e50e41602994840b788471625fec54a4db6138ec971be05cfdfba40daf906c22

Analysis

max time kernel
148s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 00:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sunu-marketin-direct/resources/views/welcome.blade.html
Size 80KB
Sample261102-ag6xtsd13t
SHA256 e50e41602994840b788471625fec54a4db6138ec971be05cfdfba40daf906c22
MD5 f9f90b3bab40fd1d366e9b54466deac7
SHA1 0bd01642e2d51063e753dee5cae5e57cb62db576
SHA512 1c79a7d16f73846bba0ec71d6ee41752feaa961606f7ac8126a6a1ef04736c27f09df54cb7914d2a185f4e479c517620b20daa5b3472bfe9e63b13b7af8cf49f
SSDEEP 768:oNqKUNiY6Sa56kAfazCbCzGV2Sotgvm0TH0TD3vYstDgvJIJS0Tf0TtxgHMRfEUb:KRzSaOfaebCzGV23t6joFDuUXQBEnm5
TLSH
T1A883E6FDB77088E95E8A4BEAAF80F538341710E35D504989FF1C16242BC19AE5C7B786
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
812	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{A77635C8-0EB9-42F4-A66A-B1567C513FF2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
456	msedge.exe
456	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3716 wrote to memory of 3920	3716	msedge.exe	87
PID 3716 wrote to memory of 812	3716	msedge.exe	88
PID 3716 wrote to memory of 2472	3716	msedge.exe	89
PID 3716 wrote to memory of 2472	3716	msedge.exe	89
PID 3716 wrote to memory of 2472	3716	msedge.exe	89
PID 3716 wrote to memory of 3852	3716	msedge.exe	90
PID 3716 wrote to memory of 3852	3716	msedge.exe	90
PID 3716 wrote to memory of 2208	3716	msedge.exe	92
PID 3716 wrote to memory of 3776	3716	msedge.exe	93
PID 3716 wrote to memory of 2208	3716	msedge.exe	92
PID 3716 wrote to memory of 2208	3716	msedge.exe	92
PID 3716 wrote to memory of 3776	3716	msedge.exe	93
PID 3716 wrote to memory of 3776	3716	msedge.exe	93
PID 3716 wrote to memory of 1324	3716	msedge.exe	94
PID 3716 wrote to memory of 4264	3716	msedge.exe	95
PID 3716 wrote to memory of 1324	3716	msedge.exe	94
PID 3716 wrote to memory of 1324	3716	msedge.exe	94
PID 3716 wrote to memory of 4264	3716	msedge.exe	95
PID 3716 wrote to memory of 4264	3716	msedge.exe	95
PID 3716 wrote to memory of 3576	3716	msedge.exe	101
PID 3716 wrote to memory of 896	3716	msedge.exe	102
PID 3716 wrote to memory of 3576	3716	msedge.exe	101
PID 3716 wrote to memory of 896	3716	msedge.exe	102
PID 3716 wrote to memory of 2508	3716	msedge.exe	105
PID 3716 wrote to memory of 1192	3716	msedge.exe	108
PID 3716 wrote to memory of 5016	3716	msedge.exe	109
PID 3716 wrote to memory of 1492	3716	msedge.exe	110
PID 3716 wrote to memory of 3896	3716	msedge.exe	111
PID 3716 wrote to memory of 3896	3716	msedge.exe	111
PID 3716 wrote to memory of 2864	3716	msedge.exe	112
PID 3716 wrote to memory of 2864	3716	msedge.exe	112
PID 3716 wrote to memory of 456	3716	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sunu-marketin-direct\resources\views\welcome.blade.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffcf2f3c188,0x7ffcf2f3c194,0x7ffcf2f3c1a0
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,1006789032243744352,10774991958576357609,524288 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,4328541835442418457,15938819733584780877,262144 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:2
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,5035306348764511528,4093945583303303328,524288 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:8
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3500,i,17562717162641439700,10132420938782283954,2097152 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,13861391421203563930,895638358552086168,2097152 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,5204541169431574626,14507757812268616529,2097152 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,2212725942802280774,5606043525955242980,2097152 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3648,i,7135994357441940434,3141209214813322034,524288 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,13531365337594826845,18346761911448591919,524288 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,14244178736106557867,109430435270302732,524288 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,14244178736106557867,109430435270302732,524288 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,1608945605914604682,16017452064545948356,524288 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,17180043610629950966,1848403259992383407,524288 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,307217273952178594,11761198475595538537,524288 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2164,i,8693721901889607670,7183165988695912309,524288 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,40280695099091409,10052192088056631468,524288 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:8
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,16922995155401887518,605600641454144500,262144 --field-trial-handle=2216,i,7516805364029043799,17545172440110127157,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:456

