cf54228fd187a52532a9dda8f347da58536e232ea1beeb78a3115dd813b94642

Analysis

max time kernel
148s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 00:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sunu-marketin-direct/storage/framework/views/a119096b782f3acdd496426276970916734027e2.html
Size 6KB
Sample261102-ag6xtsd13t
SHA256 cf54228fd187a52532a9dda8f347da58536e232ea1beeb78a3115dd813b94642
MD5 a37d96afaf9e1ea45ef6aecc912805d8
SHA1 a7c95166f686b3b307c7665f512dfbfc37bed5f5
SHA512 af4e76ecad7ed755c844b9dddce073bfa846b0676d6561dd813922e6bba0efc145ab75cbae7f2e2da2d569ba246729e31343424f8e9c07c9d25c392691fd07de
SSDEEP 96:S2J/SNi/FLQVTLKCGWz5ln59Jy0jRdoMVZTdIK:S2pV2RKCxDnxyTMVZTt
TLSH
T15CE1855EEAC5101E60D386F7E8D4EA8C89169AC3DE234BDBF54F6915CF8038619A371C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
116	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{152E9F45-C10D-42BE-995F-78B4CF672BC3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe
4160	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4160 wrote to memory of 4656	4160	msedge.exe	91
PID 4160 wrote to memory of 116	4160	msedge.exe	92
PID 4160 wrote to memory of 32	4160	msedge.exe	93
PID 4160 wrote to memory of 32	4160	msedge.exe	93
PID 4160 wrote to memory of 32	4160	msedge.exe	93
PID 4160 wrote to memory of 2152	4160	msedge.exe	95
PID 4160 wrote to memory of 2152	4160	msedge.exe	95
PID 4160 wrote to memory of 1980	4160	msedge.exe	96
PID 4160 wrote to memory of 1980	4160	msedge.exe	96
PID 4160 wrote to memory of 1980	4160	msedge.exe	96
PID 4160 wrote to memory of 756	4160	msedge.exe	97
PID 4160 wrote to memory of 756	4160	msedge.exe	97
PID 4160 wrote to memory of 756	4160	msedge.exe	97
PID 4160 wrote to memory of 3912	4160	msedge.exe	99
PID 4160 wrote to memory of 4428	4160	msedge.exe	98
PID 4160 wrote to memory of 3912	4160	msedge.exe	99
PID 4160 wrote to memory of 3912	4160	msedge.exe	99
PID 4160 wrote to memory of 4428	4160	msedge.exe	98
PID 4160 wrote to memory of 4428	4160	msedge.exe	98
PID 4160 wrote to memory of 1068	4160	msedge.exe	103
PID 4160 wrote to memory of 1732	4160	msedge.exe	104
PID 4160 wrote to memory of 1068	4160	msedge.exe	103
PID 4160 wrote to memory of 1732	4160	msedge.exe	104
PID 4160 wrote to memory of 2004	4160	msedge.exe	106
PID 4160 wrote to memory of 4880	4160	msedge.exe	111
PID 4160 wrote to memory of 2692	4160	msedge.exe	112
PID 4160 wrote to memory of 4168	4160	msedge.exe	113
PID 4160 wrote to memory of 4668	4160	msedge.exe	114
PID 4160 wrote to memory of 4668	4160	msedge.exe	114
PID 4160 wrote to memory of 4276	4160	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sunu-marketin-direct\storage\framework\views\a119096b782f3acdd496426276970916734027e2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x260,0x7ff85e84c188,0x7ff85e84c194,0x7ff85e84c1a0
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,14982068675593510730,13409302076077018983,524288 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,9123347970264629285,9424593788590573498,262144 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:32
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,10030754335465718388,9784121461155439876,524288 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,7971527675498739508,11027631495966959468,2097152 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,944565204304492938,11731354486190512822,2097152 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,11673177372744047826,3900858949276259021,2097152 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,880495038312329564,16676513832842117101,2097152 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3460,i,6550225326416169480,4019064185680549747,524288 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,9597513172063472169,17330604221756444460,524288 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,13663705750917096586,7696356495638714376,524288 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,13663705750917096586,7696356495638714376,524288 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,17132827738342285318,16378475022216848449,524288 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,6605308704859140313,1781447169459102206,524288 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=1672 /prefetch:8
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,5392686125797225491,14344629619508061669,524288 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:8
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,5801312093861439367,12723570868402388229,524288 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6084,i,1618898426214563279,3511842873766912136,262144 --field-trial-handle=2264,i,11380671122391218623,18429392220861991417,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4276

