hxxp://www[.]punchbowl[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 10:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.punchbowl.com
Sample261024-msqffabs5q

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3816	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{E19C8A5E-1C02-433C-ADE6-2FDF3E089CCF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2056	msedge.exe
2056	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 5064 wrote to memory of 4820	5064	msedge.exe	85
PID 5064 wrote to memory of 4828	5064	msedge.exe	86
PID 5064 wrote to memory of 3816	5064	msedge.exe	87
PID 5064 wrote to memory of 4828	5064	msedge.exe	86
PID 5064 wrote to memory of 4828	5064	msedge.exe	86
PID 5064 wrote to memory of 1812	5064	msedge.exe	88
PID 5064 wrote to memory of 1812	5064	msedge.exe	88
PID 5064 wrote to memory of 2580	5064	msedge.exe	90
PID 5064 wrote to memory of 2584	5064	msedge.exe	91
PID 5064 wrote to memory of 2580	5064	msedge.exe	90
PID 5064 wrote to memory of 2580	5064	msedge.exe	90
PID 5064 wrote to memory of 2584	5064	msedge.exe	91
PID 5064 wrote to memory of 2584	5064	msedge.exe	91
PID 5064 wrote to memory of 4616	5064	msedge.exe	92
PID 5064 wrote to memory of 2872	5064	msedge.exe	93
PID 5064 wrote to memory of 4616	5064	msedge.exe	92
PID 5064 wrote to memory of 4616	5064	msedge.exe	92
PID 5064 wrote to memory of 2872	5064	msedge.exe	93
PID 5064 wrote to memory of 2872	5064	msedge.exe	93
PID 5064 wrote to memory of 4044	5064	msedge.exe	96
PID 5064 wrote to memory of 4044	5064	msedge.exe	96
PID 5064 wrote to memory of 4044	5064	msedge.exe	96
PID 5064 wrote to memory of 4524	5064	msedge.exe	98
PID 5064 wrote to memory of 4524	5064	msedge.exe	98
PID 5064 wrote to memory of 4196	5064	msedge.exe	99
PID 5064 wrote to memory of 4196	5064	msedge.exe	99
PID 5064 wrote to memory of 4228	5064	msedge.exe	103
PID 5064 wrote to memory of 556	5064	msedge.exe	110
PID 5064 wrote to memory of 3392	5064	msedge.exe	111
PID 5064 wrote to memory of 2600	5064	msedge.exe	112
PID 5064 wrote to memory of 3168	5064	msedge.exe	114
PID 5064 wrote to memory of 3168	5064	msedge.exe	114
PID 5064 wrote to memory of 3956	5064	msedge.exe	115
PID 5064 wrote to memory of 3956	5064	msedge.exe	115
PID 5064 wrote to memory of 3804	5064	msedge.exe	116
PID 5064 wrote to memory of 3804	5064	msedge.exe	116
PID 5064 wrote to memory of 2056	5064	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.punchbowl.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x268,0x7ffbc930c188,0x7ffbc930c194,0x7ffbc930c1a0
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,13610196978303836231,8801266727314667072,262144 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2024,i,6787608034815675468,8069335072041027470,524288 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,4811200083797142192,9968985419855629656,524288 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,16743581255241069879,5035349193309582698,2097152 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,15534590088452397285,10151062987594212810,2097152 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,8495981357014799609,3095360754621140783,2097152 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,11352755649653459783,14000964134919645254,2097152 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4976,i,5287063071336858247,15483080748113191716,2097152 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3460,i,9106016540275452248,6016579978982686249,524288 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,2706511770445030354,16606777436795916787,524288 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,17772158540393718892,6148669802468734921,524288 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,17772158540393718892,6148669802468734921,524288 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,8140178624601135686,7694078001640650819,524288 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,12707407881402087969,16118821085807648305,524288 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,9196599712573533469,10858619979994457237,524288 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,13876963762883716185,6979557964466463921,524288 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:8
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,14344940528812904467,12043810414147212418,524288 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,17844605663506568315,2612167966144977198,524288 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6416,i,8607395580731343842,3330697558945456450,262144 --field-trial-handle=2272,i,17852491242076378724,6492348384490081006,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2056

