9c28d17482d7b490a276798429bdbaf618158a8c77fe9392a12cddcc30f735fb

Analysis

max time kernel
148s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 22:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ConnectA/runtime/pygame/docs/generated/c_api/rwobject.html
Size 14KB
Sample261030-2h4bwagy6p
SHA256 9c28d17482d7b490a276798429bdbaf618158a8c77fe9392a12cddcc30f735fb
MD5 588efd5767e0fbee3f512d21f9bc9c8d
SHA1 68b8316140bd63e5aa485d9f384132dccd98a194
SHA512 14c1c04d80b351c17985cd94a2009a2530be2614acef1bbc61020a0e7b755f271db1676f6ae10c8ad04d743f9f04286a2a202d3444d366141caeeabc8dc8b8f1
SSDEEP 384:FSnH0eyHpZHMOe9HOeyHpLJPe3HdmSe3H7+xHjeyHp+HzRUdHzeyHpeCHjeCHJ+f:InH0eyHpZHMOe9HOeyHptPe3HdmSe3Hz
TLSH
T12E62D9A299F284331237C1D6C2FA5778F4E6414EE5401844F2FC5B6E9BEEE85B91780A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1080	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{22B58E5D-1939-452B-BEBA-8AE6ECC9EFCA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4728	msedge.exe
4728	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe
4416	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4416 wrote to memory of 4620	4416	msedge.exe	89
PID 4416 wrote to memory of 1080	4416	msedge.exe	90
PID 4416 wrote to memory of 1824	4416	msedge.exe	91
PID 4416 wrote to memory of 1824	4416	msedge.exe	91
PID 4416 wrote to memory of 1824	4416	msedge.exe	91
PID 4416 wrote to memory of 4016	4416	msedge.exe	92
PID 4416 wrote to memory of 4016	4416	msedge.exe	92
PID 4416 wrote to memory of 5000	4416	msedge.exe	93
PID 4416 wrote to memory of 5000	4416	msedge.exe	93
PID 4416 wrote to memory of 5000	4416	msedge.exe	93
PID 4416 wrote to memory of 684	4416	msedge.exe	94
PID 4416 wrote to memory of 684	4416	msedge.exe	94
PID 4416 wrote to memory of 684	4416	msedge.exe	94
PID 4416 wrote to memory of 4672	4416	msedge.exe	95
PID 4416 wrote to memory of 4296	4416	msedge.exe	96
PID 4416 wrote to memory of 4672	4416	msedge.exe	95
PID 4416 wrote to memory of 4672	4416	msedge.exe	95
PID 4416 wrote to memory of 4296	4416	msedge.exe	96
PID 4416 wrote to memory of 4296	4416	msedge.exe	96
PID 4416 wrote to memory of 2396	4416	msedge.exe	102
PID 4416 wrote to memory of 2208	4416	msedge.exe	103
PID 4416 wrote to memory of 2396	4416	msedge.exe	102
PID 4416 wrote to memory of 2208	4416	msedge.exe	103
PID 4416 wrote to memory of 3828	4416	msedge.exe	105
PID 4416 wrote to memory of 1028	4416	msedge.exe	109
PID 4416 wrote to memory of 4940	4416	msedge.exe	110
PID 4416 wrote to memory of 1832	4416	msedge.exe	111
PID 4416 wrote to memory of 4540	4416	msedge.exe	113
PID 4416 wrote to memory of 4540	4416	msedge.exe	113
PID 4416 wrote to memory of 2208	4416	msedge.exe	114
PID 4416 wrote to memory of 2208	4416	msedge.exe	114
PID 4416 wrote to memory of 4728	4416	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ConnectA\runtime\pygame\docs\generated\c_api\rwobject.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x20c,0x23c,0x240,0x214,0x24c,0x7ffb759dc188,0x7ffb759dc194,0x7ffb759dc1a0
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,7526117706579218766,15336357719738612369,524288 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,4607661478286938977,2249390178988489761,262144 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,2571048048470680360,14017036523311101353,524288 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,15589525347783213346,7225472510288024724,2097152 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,2701103725763783985,17860691507228358076,2097152 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,10209253545772412213,14127785121406235642,2097152 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,17238017279610843279,14647547512136966395,2097152 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,17932857073694543538,470162335384783500,524288 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,8037454567099565115,3888865327102095629,524288 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,7573580021920544666,1014586657741816166,524288 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,7573580021920544666,1014586657741816166,524288 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,17115288884474219154,1320078151048394191,524288 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,13846138207666487020,8867988762389798242,524288 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,1382846919640143817,17102793933816999982,524288 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3996,i,2099138944526527170,17802631335740617915,524288 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:8
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,6370815999812503231,5185202900477414650,524288 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5228,i,14495616596722762653,5140015142270712666,262144 --field-trial-handle=2308,i,1854377157806824503,10777325576285437096,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4728

