b87f5d09409475b17d39ca7732d24c500f0d3f3e7159b3bfa2cdd517e274a3dd

Analysis

max time kernel
148s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 22:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ConnectA/runtime/pygame/docs/generated/c_api/color.html
Size 10KB
Sample261030-2h4bwagy6p
SHA256 b87f5d09409475b17d39ca7732d24c500f0d3f3e7159b3bfa2cdd517e274a3dd
MD5 2368a7a5dbf46b4e24b4ffa2b3878efb
SHA1 9790826f4d7c07649cb6117757b2f514e8929edf
SHA512 23c1530657bb17a3e4b4f0922a311bdddb687e438d10881676cb13e61bc71b502c615c1a45904f3a479bcc880db0c16969cca243a9df19429548a0ac6598565d
SSDEEP 192:WvRIdSnjeI1gpuVKPHJeK2KeyHpvOo9FHve0JXtECHre0JXtYjLp+T5lggP3n4qu:8ICQ3PHJe9KeyHpWUHve0JXtvHre0JXA
TLSH
T1D722EF528AE254375137C1DA86FD6B39F5E3418AE9411C04B1EC2B6BDBFEF45B50380A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4556	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{E03D56B3-825F-4955-8F5B-1A5419E349A9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1000	msedge.exe
1000	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4480 wrote to memory of 3356	4480	msedge.exe	85
PID 4480 wrote to memory of 2304	4480	msedge.exe	87
PID 4480 wrote to memory of 4556	4480	msedge.exe	88
PID 4480 wrote to memory of 2304	4480	msedge.exe	87
PID 4480 wrote to memory of 2304	4480	msedge.exe	87
PID 4480 wrote to memory of 4692	4480	msedge.exe	89
PID 4480 wrote to memory of 4692	4480	msedge.exe	89
PID 4480 wrote to memory of 964	4480	msedge.exe	90
PID 4480 wrote to memory of 4308	4480	msedge.exe	91
PID 4480 wrote to memory of 964	4480	msedge.exe	90
PID 4480 wrote to memory of 964	4480	msedge.exe	90
PID 4480 wrote to memory of 4308	4480	msedge.exe	91
PID 4480 wrote to memory of 4308	4480	msedge.exe	91
PID 4480 wrote to memory of 1524	4480	msedge.exe	92
PID 4480 wrote to memory of 4804	4480	msedge.exe	93
PID 4480 wrote to memory of 1524	4480	msedge.exe	92
PID 4480 wrote to memory of 1524	4480	msedge.exe	92
PID 4480 wrote to memory of 4804	4480	msedge.exe	93
PID 4480 wrote to memory of 4804	4480	msedge.exe	93
PID 4480 wrote to memory of 2692	4480	msedge.exe	101
PID 4480 wrote to memory of 1992	4480	msedge.exe	102
PID 4480 wrote to memory of 2692	4480	msedge.exe	101
PID 4480 wrote to memory of 1992	4480	msedge.exe	102
PID 4480 wrote to memory of 4792	4480	msedge.exe	104
PID 4480 wrote to memory of 4492	4480	msedge.exe	110
PID 4480 wrote to memory of 5028	4480	msedge.exe	111
PID 4480 wrote to memory of 1608	4480	msedge.exe	112
PID 4480 wrote to memory of 4984	4480	msedge.exe	113
PID 4480 wrote to memory of 4984	4480	msedge.exe	113
PID 4480 wrote to memory of 3560	4480	msedge.exe	114
PID 4480 wrote to memory of 3560	4480	msedge.exe	114
PID 4480 wrote to memory of 1000	4480	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ConnectA\runtime\pygame\docs\generated\c_api\color.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd685ec188,0x7ffd685ec194,0x7ffd685ec1a0
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1760,i,11942298474037639118,14543929290472569864,262144 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:2
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,13393510322346709184,2043863054556837437,524288 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=3212 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,1737738669591839140,13359241007673548149,524288 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=3220 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,7383567957296229945,2246343899727930503,2097152 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3500,i,459595168327449172,6690957813317465819,2097152 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,7015798576729862857,5090704528039103978,2097152 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4168,i,16510779879968174114,8744879693313055638,2097152 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:2
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,9879728534935268663,4720583202679287154,524288 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,14729547364892479739,15412297433595819627,524288 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,8959542842120081044,1036980475878129112,524288 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,8959542842120081044,1036980475878129112,524288 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,519582477580990074,3018162298202034197,524288 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4176,i,1162214761811283001,18366734439207685542,524288 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4168,i,15770059323581693038,16540010843425844404,524288 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:8
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,13510260859616052553,1358157149379939992,524288 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,16183965396338484232,16015621394166108243,524288 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6140,i,2179779462556777697,2388651258259604717,262144 --field-trial-handle=2800,i,9269302875007725515,10448024004988957838,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1840

