2c20f18512833be84612aff9e88aab58c78cbcafb48f5f5546ec2a2880aee408

Analysis

max time kernel
149s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gearsofmedia.com/20bet-kaszino-jatssz-kaszinojatekokat-penzzel-20be.html
Size 66KB
Sample261027-pbb8ladd83
SHA256 2c20f18512833be84612aff9e88aab58c78cbcafb48f5f5546ec2a2880aee408
MD5 302250d6ff906ca0ce97888bd1c197a1
SHA1 e0b5c3373ff4e5d8d0b4be92dca2c94c1aafaed2
SHA512 54236e387a497be87e29f7f7f0a44b5cc5b7e06bef2269a2965db53b68b9ebe553a68b3e480e4612b82906b47bc777ea53548a8d58f1580bf7e5ff56ee12ff54
SSDEEP 1536:Kap+RE9VELio0fQLuXUkJw6dUVKURPExbTJRB7y9:dMRE96WFfw6dUVKURPExbTJRO
TLSH
T129630932385F480B365F079F2453330D54DE89B5D554ABBAB0F3902825F1EE63AB39A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5492	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{34A95E2B-5A44-4BEC-BA2A-A648C4161C94}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1204	msedge.exe
1204	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4848 wrote to memory of 3848	4848	msedge.exe	89
PID 4848 wrote to memory of 5492	4848	msedge.exe	91
PID 4848 wrote to memory of 5792	4848	msedge.exe	92
PID 4848 wrote to memory of 5792	4848	msedge.exe	92
PID 4848 wrote to memory of 5792	4848	msedge.exe	92
PID 4848 wrote to memory of 4440	4848	msedge.exe	93
PID 4848 wrote to memory of 4440	4848	msedge.exe	93
PID 4848 wrote to memory of 2132	4848	msedge.exe	94
PID 4848 wrote to memory of 2132	4848	msedge.exe	94
PID 4848 wrote to memory of 2132	4848	msedge.exe	94
PID 4848 wrote to memory of 3252	4848	msedge.exe	95
PID 4848 wrote to memory of 3252	4848	msedge.exe	95
PID 4848 wrote to memory of 3252	4848	msedge.exe	95
PID 4848 wrote to memory of 6000	4848	msedge.exe	96
PID 4848 wrote to memory of 6068	4848	msedge.exe	97
PID 4848 wrote to memory of 6000	4848	msedge.exe	96
PID 4848 wrote to memory of 6000	4848	msedge.exe	96
PID 4848 wrote to memory of 6068	4848	msedge.exe	97
PID 4848 wrote to memory of 6068	4848	msedge.exe	97
PID 4848 wrote to memory of 4984	4848	msedge.exe	99
PID 4848 wrote to memory of 4984	4848	msedge.exe	99
PID 4848 wrote to memory of 4368	4848	msedge.exe	100
PID 4848 wrote to memory of 4368	4848	msedge.exe	100
PID 4848 wrote to memory of 3256	4848	msedge.exe	102
PID 4848 wrote to memory of 4560	4848	msedge.exe	106
PID 4848 wrote to memory of 2324	4848	msedge.exe	107
PID 4848 wrote to memory of 420	4848	msedge.exe	108
PID 4848 wrote to memory of 1832	4848	msedge.exe	109
PID 4848 wrote to memory of 1832	4848	msedge.exe	109
PID 4848 wrote to memory of 2212	4848	msedge.exe	111
PID 4848 wrote to memory of 2212	4848	msedge.exe	111
PID 4848 wrote to memory of 1204	4848	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\gearsofmedia.com\20bet-kaszino-jatssz-kaszinojatekokat-penzzel-20be.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x268,0x26c,0x270,0x264,0x330,0x7fffbe16c188,0x7fffbe16c194,0x7fffbe16c1a0
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,1134688210984846915,11426722186058444994,524288 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=3004 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,9071356976349628996,14671737585709937300,262144 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:2
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2208,i,6700068594305706030,16946172048843870652,524288 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:13
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3536,i,13272909504873544293,5648524552793107353,2097152 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,15725781313467656115,3042629099899335298,2097152 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,7765738972139075081,5756452579687838839,2097152 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:1
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,18282196116187555224,18113140101983874701,2097152 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:9
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,1035868906993754623,1505716886266144981,524288 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:14
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,13657256564911287967,8550037142300405299,524288 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,10573011664303500128,1407854724479724587,524288 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,10573011664303500128,1407854724479724587,524288 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,5699140114555183208,1995549710922054330,524288 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,15346636149935199417,3075852447210295487,524288 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,16129310716224568915,3250007825671102517,524288 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,5557352660804143883,14049090674910765152,524288 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:14
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,3804467457194868257,3131333815242164800,524288 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:14
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5608,i,7164494840512902329,14719328842069538741,262144 --field-trial-handle=2448,i,1744108201377463296,9955028714062759789,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1204

