3fe40538d82558b68764e0b6acb1bea5b4ad6eb5895f993d7bc6f69520ea1aa5

Analysis

max time kernel
148s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gearsofmedia.com/10-cassinos-que-aceitam-pix-em-2024-no-brasi.html
Size 73KB
Sample261027-pbb8ladd83
SHA256 3fe40538d82558b68764e0b6acb1bea5b4ad6eb5895f993d7bc6f69520ea1aa5
MD5 e342cd3bbaa39d68ac080292cb9e47cc
SHA1 b0d88962df93c6b1e4d73899a88765b2ddb11194
SHA512 7905cb65e165705c28f6474059f16c33a00f033143a2ee4dfc43780b8e8935b82a63f9b9c27aa2f73ef71fd240518c13a30741bde3cc893de3d8f21443e13b68
SSDEEP 1536:5ap+PA63ZbhMi4jW6YFOLm6zfQLuXUkJw6dUVKURPExbTXPRB7yh:YMPA63ZbhMiWW6gOLm6Ffw6dUVKURPEe
TLSH
T11B73F930BD8A0517321F13CB6187B30DA5898AE0E405E7B5B4F75224A2F9DA27777F29
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2232	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{9C43B65F-B48E-4110-AE77-D5AA8547E8CF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2752	msedge.exe
2752	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe
2904	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2904 wrote to memory of 556	2904	msedge.exe	83
PID 2904 wrote to memory of 2232	2904	msedge.exe	84
PID 2904 wrote to memory of 4600	2904	msedge.exe	85
PID 2904 wrote to memory of 4600	2904	msedge.exe	85
PID 2904 wrote to memory of 4600	2904	msedge.exe	85
PID 2904 wrote to memory of 4424	2904	msedge.exe	86
PID 2904 wrote to memory of 4424	2904	msedge.exe	86
PID 2904 wrote to memory of 4416	2904	msedge.exe	87
PID 2904 wrote to memory of 4416	2904	msedge.exe	87
PID 2904 wrote to memory of 4416	2904	msedge.exe	87
PID 2904 wrote to memory of 2500	2904	msedge.exe	88
PID 2904 wrote to memory of 2500	2904	msedge.exe	88
PID 2904 wrote to memory of 2500	2904	msedge.exe	88
PID 2904 wrote to memory of 1064	2904	msedge.exe	90
PID 2904 wrote to memory of 4840	2904	msedge.exe	91
PID 2904 wrote to memory of 1064	2904	msedge.exe	90
PID 2904 wrote to memory of 1064	2904	msedge.exe	90
PID 2904 wrote to memory of 4840	2904	msedge.exe	91
PID 2904 wrote to memory of 4840	2904	msedge.exe	91
PID 2904 wrote to memory of 2852	2904	msedge.exe	96
PID 2904 wrote to memory of 1056	2904	msedge.exe	97
PID 2904 wrote to memory of 2852	2904	msedge.exe	96
PID 2904 wrote to memory of 1056	2904	msedge.exe	97
PID 2904 wrote to memory of 4544	2904	msedge.exe	100
PID 2904 wrote to memory of 4396	2904	msedge.exe	109
PID 2904 wrote to memory of 308	2904	msedge.exe	110
PID 2904 wrote to memory of 3228	2904	msedge.exe	111
PID 2904 wrote to memory of 2724	2904	msedge.exe	113
PID 2904 wrote to memory of 2724	2904	msedge.exe	113
PID 2904 wrote to memory of 2752	2904	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\gearsofmedia.com\10-cassinos-que-aceitam-pix-em-2024-no-brasi.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc93c8c188,0x7ffc93c8c194,0x7ffc93c8c1a0
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,14436270651804826744,15701326030342018061,524288 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,3353219227877452158,5372054549995376015,262144 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,12593356316958300878,10031386186294923331,524288 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,1453986530512249675,7803990809779322351,2097152 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,14789287518705973433,11453310630871598136,2097152 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,5744506782528792890,17232748442926472917,2097152 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:1
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,9877604444895155072,7383949014159057647,2097152 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:2
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,1993692573777465538,3089949893462974526,524288 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4752,i,11335877164907755765,4979965611062132988,524288 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,14424765857699381203,15217661921337765857,524288 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,14424765857699381203,15217661921337765857,524288 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,15373625055690843941,14617969962039602768,524288 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4176,i,13515050725763498504,14622815735588735988,524288 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,14246385808437565623,12452113335797510389,524288 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,6384782447596442971,7341825477589569119,524288 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5700,i,18102221723252395769,7333386119294057388,262144 --field-trial-handle=2328,i,702866240608920879,14463251943470993891,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2752