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2660

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

52226ec3-7b0d-4a52-a404-ac6229a01143.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\52226ec3-7b0d-4a52-a404-ac6229a01143.tmp
Size 18KB
SHA256 d7fdd3014d2c4971b022245aef434ec09993583eb2e3c5922b44598e45630513
MD5 a76ed46d891698adc971700035ad5c96
SHA1 8f69fb98e23e99d16adce5b728b4b3dc2259e65f
SHA512 2fa86d3764dbee5ee2b32fae755a3172b462642cdd3a1deec1f5b531fc92f073f646924a02758150ea451dff63fcec3f5f7b3e97ed3ed922381ff9cca1e2d841
SSDEEP 384:CvFwPasu9sNI6Nh1GIPzIGmEb6niPmAk7f6dKuB:C5O/fbrbSiPmAkD6dRB
TLSH
T1A4826B729C74EC265DA3A644F98A3613DEA4427BD6C47F50D6EDAB0D00DF28C130BA1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9029fa9b-b879-4fd7-b343-e4b7307f6852.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9029fa9b-b879-4fd7-b343-e4b7307f6852.tmp
Size 8KB
SHA256 26b78d831f5e6a0c9814fc26876f21ac1b2af9b92cdf4b8e1b6053670397e292
MD5 1e5bcc9904dc52f4f995b61a2ed29252
SHA1 984303f34de22618d0b629d3986ba9cb1061644d
SHA512 abc7e2c155ccfae7c607e2be4512cb40ad4c09995fbb1aa4f3f1689bef2506818bdd20016c079190cf296f0cbfdb9b57b82e970a01860f2570e4a1f4de3f768f
SSDEEP 192:RONJ6IEXQmiUyc4TNuIGmE7RYW6O27HRq6U6:RONJ6D5qNuIGmEb63HPU6
TLSH
T16512F976A8B8BC6B9EA3A944B48739139EA54237DBC57F90D5DC2A1C00EF25C130B517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

16745ae3-08bb-41b2-b57a-de4076f3b7f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\16745ae3-08bb-41b2-b57a-de4076f3b7f3.tmp
Size 27KB
SHA256 b79ff32f7299155c07f13fbf31e09e0637394f13fcc0f5c3847f4b9c6624ab65
MD5 d63e2c582e1db01ab07fa34e892eaaac
SHA1 8f0e621711a47eb792bac378a898bd50bf2c0020
SHA512 632aafd9c3a77409a029ab7b6cef63cc7aba1d22e5c167c5756f4198c2397ea527a79538549e6aa12ba71e51e878842cae3a9fba1940b64b5480b5fb737c9989
SSDEEP 768:UoWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7/ro4tfeemRqV:UoWPcLKWvKeEeu1jaClLiF7s4tWemRqV
TLSH
T139C2FA3B644CCB7E5FC01A9DDC5A6FA76E9802C79A588D4047FE944C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1cdc608a-5f08-45ff-83ba-6c269f061a1b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1cdc608a-5f08-45ff-83ba-6c269f061a1b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e26880c-e381-41b5-aa1a-2fe27c17eb04.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1e26880c-e381-41b5-aa1a-2fe27c17eb04.tmp
Size 9KB
SHA256 18aa7bafedac23888bcccb3f100949faee7146f464079c2fc456a8f060c57476
MD5 e6e425d2a75aeef85182265dac9155bb
SHA1 2a9c06fe97415fd32e416788de425c0a5a0eeef9
SHA512 7c692cbae186561122fab204977944a523b27e3c42704640d7d485063afa307a13bd0e48b8e3ef42aba4720c608a7f431c96dc76006f5f2c84eee050d1a8c278
SSDEEP 192:sxZ8RiWk/fxsYZ3EIdpdrHW6+WNGYaplVWxDXIgrJ:sxZ8zk/fxsaNZHbGh2j9
TLSH
T19F22A8126E38A93B8CCBE20DBA55BF53D6F9503251942E58E6FC961C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4bc2e234-183b-43cd-8966-d71d083bf8c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4bc2e234-183b-43cd-8966-d71d083bf8c0.tmp
Size 9KB
SHA256 1c70596a5c6bac4f49580b749a803d0fcd4ce94d501d07869f88a1c999d8880c
MD5 bbb374e9ab6a5aa83f25e67fe15b772a
SHA1 2471ebd84456204261fefc94dfc7e45f3985ceb3
SHA512 e914540c8c573481724da6d390e0358fcc6be18a9bfc54a3bcca6352b15e2853845fa3dd0afde0c9c9c97ad15bcea72327cd77995966a61be350a270eada6088
SSDEEP 192:sxZ8RiWk/fxsXZ3EIdpdrHW6+WNGYaplVWxDXIg5MJ:sxZ8zk/fxspNZHbGh2jK
TLSH
T19522B8126E38A93B8CCBD20EBA55BF53D6F9503251942E58A6FC961C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 36ad32dde3b1d6478938707161dd293dbf3dc227575e087c9992e0a46f2f8715
MD5 130eaf5974f4c8c326a49b9e604498c4
SHA1 482e3986e0c562d10c001a4c15568a82f946fb75
SHA512 b32744ec352a60534d960feff332026608d2c7f80dd03abea8783d2d78db65840b094f9101c33e8ecb0533cbcf40b80cd294e6aa143183aa51d45945195f4a34
TLSH
T10EE020CA85C5C31FD74C648743B8574D8386361FE2C0BD1D6B14C9E4B40548066A15E0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 3aaf26b0542f44fc8ea360f1f19fac952059ce37edd9ff2071cddfe75f4599e8
MD5 5d8db8080f0de3d8770ecd6d366ff2c0
SHA1 ed787405bedc8eba3e87716cd4032673c6702f77
SHA512 d3a075b11f88b3b679efc32f7f5c6b653d96984bfae49734c15798effc0203f3270b1beaf9e8202a67b9239aec463c0c6c1e516609486d39c262ef9344389181
TLSH
T12C6139C25123C2DEDB5982B587D921863EBCD6B8A2C3CD9102ABF83B7B0EF965000153
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 33797d8162dc081aa8985247b7feaee500196855c8619d31f53861d0586f3ab8
MD5 6f3195a1df5996561190a1b5d30a7771
SHA1 9c9ad928fc0435de74ca95971d3ecc558b03cc2a
SHA512 fa3e37773d80d10252fa30d68a9148f9023edd443e0e955fc74e8df9901f61d1909b61798ec5571b4b3a7e7ea7a189695ad31a442be25cf82589f9586515d6db
TLSH
T196613AC25513C2DEDB5982B587D9218A3EBCD6B8A6C3CD9201ABF83B7B0EF965000153
MD5 SHA1 SHA512 TLSH

