62d39a9d08acc6eec7956b34e7c87ee4590b4458e7b7640e36b14640373133cc

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gearsofmedia.com/1xbet-1hbet-bukmekerskaja-kontora-bk-1xbet-stavki-na-sport-onlajn-vhod-na-ofitsialnyj-saj.html
Size 84KB
Sample261027-pbb8ladd83
SHA256 62d39a9d08acc6eec7956b34e7c87ee4590b4458e7b7640e36b14640373133cc
MD5 b359b027ea4f16455b9b8b46c094b496
SHA1 a2a5bc7807a0ddaf9ae5cc45930f2d0489d763a8
SHA512 656a1dad7378e92bb5b8dd27caa4e3018adcc9a6d44ef6a67f7bb37b241a7f3fd2360f19e09c7879c1daef8fe13f6ba2f6aeae8971495d6ff78c9ee6a8ebf879
SSDEEP 1536:rap+n7OR1WnfJDQDaSkulYsnnGQuCQ7uiFMEfQLuXUkJw6dUVKURPExbTLRB7yQ:OMn7ODWfJDQWSkulYsnnGQAaiFM8fw6F
TLSH
T1068388207A9F148F220BA15FC8067B0D78EB45FEBF55636634B1287E34F2870967A719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2796	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{92BA82E9-F0B8-41E2-9020-E656EE51473B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2212	msedge.exe
2212	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2268 wrote to memory of 1588	2268	msedge.exe	84
PID 2268 wrote to memory of 2796	2268	msedge.exe	85
PID 2268 wrote to memory of 4608	2268	msedge.exe	86
PID 2268 wrote to memory of 4608	2268	msedge.exe	86
PID 2268 wrote to memory of 4608	2268	msedge.exe	86
PID 2268 wrote to memory of 2392	2268	msedge.exe	87
PID 2268 wrote to memory of 2392	2268	msedge.exe	87
PID 2268 wrote to memory of 2012	2268	msedge.exe	89
PID 2268 wrote to memory of 2012	2268	msedge.exe	89
PID 2268 wrote to memory of 2012	2268	msedge.exe	89
PID 2268 wrote to memory of 2864	2268	msedge.exe	90
PID 2268 wrote to memory of 2864	2268	msedge.exe	90
PID 2268 wrote to memory of 2864	2268	msedge.exe	90
PID 2268 wrote to memory of 3888	2268	msedge.exe	91
PID 2268 wrote to memory of 3888	2268	msedge.exe	91
PID 2268 wrote to memory of 3888	2268	msedge.exe	91
PID 2268 wrote to memory of 4548	2268	msedge.exe	92
PID 2268 wrote to memory of 4548	2268	msedge.exe	92
PID 2268 wrote to memory of 4548	2268	msedge.exe	92
PID 2268 wrote to memory of 3788	2268	msedge.exe	97
PID 2268 wrote to memory of 1628	2268	msedge.exe	98
PID 2268 wrote to memory of 3788	2268	msedge.exe	97
PID 2268 wrote to memory of 1628	2268	msedge.exe	98
PID 2268 wrote to memory of 1360	2268	msedge.exe	102
PID 2268 wrote to memory of 1108	2268	msedge.exe	109
PID 2268 wrote to memory of 4792	2268	msedge.exe	110
PID 2268 wrote to memory of 1980	2268	msedge.exe	111
PID 2268 wrote to memory of 1140	2268	msedge.exe	113
PID 2268 wrote to memory of 1140	2268	msedge.exe	113
PID 2268 wrote to memory of 1852	2268	msedge.exe	114
PID 2268 wrote to memory of 1852	2268	msedge.exe	114
PID 2268 wrote to memory of 2212	2268	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\gearsofmedia.com\1xbet-1hbet-bukmekerskaja-kontora-bk-1xbet-stavki-na-sport-onlajn-vhod-na-ofitsialnyj-saj.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a4,0x7ffa2084c188,0x7ffa2084c194,0x7ffa2084c1a0
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,2991194137049671391,15374303110856051512,524288 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,11456271073080999660,13460408059093001068,262144 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2344,i,9616970499249410347,3212664317678543235,524288 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,13360948524713940056,1273115643157231013,2097152 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,8661701273590498496,4728488367327989180,2097152 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,1449247103522451159,8030234030830603537,2097152 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,13932650691075916298,2310921701509778596,2097152 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,6293657325106465155,14615628344857298667,524288 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,13863037005069876327,18291806100881061034,524288 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,7267829387884403244,9948360044551054683,524288 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,7267829387884403244,9948360044551054683,524288 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,6174284184985849420,1811904674946884697,524288 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,9551184123487625790,13169831504063605572,524288 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,6640809441240386071,1862007358396390720,524288 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,1161723978345986065,7420745993222229474,524288 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,15418240418356305142,17871280364179355554,524288 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=784 /prefetch:8
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6564,i,9449830384761051547,5059570062672377341,262144 --field-trial-handle=2292,i,16523822227760320684,13171659935350772417,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2212