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4592

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

092ad050-71ac-4c37-a40a-83ffc202dbe0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\092ad050-71ac-4c37-a40a-83ffc202dbe0.tmp
Size 21KB
SHA256 89dbdd8f99bab952bee15d1507652d434e53c7f134a4b9f2c2c3682ed5abbc34
MD5 99010cfc832e905b1ecdfdb59cceaa19
SHA1 57f7022ca3943d538e2a5625ed0f131c81371d3f
SHA512 8072b84aa847432de7f246cb7915e3dc34b2b45a3440f332a301e45f97af0f5ce7492472569d368b58598c662df7d150c3cd6b43cbaab31f00a952c5a00983a4
SSDEEP 384:tKiFzQkUSvczsNE8TUNTUlIlRhRZrL0HX58EMOzAApcH7vBEQjIIl7:tBFdgxwgBRdaaHOZpcH75EQjLd
TLSH
T16BA26C7298989D3B5EB69A50F24A3613DFB490A7D6C5AFD0D6CCA92C00CB2DC234BD11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

602e5508-86b4-4fca-87db-377ab1111229.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\602e5508-86b4-4fca-87db-377ab1111229.tmp
Size 8KB
SHA256 df4361347a9975765937d5af2d57c26e0478a846faeffa179fa9bda9cc4dd958
MD5 26a5003464595cb860f71a34ab3ffb4a
SHA1 1b9e5570d92ba12ac27edc4468256dc03493564e
SHA512 af2b574df99c5c188a8f03fc413da958c43a07e09553097a145df7f66a711012f41a0681a6fcc517eaf7ca8a7f970dcca719e46ee7434ef85c20b67554a0665b
SSDEEP 192:1ONf6wlDgQmiUyFWW4X58gZMOKoAaDlvqnU6:1ONf6kg3W4X58EMOzAq2U6
TLSH
T1D402FA35B9687C7B8EF2AE09F58B27139FE5106BE5512F84DAEC1A2D00D775C2347822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6810989f-c3e3-4418-a356-1a3ee4a30759.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6810989f-c3e3-4418-a356-1a3ee4a30759.tmp
Size 8KB
SHA256 935ffedc90da9cddb54c7491dc1a5cb2ec975c3f65f2d0e6e8672a42f70ddc32
MD5 b6beb35bd0253635baa3b3429df237cd
SHA1 bca752d234b8c25ff813b181198814711bc84612
SHA512 d4077933ae624e0539186d8895869da69b8dda0ed1a9ed3565122afb75367ffcda1912bb9f3debad2aef9c0c9e28a45399919a5d28a025fa09fd2a61dee6910a
SSDEEP 192:2ON576wlDNQmiUylWU4X58gZMOKoAAJveNqVU6:2ONF6kLdU4X58EMOzAAIcU6
TLSH
T1B2120832B8A8AC3B5DE2A554F48735139FA99127E7467FC0C6DC2A2C01DF66C234BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