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2632

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1568

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0fb7fdc4-c338-475d-a737-1593153a3cbb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0fb7fdc4-c338-475d-a737-1593153a3cbb.tmp
Size 39KB
SHA256 24d5debdad8ce9f203f2086f16b4558dc8ec0aecbadc123c78c611ca90f337c4
MD5 61f8b4c4e3680f3989fc464a8758d7ce
SHA1 b8db3450ed79dec7fd6de25d4fafb6a9137b0015
SHA512 99feaf44b07892cd880c1152ee7a890df565e5496b1462fe27bbf85c0ec13fdbc8c119cabda2548e2fb3003c119db7d0e1fce0d647e8f880d3473d845304ae54
SSDEEP 768:U/UxvxjgC+B3vqKRgm1+mF6tDmGA5b65Q92RQMPbTFj0O:BZj3+B3SZ3AF65dQMFQO
TLSH
T18503C036EC94AEB79CF952C0364BB35AAFB88173C0C452A049ED6E1D06C769D430B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

10e12e95-a6ab-4ddd-85c8-ad9f20e48205.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\10e12e95-a6ab-4ddd-85c8-ad9f20e48205.tmp
Size 37KB
SHA256 4d82294830d1d8b6b82e4ec79dfff1979bc52ead384c3f8a62b00592014af1d0
MD5 a114eff8634eff0e6db3fd32644dbd0b
SHA1 9cc054d27f71bbb5e511b97811836900f78a955f
SHA512 ccde6bc2a4cc7776927a9732b3bdfcce66d5e86ca3306663f8a5ea0d06073086778bcf05e49db98a61f75160316e1b861587918a3fbef7acb3be8d7f6653bbb1
SSDEEP 768:4FSq3FwgF3Fgm1+mFciDmGA5b65Q92RQMPbC5aTZc4H+LX:Zq33AF65dQVM5er
TLSH
T13E03C073DCA4DEB79DBA97C0764B3206EFB48163C4C89690AADDAD1C01875CD034BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

558cea44-b944-4137-9b66-4cded5a565ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\558cea44-b944-4137-9b66-4cded5a565ec.tmp
Size 40KB
SHA256 e963c3939a3e69350721937863dbc1385b42ca031b4e9175b3b7a26d5b5b9b47
MD5 b68b8cab4857158f6e67e7db905d2d8b
SHA1 2b3df0cd71535d3956eb402472ace4dd9b5d4a67
SHA512 1a2cc0960d96401e1325b5100a307cc4169d83410668d64d3efa99335559e4a1b14613bb6f7b6785d29ba6740a014ffdc66bdecd80a3276651e8a8f804751e33
SSDEEP 768:Q/UxvxjgC+e3ujFgm1+mFc7tDmGA5b65Q92RQMPbCtNg:9Zj3+e3B3AF65dQVtNg
TLSH
T16E03CF32ECA4ED735CFAA1803647B356EFB88563D1C856A449ED6F0D06C769E430B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