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4880

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

29e9df65-fc94-40ac-9418-9e9fffdc95ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\29e9df65-fc94-40ac-9418-9e9fffdc95ad.tmp
Size 21KB
SHA256 f3f45d432b834415983e51e8dd264bc401fcba3a74cb46ecc10e723cd4c5ff91
MD5 1c062c5412708d42ffb21a023f99c4b0
SHA1 2eec6bbad02a7987046f5d7756bf0412aae2454a
SHA512 48cf6557b9b2494181603a6ee111a9019c01d069e5392ff7af33e7ac69129489d8bbb57f6f064566c464e389bb9ceb14ea94aacbf9e9ad0cc94c2cee575da48a
SSDEEP 384:yiFzQkUSvNzsN+8TUNTUlIlCk9ZjMsHX58E9O/JLMZoCvaTZcYHlIIl7:5Fd1Dwg996Sa6O/J4ZoCvaTZcYHlLh
TLSH
T1EDA26C329DA8DD3B5EEA9B40F64A3103DFB59167C585AF90E3CDAA2C00DA29C134BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33e6deaf-d420-471d-a250-26fa3ad37632.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\33e6deaf-d420-471d-a250-26fa3ad37632.tmp
Size 8KB
SHA256 faaa5ca23ca86ea7cce11109dd78b0e4049074bb018992374a76e7d54065d6d9
MD5 7def3e96dea0c468a92d0051b586ad34
SHA1 bf8f6ff84c5bb13dd9bb66f9a575474a72be40b3
SHA512 6aa4b83dd03ab599f0e095758681fe372f6c6a019e4ff343b9ec01febe1bb55dbabc2cb6f1ab213cb02c92d87aff2323837856ffb2f5904efac50cf67f1faaf6
SSDEEP 192:fONf6wlD5QmiUyGT84X58gZ9OK8JHveZPqXCU6:fONf6kXT84X58E9O/JWZoCU6
TLSH
T15E12F831A978EC2B5EE2A544F48731039FA9516BE7896FD0D2DC2A1C01DF66C130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

82a58fb2-7ba5-425b-9b78-2dadc34e4b32.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\82a58fb2-7ba5-425b-9b78-2dadc34e4b32.tmp
Size 18KB
SHA256 ed462d863f8b7c4c673aa7c3a7da7ab7a61803368ec373a256fafab0fba1bdc7
MD5 5a7e87e424c88c48da3970de7f61e1d0
SHA1 5d7bd3697b1bf94e6a59a9342d2ea1042935fcb6
SHA512 081f928e548542e418e94c4f353a382473439ff43c703a523f9bc391270014890a02f23c216f8ad5762404af32954826e454bf797ec72eb78c9d88e0df2108ca
SSDEEP 384:uQkUSv0sNubk9ZjMsHX58E9O/JIZoCvaTZcYHlIIl7:e0S96Sa6O/JIZoCvaTZcYHlLh
TLSH
T14C827C31AD79AD3B0EE69250F54A3103DFB49167D6C46F90D6CDAB2C01CE29C234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8cb73308-dcc1-409c-a7db-81b4bc180e02.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8cb73308-dcc1-409c-a7db-81b4bc180e02.tmp
Size 8KB
SHA256 3b20be5c684c88f4da1167d90c040fbfc707760164aa1f659225bf091e5ca64f
MD5 3a34e7db234eb33486fb687f12857475
SHA1 5979e110a752163fc5c8f666363fe062bdb3aa1c
SHA512 e130d2708132c8fc2551d8f83805689063ae38cae558de7e58ef47e2e856c6434ad5906c17de7fc0e0dc5f9c4e03ee02dc8d1fd070830316cd1ce8d4a23f4634
SSDEEP 192:1ONr6wlDgQmiUyBTW4X58gZ9OK8tDlZLXhU6:1ONr6kgqW4X58E9O/jZdU6
TLSH
T1EE02E834E9787C7B9EF7AE09F58727139FA5206BE6952F80C6E81A1C01D765C1307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

0b0e35d4-8aaa-4bac-8cac-11130f7848ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0b0e35d4-8aaa-4bac-8cac-11130f7848ed.tmp
Size 9KB
SHA256 58864256005696b30308f79b1f09512f89a0c76f271aa1caa57f735a190fa20d
MD5 3625adef49cc2a195d011f764b9084ac
SHA1 152707941bb28525823465b954d8fbd6b919dbb5
SHA512 c45bed26791644be14d46e96af269a2f36526cfaf259ef35af360a4c0cac3ec13015f9ba6993f7b8e80785f0cdc576641b14cc9a8d91050461e19985d7f7e856
SSDEEP 192:sxZXR+W5/f+sSmvIdpdqHW6+WNGYrvZ/UIg5mJ:sxZXb5/f+srAAHbG18
TLSH
T17722A8526E38A97B8CCBD30DBB19BF53E5F9503291941E48AAFC861C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