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

09b81d37-84e9-4e5e-9b3d-7c6d97aa726f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\09b81d37-84e9-4e5e-9b3d-7c6d97aa726f.tmp
Size 8KB
SHA256 9de9e8e5b445491b04398968621d6998c559dddedb8547a2c4c798952265c58f
MD5 5c4a2aed5d17c644da32f3737afe675a
SHA1 93f1d9c51965455ec226125abba0b5f9cdedb5e9
SHA512 1cff49d19ba98d749632b5ae9b54e600023d650a6d4f90220d4bdf4f7ee7978288b90b0a56cb9e6b245b08ddea11ae662f9426eb651b42e673a2fd94d82db1b0
SSDEEP 192:kONK6IE4QmiUy+aVTcuIGmQ2msMO27H2qVU6:kONK6DYWcuIGmQ2msM3H5U6
TLSH
T1D3120A35ACB8BC6B5E93A955F4833A239EB58227E6C57F90D5DC1B1C00EF25C230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

85e59b5c-e07a-4f35-a564-665a104812b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\85e59b5c-e07a-4f35-a564-665a104812b5.tmp
Size 21KB
SHA256 809653159b2bfa73db5e609795915f3d25cfb41106cd036ec6b29f7f784f5ce4
MD5 a38ae92bd80ea803cc36e228c4f52d08
SHA1 3d9f7ce4d767a47b42d74561c7fd4e8dc09b7304
SHA512 0991e15a0d2c020e4cf1b1ee2a7682d6ba3a23a878f6dc55d24a7a5b3cf4345885e4aadcb9130e2c8e149ba8066f1575310fd661a202996434ece121eccfaccc
SSDEEP 384:LiFzQkUSvezsNR8TUNTUlIl+kU1OvMzIGmQ2msMaNi5vaTZcPu+ZIIlo:mFd+MwgzUomT2x7Ni5vaTZcPBLK
TLSH
T152A26D339CB8DD3B9EA79F54E54A3A13DEB48167C5C4AB90E6CD9A1C00DB29C230BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9870c0b0-ea65-4c77-953b-1f24f192da10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\9870c0b0-ea65-4c77-953b-1f24f192da10.tmp
Size 105KB
SHA256 aa204e7f585c1f2b64ec2dfe226fcda3dd40e2d6c7acaecb8bc39c51bf5021a2
MD5 82ef5ef3fd97f3d79a47f09529d45307
SHA1 4d70248d33884063e95777b4e6e0d998931440a1
SHA512 a3e3e08187ec16facc64907edae849970f4fffaceb0ff69b6b9421c352de4ae4396f6c7d28c814160c616bf604747c73d4cf8a04f10f2fc8fa4a07c14210288d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P73:fwUQC5VwBIiElEd2K57P73
TLSH
T1F8B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4945E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

12bbec5f-499b-44a0-bbac-778828f9823d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\12bbec5f-499b-44a0-bbac-778828f9823d.tmp
Size 10KB
SHA256 9ed26817fe79aba00480e2b26c44b9cfaa85a804cbda7a54d265303944efc922
MD5 848a9a5e114b155077070579e093d47c
SHA1 e3747254ef95d36d0c054bfc5f42b3bbf88e68ce
SHA512 9623e042cd48f4dbac6a094eb7a163a4be4dea8610138f52f50d7a6834ba312e6d9617df7510442f5d84b93df972ff8596d629c4e31828eb012a0086db233c2f
SSDEEP 192:sxZVR8WA/fVs1iAIdpd/HW6+WNGYapa/1aIg5GJ:sxZVdA/fVs1YhHbG3I
TLSH
T15122B8526E38A97B8CCBE20DBB55BF53E6F9503291D51E48A6FC861C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