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1436

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2a607206-91ae-4d0f-98dd-8502619feda9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2a607206-91ae-4d0f-98dd-8502619feda9.tmp
Size 8KB
SHA256 5b67eb232aaea01773194887ece1afb8a077d58054fbb50733be3138b36791c3
MD5 ba5fc3baad557c1e07c0ce42c54dcbd4
SHA1 1dd9c311181feb52b2ff835a6f272471ed608678
SHA512 64e245d8ddcf8ed2901f401f2ad15547cdc379c30aca676482f5a99268c22345dab475f93cced0157f4cb34797896baf8c6faca138ad3b3b2e617fc2dbabc420
SSDEEP 96:KqONkiQsjpfbUmjH5ih/cIPURHl8h4otop54OaDNBKP4v+Y1xf//ojdqxERtIgB9:BONm6JUm0QmiUy4DTso//S+gBCEQ2U6
TLSH
T18B02D739AC787C7B8EF39E45B0873B239FA4106BA6916F94DAE81E1C01D725C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d49e4d4-0c81-4cea-90e7-37b1231cbead.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3d49e4d4-0c81-4cea-90e7-37b1231cbead.tmp
Size 18KB
SHA256 97667748e836a046f1ecddb92c13d50f8c72eb19051c3a1e3bcfbd46d500e024
MD5 ed90533780da53fa01bd246244651053
SHA1 b1604a346e54eb7b6c59303e6b6b30b50386d4d2
SHA512 380fc77f7fbdf9fa0ec8cbc1c2e859183db72cf54d49c1b76020dc57e1e3463c536c609cec3cfc2bbfa297ec564dbd1fb607b44fb5b8ed37bdb2eaed21142d76
SSDEEP 384:zQkUSv0sN9xObUebh//S+ZKfUH7vBEpX6IIl1:d0LN/K1MH75EpX6LT
TLSH
T1C2827C75B8B4AC3B4AA39151F14B3A039FB4C067EBD95B90E9DD9B1C01CB2DC2347926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a0ddef2-6547-4757-9edb-5bfdda54b37c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8a0ddef2-6547-4757-9edb-5bfdda54b37c.tmp
Size 18KB
SHA256 881c9deca91ddea501cfa6835b7e9a0d97f90750d49b6eef7f6c7e3995f73b64
MD5 45fe32d076b2c798eecfd866f41d01e6
SHA1 1e437a07abb392711e20ed61c4c775bdbb5a41d2
SHA512 0207698e219c9993926b8cd2f0e8812494c7370fc54901b9eb61e6207ac527893e3c970595f5ec47ec62605e1ad277e7904f7f1bccf4489e249f877e51c7401d
SSDEEP 384:PQkUSv0sN9QObUebh//S+ZKfUH7vBEpX6IIl1:R0CN/K1MH75EpX6LT
TLSH
T1CE827C75A8B4AC3B4AA39151F14B3A03DFB4C067EBD95B90E5DC9B1C01CB2DC2347926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a64edf2-64a8-40b3-baf7-7a891ad7fd3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\7a64edf2-64a8-40b3-baf7-7a891ad7fd3a.tmp
Size 105KB
SHA256 1d62e22dec5c299be491cb2f809a917a5b2650bcf6f26d1655b204a91c995427
MD5 a1423f7d471bb13fff5ecfcdaea6454c
SHA1 7ded49e29e2ee4ecada313702dc82cddf87e8600
SHA512 6e90c834830dc60cf4e69d47a842a672355eeac4f32e8a0122d66df5ce75da4ac71274dc3cb208dbb06f3cd4f506485158442b7832ede2cf24ef8c5b26c1705b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7N:fwUQC5VwBIiElEd2K57P7N
TLSH
T119B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

