c61464329db803d71
SHA1 49a8bbcd02fdca1bbdb2e601801f79858cb55abd
SHA512 e64f23af648b803d5bd95a2608f7c7eaa76e9e5e78b631386808e898897a3620eb373bd5f68a1812e066154ec4d84c6f52d592c7bad94515c89e3f364de9cb90
SSDEEP 192:sxZgRZWS/fBsz8IdpcUHHi6+WN7dz/Y36GYYJIgrJ:sxZgeS/fBszlZHvN/Xw9
TLSH
T17A22C9126E28AA7B4CCBD30DBA65BF17D6F95032A1D01E44A6FC891C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e41f1b57-011e-4769-92ce-d41b82033f75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e41f1b57-011e-4769-92ce-d41b82033f75.tmp
Size 10KB
SHA256 81bb1b26191f7649d0083782c18b379086d35a6367ccfe18d5ed21949436047b
MD5 8ac9dfdf5cff889ec8a042907e353480
SHA1 aefbc6ae60b171f1bf4f0c8db3e78901aeffa860
SHA512 07d335755f942339e3868f3f08631b070a23c22498abcca2180151e73bd32ca33374b02f683ea101cf83ab9e7a2895e0c51e647b68bd5975b1f71901150ee560
SSDEEP 192:sxZgRZWS/fBsr8IdpmUHHi6+WN7dz/Y36hywlYJIg5TJ:sxZgeS/fBsrlPHvN/XhybT
TLSH
T19722C9526E286A7B4CC7D30DBA55BF17E6F95032A1D11E44A6FCCA1C05F6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

25cc7b16-943d-4aef-bcd9-b28c0fd7cdea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\25cc7b16-943d-4aef-bcd9-b28c0fd7cdea.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

79578a47-ec9b-4220-95f0-10348ec56942.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\79578a47-ec9b-4220-95f0-10348ec56942.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b56642c9bd4279adb00920ecbd83c915134458f54ca51d008c78326f44705c5f
MD5 3c0d427f7a4b59b69ce20c7fe87d8545
SHA1 28e236fe0e0bd0ea8c8acda7d91287057eb51182
SHA512 666c5b0177fd8b600f80cd50443026c6e992b812fad08d8df56a1ebf15f8c3edf2211f57eeed316e749bdc3923a7a73353a245b4c71cd7e8d3e4e388477d3451
TLSH
T17E414C4CA6EA1148B3B76F5AABF6A86D487FBD372E0AD05D10110E4F0623F00D861B37
MD5 SHA1 SHA512 TLSH

Submit Download