4ae745565d62b208fda49c3e92940c610bcf18c0b20e9d1b0e0856938cc045d4

Analysis

max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gearsofmedia.com/30-cassinos-que-pagam-by-way-of-pix-na-hora-2024-confiave.html
Size 72KB
Sample261027-pbb8ladd83
SHA256 4ae745565d62b208fda49c3e92940c610bcf18c0b20e9d1b0e0856938cc045d4
MD5 39c65b16f1b78747cc65790615cdd59e
SHA1 e4ab8c2b22ade8e8bc1ab53ab2df34f9bde9326c
SHA512 8ead26782dbaab0f26479eb59e9841bc20b19530ba44a4d00de40e043adb27459cce31d09bba3fa6260e8deea48531688ae37d25b5bf2eb8c118975eebbb6dd3
SSDEEP 1536:Vap+kUwZVexnOzZfnfQLuXUkJw6dUVKURPExbTgRB7yl:EMqZIx8ZfRfw6dUVKURPExbTgRi
TLSH
T1CE7307207D8B0517322F13CB2187730EA5C98AE1E405D7B6B4F6522462F9DE17BB3E69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3832	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{51357E50-49E0-461F-A288-6BF67AE93ED7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4156	msedge.exe
4156	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 744 wrote to memory of 4200	744	msedge.exe	83
PID 744 wrote to memory of 3832	744	msedge.exe	84
PID 744 wrote to memory of 4992	744	msedge.exe	85
PID 744 wrote to memory of 4992	744	msedge.exe	85
PID 744 wrote to memory of 4992	744	msedge.exe	85
PID 744 wrote to memory of 4252	744	msedge.exe	87
PID 744 wrote to memory of 4252	744	msedge.exe	87
PID 744 wrote to memory of 812	744	msedge.exe	88
PID 744 wrote to memory of 812	744	msedge.exe	88
PID 744 wrote to memory of 812	744	msedge.exe	88
PID 744 wrote to memory of 2552	744	msedge.exe	89
PID 744 wrote to memory of 2552	744	msedge.exe	89
PID 744 wrote to memory of 2552	744	msedge.exe	89
PID 744 wrote to memory of 1396	744	msedge.exe	90
PID 744 wrote to memory of 1396	744	msedge.exe	90
PID 744 wrote to memory of 1396	744	msedge.exe	90
PID 744 wrote to memory of 3900	744	msedge.exe	91
PID 744 wrote to memory of 3900	744	msedge.exe	91
PID 744 wrote to memory of 3900	744	msedge.exe	91
PID 744 wrote to memory of 2920	744	msedge.exe	95
PID 744 wrote to memory of 3192	744	msedge.exe	96
PID 744 wrote to memory of 2920	744	msedge.exe	95
PID 744 wrote to memory of 3192	744	msedge.exe	96
PID 744 wrote to memory of 4132	744	msedge.exe	101
PID 744 wrote to memory of 5104	744	msedge.exe	108
PID 744 wrote to memory of 3956	744	msedge.exe	109
PID 744 wrote to memory of 1608	744	msedge.exe	110
PID 744 wrote to memory of 3128	744	msedge.exe	112
PID 744 wrote to memory of 3128	744	msedge.exe	112
PID 744 wrote to memory of 4156	744	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\gearsofmedia.com\30-cassinos-que-pagam-by-way-of-pix-na-hora-2024-confiave.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc9189c188,0x7ffc9189c194,0x7ffc9189c1a0
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,9738676993596535568,17157174372239243663,524288 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,6116304695806316445,7272439576251449867,262144 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,8613090260453181702,8716146242624950149,524288 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,7928122980887453311,11341083361337349711,2097152 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,10027666424020024251,8751961668802775715,2097152 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,14163615694664014292,6568958286598692456,2097152 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,11554083457670620629,14672432561257678509,2097152 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4592,i,5663901640148342909,16039875251015527891,524288 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,8300513006530177400,17767385962955048612,524288 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,16849371745336906548,11985870754594898378,524288 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,16849371745336906548,11985870754594898378,524288 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3432,i,10566978325887952359,12529234025520269174,524288 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,4909579592847702794,15522932216161584443,524288 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,16291679812654722578,6445154134245906406,524288 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,14951877160697336811,11667694177256653042,524288 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,16843363780937389955,11212977297088071600,262144 --field-trial-handle=2296,i,7311234969470977326,1753430335341954379,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4156

