78c8d78f3e3b2b33a390ea32c050ac4d0fcbb4fff23145dce7f7a457d5931636

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 02:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
NiceColorPalettes/reference/index-all.html
Size 7KB
Sample261027-dbpcdaxy8j
SHA256 78c8d78f3e3b2b33a390ea32c050ac4d0fcbb4fff23145dce7f7a457d5931636
MD5 46abce58d2e68ec7faf05a2b0961d751
SHA1 2e81948f3473e5a7e7a70d0a96dc9a9602e3d309
SHA512 535fe962d30a41ecdca922e06f2e87488963715d56de996ba0cc328ad4ba030438a1782b0f95fe4e58f9cea46e5a178bcbfc490bcfea427a3ac1d19c102e610a
SSDEEP 192:ViKSmPtnCFici2wMKNKbKOK0K/hJSPFnYvZiciLM:pPsFici4POvZicio
TLSH
T153F12236C786192212535BDB3ABD12F5F2F38167D19B1D8463F8E6062B49FC99D0B08A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4364	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{0727B3E0-1851-4548-BFB5-6BDA8613EC87}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3544	msedge.exe
3544	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2328 wrote to memory of 5048	2328	msedge.exe	83
PID 2328 wrote to memory of 4364	2328	msedge.exe	84
PID 2328 wrote to memory of 3976	2328	msedge.exe	85
PID 2328 wrote to memory of 3976	2328	msedge.exe	85
PID 2328 wrote to memory of 3976	2328	msedge.exe	85
PID 2328 wrote to memory of 4312	2328	msedge.exe	86
PID 2328 wrote to memory of 4312	2328	msedge.exe	86
PID 2328 wrote to memory of 3516	2328	msedge.exe	88
PID 2328 wrote to memory of 2408	2328	msedge.exe	89
PID 2328 wrote to memory of 3516	2328	msedge.exe	88
PID 2328 wrote to memory of 3516	2328	msedge.exe	88
PID 2328 wrote to memory of 2408	2328	msedge.exe	89
PID 2328 wrote to memory of 2408	2328	msedge.exe	89
PID 2328 wrote to memory of 3924	2328	msedge.exe	90
PID 2328 wrote to memory of 3924	2328	msedge.exe	90
PID 2328 wrote to memory of 3924	2328	msedge.exe	90
PID 2328 wrote to memory of 1660	2328	msedge.exe	91
PID 2328 wrote to memory of 1660	2328	msedge.exe	91
PID 2328 wrote to memory of 1660	2328	msedge.exe	91
PID 2328 wrote to memory of 620	2328	msedge.exe	95
PID 2328 wrote to memory of 1800	2328	msedge.exe	96
PID 2328 wrote to memory of 620	2328	msedge.exe	95
PID 2328 wrote to memory of 1800	2328	msedge.exe	96
PID 2328 wrote to memory of 4212	2328	msedge.exe	100
PID 2328 wrote to memory of 800	2328	msedge.exe	107
PID 2328 wrote to memory of 4356	2328	msedge.exe	108
PID 2328 wrote to memory of 4592	2328	msedge.exe	109
PID 2328 wrote to memory of 3496	2328	msedge.exe	111
PID 2328 wrote to memory of 3496	2328	msedge.exe	111
PID 2328 wrote to memory of 3544	2328	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\NiceColorPalettes\reference\index-all.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ff981d5c188,0x7ff981d5c194,0x7ff981d5c1a0
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,13925262098513166093,7945505897758895248,524288 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,8028094229608626405,7681980583120669564,262144 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:2
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,16191050527607051229,1828971089205550253,524288 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:8
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,1651366316252388004,2818550992209650144,2097152 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,9972639329421470518,3264311239135911366,2097152 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,1616203121768833784,18342438166774876,2097152 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,17765349590456456769,13433615143332734651,2097152 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,12050618397355537454,7984976833754685991,524288 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,1969552097291438567,7880617143895839037,524288 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,7294057723166043717,17750266731433004070,524288 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,7294057723166043717,17750266731433004070,524288 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,3434895820118063326,8883399655544568487,524288 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,15673800412559599793,15592279127483544347,524288 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,11834795420930567578,5308160012203058849,524288 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,18434840728596445863,18272373373492156861,524288 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5808,i,3058950053058678185,16235916280846511364,262144 --field-trial-handle=2404,i,6731749926044972018,13621933289177911156,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3544

