hxxp://pp[.]lonkhapiton[.]cfd

Analysis

user interaction
yes
max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 03:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://pp.lonkhapiton.cfd
Sample261102-dmaclagy7l

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2400	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{F072D2EB-0F08-486B-BF76-4000420A6B37}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3056	msedge.exe
3056	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 3740 wrote to memory of 2024	3740	msedge.exe	85
PID 3740 wrote to memory of 2400	3740	msedge.exe	86
PID 3740 wrote to memory of 556	3740	msedge.exe	87
PID 3740 wrote to memory of 556	3740	msedge.exe	87
PID 3740 wrote to memory of 556	3740	msedge.exe	87
PID 3740 wrote to memory of 1436	3740	msedge.exe	88
PID 3740 wrote to memory of 1436	3740	msedge.exe	88
PID 3740 wrote to memory of 8	3740	msedge.exe	90
PID 3740 wrote to memory of 8	3740	msedge.exe	90
PID 3740 wrote to memory of 8	3740	msedge.exe	90
PID 3740 wrote to memory of 1464	3740	msedge.exe	91
PID 3740 wrote to memory of 1464	3740	msedge.exe	91
PID 3740 wrote to memory of 1464	3740	msedge.exe	91
PID 3740 wrote to memory of 4708	3740	msedge.exe	92
PID 3740 wrote to memory of 4476	3740	msedge.exe	93
PID 3740 wrote to memory of 4708	3740	msedge.exe	92
PID 3740 wrote to memory of 4708	3740	msedge.exe	92
PID 3740 wrote to memory of 4476	3740	msedge.exe	93
PID 3740 wrote to memory of 4476	3740	msedge.exe	93
PID 3740 wrote to memory of 4352	3740	msedge.exe	96
PID 3740 wrote to memory of 4352	3740	msedge.exe	96
PID 3740 wrote to memory of 4352	3740	msedge.exe	96
PID 3740 wrote to memory of 924	3740	msedge.exe	100
PID 3740 wrote to memory of 4172	3740	msedge.exe	101
PID 3740 wrote to memory of 924	3740	msedge.exe	100
PID 3740 wrote to memory of 4172	3740	msedge.exe	101
PID 3740 wrote to memory of 4092	3740	msedge.exe	103
PID 3740 wrote to memory of 2020	3740	msedge.exe	110
PID 3740 wrote to memory of 3464	3740	msedge.exe	111
PID 3740 wrote to memory of 1500	3740	msedge.exe	112
PID 3740 wrote to memory of 1756	3740	msedge.exe	114
PID 3740 wrote to memory of 1756	3740	msedge.exe	114
PID 3740 wrote to memory of 1452	3740	msedge.exe	115
PID 3740 wrote to memory of 1452	3740	msedge.exe	115
PID 3740 wrote to memory of 3056	3740	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://pp.lonkhapiton.cfd
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x254,0x7fffc788c188,0x7fffc788c194,0x7fffc788c1a0
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,7384671141264084232,9255826886830122621,524288 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,7025203451484787895,9412171936352523346,262144 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,11510327795486138655,158472103144231103,524288 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,3274204098563093281,13540011354367708695,2097152 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,5554738549312190014,5151162227283694114,2097152 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,5251968863581730415,18446584207345149010,2097152 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,18382618656419806423,7659062501398529649,2097152 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5064,i,17646680988592747516,13159113508651174277,2097152 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,6486780280537993027,15538474738150452905,524288 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:8
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,16723364790711941903,13804241987007069251,524288 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,13233342657144866392,9221825504801068576,524288 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,13233342657144866392,9221825504801068576,524288 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,12266700886820702209,8796029956261632490,524288 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:8
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,8522458537250157108,15187466787675363499,524288 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1676,i,17274300312074474680,13057047407783080727,524288 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:8
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,15498942590061820320,11700892670948257088,524288 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=3020 /prefetch:8
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=768,i,6603067079307068715,7761535147533185743,524288 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5028,i,14951224510199723748,18386111654984833284,262144 --field-trial-handle=2316,i,16734154352282428045,12502398431751237765,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3056