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

29aeaab3-e076-4c61-8c54-60aa904484d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\29aeaab3-e076-4c61-8c54-60aa904484d3.tmp
Size 18KB
SHA256 9fe7fa9e8c84a9cc381e83f579933dbb71a08e9f0676ff41d5813fcf385f1ddd
MD5 b421826d553b1834e4a36e976c18539e
SHA1 548b9f064909bdd901396ec8f9b25377cf62f309
SHA512 2a96e6337828074003ec9c11fa6a82ff74b47ec52becb770d621c9a0deb6f403b1129b80f22d753e01b64d593aa59b35c091baa578c152c04cbddbde24dfad23
SSDEEP 384:XQkUSv0sN8l54mpurS0u9iX5FCt9V8CVtln:p0D4m/jaOVNPln
TLSH
T18E826D32687DAC3B0DE2E151F54B3613DFB891A796D42F94D6ECAB2C01DB198130B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

619caf40-0191-4eac-88af-b39d306e12e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\619caf40-0191-4eac-88af-b39d306e12e9.tmp
Size 8KB
SHA256 59c05c2f722ade06069b7329427ade5f28fe0398ce181417eff942d10e3a4d9f
MD5 92a502d7f2d452dad7783d5eba13b33f
SHA1 dd4bb55bad7da355daa42e848ba37ef2b01b5019
SHA512 a3b6ae8873ab2e3223fe124c5a1abc53dcab157d5e596b146cab0d33633f109278522c5c7c5f9851827b68bd3c05fb73a2d37c388656fafad1d71c7b618918e0
SSDEEP 192:iONl6AmwpVQmiUyCtfsiX5FCt5eHVlR6qNU6:iONl6ipzZfsiX5FCtCVU6
TLSH
T10D122B36A878AC3B4DD3E554F04735139EA85167EB987F84D9EC2B2C06EF598530B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62157647-2934-4a1b-8242-c06f268ee54a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\62157647-2934-4a1b-8242-c06f268ee54a.tmp
Size 8KB
SHA256 c58715f7a16f83a01670b4e230aa80beab7f81facde6624a7f4b41a6936534e5
MD5 63a887a15aa3c00fb5e5db416e0914a9
SHA1 6b852d1b0d70900e840eec35f895fff7754f7a62
SHA512 8db21be3fabc8b39387fb1a4d477b8321990b882a99e3caf38f0c162f68fd3e261b503e64125e2c92dc294509388c1566101be158889b3ac992122ea3a23e015
SSDEEP 96:gqONk0QsjpfuMVwptaL5ih/cIPURHl8h4otop5kiCDzBIPuva6zx8X5FxXxPYvP5:LONg6AmwprQmiUyct6siX5FCYJij7U6
TLSH
T1C3020A35BD686C7B8DF3AE55B54B37239FA5116BE6902F84CAE81B2C01D765C1307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