Submit Download

f2cfc56c-549c-4d94-b61d-02e7ac1e3c88.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f2cfc56c-549c-4d94-b61d-02e7ac1e3c88.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4b93698a-04cf-4cbf-b968-366766c2cce4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4b93698a-04cf-4cbf-b968-366766c2cce4.tmp
Size 1KB
SHA256 2c3e8b8028ba3e1f1d5a76d9f22c53fc4af9d9acd817d4357b6a0a835cc01b66
MD5 fb4bbc7093c884099a5e74a667dba6ce
SHA1 8ea751f2839870c12b5e3aa27f95a7b5621f2dd3
SHA512 6828576d78c6aa4534556d016b1077a05e69006737e3ffeca5d249f3b8df0db13bcce31f9bf1697dfcd4e98dd8ff0c6a666e5aa51a80f43112ccbc355906dda5
TLSH
T10911AFF7C3E5896E890156F06A2DAE2BCE2D0506422C3C25C9D4EF2B93F3075E00295F
MD5 SHA1 SHA512 TLSH

Submit Download

5c1522f1-9823-481a-b649-5560ac97befd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5c1522f1-9823-481a-b649-5560ac97befd.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

b480a6a0-c572-48a7-9b2d-06185ff08ab7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b480a6a0-c572-48a7-9b2d-06185ff08ab7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d942105fb88c38bc37473a5cc15ab68e6195d5dfdbba5918b16955e16b20b912
MD5 29bdb420eef6de44c5039e86235b0e76
SHA1 bb49be0b46fc9f7dee752dd9abaffdea585d4010
SHA512 47b62a9f74a178df0fe5b1f4918d3e348428f64ced6c0bdd17d2c7f2be885696e9ce87801ae1653cc2e70bf772929d1c8d7e0afc421eaff68eefe77f448257a1
SSDEEP 192:sxZ8RiWk/fxsX33EIdpHrHW6+WNGYapjV1xDXIg5+J:sxZ8zk/fxsHNLHbGbDjY
TLSH
T11022C8126E38A93B8CCBE20DBB55BF53E6F9503251942E48A6FC961C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f4d24496-71da-48dc-bb9d-6adee8c0a8e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f4d24496-71da-48dc-bb9d-6adee8c0a8e5.tmp
Size 10KB
SHA256 6fc8f841720d00a22795a7f53e229346e08fb2cda991ceee9d7a27fe1703668b
MD5 4c505c489c7f6b72586b7370933b367f
SHA1 e60e5efd18dc8b9343315480743758a6b894fc32
SHA512 d4774c94de9cc0b5c85e02bebee5dec0caf4d0258680402a7dedf91df5bc457d72b7f8388a9ae777a9b361db681c031ac2df3a572345508bc3d3872787ad0bf3
SSDEEP 192:sxZ8RiWk/fxsX33EIdpdrHW6+WNGYapVVixDXIg5+J:sxZ8zk/fxsHNZHbG9ijY
TLSH
T15922C8126E38A93B8CCBE20DBB55BF53E6F9503251942E58A6FCD61C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b7d2c91-bd56-44da-83e6-e7d907d86928.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6b7d2c91-bd56-44da-83e6-e7d907d86928.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b05c8608-e90b-4e16-be3c-d2c50ccce31e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b05c8608-e90b-4e16-be3c-d2c50ccce31e.tmp