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4548

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

18ae18cc-7b8d-4ac6-8590-bd319193ed47.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\18ae18cc-7b8d-4ac6-8590-bd319193ed47.tmp
Size 18KB
SHA256 7bd68a05fe05af7a870ae966dbc3ecb83bdcc6bae14dc52a1fb9ea1c5394626a
MD5 42aef25005f37b4bd88efd623f8006eb
SHA1 08bfa19e3e268e89b663662dfbaa46730465608d
SHA512 f325d14ab19cb70f338e8a1518159365c0f06a81c63c2c7b9ca2d6c6b4e82ec79fbaefd2c44495b28041aa7cc263b96d641780f1ead160a904d0c76d3c7e86c0
SSDEEP 384:zQkUSv0sNuUOO1Yp/zIGmAl89IX3iqH7vBEEYIIlB:d08kL7Co3iqH75EFLf
TLSH
T12B827E32AC79AC2B5AE3E514F1463923EEB8D12BD6C45F90D5DD9B1C00CE29D234B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64031608-912a-45be-9435-0b111f8b2f7e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\64031608-912a-45be-9435-0b111f8b2f7e.tmp
Size 8KB
SHA256 f861d6670af5a266b4276b729cf9f478a3b83e8d1aef48fb626da3730a7f6858
MD5 98cbb10b8e16646b24d766e43499ff32
SHA1 d9d86d377bf095d083be7ef7745ec9131c516409
SHA512 216faf4461a49473207294aeb01c30d6aabb22094c689cbad46cadeab2736fbf7ee95e3eec1f9743159d58e2f1d69907f8fcc9756f0393261e17fa793c46bbc4
SSDEEP 192:BON06IE3QmiUyk+TduIGmApjzor2Ro0eIXXQ27HlrqfU6:BON06DZkduIGmAl89IXJHqU6
TLSH
T174121B32ACB8BC2BAED3A954F48739239EA5812BD7896F50D6DC1F1C00DF25C534A917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3ab1d6b-90d3-42b2-a1db-d479ed9ec272.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\d3ab1d6b-90d3-42b2-a1db-d479ed9ec272.tmp
Size 105KB
SHA256 baa37fb90b22728e8621cb1e0cd8370d14339295fb597cb899c58908f1d9ea43
MD5 3cf096da5ebbeb243b3cc63b1ce61c42
SHA1 ca076b08c459cee4e3c214a706dff7f9e182cb83
SHA512 9947e993a1b05c95053c60c8e5a9c544169c0476f5ca113971ea72db5ce4a94442075b08a2a9e36d34e5f00f8b4a8b4233e22fa2a713e941c9d3b5cc8e620092
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7K:fwUQC5VwBIiElEd2K57P7K
TLSH
T12EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

01c4edff-d258-4041-abdd-e3e4de4816f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\01c4edff-d258-4041-abdd-e3e4de4816f7.tmp
Size 10KB
SHA256 285a1a7c1bc8f0f5631004b07eb1970e3a8f1457049b7a0370af40773e00bb1b
MD5 902ce075bd10728dd2e4ad67506d760e
SHA1 c33294acc2fd5bd42e0043726c180f6098b6b0c7
SHA512 9955023e6b4797495a6bc31c1c7f89e4e9fe99b84b8f1cd28cb00aa9460467a6ef7dd1a5fd0be1df32dc9b71b503ae6e6485ee7a3f992f6b055d6a9bd89ca2da
SSDEEP 192:sxZKR0WC/fXsBcfMOIdp4oOT1HW6+WNLoZefYapN0Q+HIg55J:sxZKpC/fXsWf84tZHbL3flsN
TLSH
T19722C8526E28A97B9CC7E21DBA15BF17E6F95032A1D01E48B6FCC71C04E76CD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