140688dd-fd18-4bd6-94d0-d95d503c0e10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\140688dd-fd18-4bd6-94d0-d95d503c0e10.tmp
Size 9KB
SHA256 bf1e9185a770e6ad220ba56cc0f1d434926ae7d2bb1d411f40ec5186cdfd5f90
MD5 179d0356421f67ee5efbda6aae976ff2
SHA1 8d8525d1cca0526aef74845f01915587743433e3
SHA512 687f5c8b71d792369b94e561a66eff53866607640cea76e780323c3aa193513675992f862620b59115c199729d7653100deccad98d9b98ab913e07a791031c1b
SSDEEP 192:sxZWR/Wkb/fLsnzIdpdYYHW6+WNGY3S3P4Ig5lJ:sxZWwkb/fLsnsWYHbGq1
TLSH
T1AC22B712AE28A57B8CCBE21DBB15BF53E6F9503291D41E58A6FC961C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4545ce6b-7dfa-4da5-972d-5f7e94a7e92f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4545ce6b-7dfa-4da5-972d-5f7e94a7e92f.tmp
Size 10KB
SHA256 57d8820289e81610782a20aef6262e61d71ea6f09228e48565cfaa109d41dfec
MD5 00bc1e9e7ce621ae27a3c407a705ddcb
SHA1 8daa66870e928955c71a8086821fbc326527b343
SHA512 6ec79880cb54b454953e927b7d3f1066e0574bf8ae06fae5cf7b74e2d85f44f59e3b246f1fe49b9adfa66b4a0317a65645f85f4f2affe7739fd0a580624bfe25
SSDEEP 192:sxZWR/Wkb/fLs46zIdpdYYHW6+WNGY3EjP4Ig5PJ:sxZWwkb/fLs46sWYHbGQb
TLSH
T14122B7126E28A97B8CCBE21DBB15BF03E6F9503291911E58A6FCDA1C05E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a46c985-4739-43d0-9cdd-48b7801bf959.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7a46c985-4739-43d0-9cdd-48b7801bf959.tmp
Size 27KB
SHA256 e21b5fac409dc10d632778e9221b4ae246d17c8e5f7ced2ea0d1dc95d2a28345
MD5 d7e3efef122713c1e3a689ef2d3bd9ef
SHA1 73428da53cbaa3ff194e63db90a1bf2222cfec49
SHA512 5fdcb3568f3c3d546601767e7d0602ac07aa65b39528e4f4d0392821bad293f7631893fdf1215cf81ffefc4b05b31ffa5fd89c357f2f1f8c50d276228e0db242
SSDEEP 768:AI30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72rrolZM1S:AI30AbSWvS2l9u1jaLmLZ12YGS
TLSH
T16CC2EA3B640CCB7E4FC01A9DDC6AAF9B6E9C02C796548D4047FA984C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8decc436-e0aa-4424-a296-d680b0979d2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8decc436-e0aa-4424-a296-d680b0979d2d.tmp
Size 10KB
SHA256 e63f9f1c3def4c01d30aa9084cc1fb2d63a08defa826ed91d6c1203a15699c75
MD5 d3d9c9be9e6adcae9b1221347d1a725c
SHA1 88a2cbbcead60cde8b81cb1eb02c0c6af5523a1c
SHA512 3cd17518b2355c8f85c1e42e5beceb99a1b2933de2a282f3acb784efbaf65fb06ba83ec459d7de377548ccc0930c3daf6fb57a0b1dd54367e9e2cb649a96a549
SSDEEP 192:sxZWR/Wkb/fLs46zIdpHYYHW6+WNGY3W4P4Ig5PJ:sxZWwkb/fLs46s4YHbGnb
TLSH
T1A722C8126E28A97B8CCBE21DBB15BF13E6F9507291901E58A6FCDA1C05E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 f8d66899dc65ce9c0176948847d0f5adf22e5e3f16fa34d8baed1ee777243f6b
MD5 33533a80cd76400b1a9a52cd2c6c790b
SHA1 24081749a744fade185c7a98f00db8250c1736e1
SHA512 21b686a22d44bb02502896d21b8a2415d6d9761c19469470ec8c71be13c2fbcf2a11fd602e7531bd78ff83969fbc5925f8298e6548a39ee850fdad82a43e057b
TLSH
T1DDE026E644C8C32FE69C648702B8778D83813A1BD2C87E5E3B00C5C57645A80ABCA6D4
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 675d329203b5bada2cc2757c5515acc1bc12900ff3ea6c763b84d6db30b370ca
MD5 d5954952ca8099065c0ec8e400b0c394
SHA1 9ea7b521db6e23328fa50a68b44057fe07f87265
SHA512 51b966422b11bd55b84c66bbacfe43262809acf22d8ee91f6319af4d81ffe62797416ed007fa7e4383311d656753b39fb46d5a49bf1462efd20ec00c223e49dc
TLSH
T1836170C198A14095FBFB44F392E5F08B37F84AA38FB32DB19354D978D70E745A21A04A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6dd336fe4ad7e540ac9e186c22f235af3549e91f7cec1f6764b1cc8e5b6a482c
MD5 267bfb4f23ceec109d308ae640d17f9f
SHA1 f45f4eda7f34b247c3ffe1a1e8a94a39771c451f
SHA512 1162692285511e23eec4650063f8b413c746679f12facf6bce35fbc679a19ac2cf9c72040d03b9b5d19d70294336e60019e1e63e1e51bd50af587c9864008db2
TLSH
T1F16181C198A14095FBF744F392E5F08B37F446A38FB32DB19358D978DB0E745A21A04A
MD5 SHA1 SHA512 TLSH

Submit Download

94f5c639-0339-4473-ab1c-2baef57c2303.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\94f5c639-0339-4473-ab1c-2baef57c2303.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