472eaca6-d723-4810-ab3a-dc4d54182f8e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\472eaca6-d723-4810-ab3a-dc4d54182f8e.tmp
Size 10KB
SHA256 9c393b46305e5484a8239b93a8ec84503bb1b4b0fe3a5f2c4c628d950ef9a9a4
MD5 324394187655575078038226ac5a8ce8
SHA1 0de3f2f7fa6cedb531e0d07de6861c37256b339c
SHA512 52c3d0ae18e07fa08d115490248eb35089212c8f94ff43ba22e3efc1032bdaf78564686f96dc56664713e429833be117663365c83c6e98f0a322f99494a6ab94
SSDEEP 192:sxZoRAWJ/fOsnYdIdpdYHW6+WNGYr28pSIg5RJ:sxZoxJ/fOsnYeeHbGXl
TLSH
T14F22C9526E28A93B8CC7E21DBB557F13E6F9503291951E84EAFC861C05E7BCD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5bd58667-75d9-4d66-b97b-8d9490885bd0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5bd58667-75d9-4d66-b97b-8d9490885bd0.tmp
Size 9KB
SHA256 32ac792e4561bfd48153b7b114e349a60468e40ed90552095856c7b5d992675c
MD5 aea34d6dd0ffa6f364fff384e1b067ba
SHA1 aaff875e78b783503ec5d0ecf5c3e24bbffefc53
SHA512 7d5bd33fbe4cfcbfbbac16d59be978c41d684ebd49a112dfc1578b1e337a3c801425810d802cafd06f156468a6a409adf8ca0c900d10c93f3e08ede40fdab2bc
SSDEEP 192:sxZoRAWJ/fOsLdIdpdYHW6+WNGYrvwpSIg5DJ:sxZoxJ/fOsLeeHbGWz
TLSH
T14F22C7526E28A93B8CC7D21DBB55BF13D6F9503291941E88EAFC861C04E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6957c9f9-ac75-41f7-85c0-fa005726f9f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6957c9f9-ac75-41f7-85c0-fa005726f9f9.tmp
Size 9KB
SHA256 6d528f8368c283deaa2ae9c27d03a71e9e6a4ebbf64dd856fd1c383b0e0cb592
MD5 d52ac55fddbe025ad0e6fc002b783596
SHA1 c1b1d95636424c51e955577e3832476efe0a329d
SHA512 ed6954dfa6f9cd0e197491c7b21d0e00cc8dc947aab473d7130167a1db73e005021fb47fd8268b96267de2a80d3b821de30881e0fdc0b4efb0c47c0a1e132734
SSDEEP 192:sxZoRAWJ/fOsFdIdpdYHW6+WNGYrvwpSIgrJ:sxZoxJ/fOsFeeHbGW9
TLSH
T17C22B7526E28A93B8CC7D21DBB55BF53D6F9503291D51E88EAFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91338d47-46f7-4baf-adfe-2c01ea12ef49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\91338d47-46f7-4baf-adfe-2c01ea12ef49.tmp
Size 27KB
SHA256 9196e1f05243aa61cdf22516361ef285ea580fd36f676cc7bddaf9683f2ee82e
MD5 835f976b04f715666cda76ead6afbb62
SHA1 cc92a58cc6e47c9d1c06dcf47ba01b71774396b2
SHA512 1e1ce9eaeffec8d09e7f283ad3c4da135828aa7ff451ddfeef628b7f9340c1f57ce6291e8923e749d306f2593b25f2c8e5dec5a3045288bfdd3676d0477f9415
SSDEEP 768:YVy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb7roRXf:YVy4J/DWvbtBhu1jajiLm0bIxf
TLSH
T114C2FA3B644CCA7E4FC00A9DED5E6FDB3E9802C796948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 df3a3ea31cad2ddbf1366e46a3e34a48082a9c1a6d8d7bd41428dcae0004ea59
MD5 05ea026febf9b3a5f6e1c5d34200fc72
SHA1 5ba66982437a82f70e47904f8379893b71202dd9
SHA512 2b18137ec8c65fb0541368b0f111588bd1ddfbf43c2c9808575f79fc355eb39d259840ea66941ab78068ab17f3cfb160f3d10f81a7d25319ee1b6a44b512c48e
TLSH
T11CE020E965C4C23D5214E45B02EC630C9180361BA7C0694D5F14C848B04204076CDF78
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 42dc5a47ea4d3e437478ce1b430ae3c9b62f1827ac93489638d6f84d3441a872
MD5 a64c7f992d81f205b13511e65404d0ea
SHA1 6d44e16727d2a01fd41b54bfa66e9d8cd4e92a5c
SHA512 7f53067779103452e9d56e46ef3a14afb9003aef80efa985c736d3f5b0d1edb95bef9bfc4d4e37cff7353342ef8ebc015d2099e05d482f24e317c6787aca474b
TLSH
T160610B88DBA1407BFB8AA07092DC108B36FD408E57AFDF5A12F8ECF95F0A3617044114
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 35dac5289b9d9eb7951d059719175eeba5eccc8cd8e1fd12ccbb2c3928a3bf8a
MD5 c60a500c553ac2f386b5df85fcfd2761
SHA1 20203e4f4f52668a7b7c51b1d2468e42c7793650
SHA512 2bc34e28417a2c5c45aac7ced13792bce37c8fd6fe0ed490978ad391a4fad5166cb4433478c72bf015dbe2a55b411280171f9faa2bc2a78f47ba3573de6d9eb8
TLSH
T146610B88DBA0407BFB8AA07096EC108B36FD408E57AFDF5A12F8ECF95F0A3617044114
MD5 SHA1 SHA512 TLSH