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4368

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7ecec456-511e-4dbe-b14d-00f4b857dc35.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7ecec456-511e-4dbe-b14d-00f4b857dc35.tmp
Size 26KB
SHA256 218382d4fd064aa683aad5b03d38e207b90f5876c55a5200d0828c058121205f
MD5 8eabc7fefe87f255881c3b5cb520ec78
SHA1 2091bdb27789adafd55094176a353b25a363f2b5
SHA512 96addd63daeccfa2b03487dbd52cad17a3b9b379e807374ea5324b3970e502a36038898df4852ab9ef74c70359c73c481844dc898df609acae657cf61a0644f0
SSDEEP 384:xiFzQkUSvOzsNO8TUNTUlIlBZAF5XbZBGYX5EOv8bOXFrI2I2u6bhIIlx:YFdOnwgWFd7GYuO2eFrI52usLf
TLSH
T183C219F298E79837D9AE5713A73D2D038EBCD027F5845A50B389191CCC861BFD30A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8934ba46-dd80-4fc8-8396-7183681ae726.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8934ba46-dd80-4fc8-8396-7183681ae726.tmp
Size 8KB
SHA256 da83716b48f0ec4f0fa00e61ffecc0ed85bd5ba8edb66806ed9743b55b2bb6e0
MD5 86974a1b1f76f71d0b73b458e40ac0a9
SHA1 9f3d28166449e280c8b493a0fd65e587156f0869
SHA512 f4c1540e70aa425f813c735425a8795eb0461c82ff6a42b7f54c182469436abec65dbf48bd31c34c70160209b9a19c6cab7450e0c86378f414e3532a4723ed3f
SSDEEP 192:FONX6DphHqQmiUyoCbwGYX59ezXCHjzor4RyOX+erFkIIyrq5+U6:FONX61A8bwGYX5EOv8bOXFuIU6
TLSH
T1DE120836A8B8BC6B1DD3A551B04B3513AEA4512BEB896F50D6EC2F1C01DF58C130E93B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9942d649-90bf-4cf0-a7f9-68da62a1032c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9942d649-90bf-4cf0-a7f9-68da62a1032c.tmp
Size 18KB
SHA256 c6ef2ae4d36c9b24eeadfa69dcbaeaee6ab02d5c301796aa2a07c5b187e33acf
MD5 a66ffd9452279d24ce51f05b210d17b5
SHA1 c52c558be5d4742e09994720bc597e043e778015
SHA512 2cb0975a53d3aad10853f2e21455923d0a9e96826c1db34ee848ae08bf5eda8bf86c180ae1cd4eb984768c08658335ce477b63462d6e79fde517f5791ee81126
SSDEEP 384:3QkUSv0sN+yZAF5XAZBGYX5EOv8bOXF/I2I2u6bhIIlx:J0PFi7GYuO2eF/I52usLf
TLSH
T1DF827D36ACF9BC674DE3A510F10A36439FA49027D6D46F64D6DD2F1C05CB288231B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

567f4f20-25e3-458c-b269-43efc392db15.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\567f4f20-25e3-458c-b269-43efc392db15.tmp
Size 105KB
SHA256 a871097de08ac10fa186cf6374ed47c165532d2f45190d4a8a4920973b41eeca
MD5 8b1e50f3cab92971b2c83d5f4ebc1515
SHA1 dc7b9575587818187af365bfdab1445f1ceef6aa
SHA512 7dcbd713320e797358c4142ab7fe7cd08a8847ad447d0a5ccf2716297d7d9afff43a5332a49259ad7775f9b7a7ef3a0f23024a9cb2350bfebb1224fe83d27079
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17BB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27f6aa5d39c98b4843eaed7972cf93d10e75e08f497afafa54ccf4057f6d52c9
MD5 a91eafa1aeb7b35d5c7abac6d2c83384
SHA1 a76b97105496dbfe28857282f5b661789a032b25
SHA512 4bebba8a121156a8e7e31bb49955c0375f1ca3be7dcd3c9b113d261a4618ecdf6781fce438d8e56020e438286e1619d3844f48e91b2b2c3cbb4a55d4c199972a
TLSH
T17AD02B24C9E41E90D0131434002241453F8CC03858023012D0B812AE15419D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e364ae2365b95ee5142a1a0abe3ee5065b85c554bc5cb9fcb1f31bcd0a1af4e
MD5 75bc6f9debcf49d2312740dfba56733a
SHA1 af0f5dfe4b330cf62c24c0003f6c57159b23e268
SHA512 c0a6cf9272c224460d1e7d25cf8159aa43733ebfb5f2761293ec6a5f2b4d71e061daa60092335856322f566a072c79184d7ad45d2b04b7cf8f3628e3a4bd4d35
TLSH
T176D02B2489E41E90D4131434002141453F8CC03858027113D0B812AE05429D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