144a679d-b46a-49f9-b994-52de8d86b2a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\144a679d-b46a-49f9-b994-52de8d86b2a4.tmp
Size 1KB
SHA256 0e4191d376db12e2f8148c12db6a0731b8a5453383c3422dab625215b5acc8d1
MD5 14b3942fab0198c08a3227272fc87cb8
SHA1 a636980abff5342dea11bc861110add3f347f7fd
SHA512 0718bf2cbd9c43a0e2ae6301c0fd4a74c4d516adf03dc537b63c1ab0f852b11e392492e1517abd995084760ec503b6724a80595e800cf64a5af23882df706455
TLSH
T1C511AFF7C3E5866E8A1196F06A28AE2BCE2D0506431C7C26C9D4EF2B93F3475E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

af7ba2d4-35dc-4857-b233-1ac7394d53c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\af7ba2d4-35dc-4857-b233-1ac7394d53c0.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

d51a4ca6-9240-47c8-ad7e-aa1b2e424bcc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d51a4ca6-9240-47c8-ad7e-aa1b2e424bcc.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 1da5e2a3fe26468874eeff96192f028f90c46c09e627b31dadf88cd399e35f95
MD5 73405b78f6226d2c7d641264bbc46768
SHA1 a0bce31a7dbfe3986b01dc040409b6e8df29e398
SHA512 c17b3c0536abe28d6de5f665a46720cfbdbb1c47de01af09f5197a2571154eb69d799302df6f29b17037acf10e4e975fc1e2fdddf2f3158728d53f03f4f027f8
SSDEEP 192:sxZWR/Wkb/fLswzIdpdYYHW6+WNGY3S3P4IgrJ:sxZWwkb/fLswsWYHbGq9
TLSH
T13122A6126E28A57B8CCBE21DBB15BF53E6F9503291D41E58AAFCDA1C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

befbe802-34ea-4f20-a6ae-e68d44172e66.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\befbe802-34ea-4f20-a6ae-e68d44172e66.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

b4f952b9-3713-4584-9492-5a7a2ec3ddcb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b4f952b9-3713-4584-9492-5a7a2ec3ddcb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

abb80e30-2863-4e5c-9da5-28cda68fc93a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\abb80e30-2863-4e5c-9da5-28cda68fc93a.tmp
Size 21KB
SHA256 bfe09c84de9866b3e73bbf317322f7b08b54ee405475934f0accacf7dadfc7cf
MD5 8f8eef64c4f4a61709522604ceaba1b5
SHA1 1bb7b0c8f7b104fe899db4076d7227296b4407c5
SHA512 31ddb53fade7793d6b13c80d9db2eee0632199a461cd242e014f15860ae0e991901f815f894d669f9ec6d5e1b4a11bce171611ef3808b3a121047cfd9280c79d
SSDEEP 384:BiFzQkUSvWzsN08TUNTUlIll54mpurS0u9iX5FCtWV8CVtln:oFdmtwgt4m/jajVNPln
TLSH
T199A26B3398A8D83B5DA6D751F64E3213DFB481A7D6D4AE94D7DCAA2C01DB1C8130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf66580b-169b-4661-9d87-4087a7c74267.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bf66580b-169b-4661-9d87-4087a7c74267.tmp
Size 18KB
SHA256 b1756441ccf65b88917cd9ded5f5cc94e2b7175b295f785e0402ae469db8a5c9
MD5 8ddc372e283f07abf0040cbecb71e296
SHA1 4223c5ecd30324cee08da8bf01ccabce1fcb3b75
SHA512 84cf2513d057354465a4d3f03e1e36536eed2b7a589cb678ae648c481d532b9c184061138bfabfd96d97374eba8624b72a585d2ee671dbd5e657a1089adc94e8
SSDEEP 384:jQkUSv0sN8c54mpurS0u9iX5FCt9V8CVtln:N0a4m/jaOVNPln
TLSH
T119826D32687DAC3B0DE2E151F14F3613DFB891A796D42F94D6ECA72C01DB198130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3fc9bc9-d000-4f45-adfd-71f71d72155d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d3fc9bc9-d000-4f45-adfd-71f71d72155d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9612bfe3ef6380acf60544ddfa8e63f9695872e50e37846b1329156de11855b7
MD5 1fe56a0568fb05bc8807b56dfe41cd05
SHA1 b249aea4bf9340ca9cdbb2386268576b389731f1
SHA512 1421c66e6ef76d505e6897ed67c786c5e5c9a902da4e153a12dec20583e4e6d2f718dc425b405b855419b92053a30ac457cf79dc4ec856c84410e9e6d684ec9f
TLSH
T157412858BBFA1148B3B36F569BF6A96E447B79372E4AD45E00150E4F0623A40C872B37
MD5 SHA1 SHA512 TLSH

Submit Download