Size 18KB
SHA256 f90c5526792bcda2310c6d7e90b8c2ee9176b1989846b5fa4c36575ace6c8609
MD5 e21059d533869a808c3daf615473fce9
SHA1 67a670007c3a4a2cb34b51c40a6123f19cc11eb2
SHA512 9c74102494764976ebd554f35c39e8e2aacfb1561b4acc71fe86182cd81aeae343a41b0feb5bd3ebdc236fa0588e63a0a11cc38e40369d65365f85ec94558d4d
SSDEEP 384:QvFwPasu9sNIxNh1GIPzIGmEb6niPmAk7f6dKuB:Q5d/fbrbSiPmAkD6dRB
TLSH
T146826B729C74EC265DA3A644F98A3613DEA4427BD6C47F5096EDAB0D00DF28C1307A1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da4d2f00-75be-443c-8b2f-ea4e454ee54f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\da4d2f00-75be-443c-8b2f-ea4e454ee54f.tmp
Size 8KB
SHA256 5ada5d06242fe38732c12c02a7c163f6fbb2be8870a3d8201e721ecc8cea950f
MD5 d2288b414b249edde290088d26652f6e
SHA1 94e8e9fe82990e829fd75b3595b5aaa1e6c4bce5
SHA512 f756f4cf08463ed2c6b4505420b5ed9aa9d1eaf97f4187225e2eee6b36078ad4949d2375687750cb7d8ead7d266e9401319733470c7fc3da13c00093982b0996
SSDEEP 96:3qONkxQsjpfe/tyng7X5ih/cIPURHl8h4otop5FYD4NBnP9ZvEI0IG2jb3099R1P:aONx6IE7QmiUyI4TPuIGmE7ROC7sRCU6
TLSH
T16D02E835ECB8BC6B9EB3AE09B4877A235EA9112BD6912F84D9D45B1D00D724C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

edc089bc-ea5e-44ba-8c1e-65f27f4148c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\edc089bc-ea5e-44ba-8c1e-65f27f4148c4.tmp
Size 20KB
SHA256 e5934b0605ba42ab2b96f270a72f740446885255c4ac421ef7f86ddc3240cf13
MD5 294db8b0dccca224dd0dca45c925895a
SHA1 3c0a24753f615f5fa729d6052471fbe745d09ebc
SHA512 802226915b9610bb0cef491a35303211b0a7992c05d068a3f50f00fc35c4ff05854e37bef4ab07883d63a96b53746a310e61bcab3a319fe78a86117303c72e43
SSDEEP 384:TiFwvFwPasuRzsN48TUNTUlIlxNh1GIPzIGmEb6aHiPmAk7f6dKuB:+FwFFwg3/fbrb9HiPmAkD6dRB
TLSH
T120A24C738C64E93AADA79B44F95A3613DEB441BBC6C4BE50E6DD9A0D00DB2CC1307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bbcddb0e-d248-4548-a573-4f541540a496.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bbcddb0e-d248-4548-a573-4f541540a496.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a54296552c63c76971ce684eb33368d538177b8be1e81ba7d672b16cf043b8bf
MD5 9766205f762a02ecacf15f7d76d79d27
SHA1 5dcebb35bd83c8a774b60fa641879a543a53fb12
SHA512 6bf54a0052f59e50749aaf69d60445071528c699248129f339c643f45effc2b6473e9116d226912edbb78ecf93a53241609f1740616863059ff966a9d3d94973
TLSH
T10241F49DA6F91158B3B76F4A9BF6686E887BB8372E06C45D00110E4F4A63B41CCB1737
MD5 SHA1 SHA512 TLSH

Submit Download