258d562d-ad8a-4ba3-b48a-80bd8ab7f72b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\258d562d-ad8a-4ba3-b48a-80bd8ab7f72b.tmp
Size 27KB
SHA256 2aa9c34d9623ef60d99ea65e23f241d9d1ffd9ed9b25c02b3d12db3dc4073755
MD5 470010cdbf1abf8c4970dbcf31aac255
SHA1 d6b24f635a7ecfbe24922e1bd8c1b59c7a54d586
SHA512 7c2f83accf237a296b65c9a7d2543be684bcc72905e57f35f36b462ad66dcb6e5920a8a2c6a14b0dff50433a1e924fd0c18cffc56b15f090ab6e3c86d75085dd
SSDEEP 768:aaWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Rro4nfeimRc:aaWPcLKWvKeEeu1jaClLiF7q4nWimRc
TLSH
T198C2EB3B640CCB7E5FC01A9DDC5A6FA77E9802C79A544D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e8a0aa3-2fdf-487f-b7b7-31bc0b58464f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2e8a0aa3-2fdf-487f-b7b7-31bc0b58464f.tmp
Size 9KB
SHA256 ae6e73d88f7568410ed78ae20347cda008aa2fd9bc940c90ff45ff035f471966
MD5 a277e29c0414445e408e1bb060853c9f
SHA1 ae90c86e0da5a6d79f14ece85b356d391babdd41
SHA512 aabd73861918d79f61dcc653d3b1ec1b179c6f9c9ce1b3cbcae49db2dce5dcb71fd17ab875afb08c7e046abf8a4a59c60dfe49dcb87ac710d9c3deffa265ad4f
SSDEEP 192:sxZVR8WA/fVs3SAIdpd/HW6+WNGYaplJ1aIgrJ:sxZVdA/fVs3ohHbGi9
TLSH
T13222A8126E38A97B8CCBD21DBA65BF53D6F9503291D41E48F6FC861C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3563a447-24f6-4801-9810-0070b37a04ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3563a447-24f6-4801-9810-0070b37a04ce.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6eb860eb-eb43-4c02-a580-73a3dee7b7d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6eb860eb-eb43-4c02-a580-73a3dee7b7d9.tmp
Size 10KB
SHA256 e24776e8d3d8c1dd6c42779bb79af2c298cba429d74c8f5210a7133a9650342d
MD5 91107cb8bc2f341e376eb16edcc71ef4
SHA1 bd3f2ac2c303baa2e0a31a61d9c46162d4d33df5
SHA512 bf421ff0af7de2b113042b9951f57cc2420a5c974fc8b331c742087c2bc2d6527cb2a5f3040ca26b8d8c7ae631c51f788a9f55d191f383036cac7177163dfc8e
SSDEEP 192:sxZVR8WA/fVs1iAIdpH/HW6+WNGYapiAVaIg5GJ:sxZVdA/fVs1YfHbGoI
TLSH
T10F22C8526E38A97B8CCBD30DBA55BF13E6F9503291941E48A6FC861C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 27c46f2f0c43719b6edfbaccf6d536d13b802ecab00720bf6544268be3cbae26
MD5 df80016e8deee7ad2e442aecf2785e69
SHA1 7c1a4bc4bb4daa0121af99f9e83f29ce1d066f1d
SHA512 fd4820a88072e372299ce30aae66e8f595b2fa9190d7b57c8afb319ad267bf55096196558452d71cd6d94a815d21b9a4559ead3f54ab6b7f547710b1270f3656
TLSH
T1C8E026C8B5C8C22FA248648B426CA38C8B81675BD6C07A0E2B08CD88720B044A796A94
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 9671c967fbc7401ceb831bd973745f9ca5771e5a25eb0198f8f2c500a3443f3f
MD5 e0cdcaa7e8bbcfc83a03769bfd5127bf
SHA1 34b2ad4d9c916346a652725af75b5c37dec5c5a5
SHA512 caf2b25a4b2a47136278d65c5a9723767eb5780ec6c4a9aab5bf8d60da86e2f5a57981c8a7720429bc98c78c41aee0ec68b26a676c258f9027e0b805327ea1eb
TLSH
T1E9510882DCB040D8FBC941F081FDD08F36F74C8149832E92FC5BCAB85A36764924A05C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 100e8a8512261190145b0107c05afba5548131317c652091303be66906a293e0
MD5 2acc746ed3dc63af6918ad345a78160a
SHA1 fa9aef6eef48f38adc19d0d09252baa58f2270ab
SHA512 8ccdf1407a97de29e36cdfb62dae788a282e5198cd0986e3ddef13db0582df2d1e4d919e8985b918d7c2fe9e9ad8592769620d63e594be47a396dd0b4a3375ab
TLSH
T10D510882DDB040D8FBCA80F181FDD08F36F74C8149832E92FC6BCAB85636764924A05C
MD5 SHA1 SHA512 TLSH