Submit Download

1734a1f3-1f8e-4018-b56e-b1379fbcee93.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\1734a1f3-1f8e-4018-b56e-b1379fbcee93.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1017ea22-4490-4682-a9e3-9cb5b9fde66a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1017ea22-4490-4682-a9e3-9cb5b9fde66a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

70ab5362-6ee2-4b74-9191-325d6c517348.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\70ab5362-6ee2-4b74-9191-325d6c517348.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

73f392f7-155b-40a6-a1e8-ee000ab643b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\73f392f7-155b-40a6-a1e8-ee000ab643b9.tmp
Size 1KB
SHA256 7abfd820e3dd53b6fdfb31b7f57a40b56ab7126768d70716f9170fc69b80331c
MD5 8c7035176f458e61cf07425b38faa3de
SHA1 ba4ccb66ba69c64d35948701c21ff2d40d16462d
SHA512 05710fe18b46ba9ca28db31063c846e199a6af8b5fea861e988a7f823147986fa4c85455338bbb77488d45c2392d2e1e4a4e06f821b308d6c42287ba61db4275
TLSH
T1631189F383E586AE9A0157F05A24AE2BCE2D0506432C3C1989E4FF6B97F3475E00265F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 633415219c846e1a0151fbe8b41ef15ec606c9c306fb97d1544d9c74bc641bc8
MD5 8f4bef59c058f44d791155e3f94899f2
SHA1 3024994b99079b9d72ae538c000b8df6f469effc
SHA512 6ce0409db1b6db64e839a1e0f46c0a37165c255ba5f6da19a7de81a40dc3fb44f51aa6e8c7959286aafd8f642d15fffc93bbf2cf1e7ebe7639d192dc36c796f9
SSDEEP 48:KIDI1Ks04jyL2xMwuUUNb4PgISINK9s1uNxmdYHY02yLdcRtfLPwbD2jISlwK9lf:KIDCKs0+WheKiwKaq0KzijSQKx
TLSH
T1E2A1600435BF120139BD2A9891B59B2F124236B77118E57B7FBD80A29E2FE041DFD8D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ab86d0ea-c21c-421b-85ac-3f1e9d218072.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ab86d0ea-c21c-421b-85ac-3f1e9d218072.tmp
Size 10KB
SHA256 17b8efeaffee07c1d61feb03061a42283580712fb26d77435bc46c1825957da3
MD5 beb3e6d1c184441dda874420c14ce882
SHA1 5a1bad33193d02837a3231ee9e5cd05936df2e70
SHA512 5b8c9be31e869dc6bf886a83bd87cd95508869aa60ebd28841303221d071f47cfb50aaf6d81ee411c690e2bdbd7b7c22ccbd68b03c86d7e12d36fec0019eedea
SSDEEP 192:sxZoRAWJ/fOsnYdIdpHYHW6+WNGYrBbpSIg5RJ:sxZoxJ/fOsnYe4HbG3l
TLSH