267946f2-892c-4d6f-b12a-a8575800ce9f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\267946f2-892c-4d6f-b12a-a8575800ce9f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3a467aca-ac29-4fee-8e9c-b2a0732eed72.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3a467aca-ac29-4fee-8e9c-b2a0732eed72.tmp
Size 10KB
SHA256 6cb70e152d1cf28914eb0c84785e6f17795099e42177315c9417b0d7163f5999
MD5 9ef0f9b20f358cd313d23fc491e99388
SHA1 d3e073ab9f357459a9d5c14d6c09b127b753d1df
SHA512 29592759a559385e45c279866ba5e248ce368dd55933e778ec8b25ba8444a2f2a3856dc138e4af1835669fe25694547a9d945fdd130e84cccf90d2bb5458e10f
SSDEEP 192:sxZcR+W5/f+sSyCOjIdpHqHW6+WNGYr/qw/UIg5MJ:sxZcb5/f+s7CO8KHbG72
TLSH
T16722B8526E38A97B8CCBD31DBA59BF53E6F9503291941E44AAFC861C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f052efa-4d4a-4a6c-930d-ed9c04fb507d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6f052efa-4d4a-4a6c-930d-ed9c04fb507d.tmp
Size 10KB
SHA256 b6253c07f82a13071f06672f30f1ecdaef68165ff7db8277d50725d5e8fe7e19
MD5 b09acf94bac907c7aabe2975cc5b1126
SHA1 a4945429354320f34c795d4e6a22b4a41b07154a
SHA512 9072262eb02397ade086a99a6748ed45e1cf4baf146e3646bb78e46ab316825755405282c41a7cea1524c70a9ebf048b341951e65f1e5b11e6b207c2a6871efb
SSDEEP 192:sxZcR+W5/f+sSyCOjIdpdqHW6+WNGYrpT/UIg5MJ:sxZcb5/f+s7CO8AHbG/2
TLSH
T13622A8526E38A97B8CCBD30DBB597F53E6F9503291951E44AAFC861C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

81b727cd-3da5-4ea5-9820-5f59c90054b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\81b727cd-3da5-4ea5-9820-5f59c90054b3.tmp
Size 27KB
SHA256 430e9d8295a67cffb56c2f7ee9d5e9a8eb8744a57638cbac64db94284717a27f
MD5 6ff8cdd93ff1a5b3b101e9bc2558d4a5
SHA1 e44042c5e3520630d039cbfebc18d041516eba89
SHA512 1d0a776d295471303ec6f787998e2b297b0bb43ed2c469786b3925b6432a8ca993992f8d85ca4fd95c119913143130dbf9e86b89e825d5de252e4f2ba467c664
SSDEEP 768:r8y4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbkroRkd:r8y4J/DWvbtBhu1jajiLm0bvGd
TLSH
T136C20B3B684CCA7E4FC00B9DDD5E6F977E9802C79A948D4047FA954C02C77EA91264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f4d5416-6962-4e07-aa22-c5ac2f025dd5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9f4d5416-6962-4e07-aa22-c5ac2f025dd5.tmp
Size 9KB
SHA256 af12ca116fddca1fcbe20b5bb8895c6ce369c383dc9c041918e68bfa598f0613
MD5 5d5e51de27605ab5133aa38e03122932
SHA1 498d734b4f96fc280bb935d5771fffed43a603cf
SHA512 e92cfafb5b4d7ca8186abe82efa32ed0b38d8d58917afb587b13d5380ad17acc2048e8817871c1088c5a984b9c2823d4e5fd0b75d28270709535f2a775f39d7c
SSDEEP 192:sxZXR+W5/f+sqmvIdpdqHW6+WNGYrvZ/UIgrJ:sxZXb5/f+sDAAHbG19
TLSH
T15122A8526E38A97B8CC7D30DBB19BF53E5F9503291941E58AAFC861C05E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 3ffae21c07fd1e36d6138f29410c31400a4a8053cebed00d129d208e672083db
MD5 468191373fd98a474ac789eb4d839733
SHA1 c4937f93a1f8b97e68fcd27de3c68f75c5e459d6
SHA512 fc9685dfe877a7292e24765ae9489e64272d7a9f7d294fa74c99dcaaa7e763513e6c6b85bbf22bba795a6df535e611dd4c28a10e2d8d586ad20956f1297bff73
TLSH
T1C261E68A89833CE9FB6011747BE109CB377618BC56B35F4A2BE4DD38B85FB084100C54
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d527d6c243d94d32a3dbf36500cdf40ee9f7c12d5059d55b7a307b31b1b58f71
MD5 d41242c67a1df9333a2264ae6b9c2825
SHA1 20b665abf0ad0047bcc1b5f78a4b6019a8d4b36f
SHA512 4699e9415b9f399b4e6827da1536f0ff635901344f9813b2bc9e27c037eff2a63d6fdd8edf2e396c20fa502bd1c05d8d224a246325ebacdd56e9cdad52b00424
TLSH
T1FC61E68A89833CE9F76011747BE109CB377658BC56B35F4A2BE8CD38B84EB088500C14
MD5 SHA1 SHA512 TLSH

