hxxp://c85grt98sd[.]com

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 15:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://c85grt98sd.com
Sample261102-slvdpsvtby

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3296	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{5644D9E6-188C-4054-BE56-2FEC1D563FF8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2336	msedge.exe
2336	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 3808 wrote to memory of 4624	3808	msedge.exe	85
PID 3808 wrote to memory of 3296	3808	msedge.exe	86
PID 3808 wrote to memory of 1704	3808	msedge.exe	87
PID 3808 wrote to memory of 1704	3808	msedge.exe	87
PID 3808 wrote to memory of 1704	3808	msedge.exe	87
PID 3808 wrote to memory of 3788	3808	msedge.exe	88
PID 3808 wrote to memory of 3788	3808	msedge.exe	88
PID 3808 wrote to memory of 2080	3808	msedge.exe	90
PID 3808 wrote to memory of 2080	3808	msedge.exe	90
PID 3808 wrote to memory of 2080	3808	msedge.exe	90
PID 3808 wrote to memory of 4616	3808	msedge.exe	91
PID 3808 wrote to memory of 4616	3808	msedge.exe	91
PID 3808 wrote to memory of 4616	3808	msedge.exe	91
PID 3808 wrote to memory of 1676	3808	msedge.exe	92
PID 3808 wrote to memory of 1676	3808	msedge.exe	92
PID 3808 wrote to memory of 1676	3808	msedge.exe	92
PID 3808 wrote to memory of 5068	3808	msedge.exe	93
PID 3808 wrote to memory of 5068	3808	msedge.exe	93
PID 3808 wrote to memory of 5068	3808	msedge.exe	93
PID 3808 wrote to memory of 4060	3808	msedge.exe	96
PID 3808 wrote to memory of 4060	3808	msedge.exe	96
PID 3808 wrote to memory of 4060	3808	msedge.exe	96
PID 3808 wrote to memory of 1744	3808	msedge.exe	98
PID 3808 wrote to memory of 1744	3808	msedge.exe	98
PID 3808 wrote to memory of 1964	3808	msedge.exe	99
PID 3808 wrote to memory of 1964	3808	msedge.exe	99
PID 3808 wrote to memory of 1000	3808	msedge.exe	101
PID 3808 wrote to memory of 4612	3808	msedge.exe	110
PID 3808 wrote to memory of 1188	3808	msedge.exe	111
PID 3808 wrote to memory of 5028	3808	msedge.exe	112
PID 3808 wrote to memory of 3068	3808	msedge.exe	114
PID 3808 wrote to memory of 3068	3808	msedge.exe	114
PID 3808 wrote to memory of 2336	3808	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://c85grt98sd.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffc6bfcc188,0x7ffc6bfcc194,0x7ffc6bfcc1a0
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,16235883171512175811,9171047981598599286,524288 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,11285684706043423613,9487292165616218227,262144 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2632,i,16646734307695270530,7503472441575839824,524288 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,17527605877950109294,14732569835156549673,2097152 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,17374708086979883617,14526897698026319198,2097152 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,2914016709941295984,15934210881017042496,2097152 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,12904888583583027096,15593683513818589267,2097152 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:2
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3492,i,10258319269839020373,12048394809332904588,2097152 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3528,i,505167017076639039,17673137053058001451,524288 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:8
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3504,i,13477725594322555956,15777403143280794518,524288 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:8
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,11932691086880764512,8452735816556091715,524288 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,11932691086880764512,8452735816556091715,524288 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4720,i,13374227239629391450,9141113624137937137,524288 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4780,i,12632937166193587189,15086006293882430416,524288 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,5577210906562485895,14003139630076989561,524288 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,17551226454231136253,153328609402048680,524288 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,13445594101031248559,9755114701228918529,262144 --field-trial-handle=2284,i,12524790268604807856,13168891571724592074,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2336