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:872

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

112174a2-35ed-42eb-852f-29378160958e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\112174a2-35ed-42eb-852f-29378160958e.tmp
Size 8KB
SHA256 074b8bf549bebbde84f5d39e46afa77e097f05a3b2eca1ce0c712ecd1f2d08b9
MD5 84d7c1bb29201be7040aae7d56a6d82d
SHA1 84f1232b6df61143412525c21cdb62eaeb0738ff
SHA512 4920c3086b0d9405c30984f3013fab0827ee4d68a71ae920d94bf5f608a8041685e3503f71d7c4c470a3c5d45d22b6c1d4e76b5943b974f20aed172413668f77
SSDEEP 192:GONO6iDiQmiUyKDyq5u88PEvIBAB3PwoNuZVqyEU6:GONO67hyq5u8igAAZYoUnEU6
TLSH
T1B7122B357878BC7B6DE2A955F04736139DA4426BDB896F80D9DC271C01EF59C2307913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3892967b-f59d-4498-ba96-42f2f8b78738.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3892967b-f59d-4498-ba96-42f2f8b78738.tmp
Size 21KB
SHA256 cb6c5a824f067d2914a95f0a2b27939a9ae42022fdf685ea42842e12d3c4265a
MD5 b5eca9768a10c4c4d67217259bc60b74
SHA1 3586e1bbf075f0566b05cd5e97702ac1cf715d11
SHA512 e116ecd6ad851017832e77ceeed8599ea856c169a4cb07e7ee7ce45a4177c6c726ae45b99f8b2ad82298c4e069a32a8fd136955454c8335318caac29db4795ab
SSDEEP 384:hOiFzQkUSvszsN18TUNTUlIlvmmMnT2mp5u8igAAZYoAnEvaTZcybtoWIIlS:LFdQ0wgAs0kjE4EvaTZcIoWL0
TLSH
T1C4A24B329C68AC3B9EF69A51F54E3603DEB081A7CA959F90E6CCAA1C01DA1DC2307D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

493853e0-32a8-45f4-a343-383825fa814c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\493853e0-32a8-45f4-a343-383825fa814c.tmp
Size 18KB
SHA256 fcd04bedaf8497bafaa875307271afb3d7b3506e8d68ea4f8daee2f1572e8ff4
MD5 2af721cba0b77b4ab70ab19ab0e4b0b7
SHA1 e3ca55836ff823e8a8d0eab8047bc23bca6658c9
SHA512 1161219a80970baaecaf5a7b9ab42065581ddc637fa69c0febe2b64e20c5c36ac8f3fc074c918ad7b1bb14bb4ea654e5122da7fc6cbd7927a5553c6f58fa2735
SSDEEP 384:SQkUSv0sN0UKmmMnT2mp5u8igAAZYopnEvaTZcybtoWIIlS:K0Es0kjExEvaTZcIoWL0
TLSH
T107826D32AC787C2B9EE69561F54E3603DEB4829BC7C81F94D9DDA72C01DE2D82307912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

530533be-35ff-442d-8b30-4da4801feb60.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\530533be-35ff-442d-8b30-4da4801feb60.tmp
Size 18KB
SHA256 257a994d0188f7c899a7035ffab2531840d88ca09f6afabca7b6aacfc2426b82
MD5 10425989507a91adcc1fd6e4595f58a4
SHA1 7536f64f43fc13cc09fb905e779b730e48fc1347
SHA512 1c85a7e57b017c98f7984d22ddfe7b4bf4de58fc385f1815de4725f7054e49abdc0a7dc298a11af5577fee2d032938a730d50d33c8824d118efd03defe875bf3
SSDEEP 384:JsQkUSv0sN0UvmmMnT2mp5u8igAAZYopnEvaTZcybtoWIIlS:e0zs0kjExEvaTZcIoWL0
TLSH
T1B8826D32AC787C2B9EE69561F54E3603DEB4825BD7C81F94D9DDA72C01DE2982307912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62bef1c1-f8d0-4157-8fb0-b863591183b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\62bef1c1-f8d0-4157-8fb0-b863591183b2.tmp
Size 8KB
SHA256 db5e847629dffa4dc5e4c4d30164506b03cd54bedc72fcd83aa3112b8b2b80ef
MD5 718af0b5e889d31be69ffac08a801eea
SHA1 8c2d962b264c20e33484170635770f4c86882194
SHA512 2aa2e4017de8916488cc704ae72205e1fd5585952cecbb51f6275779195656205b9004de2f8479d0469de74a9c888ce53ce80abe196ccc2de5d0a7011aa161fb
SSDEEP 192:SONh6iDCQmiUy5DHq5u88PEvIBBSqoBROU6:SONh6/MHq5u8igA3wOU6
TLSH
T1690209396C387C6B9DF2AE15B5877B179EA4017FE6952F84DAE8172C01E769C1303822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