159e34eb-99b7-48c0-a0a3-4f2d9a011dbc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\159e34eb-99b7-48c0-a0a3-4f2d9a011dbc.tmp
Size 9KB
SHA256 692125bbb06e3e3f6a78b21a0f34bad8e87240986476fed02f5ee743c8db9be4
MD5 c3b19518d552d976f19d2487767e7a32
SHA1 70889cad40be7898907cf9d7966ce83398632192
SHA512 6d8226b4cdb4a419c0e75f8852464bd0360c419ce562bc5b970e8f9e85afdd15018171a9c05368d93fc3833e64c01ee67acf75c72c21c656cca002b57c032f43
SSDEEP 192:sxZjR7Wu/fdslsIdpd6HW6+WNGY36W++RIgrJ:sxZjcu/fdsl1cHbGXs9
TLSH
T11622C8166E34697B8CC7D21DBB25BF13D6F95032A1D51E58AAFC861C04E6BCD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36f7c115-d0d0-4abf-be7f-aa81f6eb714d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\36f7c115-d0d0-4abf-be7f-aa81f6eb714d.tmp
Size 10KB
SHA256 98ad5d45aa9c05d46d4678b447d9fc70850703036d361714fb981a0d243be41e
MD5 4963d25eb7d587d330a3c6a23509111a
SHA1 8f93bedeb1ff6b4ee2c6bc4890f14a7bb11da5c2
SHA512 3cc96528af1a7f97cd976e94a4b6deb977f47af1ec4c2adb16cb91875e65f6e695c9e428bdbb6ebdb61b07cfdd40e13402b7b72644c123988820c37594e477dd
SSDEEP 192:sxZjR7Wu/fdsKsIdpH6HW6+WNGY36PXjRIg5VJ:sxZjcu/fdsK1aHbGXJl
TLSH
T15122D8166E74697B8CC7D21DBB15BF03E6F9503290951E48AAFCC61C05E6BCD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

682e4e0d-68e6-4180-a5b6-13f0d75f5830.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\682e4e0d-68e6-4180-a5b6-13f0d75f5830.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