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5084

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0d63dd50-0cb3-4f9b-bf34-f12722f821a1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0d63dd50-0cb3-4f9b-bf34-f12722f821a1.tmp
Size 18KB
SHA256 9cd3d6778e56ceec795e1ecc145fd9059e25a2a6ec7313f322dc6c6548df6cf1
MD5 3c807bee9f74458148b9a1aa5dc6abcb
SHA1 570f24c68aa4964c969acc14a1f22d84ada65337
SHA512 7b137938f165087d54511e4b422ce5742d4679c73e051cc7c8efaec642c706d2dff9a88a991ecbbf72bf512805da7e3249a554fcd4348d76ba8b62ed32d6cb05
SSDEEP 384:VQkUSv0sNUQTHiDqDaQX5+DtF8iL7X5DQH7vBEfbIIl3:v0CHRpkD55DQH75EfbLh
TLSH
T1EB827E71AC647D3B8EB3A555F14A3113EEB4A017D5C95F80DEEC9B2C01CA6EC234AD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

236fa26c-ac05-47f9-9511-123deb450dad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\236fa26c-ac05-47f9-9511-123deb450dad.tmp
Size 18KB
SHA256 f084c8e2ede6a14c762252c42b02f8022aeb0aacf1876432fc23966932728920
MD5 23614469ba26dfef276c2220a142b435
SHA1 dc2e2c0d8bb306a63d3ba07a7420091486f0302d
SHA512 face65ae99d255e3f094df8c1b99399db55aa78d589b0beceac041c6c63b9e21f0a86cb45732197a3677c8cb57a95bcd8d77e9f6ad3b15ba9bb5d62087c5241b
SSDEEP 384:eQkUSv0sNUJTHiDqDaQX5+DtF8iL7X5DQH7vBEfbIIl3:O0lHRpkD55DQH75EfbLh
TLSH
T10D827E31AC647D3B8EB3A555F14A3113EEB4A117D5C95B80DEEC9B2C01CA6ED234BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32859360-54c0-43f2-8ce0-b6781813b787.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\32859360-54c0-43f2-8ce0-b6781813b787.tmp
Size 8KB
SHA256 f7bb90b1fd4658ae0bae50ac0deff8a86f38359d155a90c2b1a96161c27e6249
MD5 284b626743938c582717231dc4d86289
SHA1 57afebc79ce4898700d65637e3b89a8c52483424
SHA512 251fb043424635c81ab27fa61c841b47f55a78fada2598a6e5451acf3018d2ef50b6a28b78a57b506d61d2e0096b3413453f8297f9db4aabd8483202fb48ab14
SSDEEP 192:EONk6nnHGQmiUyf5QYcX5hQDP1JjzoriLwMc1KvU6:EONk6nCaQNX5+DtF8iLkIvU6
TLSH
T15A02EB34BCA87CAB9EF76D45B48633139FA4203BE5956B80DAE85E1D10D765C2306923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