Submit Download

bd9d9791-6b28-4c97-8304-7c8373bfc935.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\bd9d9791-6b28-4c97-8304-7c8373bfc935.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

43c4bedd-f58f-4146-9efc-cdb85755e75a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\43c4bedd-f58f-4146-9efc-cdb85755e75a.tmp
Size 2KB
SHA256 0ccdeb6327417bf68c80ce4daec356ff2527f74218c09f11b9990f13ee121a54
MD5 01f098afc56f828cabc79c3dd58b297f
SHA1 c55399eb09bf99f0be68a2ebf768b4642131f459
SHA512 66e267bcada61611095edc9542400ab1712c466581242af8bafaed4dee4cdfc4a0046f890df2146dbd866295b5fca2f406bb7ed2d05d93ca261d26d651dd587e
TLSH
T10F519BF686E9476E841656F08A24AD2BCE5D111A422C3CA58DF5EF5B73F20B0D1023AF
MD5 SHA1 SHA512 TLSH

Submit Download

8d11d624-bf50-4a53-a9f2-05052b8b0fe2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8d11d624-bf50-4a53-a9f2-05052b8b0fe2.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

9f608700-03c0-4705-9340-b7fd27161a1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9f608700-03c0-4705-9340-b7fd27161a1d.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8795f9dc1738ad89b883abd508ac76ea0bdc22b91a2eda289bdb0b66c07cad1c
MD5 0d4c65e9fdf02bdc8dd1fa4c72ddb0c5
SHA1 23eef1f774bf0e7290dd700d0e7e8f627c7e12d0
SHA512 cee9c97f48dda6432de66738879d3ded2f68c129b9da55a21d356f3ab42dc8e089959580bbd5e8456b63c4be6298260a0fbf3c8e2da4c53d8add67d23140dbe2
SSDEEP 48:K0HqTnpJZybRcBIS3yK931dyx3iYUFn7yL5IVpz3Lkb10JF3jXYbLuLISdYK991E:KU0wKBeiiZCoKP626qoKHq6LeX7r
TLSH
T1F7A1E105707B02413CBE298985B58B1A525335F33018E62BBFBD54E69E6FE051EFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8f9f33f-ce24-4841-93a2-1d7f5a59d9f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8f9f33f-ce24-4841-93a2-1d7f5a59d9f9.tmp
Size 10KB
SHA256 2bf455484472c9d677133f53550196e1d764ac03e055384c24cd64180f343fbf
MD5 6cfa30f98700ab9b29a060b56e034bd9
SHA1 dfca4158e88e21f3038c009088cf2cbc20e1e8cd
SHA512 20d577ef8ff5f37c630a33e8e93de956c1c7abc9788c91622ce5a190534f23c9eb1df7c655833404123351d6a26538380768f636f3e89ec95eaf1e0c0f65cd46
SSDEEP 192:sxZVR8WA/fVsaSAIdpd/HW6+WNGYaplJ1aIg5kJ:sxZVdA/fVsaohHbGi6
TLSH
T1B722B7526E38A97B8CCBD20DBA55BF53E6F9503291D41E48EAFC861C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fbac77be-3f87-4e34-b78c-0109be15bf5b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fbac77be-3f87-4e34-b78c-0109be15bf5b.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