00b87d1e-8c17-4b80-8c1a-0a21f2614910.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\00b87d1e-8c17-4b80-8c1a-0a21f2614910.tmp
Size 10KB
SHA256 6a7819ab12751618e171955f37d2c2aff8ab226875b1da14e07eb931e68d01cd
MD5 34b0b33ee793cb2293057781a5fd7a29
SHA1 d30ac3eb1614702812eadecf8b0d13d2bd54bf31
SHA512 772f27978f07cc10daa69cf72978de7bb27cb11418e4fe7d9671fe89cd656acec2899b5cd802ba649436ff3421d30f43dcf69d046d659c32b696c0fbffc6663a
SSDEEP 192:sxZ4R/W9/f5sY0LrIdpUQHW6+WNaRm/YgvF+a00Ig5TJ:sxZ409/f5sB0dHbZ//b/
TLSH
T1AC22C7526D78A97B8CC7E20DBB15BF53E6FA503291911E48A6FD861C05E7BCD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

10be9787-ecbe-4a91-8f4c-eec59a136e4c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\10be9787-ecbe-4a91-8f4c-eec59a136e4c.tmp
Size 10KB
SHA256 b5125e04b8362b2740260e68c4d12b64c529d95fb93c1c20f8dba2da2a56710e
MD5 aa96f6bb1640bc2403e44587f3912477
SHA1 363146a648b845c84372d637a459ad0fcc3a2c2b
SHA512 c503ae8923b84824bae97ceaea1cd2d8a15af39d44548f886e2036f88b8057fdbd236424b9f2b45158e832e558ee491b3a1ca50e36175c390c818edfd59f4f99
SSDEEP 192:sxZ4R/W9/f5sfrIdpUQHW6+WNaRm/YgcFOa00IgrJ:sxZ409/f5sf0dHbZ/Wr9
TLSH
T1AB22B8126E74A93B8CC7E20DBA15BF53E6F9503291911E48E6FC861C04E7BCD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

271afd67-b229-4911-bc00-120128ec5235.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\271afd67-b229-4911-bc00-120128ec5235.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f24f086-62ad-4c19-934b-637dbb1b4173.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3f24f086-62ad-4c19-934b-637dbb1b4173.tmp
Size 10KB
SHA256 a80b4cbc8aa471826122f697b2f23daef0d37768cdc5cc3649ee21e0a1503c74
MD5 097df45cf2e053d185599b9c926838e2
SHA1 69bd6fa6203f861b93254672671d2398f751c996
SHA512 33ed2afd1f62e7d64e4eb39da89b3de86c2301db5da462e2a2fff9a27044e64aaa8efa28fc2112e39b2b521e6ec923460a079b3646208cb030a678ede093a902
SSDEEP 192:sxZ4R/W9/f5sY0LrIdpSQHW6+WNaRm/YgbFNT00Ig5TJ:sxZ409/f5sB0LHbZ/PH/
TLSH
T17732C8526D78A97B8CC7E20DBA15BF53E6F9503291911E48AAFC861C05E7BCD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