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:860

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

00fc436d-a89d-4df4-b87d-fd2fc54df9e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\00fc436d-a89d-4df4-b87d-fd2fc54df9e9.tmp
Size 8KB
SHA256 e21db24562b6469020e97558716e96ff3f76430af4bb4da3be9f2c35cd88084a
MD5 b4a2fff8363fa7c81ac5d5c582465b5a
SHA1 3289fa2a732ef6b9dc4d05ff50e08c4c7736a760
SHA512 6c4d3aedc9d082ef7ff6183f8d9b9df7498884715c7e13e50db95f958d14de1aff3b64b4ed885be87ab7481f5ffcd9b2dead25a924f47689a282c6c9be76408a
SSDEEP 192:LONs6AmwprQmiUy2QQ6siX5FrY+s5Ji+5U6:LONs6ipd96siX5Fs+s+WU6
TLSH
T1C102FA35AC786C7B8EF3AE55B54B77239FA9117BDA941F84C9E81B2C01D764C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

2cf780a2-27d2-4c86-8b38-18c5eca4bcca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2cf780a2-27d2-4c86-8b38-18c5eca4bcca.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

460ecbfd-4c8d-4312-b148-677edfbc48da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\460ecbfd-4c8d-4312-b148-677edfbc48da.tmp
Size 10KB
SHA256 d7bfac871d27c41d4b21dc0b8374b1db6a1a74ca6fae45eb15abfba040f6e29a
MD5 15810add60198ec9120823f70ecc5e50
SHA1 a77659a6ed3965699e841b590c3be89cadf3e64f
SHA512 de0b6a62c82b22d282242f3c4a54e1952c90edb2ff97e713a82ddfd3cbef177e3dc770e11859e96640180cf644f308477841a1a35a0759289250f9c4f92808e8
SSDEEP 192:sxZMkR+Wb/feXs2chhQOyIdpHhHW6+WNGY3GZ5CKUzIg5zJ:sxZMkjb/fIs2EqO7BHbGSr
TLSH
T15022C8126E38A97B8CCBE21DBA557F13E6F9503291941E58AAFCC61C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

862ba42f-06d7-4945-9a91-975e81a39ad0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\862ba42f-06d7-4945-9a91-975e81a39ad0.tmp
Size 10KB
SHA256 15557afa1e6601d83f000759c59860e339f9e1d879c834339748690ac0b9465d
MD5 15d1c589596519ce3435e8184dcde4bf
SHA1 e796c78bbf90c675f592422343a1660ee438ef2c
SHA512 174c3a20a6d1619e4c824491aed755dadd9147383b5b69d44d2b83560437157d45ff6314086172f301368099b102ce339bef9051447c150e1cd8ce2a954037f6
SSDEEP 192:sxZMkR+Wb/feXs2chhQOyIdpdhHW6+WNGY3pCtUzIg5zJ:sxZMkjb/fIs2EqO7zHbGer
TLSH
T16922C8126E38A97B8CCBE21DBB557F13E6F9503291951E58AAFCC61C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 4dc00c2d0f4cc80f9825884077a36ed78f642a3a872c0c7221d8df0eb7a018d1
MD5 ecee0e04bdf71d415476e0c4b01dc917
SHA1 eb6023e07f4691f245b712818d368ff0f45ebc1d
SHA512 4f4ea810f9e6b713e16ee5cb96e213d46b9e47b8d58d3b335647038e0574c808f1e7f4332c3022c7bf7e62bf9f28b4a53f297e38a8fb1b7d87f95ac8d6232962
TLSH
T138614D81D3F070A1EB9870B061D91E9736F885B2A3835E66129DD5F4AB473C0334D1D3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f823c4925e4921be8f7687138284252db609649a6ff9427ebcd9116f4aaeb304
MD5 f70a5b12b218a538995e75bd8788bb4a
SHA1 9570abc4dd2233346c18d038b05843ac0ec81863
SHA512 c6207672cb305fa667f95224a8884b5116ccadae8da6f25659b8dffe12ab30dff42969baf823dbd196e9b9ef68673f21ea2eb155cda5d89ffdf1dcc6007cbd59
TLSH
T140613B81D3F070A0EB9870B065D91E9736F885B6A3835E66129DD6F4AB473C0334D1D3
MD5 SHA1 SHA512 TLSH

Submit Download

29472a80-f348-468a-93f2-0218df955433.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\29472a80-f348-468a-93f2-0218df955433.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