T1B122DA526E28A93B8CC7D21DBB15BF13E6F9503291951E84EAFC861C04E7BCD124781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ec55ac12-7326-40b0-aaaa-1d45d61d9586.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ec55ac12-7326-40b0-aaaa-1d45d61d9586.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38c5b5b8-e5f6-4523-a92c-f4c5775adeea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\38c5b5b8-e5f6-4523-a92c-f4c5775adeea.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a9412708-08cf-4bfb-98d7-66d90f93028c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a9412708-08cf-4bfb-98d7-66d90f93028c.tmp
Size 18KB
SHA256 2d63b0ccf2a731b5b727c4a3fb72ccc745acc3d7096a53b3bca0c2c727c5bfa0
MD5 bde3e15883045d28353324b3852ab827
SHA1 a8b4645fc11fe38b3c94118a1cd1f2b4507b53f1
SHA512 eb76c27ff4cbb512eb0bbbf12e78e3bcb88b45e92a747553eb6c37155f6d1c202167b9308361d0851a31657b5d94a94905bc555735a5daeef298118977d3afe8
SSDEEP 384:F0QkUSv0sNMRhRZrL0HX58EMOzAAQcH7vBEQjIIl7:Fk0jRdaaHOZQcH75EQjLd
TLSH
T166826C71A8A86D3B0EA2D120F14A3A139FB8D067D6C92F90C5DC6A2D01CA69D234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dcb062f3-cf38-42bf-a56a-5106f3e02bc0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dcb062f3-cf38-42bf-a56a-5106f3e02bc0.tmp
Size 18KB
SHA256 a597d6d49f4110a34374f64e8696822c5016de8af44405958baba484ed854609
MD5 d4b83707fb13e9b451ae8bb4b713e5a4
SHA1 29244619ad8d6ff1ee786f57a6d185fa5bae29ea
SHA512 791bb08d811a3484b638653a6797ceed9482f8110c1aaa686ee89f4b048e3ccbf5ba2d3aa3f577a69f41817ba58944c3a202d6544cb489fb96665f22a40269e4
SSDEEP 384:wQkUSv0sNMkhRZrL0HX58EMOzAAQcH7vBEQjIIl7:Y0eRdaaHOZQcH75EQjLd
TLSH
T101826C71A8A86D3B0EF2D120F14A36139FB8D167D6C96FD0C5CD6A2C01CA39D234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de57565c-4d9a-498a-9aa0-5b62ef63479c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\de57565c-4d9a-498a-9aa0-5b62ef63479c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2bc10d60b2378bd37b3e6b6ad7dabd1069dcd4762361b01c5aedefaf3cb3e9f8
MD5 cdc64e11f3a95cd3bf85e4c78fd68928
SHA1 2a7054680d0c71deb0f731d8c0a4cf931a695e84
SHA512 b31f67331fe816a29f043227fb5efc7363c7aefd66fcc4edd5aefee43209393d601bed0ab722ffebb5f474e7d4a17f5acc9737c33e6ec8cb6f12c794b3e5c1fb
TLSH
T17F410659A6F91008B3B77E56AFF6A82D447AB8772F06D46E10110E4F0B62A01D8B1737
MD5 SHA1 SHA512 TLSH

Submit Download