Submit Download

8736a915-c8f2-4b68-b95b-83793403458c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\8736a915-c8f2-4b68-b95b-83793403458c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

67a73135-f678-431c-9a1f-0d330b4f2e5d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\67a73135-f678-431c-9a1f-0d330b4f2e5d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

9d1c0bdd-a80e-4832-b958-bcd74ee5b9fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9d1c0bdd-a80e-4832-b958-bcd74ee5b9fa.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f73e033a-7c9f-4547-8c2a-795bc58f803e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f73e033a-7c9f-4547-8c2a-795bc58f803e.tmp
Size 3KB
SHA256 a9a42ea0f4a2e93020cf50c4f8db7403a770b39693547ef76a1047f9b391a366
MD5 c5ab41e42cb3cfac3e6d80420be57c87
SHA1 b68cd0171e43350777f4a4f84f13b797a5f4ed53
SHA512 22247b758f1761d5fc629c16613d61dcfbb34f1cb493b78dfda72b312b83771cd9cf312d1b96715ef9f44f14bb914f711d2032cfe73e300c5e2543043c61b83e
TLSH
T145517CFACAD8476E841656F08A24BD2BDE5D111A42283C5589F5EF9B63F20B0D10235F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a2e07d533a2006ddabe92f3cde56031dbff25412442328d3fc4aff5b3b330abe
MD5 3195eb4f55abfb542ef100ff5943bd73
SHA1 c85ba70b411bcd224d58d3b5e4b3ef7cdda89ca5
SHA512 f2cc33556d6d8289fa0a6daa09d4c57769419bc43de19d74697c273528fb3224050babded98b987f8fa44c6c426ced8c3d5f70ae1f84e07ca23722317705e2ac
SSDEEP 48:KIDI1Ks04jyLLuvL1tr4InKR+0HyZwI3KZuc7:KIDCKs0+J4QKR++6w4KZue
TLSH
T1329170C6B17A1204387D394841A4A63A465231B7B069E5AF7FB881F55F3BE040EFC9EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

905246df-da7f-430b-a8cc-7c88f7fbe8cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\905246df-da7f-430b-a8cc-7c88f7fbe8cb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d2d969c4-f228-4c26-b984-6eb2cdeb4136.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d2d969c4-f228-4c26-b984-6eb2cdeb4136.tmp
Size 18KB
SHA256 34ab2f49624d437beca0e2d34e786fc83adb938d884f48a6a7d490d37e0ad81e
MD5 e0e347bdd1e3664162baba333ccc4502
SHA1 fb4122ed39234c44337a211941ea85c46d97cd7b
SHA512 31b4478a48ec36c1408299abfce22ec9a1be643315e9bc399e3ba55c4a6a40a346a3bab52fc4b6fd3d73b14ae83591a8d385ce879a002277599e132573d47ab1
SSDEEP 384:DQkUSv0sNuCk9ZjMsHX58E9O/JIZoCvaTZcYHlIIl7:t0x96Sa6O/JIZoCvaTZcYHlLh
TLSH
T146827D31AD79AD3B0EE69250F54A3103DFB49167D6C46F90D6CDAB2C01DE29C234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

182e8d2b-ae81-4bca-808c-d555fb18d3e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\182e8d2b-ae81-4bca-808c-d555fb18d3e1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2f84112d38df34feab96e5ca787e8638e12e223fdb6f06b76b5ec7115ded9c02
MD5 1571252ae1e089faf2e1c2dc37da553d
SHA1 d77f0510340b3c45f022fd02442503bd96b8f985
SHA512 338557339bcf564802751b30b6d0a8b4fae12bd2c375f426338a628e21cdabc460a983f1217a825c0b169a378c1695bdc3d66035dc72e140ec37e263cb0757c0
TLSH
T185410999B6E90148B3B76F5A5FF7B86D44BA79372E06D59E10010E4F0A62B00C861737
MD5 SHA1 SHA512 TLSH

Submit Download