39ad716b-7915-4de1-b1c9-4675518d43e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\39ad716b-7915-4de1-b1c9-4675518d43e7.tmp
Size 21KB
SHA256 6b3f93b92efd556d09f5d82257dfab37b79f91fdb1b6bcc7f43d7d8202eb98bf
MD5 27a893bc047e9312e683a18110b2c289
SHA1 5773be1d47236c23b59592cd6bdd0dfdff653c5e
SHA512 d25dfdd13b60a7d6df5e38a2dd1cc0ed663229509d3d20002f4256b540d4914ba40ec37ddf52ff0607a259c7e40ab6cefab16e6449fd6af15de08d78980c9a82
SSDEEP 384:viFzQkUSv1EzsNc8TUNTUlIlQTHiDqDaQX5+DtF8iL7XFDQH7vBEfbIIl3:6Fd14NwggHRpkD5FDQH75EfbLh
TLSH
T13AA26D739C94AD3F9EB79A44F54A3213DEB45067C9C9AB80EBDC9A1C01CA1DC234BD61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6d37bd0d-0b7b-4b11-9261-0c7d9b71458a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6d37bd0d-0b7b-4b11-9261-0c7d9b71458a.tmp
Size 8KB
SHA256 9a4cf141b05fb7aa9220dd6ea7bb3377941babfcf46f6a9d1c31e1350ab89e73
MD5 cea075e435464ef440c40f48c91e9934
SHA1 e341854819c0bde7fd093438fd15114c6eab0c6d
SHA512 0a481debd2b1ffae9ed9859de74b5f9b7a184667b3b19d822df7482179822dae3a691047c5091a7345f2067133ab0eb0f493fad3cf46674b23fe545c487eee5f
SSDEEP 192:qONF6nnHwQmiUym5GYcX5hQDP1JjzoriL7XNeig34q5QU6:qONF6nQRGNX5+DtF8iL7X4DQU6
TLSH
T126122D35EDA47C6B5EE37495B48731139EA51117D6C97F80DAEC1E1C01DEA6C130AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1bcf0f09-5915-4c6b-9427-b38c80eae273.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\1bcf0f09-5915-4c6b-9427-b38c80eae273.tmp
Size 105KB
SHA256 e2d1a78ddd4a2613e2e137a9b8a6ee6a025f24ce78c71783944f051445e3063d
MD5 a68138180bf134fe6e360a0e37c3184b
SHA1 359c64103a0eb1cbba384f963ad47bd6cac7e41c
SHA512 a8338bac44852d511db583b349822cd7e5ec3c426141655b68ecc184832731c5830c69e5af34998dd6e85c0ddb2400530e818deb283053d561c8afc2b615cacf
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P78:fwUQC5VwBIiElEd2K57P78
TLSH
T178B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d24032e322bda4aa4f943eeee5c1be2eee903b8fa00c6e40c3ae3aab1d6e57
MD5 cf18b86051311e5d4cb3435637b32441
SHA1 81808c10d3ea99d837ac73ca978bbac4af2b14c3
SHA512 d8f6d4f7cc0a9a322acccdf645cd0eaf7d236c68d82f2fd25c2d01e1e6ce323c3d584edd204b1c68ced260f3cf67a5be22a62de64511401735df9213129ac8f0
TLSH
T1EFD02B02FE898A6CD4921C34012E811D36CDF40049027041C0B023974C04701102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ba460c9f5a00478279781ba3317975fb747ea7519f30b24bac67a94df77c22d
MD5 be02dc26a22f37196d8a2ed1f90604b5
SHA1 0d4f49e0f6b152530b0ff133dac678914194c470
SHA512 74fcddf19d34dc2b1dc8ec59c0f57f326e68c7c9b62fb89494b07e2bd52522d6f7662a05f91a2d0787fba43ac2646fc3214bc591a45f14862aa715bcd9206f88
TLSH
T1EBD02B02FEC98E6CD8921C34012D811D36CDF4004902B142C0B023974C05741102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

44f7f56a-ff63-4bed-87d4-a56dd7f06d9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\44f7f56a-ff63-4bed-87d4-a56dd7f06d9c.tmp
Size 10KB
SHA256 33c2c43cf0910832b9f2266c236b8b3ad99b7fb2eed1cc4b49fe57c56ca225dd
MD5 ea7c132602dd3edd99eb3e70b8de0ff5
SHA1 ac7e6728ee611a6d647eba377b3147f6735f3680
SHA512 264127b689b1375b0f795397f12e055b1c7a3749a22d27cb05778bd42dc815a855196280b33d0c8848ecc927af6121047d70e9881894bb767d917a79a37abe13
SSDEEP 192:sxZ7RFW6/f+s5IUNIdpL9HW6+WNQm7/YYBVT70IgrJ:sxZ7m6/f+syUuJHbN/fa9
TLSH
T11D22C8526E38797B9CCBD209BF15BF53E6F9503251D11E48AAFC861C09E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8f27baf8-8de0-4b09-bc29-1ff6d3d48af7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8f27baf8-8de0-4b09-bc29-1ff6d3d48af7.tmp
Size 10KB
SHA256 2afa5e78b383cdc90e22094e092e246f5541ab789c73f0df3415da694a99fcd1
MD5 43cc0e8d9d1c726c806e8c27cca04284
SHA1 fec399c4b95f7d43ede3ec6bce7fcc2c17309ad0
SHA512 b6d2ef8bbda83e76d5d3cfa4d3311cf5dac14355f39645d2faaea47595249faf995d1ce9f5d9a82bd4c26eeadcadcd63ed2aa8e7010a67c7d4b9fe9d1845e212
SSDEEP 192:sxZ7RFW6/f+sgI7NIdpL9HW6+WNQm7/YYBlH70Ig5ZJ:sxZ7m6/f+sJ7uJHbN/fiN
TLSH
T12422B9526E2879779CC7E209BE157F53E6F9503251D11E48ABFCC61C09E66CD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9253a480-478a-460b-bd28-eaec315ab897.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9253a480-478a-460b-bd28-eaec315ab897.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