03476bcb-978d-45ce-a64e-fb6730efe177.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\03476bcb-978d-45ce-a64e-fb6730efe177.tmp
Size 10KB
SHA256 2af642fb1a21eef4ecfcd796e29a7b23c339527436dc65c686de0b688ed1b56c
MD5 1e46bbf92bd3f255fc47ef6fed755702
SHA1 617eb036006fd9d093235101e4ffb415c996e62f
SHA512 cb8116d4fc3b0f3d9d6290c63de86fc28c13e5a9103144e67c4355556122a77c4a69311ab897ca992f12b8544d2fc569d6391c7a99b18e3c323306302e858e83
SSDEEP 192:sxZLRrWQ/fes9z5lxIdpdqHW6+WNGYaJ94+uLEIg5SJ:sxZLsQ/fesnl6oHbGoNLow
TLSH
T16D22C8116E28B97B8CCBD30DBA19BF53E6F9507251951E58AAFCC61C04E67DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0b8ec11b-1e34-40d2-9ca9-f1bc57a27696.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0b8ec11b-1e34-40d2-9ca9-f1bc57a27696.tmp
Size 9KB
SHA256 68cf3e6310ecdad1a93450494c2f43d63e83af33a168f8bd36a6ed1b24460bbc
MD5 db963282784bc2e933e3e2a0cebd6385
SHA1 a2ae17a77db4d3100069d1f87f3200f66aa78baf
SHA512 48a752464b5d708a864db0cd9ee4df2f34defa594b5904bd4cc00691c3f053873d8f8ad2ecd0c7937dbb160677f8e11f82c6dd72ba91b57bb8c09398f582715a
SSDEEP 192:sxZLRrWQ/fesr5lxIdpdqHW6+WNGYaJ94+uLEIgrJ:sxZLsQ/fesdl6oHbGoNLo9
TLSH
T16822C9116E28B97B8CCBD30DBA19BF53D6F9503251D51E58AAFCC61C04E66DE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c569b5a-c528-4922-8bf2-4b305bce7fbd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3c569b5a-c528-4922-8bf2-4b305bce7fbd.tmp
Size 10KB
SHA256 e6eb3b780484d5040e8dd186be08091e0b1ab03cb8b39e41c8ad0bc5f9a93261
MD5 ad79141aeb03057d9c58ca7ee826fe37
SHA1 b1bd8703402266674d4b1fbf0983655516ab85f1
SHA512 98bf8a195546a9e76694bd690e540f26e7cda9dad8f66cecea99050ec5ce367c79ae193ede66aa732801aa2da49e11d05946d5e1bdf73a2d5156bc7c918f821c
SSDEEP 192:sxZLRrWQ/fes9zhlxIdpdqHW6+WNGYatf4+uLEIg54J:sxZLsQ/fesnl6oHbGCNLoK
TLSH
T14522B7116E28797B8CCBD20DBA19BF43E6F9507251951E98AAFCC61C05E6BCE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ac202ba-d717-46ce-ae22-1f88dd40f0ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6ac202ba-d717-46ce-ae22-1f88dd40f0ea.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

989170d7-ea2c-4191-b262-4f0fb199ff5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\989170d7-ea2c-4191-b262-4f0fb199ff5f.tmp
Size 10KB
SHA256 399878517594faf2beee08cccc55ba01d38c5753bf7addec49ca2c0ace35a40d
MD5 68c8c58936ba34ecba9382a315b10836
SHA1 cef60f81e6a7998c3cf4137c053715f35a0250a7
SHA512 2bdac69ecb4fd3afd546aed7f5cf02873ea926ec088055478531a31e203aaad81e48688c379fb0ab7f45fc53392c3a4cac1be5ef30d7f4668bc47c7bad428ede
SSDEEP 192:sxZLRrWQ/fes9zhlxIdpHqHW6+WNGYaEkg+uLEIg54J:sxZLsQ/fesnl6KHbGANLoK
TLSH
T10822D8116E28797B8CCBD20DBA19BF43E6F9507251951E98AAFCC61C05E7BDE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 d0b92aa1f87398dc1ab896e88435a3b6c9ec8bbf52b4f9022213de33401c5223
MD5 2bfb055ec330b01b11a40ad280d34923
SHA1 6dc4a6e6d6432217942ebf666606e687a6543b86
SHA512 240c5becfc994d8fc6d2b797c40f34576db6953355c8df9865735d7669f553280967f3852f1a70530b2b5210b3365fdbe102e4bd82153ed732b873003687c529
TLSH
T1096161B5F54474A8FBA8D0F394E5ED8B3A7A5081B9C31E221164FBFD68463C49F3A118
MD5 SHA1 SHA512 TLSH