57b34e56-3a11-4dfc-8943-00c26e47873d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\57b34e56-3a11-4dfc-8943-00c26e47873d.tmp
Size 35KB
SHA256 f68d67f63d5eb7889773d03d939fc018229f1b55bc637a9396cbfbc7ae7ab036
MD5 f7fdf25b0d18995aca16cae7d84bfa07
SHA1 b20262b55a699085fb0c9f1c16cec1e6fb967578
SHA512 4347ac7ebc664f0235bdf7066c1704f82023fddfe3cdac9d28105f90e7989d6bc688148353be2b15b6a10a6ff9cc4d88f1fdd35ef2a2ec85e453c9904a8c8bd8
SSDEEP 768:Rq3r3Fgm1+mFc7rDmGA5b65Q92RQMPbC5aTZc4H+LX:Rq3otAF65dQVM5er
TLSH
T199F2C072ECA5EE734CB992D176477206BFB4C123D5CC4A9099DD6A1C02CB68E530BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a748547-10a0-42bf-b66e-694aad575d85.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5a748547-10a0-42bf-b66e-694aad575d85.tmp
Size 39KB
SHA256 edd6c61ce262e1b5793d5259a9d4aa82fd711b590f4ee62e847cdfab3ae7ed01
MD5 876ffd552430eddc287e98a259239242
SHA1 49ec1347cfe349bffa2b6b2c5859232bbb77ad4f
SHA512 64851cc835ad110f3e35c10e5cba9116005a9a86f72c00f01734948476debe992a572cc78fca6fe0cebfec8e6c60ae3c7809b96ed9509e2787d031091e6fa613
SSDEEP 768:y/UxvxjgC+B3orfgm1+mFc7FDmGA5b65Q92RQMPqCFj0O:3Zj3+B3jPAF65dQSFQO
TLSH
T14703C036ECA4ED739CF992C0364BB356AFB88563C1C955A049ED6E1D06C768D830B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69013c53-15a8-443d-b629-3ba188dff727.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\69013c53-15a8-443d-b629-3ba188dff727.tmp
Size 35KB
SHA256 df403ff636622e30755f0c1c2541b344e7af9c741bd81734267fa2646dbc3d86
MD5 cc58f2b7c21c3470e494481c3b531d7b
SHA1 bee83e1cc1742e06fece00cb78ca6a7ae80e94d5
SHA512 af3382a705f513f165412838b5111f30ec1bd7ced7440bd15e3b8b4e1cf845b3abe7c74e05e88992eff23fd932e15e76516b790b65ecc0d36bccac03087c1cd9
SSDEEP 768:Cq3i3Fgm1+mFc7rDmGA5b65Q92RQMPbC5aTZc4H+LX:Cq3jtAF65dQVM5er
TLSH
T132F2C072ECA5ED734CB992D176477206BFB4C123D5C8469099DD6A1C02CB6CE530BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

176413f3-4e84-4e56-8991-f60c5b8678a1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\176413f3-4e84-4e56-8991-f60c5b8678a1.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44000d78-dadf-4cd0-8ce6-0546464716db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\44000d78-dadf-4cd0-8ce6-0546464716db.tmp
Size 11KB
SHA256 00a6b5c2acddb594382b923a092b61c8fc85450acd1c599fe214ed3f3009933e
MD5 607578ffd281079615f5bb080e66899f
SHA1 002d731a7a60491f0dac617416b4f0ab634cf636
SHA512 96be8c9c98be2bd24a370b14a6683bdb921facca6c4e53a30cd617962b4ff32cc3c45947aefbc24c203475c07852e4b4c104be53def4e695a425227cc41a4707
SSDEEP 192:sxRvRobM/fs5sGQyYhXzoA8p4p/g6+WNIY2F6cLGOIgDKJ:sxRvsM/fs5sGQb+I/5In76
TLSH
T16432A715AD28A93B8CCBD21DBB657F53D2FD5032A1941E48A6FC8A1C15E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

458f6e8f-3ccd-4442-95f7-4faba183bb06.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\458f6e8f-3ccd-4442-95f7-4faba183bb06.tmp
Size 11KB
SHA256 bb0a9b6bdc6ba5af4965073016f2d9a7ea5d3f46208d46aa035bdb045230ba85
MD5 02e6505d8f46285c597f383b4b9b0ac5
SHA1 b87a50de2988f9494c05a2d94a79b106707f75e2
SHA512 eea70d071ef3fa0f5d0da7807bd88b934b656662aab3328fda3389b240912aa69961293668b9c6e5181a87279c8f60e3eb602ededea997c0c3f434f70f84b0b4
SSDEEP 192:sxRvRobM/fs5sGVyYh1zoA8p4p/g6+WNIY2IQcLGOIgDwJ:sxRvsM/fs5sGVbYI/5IQ74
TLSH
T1D132B715AD28A93B9CCBD21DBB657F53E2FD5033A0941E48A6FC8A1C15E76DE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 44e1fdc39bcb336b64b31eed8532f3b81b0c5b32cf020323bceceab70cfc56ee
MD5 8a564243638e076b7301d074fc27ffad
SHA1 e2421e7d4ae61de2aaacb8373526e315acb1c361
SHA512 b059781da8c83c0591714820214bc34d84b8d606f84e8e63cb1bea116eddc1aacb6b4ac4ce0fa8ff5e3bf90530b587f2a8fc5adbc257ab4fd6e8b727b90ea944
TLSH
T1FAE020C495C4D21F92457457016C770C8791269B92C17A4D2B08C6487247440FB83EEC
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 6e75bbbfc2b7e4777c96ff5d3c49d1fed76cb681790b37c942c4e2cd4affcf77
MD5 3bbe2e1fdb9911aeba7bffce50805d93
SHA1 a5af9ff50209820c60168561a528c9c640cd7ea4
SHA512 2afe0c7994762a5a0892c1cc09279392c75ba63e01f0d618081340de482802a7a5b1010b15ec3eb0d3e0f7a9b7062ae38f2484bb2f20e742964fdbacfd7fe38d
TLSH
T1ED51D609979205DBDBA570B19DC00C9BFD3426F08083DF5205A5D879AB0B3A8C1CD3B4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 36c6ce27cf3ef7a98dd57ff86c5c68e13c9e194e9a8df0aac1bac138ebe54089
MD5 9cf705539aa5433a882e88487e450486
SHA1 50489d19178ad03ffb5812bbaa1c99faf199fcef
SHA512 57aa73772524c1fbccf20b157472b7db86d3d18a7e4ee48f205d83cf189945c786c96458bd00f14be81e2f29d9dec618f965bbe68b16c13a6698a14a4626e3fa
TLSH
T1F751B64997D245DBDBA570B19DC10C9BF93426F08483DF5205A5D969AB0B3A8C1CD3B4
MD5 SHA1 SHA512 TLSH