7185ad92-f218-4bbd-b05e-47dbb062c416.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7185ad92-f218-4bbd-b05e-47dbb062c416.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a1a0fc45-b5e8-4a1f-8ba8-40a34596e17f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a1a0fc45-b5e8-4a1f-8ba8-40a34596e17f.tmp
Size 8KB
SHA256 895516132888ebe5e56b699321c2fa5d9a7a92987cfe7b00a197c202ddfe50fa
MD5 45f579c1996d9b1ebba9dc54b909109d
SHA1 aef2bff25294c8b6d8ac6d3ffcf2abe1cafdf0fb
SHA512 3d44fb2e6298ba3f32ba02cca9d33c60c1b778a406a4de318234a47a9f8602a5d6e92e5582ea2ab6b9336f1eb33b0bf4bc4fd4b8387b46269653d12177f13d55
SSDEEP 96:3qONk2Qsjpfe/tyng7X5ih/cIPURHl8h4otop5fYDVNBnP9ZvEI0IG2jbb0Dqss4:aONe6IE7QmiUyGVTPuIGmQ2mdC7sn1U6
TLSH
T16202E935ACB87CA79FF3AD48F4872B239EA5112BE5952F84D9D81A1D00D725C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5494417-6bfe-41c5-800e-f2c3bdab4bbb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b5494417-6bfe-41c5-800e-f2c3bdab4bbb.tmp
Size 18KB
SHA256 818fdc5af358f55fd39d232ba855c81f8dee17d90681f4717d06a557d70e3ad0
MD5 c2b87c26cc0e4fb506d14f9180fef59f
SHA1 e1257e0606ed6319e8f7781fa533f007d9c9a18d
SHA512 c3f4ea2c6c7865bfb4a719e8e6162364773e3325e0fb1b96a3e7d3804fa235a1446cd82b141a77699d17be24c6db22e070b9ff24db5478c422b766f5f124af49
SSDEEP 384:FQkUSv0sNvJkU1OvMzIGmQ2msMNi5vaTZcPu+ZIIlo:f0fUomT2xYi5vaTZcPBLK
TLSH
T1A2827D329CBCAC274EA3AA55E14B3A13DEB4C267D6C45F90D5DD9B1C00DE29C230B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2b59a6f-c10b-4a16-8080-f269650be46d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e2b59a6f-c10b-4a16-8080-f269650be46d.tmp
Size 18KB
SHA256 1fe1882f316ce9459e808ebbec2098d949c44bae3835c38f45fee0939d221eec
MD5 3221e0e2a0b8ef702becd1c0f75c6603
SHA1 d29e982af8d3df34102fd36eafe3ff7a2e1f51cb
SHA512 c69e62df352e531479c6084610b1088acd37d420befef7d5f00ab4589fccc566366f4a63f37f2e0661bc26d818c4ecafca57b9d47ed35417771b6982b93a4e9b
SSDEEP 384:aQkUSv0sNv+kU1OvMzIGmQ2msMNi5vaTZcPu+ZIIlo:C0+UomT2xYi5vaTZcPBLK
TLSH
T1D3827D319CB8AC274EA3EA55E14B3A13DEB4C167D6C45F90D5DD9B1C00DE29C230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11cc88ef-78f9-445b-b715-d74941ec8ef6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\11cc88ef-78f9-445b-b715-d74941ec8ef6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3544cac802b8d1f9fcbdaec7102a1be76c8a11ec4ffe1c6fce038ad2c7ebf921
MD5 04e501432401823f34c5be62e40d3815
SHA1 528a8e41887c90718683766e8c72038f1f6ffd9a
SHA512 03b1fe04aa86706188f4e824b5f9007d88bf5a586829ecfde85479a183446b414ce502e5ef389a3b2cca6e344d40f7b5a7f9c5dbbc6e19ca4dffe06171c44b1a
TLSH
T1A4412688B6E91148B3B76E569FF7A86E487F78372F06949E10110E4F0A66B44CC71737
MD5 SHA1 SHA512 TLSH

Submit Download