36f53ff0-d028-4e55-bc88-7d2c182bf68c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\36f53ff0-d028-4e55-bc88-7d2c182bf68c.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

4ee4181c-6adb-4b95-b633-3c47ad8dd5cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4ee4181c-6adb-4b95-b633-3c47ad8dd5cc.tmp
Size 3KB
SHA256 d6131afe95710f91f608c374d53ab9aa84a377b49b04e3d2d4b9c396f26e7403
MD5 f0d2719971c6f48a81f43b3ae8ecffdd
SHA1 470192a31c2f96baa558bfcb287acc67194a1e56
SHA512 3f1fdd9155009e44345e4fd4d1eca954e71976a63dbb937dd76480542ac1f1da9d9958357141eaca24ba7b5366257a7a9305dd46f2504a087c039845083f5ef9
TLSH
T16A518BF686D9436E842656F08A24BD2BDE5D111A42283C668DF5EF5B73E20B0D14239F
MD5 SHA1 SHA512 TLSH

Submit Download

a9e9106b-7902-44d6-abfb-8b389ff6f7bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a9e9106b-7902-44d6-abfb-8b389ff6f7bf.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

bcfdf8bf-cb8e-48ff-94e8-6067991930d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bcfdf8bf-cb8e-48ff-94e8-6067991930d4.tmp
Size 9KB
SHA256 a7f5016b226b74e93dd30eb93227a4205f22f7cfaea93ccfefdff6f694371924
MD5 841e62f3a2db74226d460b0a695c74fb
SHA1 62ff134ce187759ae97d6724bcb42dfbd166ce38
SHA512 2742c8b8a977918e32246d0f0f2a6f402237332ee080febad675579edbfc83e231f8f8c2870475ee56e07970cc4db59ee783960b5d5e98aed506818ea27541b9
SSDEEP 192:sxZMHR+Wb/feXs2crhFIdpdhHW6+WNGY3SFUzIg5JJ:sxZMHjb/fIs22kzHbGuF
TLSH
T12422B7126E38A97B8CCBD31DBA157F53E6F95032A1941E58AAFCC62C05E6ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d94ae0f0-4a74-4306-8aad-06e49e19b8e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d94ae0f0-4a74-4306-8aad-06e49e19b8e2.tmp
Size 27KB
SHA256 8bda9ee21659e7b7b3236b2c5800e8d1102ba71c27279f00254063baba2917e6
MD5 4bd7cd35d8dfdab237a98bc2fe70614a
SHA1 fc82d176af3526806446e49cdb0279d52020fa2c
SHA512 4498bcffc29bd6544276d5b8d71e4b848720e23d2138f957c0431c49109ee0e986f0c8014f0b34b41f455bb472667a9a336bcf9e297af1ef0cc9ecc430a887d1
SSDEEP 768:7V30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72ErolZMwb:7V30AbSWvS2l9u1jaLmLZ12PL
TLSH
T160C2EA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796548D4047FA984C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f436716b-9f3f-48e2-be53-98ac3040ddf4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f436716b-9f3f-48e2-be53-98ac3040ddf4.tmp
Size 9KB
SHA256 a3962e7cf0dc99ee8642fb35d3845ea47a61e406545739aa6f4a4b9087c46896
MD5 a82bfa2d8b4a884391b8cf2581f4719f
SHA1 d474771f62136c54204f4444e0200b7aa2dacd2c
SHA512 6b6ef2284f7fd67488217e617f940f4ba6fa1af3c691aa8290e08bdca8117eaa35993ef3c25d7b90c53190859c5d4f91a37584fc17e535cfbfad3dfa8974026e
SSDEEP 192:sxZMHR+Wb/feXsScrhFIdpdhHW6+WNGY3SFUzIgrJ:sxZMHjb/fIsS2kzHbGu9
TLSH
T19A22A8126E38A57B8CCBD31DBA157F53E6F95032A1D41E58AAFCC51C05E6ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