934939ce-9c8d-4cd0-92df-1cd575b82207.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\934939ce-9c8d-4cd0-92df-1cd575b82207.tmp
Size 10KB
SHA256 3f5116ac048ac27cfa30c56c327fe29e616e04d7a375d93e320e1ddf0a4f314d
MD5 a66236ddfc083db94369e947dec53fbd
SHA1 1152d11d4ee75f663ea6c9b103147fdac22d4f21
SHA512 650dd4616499f00f36edd7a8e21b96a2ed7cafbb9bbb15bf9523d932f72ca502f2eb97a879b2d3134b9eed6ee0207a8b1d1a778dacaef13ca97708b48fd78155
SSDEEP 192:sxZ4R/W9/f5sYjrIdpUQHW6+WNaRm/YgcFOa00Ig5pJ:sxZ409/f5sa0dHbZ/Wrp
TLSH
T1B922C8126E78A97B8CC7E20DBB15BF53E6F9503291951E48A6FD861C04E7BCD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 218160709b4a3f462e70684ae144107d0b97aa71a0d9f36b6ecccc085e849a7a
MD5 3a84a49e9930b86ef07f6c5618d6ce68
SHA1 12137ea123c14bed0cf35a79e6f209add30c956a
SHA512 413379207551ea08b0744026aa55c4a9f616ef4a2c1a7ad672d02c414118eccb67d8b77222f7afe45d56fc40ba75df0438bbbd6d02b4ad091d1918e7fc0fdc84
TLSH
T138E026C604D8C23FA308B4C7027C930CC381265E93D07D1E2B08C9CDB00D840A2866E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 a7318770124305275e563799baa9d4c72c88d805e9dda5e9378bb5fa529169dd
MD5 244be2beaa9ed571327c3c4bc0d27c72
SHA1 6417cb97d189e70b5bf23f00e18c198c3fb55c68
SHA512 deae5db974e32f7f7b6b5d7edd58a02629272898143d8d68eed465f92c3014ef2b4f78c44708f45dc1bc5d06cad3c97eb4ed8453c2f840260e70281e62dca851
TLSH
T139E026C608DAC33EA21EA8E702BC630C8381376AD3C0691E5700CA8CB08A444A6D6AE0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 090a1ed50cff77d957950eb524bbf52cf6ec00df2d4f553a082e367ef2e4046f
MD5 47e4f963aad6247ceb79cfb36f98e1fd
SHA1 1b0dc75db2c12f3a0cfc5392840092bec7e34aee
SHA512 720027506631556a36cc64b237ffa7bf0314320c76f705bda2b3c59a48a3301e7bd243f621c628e8cd99a6322bfda3073b234747c8948ca589444f8758ad95b3
TLSH
T13651A5C067D8A278F79480B082D921B3B1F885BB3C875F0B00E4F9795A0EB2A5D07B60
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 7b5772de5c166ff8b12aa0e1ae810545c0ec2ab491a933092a850659f1154cb5
MD5 f563beb723b6079e04694506ce97c4ba
SHA1 2ce43afd10bc93e8ce5f022965e7eac44cff44b1
SHA512 38196cdb6808021cd87ff97d7d44edad27cd6ffcf6477954d72706fdc3882531aea021d69fbc26a841fc9cb1a4695c9c6cdf0f409d5805434a49611de86f458e
TLSH
T15A51B6C427C8A278F79480B086D921B371F885BB3C875F0B00E8F9795A0EB2B5D07B60
MD5 SHA1 SHA512 TLSH

Submit Download

8ac95c1e-dcb2-4e62-9ae2-194d48e0a03c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\8ac95c1e-dcb2-4e62-9ae2-194d48e0a03c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

26693210-cf21-4375-b597-efcb914a606f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\26693210-cf21-4375-b597-efcb914a606f.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

830f1900-4e3b-4d04-83f6-3b7f29dfaa4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\830f1900-4e3b-4d04-83f6-3b7f29dfaa4a.tmp
Size 1KB
SHA256 0a364837e9b077c9210c20a77646a1c4cb93fc84589e1b6b5f706b1ff26bf8f7
MD5 5dd7dd32539cd157fe6e98ce9e89cc02
SHA1 3c1ae80d944f8e91c7d6691a7e19f9ebd1e5e990
SHA512 abfd3e4299e77d6b9916d542660fb8f9b259a5903338bfa3d37fe134c5384783cc219bbee7ba0d43df66f5e67a6032472e2002884718d9e1eeda4da1a9aa6c59
TLSH
T117219DB3C3E5895E881556F05A24EE2BCE1D0615821C3D19C9D8FFAB93E3461E10298F
MD5 SHA1 SHA512 TLSH