39c33362-63b3-436b-8657-60103aed44ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\39c33362-63b3-436b-8657-60103aed44ec.tmp
Size 27KB
SHA256 a24a87278c04d3baa1d724abf937ab1a2a514edb6b1a1557ac78e8bdc1f1dce8
MD5 761e8f87e26f3bdddbdeb687a37f7e3d
SHA1 8d1d9152bfe1020181e15f2d82a0666c5525e8e5
SHA512 7ec17d235f832cf9a6ca1d9f404036dc1346f5f37f04be0ca6b3c82fa0adf0ad128326ca7bfe71f1893bcf6082aeea976f46a6932dfa31a737c2337c35961c5f
SSDEEP 768:0gWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Xro4TfeamRc:0gWPcLKWvKeEeu1jaClLiF7E4TWamRc
TLSH
T1A5C2EA3B640CCB7E5FC01A9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f5c57dc-685d-437b-a3dd-dd6a8cb22e4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4f5c57dc-685d-437b-a3dd-dd6a8cb22e4a.tmp
Size 10KB
SHA256 65696cd3ea780909cc02d0b12db554b1941a7aa1281dfc69984c90211a28926d
MD5 b9716c66d9ee79e03a33add8161a00b2
SHA1 0c24fb9ace56800796c09ead8af4380badb1b4ba
SHA512 e6dbc289b86b607a38f7b6be09ca2824b924132f7c02e0efc4f7c779e98ec1944d3c568fb58a2b48ebed77214916d542f2ea4abbd3a557a47e1d781105dd0777
SSDEEP 192:sxZKR0WC/fXsVcfMOIdp4o4TzHW6+WNLoYM/Yapd0Q+HIgrJ:sxZKpC/fXsif847vHbLc/Js9
TLSH
T1C422B8126E28A97B9CC7D21DBA15BF13E6F9503295D01E58F6FC862C04E76DD224B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5497b50f-f1aa-4238-8021-78672e032146.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5497b50f-f1aa-4238-8021-78672e032146.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5ef56ee0-e7f3-4091-b6d0-b9d3cf4ea969.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5ef56ee0-e7f3-4091-b6d0-b9d3cf4ea969.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

7facc006-baff-47e0-9a93-19a5d77b4c10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7facc006-baff-47e0-9a93-19a5d77b4c10.tmp
Size 10KB
SHA256 15556ca22335db3bcdf98b69abe89f8c918c332ef0abb07d753039b38c03669f
MD5 27acc78037ae9a804c435b4800ef41ca
SHA1 84049cb36cb99cb81aa1be28df8fa16d7f619825
SHA512 57bdabcc9e5d24906b0cc606fcf747c7faf2229a0eeb6d80c37e104f2c2fc5ad26d5178a34d00e9c736b35b1c2996089f23daf9e8c9773aed1f1f9a3107dea46
SSDEEP 192:sxZKR0WC/fXsocfMOIdp4o4TzHW6+WNLoYM/Yapd0Q+HIg5bJ:sxZKpC/fXsPf847vHbLc/JsL
TLSH
T1FA22C9126E38A97B9CC7D21DBA15BF13E6F9503295D02E58B6FC862C04E76CD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 806ff43880a57c1a7bc68a48900c4d9b2e96b884fe7f0235b5a426f921d1e8a9
MD5 b33cfe9520d65257cecb99dbf5a6a646
SHA1 6530415e61ed593b3f2349518cb07c6cc78677a5
SHA512 d4fdf47334166489bc45e6725f48bd879b9a0cf21a55b4ef4bcf634a14ce3ad1a86e1811407f7c9ab76f1a6b430ebe2db25ab5305a4f6780a1f4d084c972626c
TLSH
T12DE07DA506CAC32EA258648B11F8C30E8280361BDBE06B0F9700C5887401440F6EE6A4
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 177c7ee07fa353f8a87b6f58ee04dd4ab9c57018b1d5a9603e8bbc4edc8b4290
MD5 b3d4fab492184970343567c690504d4f
SHA1 4abb95fd36016913381506562ef8b067a8489316
SHA512 97bc6b63b07355c874dad55361241ec4fb0de1d59feb9f45139378d658b1ea6eff5fbe3589d9e756901d4a437b59d32d1d2d450d80211f250846e94ce8f041c7
TLSH
T1F7512DE1D5844AA3FB985A3382F607B7363659A2A6CF5F5E21ACF4B9480F724500319C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 18469f3950595d4cf6d3c73bbf36a2d9774c2a85cce64bbb1519d2bff4e6ed73
MD5 b1b15f45e51d0abd8f20213364f4d472
SHA1 d0b8cdc462ec8ddf400646b4115f181769b25c09
SHA512 e0c1116be6dd469895f1a687760fcc3cbe4c2c43ec839db38feddf4ffa15d76944ab58a881c1fc2d83fe199eb2094586e58e996fbc7f30fe967288f7c4636c03
TLSH
T111513EE1D5C45AA3FF985A3382F607B7363695A2A6CF5F5E21ACF4B9480F725500318C
MD5 SHA1 SHA512 TLSH