Submit Download

2db6d96c-94be-4395-9c03-0365cb93c753.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\2db6d96c-94be-4395-9c03-0365cb93c753.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

67d7e7bd-0fc3-445f-817e-3e5931e7df5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\67d7e7bd-0fc3-445f-817e-3e5931e7df5f.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

728d1da9-b4e9-4e63-9c7a-5b8b42cafee1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\728d1da9-b4e9-4e63-9c7a-5b8b42cafee1.tmp
Size 3KB
SHA256 ead68102c485f1a46ac88e92dc137f1ed3042b5e6a77274d7a282f7ae045e36b
MD5 1cb8abae66f11d564ae05516a50803c9
SHA1 475ef272bf147dcd08ff8ceaa23b13dd95006424
SHA512 f200318fa0c28dca993887bf5c751bdc059983ef2ba5266c222d9a57289d4b0a27533ca510f40fc1e3412857a2950f148335aebe632cf56b9a05a34940974685
TLSH
T11C81DEF687E4476E851196F09B24BD2BCE5D111A422C3CA588F0AF5BA3F30B1E04279F
MD5 SHA1 SHA512 TLSH

Submit Download

a778ed61-e3dc-4802-ae63-c804a092737d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a778ed61-e3dc-4802-ae63-c804a092737d.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c2332205-c4a2-40cf-8450-26c79fda4789.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c2332205-c4a2-40cf-8450-26c79fda4789.tmp
Size 23KB
SHA256 01f3d2be5ff36afe81790246b8283e22b43dc7dbb307d8e1ca3dbdc2939a8e43
MD5 d549f4a3a83489e278d6e00445c91f01
SHA1 c175497b11ca13274a50cd074b360f05ddd0ed22
SHA512 2a5be95e33ddd8efd239158cfc8e8797b270c586b1d3692c51e052ff33215227b8400461be68e9de72c0548b8aad753116060f2b602b9c2d41f1251a7bc86618
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRW9roHrh:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0VQ
TLSH
T17CB2EA2F644CCB7E8FC00A9DAC596F977E9802C796588D4047FE994C02C7BEA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5a6114f-3742-4e2a-ad29-a3c58177bbfd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e5a6114f-3742-4e2a-ad29-a3c58177bbfd.tmp
Size 11KB
SHA256 9bcb2506529c6788f75f56addbfc5414aa710d4606276d7f7f87c95b07209399
MD5 18b8bd108d9022046c2749704664a6f9
SHA1 2d60e1615ea5a4c6c4f9b64db1a1274fed513476
SHA512 6d1ff78bcd4eddbdf318cb6577a6982221b35fbb390a21287924830038c2ca8c5300da994847ea24fb5a1214d0dcd3251ce23cebafe1f45780a4d9189b0db1ef
SSDEEP 192:sxRARobM/fs5s4QyYhXzoA8p4p/g6+WNIY2FCcLGOIgIJ:sxRAsM/fs5s4Qb+I/5IH7s
TLSH
T195329715AE28A93B8CCBD21DBB657F53D2FD5032A1941E48E6FC8A1C15E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8801cb86-40eb-4fac-aa2b-38410abf447b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\8801cb86-40eb-4fac-aa2b-38410abf447b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

991d0261-8cdc-45eb-b480-f752e8865277.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\991d0261-8cdc-45eb-b480-f752e8865277.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download