acbbb563-fcc9-4c23-bf33-24b5779cb71e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\acbbb563-fcc9-4c23-bf33-24b5779cb71e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a485e563-0775-4156-a12c-740f6c04abca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a485e563-0775-4156-a12c-740f6c04abca.tmp
Size 8KB
SHA256 2e535d1b2321932153d85269c2bee2bd7a393e89ddcb0afaaf9f5b10fc58a7ad
MD5 c83d5c0a18afa0f8d598a8467afc4f11
SHA1 bd4bb245314f407da926dda74b6dfb81e0abdae4
SHA512 5dac64d507e363627e329e62a9cbe4bc1e02e357579d3677f50bbb58e42d9a5489394d120a6e4bdcc5dad2715789fbb41fc791f60573538884f20d2e0144ef5c
SSDEEP 192:BONrS6Amwp2QmiUy2+sQdsiX5FrY+s9ssFi+2KlR2qmU6:BONW6ipSMzdsiX5Fs+s9soi+2YSU6
TLSH
T133122B32A8789C3B5DE2A651F0473513DFA9526BEB886F94C5EC1B2C02DF598530F822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af824433-8c51-4f05-86a3-fe8c15bd4a33.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\af824433-8c51-4f05-86a3-fe8c15bd4a33.tmp
Size 21KB
SHA256 f404858e082ed8e50f94bd77d109b569b023c987a22123259121d7cd65ef1a84
MD5 c72068f32a09b6c7ad2b3d20284ad385
SHA1 33e9c0c9d76965ac73a2f98e12b9d28745406052
SHA512 d44a69345e5acb465cd4c1c454089079a480b9d32c300194667759913473f9399c55f70e3d4b3a45d5561443342960c89ad728ba7e26ab1e8ab387bac4629a52
SSDEEP 384:wiFzQkUSvlzsNV8TUNTUlIl4Yj9pu611/9iX5Fs+s9soi+24SvaTZcqHVIIl9:LFddYwgP9v11aQUl4SvaTZcqHVLj
TLSH
T188A26C3398A89C3B9EE69B50F54E3203DFB49167C9D46F94E6CD9A2C01DB18C134BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb0b10a4-9cc1-4e31-aaf4-658a23c8a853.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cb0b10a4-9cc1-4e31-aaf4-658a23c8a853.tmp
Size 18KB
SHA256 6524adce71d59d6589e4482a95f06c2ea2b6b806bb128501e1493c8b9f5f9bc0
MD5 0fef3da3fe9000183840803dee12db83
SHA1 78ee81984096accbd4a617ee59cfc2f7f2d04900
SHA512 38a97044ca50805d79da54cffff8da39db90e543ab2e528c4d1279079b34d721864a56aad427baa88defcdc99337fbb2278ffd7a74a1bf402c9152dc167d7b79
SSDEEP 384:eQkUSv0sNL4Yj9pu611/9iX5Fs+s9soi+2jSvaTZcqHVIIl9:O0k9v11aQUljSvaTZcqHVLj
TLSH
T161828D32A8795C3B4EE3A650F14B3603DFB89167DAD81F94D9DD972C02DF288134B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd09e0d1-9b3e-40c6-bbf8-c4c692a239cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bd09e0d1-9b3e-40c6-bbf8-c4c692a239cc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f7b5875b-bcf0-4f10-a826-08d8f112995a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f7b5875b-bcf0-4f10-a826-08d8f112995a.tmp
Size 18KB
SHA256 4447c8960ad401414dadd1ff4627e54232a6343c5bd5ecc5b48bef216fdfd2dd
MD5 22095859e7e74df0ebb846897095f1c1
SHA1 bef5a6e8a24e1a0fab3037e085840461dbdd04f4
SHA512 4a2a65b5bac0ab403a841e88533c4ccf2e844be743790445d2ae4b76ee847a3d8c29ee634f8d58af26d2b127b7f35773a5bc4212f67523fc050fbd4810a206fa
SSDEEP 384:RQkUSv0sNL1Yj9pu611/9iX5Fs+s9soi+2jSvaTZcqHVIIl9:D0X9v11aQUljSvaTZcqHVLj
TLSH
T171828C32A8795C3B4EE3A610F14B3603DFB89167DAD81F94D9DD972C02DF298134B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a91daafc709fd5088ab9953c996f1d0a0a8e9992755b35c9356cb5f29299dc3b
MD5 d5a2327e9ebb43a8f10a33d32aba13ae
SHA1 cdf430a87f3203c2085afc4088c8b3b89b9dce47
SHA512 93c06a1946686d7bdc140a1cb2c80f6c97369027386b4c750e7800c97320851d2b72cd9f3bc6f53fda2a0d17c674055b7a25d78847e54492b9f17a65ebaa3c7f
TLSH
T11541095CA6FD1108B3B76E56ABF6A86D487EB8771F06845E00110E4F0666F40CDB1737
MD5 SHA1 SHA512 TLSH

Submit Download