Submit Download

179ba12a-8dbb-43c9-be21-3540f13e5d7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\179ba12a-8dbb-43c9-be21-3540f13e5d7a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

57da3c7f-08c7-418c-a257-4891c8bc586c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\57da3c7f-08c7-418c-a257-4891c8bc586c.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

81babb5a-9d9a-4d3f-8897-a7bb46390ee7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\81babb5a-9d9a-4d3f-8897-a7bb46390ee7.tmp
Size 1KB
SHA256 27453fd0f629513ac51b4980665520e608a3c5aae7cf1da8e3148701bb03312f
MD5 86a482c11de36831e14d59f798d5eb82
SHA1 8142125fe448bd601f11c16bedf0ced2e276f179
SHA512 64dd54ff5f52a8957143e4e2e559e643f6d0a422f24f268704c3c6e82292d663ae746035708cfa5769667bfbe76a53b1bf053f2acda83041c1f8481f3d170599
TLSH
T1472168B283E5866EC91116F09A24AE2BDE2D0506421C3C1A89D4EF6B93E3071E146A9B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 68d9b3ab83cc2ccca9b6d1b2536211e1b31564d9268fd43574bd9a9a55cf78d9
MD5 55701515a5902c4ed346bf13f1a25b2c
SHA1 a84118cf835a0674d5ef3bfc701fea836c1f08d1
SHA512 1b732aeae86b8c76aa587952814eb7498c55381f54a137dbc1daee5c83c0ed912d51a12dd316a16dece67c1387d5f973506298aa9bba25c87f24d4e20c1af48d
SSDEEP 48:K0Gh8g+kkdbofQIS4dK9c1edx2NY3IkmyLUjiu8+SbbiRqISGbK9i1wbxULY5aWH:KI9KK+wKODKKgInT+Kcg2Kz
TLSH
T10E912425357B131039BD648C45B496AB424231F73274E96F7B7D58728E2BE2A0CFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fbd73dcf-6b64-421a-9d18-fe0553648de9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fbd73dcf-6b64-421a-9d18-fe0553648de9.tmp
Size 10KB
SHA256 f754118df07880158037df2f4661c15746f059618de635a345d25cd49591cdd4
MD5 ceb6cf9933e26e591454b8869de29d03
SHA1 1dd5452aa776a775043ba90c685ed765b04fd9b4
SHA512 960f07ea8c01b18015d8e89bc3350508518f10dda1185230677a1667ac68552f97f5d511c242901abedae0e04323f3c16b310d96e3481c612d3c89acba5f5213
SSDEEP 192:sxZKR0WC/fXsBcfMOIdpKoOT1HW6+WNLoZefYapw3R+HIg55J:sxZKpC/fXsWf8KtZHbL3fKsN
TLSH
T10432C8526E28697B9CC7D21DBA15BF17E6F95032A1D01E48B6FC871C04E76DD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d08aeb5d-624b-4f58-90dd-7d29fb993a8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d08aeb5d-624b-4f58-90dd-7d29fb993a8c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c24c3785-2c71-4596-8897-b0c039a0aa23.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c24c3785-2c71-4596-8897-b0c039a0aa23.tmp