Submit Download

e9b24c6d-de2d-4351-a4c6-ecbdc4534e7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e9b24c6d-de2d-4351-a4c6-ecbdc4534e7d.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

07dbedfb-7442-427d-8072-4c7b9d1df247.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\07dbedfb-7442-427d-8072-4c7b9d1df247.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

9927980b-ba7c-4841-a8b6-5620d8c2cdb7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9927980b-ba7c-4841-a8b6-5620d8c2cdb7.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

bb0a5a30-b410-430d-8120-63965347fe26.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bb0a5a30-b410-430d-8120-63965347fe26.tmp
Size 949B
SHA256 46488b95899656a21756dd0445892bfd663646ae743608155dee5bcc7457065c
MD5 ec8d821f2cad7bd97218692129034165
SHA1 d6ffe53fbf686551994cb9076b5d279ab0c4f226
SHA512 5b9ac99078d24bccf5c98a0e1df78960067481af76375ba029d5437237c204be128152b8e395005ff1c12a138b3be5ec1ba2b7bd138b38b617a1310af08d7c31
TLSH
T1BF1190F3C7D585AE8A0156F06A24AE2BCE2D0505421C7C19C9D4EF2BD7E3075E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9b83d9af5918484dbac4c5eb3f82a1a4fcb017af81897f0286039524cbb61355
MD5 9b35a1d8862b228b36cc77a37bc964a6
SHA1 b52f58f86d6c04ab04a5ed68498231983d1475ad
SHA512 0e3013e73982ddf27e5487d464defa28ddcaadb2379ce361dfe9aa1cf997e44601c148fb019bc4e5696733ee66a1f6d66dc9674dc03f0cd4c215d8ac85430857
SSDEEP 48:K0nDnmnHnjnNnln1n2bnlnon9ISnjn2K9nT1nBn2xnLnmYnwnRnDnnyLRAthrvzC:KE4gK1eySOEKXqQIIKBGG1
TLSH
T191912551317B124038BE2A5851B8A76A857231B37008EEBAFFAD42E68E1FD045CFD4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b45ccb50-7f73-41ed-adc9-f35c20b8e34c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b45ccb50-7f73-41ed-adc9-f35c20b8e34c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce113c36-22de-4269-a5c1-93654c33a086.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ce113c36-22de-4269-a5c1-93654c33a086.tmp
Size 27KB
SHA256 83a388009ab066b251b2f45a3fc6372390f36c7d2202edcb89c7e4b00123f85e
MD5 d86ea8b71369706713c7cae111efc3b7
SHA1 79740ef6e20a1dadda00382c38f58254e0bb89e0
SHA512 b8867c3b44f76aa8d2a02e0c3c552e1f10fbf15d0267944d0e7003e85c1d88531e11abdae46f6ea0a5972b128a47e51a91383605b579e29c80d46fafdfde7837
SSDEEP 768:q7yQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3SrovZ/5W:q7yQRbrWvvlpZu1jaXKLf33JvZxW
TLSH
T11FC2FA3B640CCB7E4FC01E9DDC6A6F976E9802D766588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

73f97fac-bb8d-4e52-94be-b5daa9b5637c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\73f97fac-bb8d-4e52-94be-b5daa9b5637c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

f1d72755-b19e-4629-834a-bf7656f2b1a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f1d72755-b19e-4629-834a-bf7656f2b1a5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b78d1e39fedff3e0258da40e9445d5a188a35158a9cc3d65af9f650b2c704e14
MD5 2ba8a9a9fe4fe655bf04c8fa1d303c4b
SHA1 a088a484baa563a8d2a2237be99d5aca6d999e07
SHA512 fa265d64cecb6ea0c4909152db0ce2a77e179ad12835df85ff0ea57ed70defd70d74b666aaa89902bd702f5e72b680916cdbb988e1565d79a9d0f1d4db939dfc
TLSH
T11E413958BAEE1008B3B76E599BF2A8AD047FB9373F07D49D00110D4E0A22A40C971B33
MD5 SHA1 SHA512 TLSH

Submit Download