Submit Download

e78c7607-8645-491b-868f-fc3eafce0f64.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e78c7607-8645-491b-868f-fc3eafce0f64.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 067c362c34f460e7941013240299da2173c9af9f98acdad4bbedec6ce43cdefd
MD5 38854c4c7800b137675ad2c10e7a61be
SHA1 b0857cbffc08aa75e3ccd2faf956ef5cd2585331
SHA512 72e084fd5313b05878ffb17740275ad4fc5c79cfbac1a0339451c041645e8821bea73543c08c42c65b436e46bb17cb0260f85e8354a54df7343b5bbf55b74dfc
SSDEEP 96:KjeX0QeEkxVwFsfIxKn4f+x7WO9IkS60wKVaqiEKXqeH:ceX0QeEk7wF0Ia4f+tWO9IkSPqzH
TLSH
T1CD91BE00317B4600397D2A4991769B2A424275B33058E52F7FBCCAA65A2FE045EFEDD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b31d8a73-01c4-4c1f-86e2-7aa099b98bd8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b31d8a73-01c4-4c1f-86e2-7aa099b98bd8.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

dab9bcc6-0c76-4846-80e8-a78a705232b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dab9bcc6-0c76-4846-80e8-a78a705232b2.tmp
Size 27KB
SHA256 2ad9f5602399c8aaaadbf8a360497197201a38684daae603416a05020acac3ca
MD5 eb1ce08fa181a9dcaa01420f88abaf5f
SHA1 1751da2fca01285bfaa6f7e2ce3ba8f65a3c36f1
SHA512 b910825b5749cb0163bcc19b3c8c512044778f7446e26229800f04ee888e99c6cdeedc7ce27ada6fd7b08036c2aff30040c90b8506e1ed5fbfea6decb36c1559
SSDEEP 768:OvichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzhroK0f:OvichfPWvPZplu1jan+LKgzaLf
TLSH
T18AC2FA3B644CCB7E4FC01E5DDD5A6F9A7EA802C7AA588D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9eb4a935-9f96-46d9-a6ff-bc1c22f7bd40.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9eb4a935-9f96-46d9-a6ff-bc1c22f7bd40.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad9efe4a-bbad-4946-bc3c-6b44a9749ac3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ad9efe4a-bbad-4946-bc3c-6b44a9749ac3.tmp
Size 8KB
SHA256 3dba1bc9a9bc092401e1204657dddfa325efd1538cbc34ec62eb45dbed83c168
MD5 56678bf8a0970e67486aa648ff5999d4
SHA1 d1ca0aad5f23741dcb205ce10fbe51975cb79dad
SHA512 ed9c42c7416b90f6386d16a2cfdaaf659389f8e2a09c9a851d99619359ef95f3b7e9a74983869b423303eb4269eff86bf811a3794cfb12faf8e173e178579b50
SSDEEP 192:LJONS6DphmqQmiUyPCq8wGYX59ezXCHjzor4Rukk7xgU6:lONS619NRwGYX5EOv8RiU6
TLSH
T18202E835A8B87CBB4EE3AE45B54B36139FD4202BAA952F54D6EC1E1C00D764C2306937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9729ac6-2988-49d7-810d-c6a1e471b462.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d9729ac6-2988-49d7-810d-c6a1e471b462.tmp
Size 18KB
SHA256 dfac1d43ae9ec4ff8a49c36cee259dcd2280bf419afcd2e7de1fbe37e9b4c7b1
MD5 9e2329138cc8866393d15013920d49ec
SHA1 e3b8bbf5cc57b4b3e590f95b1c9a14a26bcfc868
SHA512 0e7f4e12e907152297c855fe3946a3382de5e50cab2444e55d7b6ed3bda4c298bd33431c64058a9eac02de24700bbdb11390a9c09b4354b45c4e5a458ef59442
SSDEEP 384:kQkUSv0sN+BZAF5XAZBGYX5EOv8bOXF/I2I2u6bhIIlx:U0uFi7GYuO2eF/I52usLf
TLSH
T1AE827D36ACF9BC674DE3A510F10A36439FA49027D6D86F64D6DD6F1C05CB288231BA27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f4d164a3-ef66-4547-88ff-65e547632f22.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f4d164a3-ef66-4547-88ff-65e547632f22.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e45333df1f4854a9c38aad4f0ffd2a7c5feb48ad8cfd1920dcefb4f1fb6d29f0
MD5 73a7afdf4a8fe9da5b1023ef2a16ef09
SHA1 88b3054e9bb36a7b084b31ac807f1f491032e959
SHA512 e0cea51cbf36242ad4bc5a07b3881dfe22699ce1954a5ae98b23b0a5c9a687098cbf89ac505b3c8ce5bb5a9ccaf5f7d9c5b15e3a937049b84e254376fa6cdfc7
TLSH
T1C5411898A6ED1148B3B36F59AFF6A86E487A79773E0AC05E10110D4F0A66F40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download