Size 8KB
SHA256 6a02e492194601a6f7089ce2fb10988d5b69bf2a43e55b69b1c5b47108e00802
MD5 a13a7d4935e10d6e0760148eaaace772
SHA1 f7fbdf1c14537fd1815f6a83c9fc048281ce2934
SHA512 3284d0d49fdc9d33b3c94a4bb73385615b25313b7cfd06fe3e971a745f0afc29fb04f9171e11c4190570172e19efbf245a29e79ea8b0a573126adfc11ce7c754
SSDEEP 192:aONQ6IE7QmiUyl+TPuIGmApjzor2Ro0nC7s2qU6:aONQ6DtjPuIGmAl8HsZU6
TLSH
T1B902EA35EC78BC6B9FF3AD09B4872A23AEA5113BD6952F54DAE85F1C00D724C1306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ef505ebe-6c54-444e-812b-3ee7c5758bf1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ef505ebe-6c54-444e-812b-3ee7c5758bf1.tmp
Size 18KB
SHA256 2cfbd95dd1f3537c9263f060cb6303fb2519976c630d9097c268fa74baebe512
MD5 3a0dd0852311c8af21fe2945f4b8e607
SHA1 8005ef82c09946b36decf8b1f0180dd77b91dcf6
SHA512 a6234d4d9bd3fca99e007433b52e4316f1debfa5eb4ed423505ac19418d00f440decc8cf6f54cdee000a39a4704b7c842f0bd6e1432df0e83527328f57d80f3f
SSDEEP 384:OQkUSv0sNuU/O1Yr/zIGmAl89IX3iqH7vBEEYIIlB:+0ZKL7Co3iqH75EFLf
TLSH
T141827F32AC79AC2B5AE3E514F1463923EEB8D12BD6C45F50D5DD9B1C00CE29D234B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a04d1fad-65db-4555-96ef-9e4d5a383cde.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a04d1fad-65db-4555-96ef-9e4d5a383cde.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fb6efbc6-dfd4-49a9-9597-562f652b026d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fb6efbc6-dfd4-49a9-9597-562f652b026d.tmp
Size 26KB
SHA256 b7303bd9028304854c9146172f5d0e63009c03448caa4cecb63e7b353fc9b161
MD5 be4d1b30cd7d94c2809a1744305f7e0a
SHA1 c427582e9975c0a6a201a37636413d7211032bb6
SHA512 1c1a9f11907151e23861dd3fc6ed0ee5f02c8cb76fe761faddd68c849845f2b2239e8b732187c527f7661ec1303b470e4882933ebe6d3dcf73ad7a8aa7f4708f
SSDEEP 384:/iFzQkUSvbzsNz8TUNTUlIlOO1YL/zIGmAl89IXQ5iqH7vBEEYIIlB:KFdP+wgbyL7CoQ5iqH75EFLf
TLSH
T17EC208F298D7983ADAAE9703E33D2D139EBCC127B5845650F7885A0CCC8A1BFD346915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1b2fe1efe69603964de6345a6e3ce64e1524d747eb7b39fbc48562d807968a32
MD5 085f768287580906e736f286368e5fcc
SHA1 7d9b935abfb0b96aa648dc63a21f26af1373234a
SHA512 35191d58ca7d3da31cc4fe96790d53c567299d60d57a24ca0300592c75d8d7b5f4ceed23264d185a7e6c04d39676589bcb2f69d359d2fbb5107c41ef9434e267
TLSH
T145412798A6FD1148B7B7BE5AABF2A86D487E78762B07909E00110D4F0B62E40CD61733
MD5 SHA1 SHA512 TLSH

Submit Download