85448d83-2b67-4e9f-b0ec-a49bcc8e038a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\85448d83-2b67-4e9f-b0ec-a49bcc8e038a.tmp
Size 10KB
SHA256 a3de7db165d9c809e510fac683ef478d415b50d20255950209ab9ba7c762e9ca
MD5 7c57ef2d806bba52e2b41886adb68917
SHA1 1f381c9f52f6e072b13f9dc9768edd32ac86e12c
SHA512 b6e1f3b505c760910e43ca5823f9d406405517f15e2778a742287fddc3fb7b319b3e416b271d43c79ff5e92f53d12f07a78e1a5af7847973b8b6b0c52fa61823
SSDEEP 192:sxZjR7Wu/fdsKsIdpd6HW6+WNGY36lk+RIg5VJ:sxZjcu/fdsK1cHbGXHl
TLSH
T12922D8166E24697B8CCBE21DBB15BF03E6F9503290D51E58AAFCC61C05E6BCD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8715a6b6-0302-4c5f-8ba4-4f85c97a1255.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8715a6b6-0302-4c5f-8ba4-4f85c97a1255.tmp
Size 27KB
SHA256 d83df4d134e3cdb8f9a86671c85feb0afc9f81faa5381c303064769c1b1b2900
MD5 dad5ed8c114ca3bfa3bdc96d5a3cdabc
SHA1 ca6d93ccd9ce371e85d524badc831ed20921fc5c
SHA512 ab1527ab38915863b129b8ff622144bbf39993a73a483b81bc75e2afc4d5feec3dd3df23b516999fd70f642f6eeac758c63076c02c162a0f66b7e6682e81e1f0
SSDEEP 768:awKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/Vro8H:awKlm7QWvUYe0u1ja8/L/E/u8H
TLSH
T161C20A3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 a93a076f478172ad21caf4dc1ea08e58b92b4ddf90d0c9f26813bba5d3184d9e
MD5 1efd28b529549d51fd841e01a2e76684
SHA1 7bd7c04a8ad973ca9e006f5debf2a646617b7261
SHA512 7091efeaf878345054da7eb9f8bfd96c1f93549c3154892eb116f7c2a9fc4a57a04ea700daa9b8871a970eaa343c3e958a86b88ce698e17845487d1d55be0ef7
TLSH
T141516145C59280B2FBDA697092D1138F353C79A393AB2D6535CCF77B0B8BB055234806
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1dccfe4315dfbb58874d97a005f9d91a39ac7624757ab7b8c8376cb26942be93
MD5 47a5a61087a9bcfa772e4f84a92ba0af
SHA1 f2fd6d843d892ee556237059fe8e07b80e742904
SHA512 6ec29384624dfd2f9da5889715d66331f462db75f1cc206cb4304a63ba20ec193685dccd1d8617ca9484fd803320f38c197dd25e507cf6947562a0dce86c79b7
TLSH
T15E516045C59280B2FBDA697092D1138F353CB9A393AB2D6634CCF77B0F8BB05523480A
MD5 SHA1 SHA512 TLSH

Submit Download

9ca45864-52ff-47ae-9225-efccb377979a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\9ca45864-52ff-47ae-9225-efccb377979a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

86280eeb-dae0-47ac-aa42-77c7f94a43f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\86280eeb-dae0-47ac-aa42-77c7f94a43f1.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

9233ce84-6b9e-4446-8d0e-72b89cd8fd34.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9233ce84-6b9e-4446-8d0e-72b89cd8fd34.tmp
Size 1KB
SHA256 85aa4c5605bbd313e78ae83c035a593cd3b0f4ffdaf9ca27c7096968909efce9
MD5 b0c3fc6d8f0bd5af3cf5759d2d59623f
SHA1 9fa87cbd49177114ce048263669cb3187bc6f525
SHA512 aa90eef4df1c54164260b59af00537572a1b5501946bdcf8be47855e1e513dafb8bc176ba67721286bcfddcb6e89079a3ac5110387f732bcac3a11570ff30acf
TLSH
T1CB318DB6C3D4866E8D0556F06A24AE1BCE2D051646283C26C9E8FF5BA3F2471E20169F
MD5 SHA1 SHA512 TLSH

Submit Download

d1758e5d-31ee-4ac5-8a67-060c4a3863f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d1758e5d-31ee-4ac5-8a67-060c4a3863f9.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 99da800d7f2433ca8b5b14e72c1aafea9110c45af7c309772659eba9411aa2f7
MD5 dee8cc7bc356091ab663c2fb5337662d
SHA1 2aa052dbe3d4000cf3ac7d59931ac31807a82b46
SHA512 8610d0035c659a2d3d60e6d1d278011a649afee8997de69e31251fc31028bcaf0e91adb81d2dba3fd065b7b7dc86f99a18177592e607e75d01eab7db47b5303a
SSDEEP 48:K0Mb6G02aDbqpyIS+DK9a14Dx8TYRi6AyLFk51Hznob7+7ISNoK9t1foxt4Yuf1i:KILSKEkOKK4KP6ce0KDqeul+KOA0
TLSH
T11DB1E11176B7124139BE25988276871B524235733418F72BBFBC50A1CE6FE185DFE8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

acabd147-4320-48b1-bdd0-08c6268ec9cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\acabd147-4320-48b1-bdd0-08c6268ec9cd.tmp
Size 10KB
SHA256 e51319a6407b251105f053ae65b521b0decfb265f6a11f79a1027da117cfe8b4
MD5 19984c4613b963dede8da97f58411885
SHA1 777d925fe8889b73df4d0ea5a83aa77d9d74abd4
SHA512 2a863abe82347472bc380455886c8e40155e336117beddc1acf1cffa525388191fcb38f3d3bedc5cf997fe947d2b2af32377d243823589af0ce1d5633b3b40c5
SSDEEP 192:sxZjR7Wu/fdsxsIdpd6HW6+WNGY36W++RIg5HJ:sxZjcu/fdsx1cHbGXsz
TLSH
T17522D8166E74697B8CCBD21DBB15BF03D6F95032A1D51E58AAFC861C04E67CD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c1625eeb-5645-4de9-81fc-372818d0ff27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c1625eeb-5645-4de9-81fc-372818d0ff27.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0dd29a3e-8a00-4521-93c0-e1d553ba39ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0dd29a3e-8a00-4521-93c0-e1d553ba39ed.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bfc54c08-dc56-4900-a0eb-c5c1ca068d6b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bfc54c08-dc56-4900-a0eb-c5c1ca068d6b.tmp
Size 8KB
SHA256 2adb8be23d2f304b24ae7b6e593963c2fc0061fc47cc3443ebe08da4bda561b1
MD5 3db6295ebd8b9db819661d442fbc9430
SHA1 1c2662a042b7c5c2919a8827d19484b9c32b8af3
SHA512 b84cb5f5eff387d9b0304e1a96b040a1704b89e7b941618a0dc7265376ba2f13712d1b4c8cac3f2f760d0252fef2cd03ce1dc9ede57240716238f3811b4e96b4
SSDEEP 192:zJONw6JUHQmiUy49T2Go//S+ZpNx7q2UU6:NONw6+p75o//S+ZJfUU6
TLSH
T119120935B8B8BC7B5DA39541B08736139EA04167DBC56F90D6EC2E1C05DB29C2307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f2f1a1b-d3b2-4d48-9fe5-df7fe6747b7f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6f2f1a1b-d3b2-4d48-9fe5-df7fe6747b7f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fda77147-6663-486a-85b2-e9746a6f8d65.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fda77147-6663-486a-85b2-e9746a6f8d65.tmp
Size 21KB
SHA256 5a38436123b385fef0fb5614979b8f8e37e5a7321a33880ee15c06ba83965491
MD5 1b63445d37de850f8420d747c5b8322f
SHA1 3de92bf46d0d2f795e127abb732ddbd08b605381
SHA512 67c4ab67ec779d0b5517ff9205b1dd500f4fbe6e7f27fec455219b1ac66315215c6eb0936a8a447e39a411952cb4acdb58db0472a19d6530195fddbfb56ed26d
SSDEEP 384:4BiFzQkUSv5zsNH8TUNTUlIlQObUebh//S+ZIfUH7vBEpX6IIl1:4oFd56wgtN/K9MH75EpX6LT
TLSH
T1F0A26D76A8E49C3F9EB39A51F14A3603DFB08067DAD5AB90E6DC9A1C01DB2DC2347D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 330f20392b846d71bac91e8b1ca645c372ca60414037dd7f724f9526a90c57a3
MD5 52e631b3c0dba06eba023d24bd4b348c
SHA1 27dd33d5534e4e91889892389622b70a8ed4e2b1
SHA512 6d4879830f6edc2e2e091fe492c0cc3d54803048d22549a48139935601876c541b1d55754f5bf9bc83063b5ca18948279e017b7fe88abac5091cc2c8229ac39e
TLSH
T105412758B6EA1148B3B7AE5AAFF6A86D447F78772F06C45D00010E4F0A63B40C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download