94e78534-77db-420f-ba6a-dfad266f8199.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\94e78534-77db-420f-ba6a-dfad266f8199.tmp
Size 10KB
SHA256 5b9a2bad35135818f23fffb249b25b17fad25de3efb713408d4e257a36ed758f
MD5 47ba2ded4a7bcca2a5d41f869f770e71
SHA1 8ffd078494ead4fb1c36b42bcd9cc33846e8025e
SHA512 23df65f5d021b0b6262e5ea3127e8bc790e4d3a8207f4ca394297592b721280a12eb3bbef637c780d5ba9a94b529b29bd1504820194b60e06ea945aff1dd7639
SSDEEP 192:sxZ7RFW6/f+sgIUNIdpL9HW6+WNQm7/YYBVT70Ig57J:sxZ7m6/f+sJUuJHbN/faL
TLSH
T18C22D8526E38797B9CCBD209BF15BF53E6F9103251D11E48AAFC861C08E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96f5eadd-519d-4f97-b5be-486e7b022696.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\96f5eadd-519d-4f97-b5be-486e7b022696.tmp
Size 10KB
SHA256 5811d667878ed847855ff4485338c24547c4364e188162a4d399c8fc0b991efe
MD5 3d54fbb990f1aba46a8ce55035b7e82d
SHA1 968780455ef23347bcab9604ac4f9bb2ee9d2345
SHA512 923113535cfa9fa53f51a8075032c118ccccda60c2355c97c69d1262f355d7e7e0a1d882e7b8a933d546632824a9aa8c1d82a3595a82516b24c577757f32af31
SSDEEP 192:sxZ7RFW6/f+sgI7NIdph9HW6+WNQm7/YYBccwg0Ig5ZJ:sxZ7m6/f+sJ7ufHbN/fsNN
TLSH
T14632D8526E3879779CC7E219BE15BF53E6F9503251D11E48AAFCCA1C09E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 64c0c9e246e017ccd77f2e6de673b64d2c963590484d88d9a52ae244a3041d4f
MD5 4bcd76b2dff9b5549c6df4bd7dcbe284
SHA1 06d190c378116a697170c0eb97c9b1ec441073c0
SHA512 79b24c43d298f1d85852f581d6fb100dee54de543f6af076aee38706e3b54ce44c6dc9de6efe2e796760f148b09e128221a8c8f3738d38ef1c127039cea43f09
TLSH
T13C4175875A804C86FF94C5FDFCD41A9F3FB0996F5C8B6E0B04AAC4B599B6B10510C034
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1bae596e3519960beb1af6f86a93d3d9f58cc6b99ec2b7558dc018b4a7d0ae95
MD5 4fdcddeff31b8d0f11cadc38fc6a9924
SHA1 41fcf158c267b0397b6b40c244fa8c071d454d1b
SHA512 534c15103aa24029178fa5c331ae02422d6c514644eb1b78f3cee74024a82633f52a15fbd290325181186c391bb4f3aa0944edba5183a1ceffce5eec8940b615
TLSH
T1F34175475A804C82FF94C5FDFCD41A9F3BB0996F5C8B2E0704AAC4B599B6B10510C034
MD5 SHA1 SHA512 TLSH

Submit Download

e110c90a-48dc-44c8-811a-22c781f52318.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e110c90a-48dc-44c8-811a-22c781f52318.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

115a9ec6-b897-4632-884f-03d8ab64236d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\115a9ec6-b897-4632-884f-03d8ab64236d.tmp
Size 1KB
SHA256 9feb257012696d1dddbe28319e905f3910d046535d26194b0a1c15c4f9111f72
MD5 52acbbed42d53f0360dff0a56b482e7d
SHA1 d84c0898ad41b88deda20edb9bb0875dda89fca5
SHA512 2abfb9eea4079ed987c6fc61f2e4a22b1140a95793de4fb6abc84df0c9bb510ac8d5669e58ef6c558297554e10c21487f37fc5a7de418dcd4efa66c33c5d7d58
TLSH
T1D431AEF2C3D5865DC81516F0AB246E1BCE6E051883283D1ACDD5EF9B93E64B2E14158F
MD5 SHA1 SHA512 TLSH

Submit Download

9657866a-eb35-49af-986c-af38b87f44f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9657866a-eb35-49af-986c-af38b87f44f3.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

ed488035-2e46-4519-a972-ff93bf02ff81.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ed488035-2e46-4519-a972-ff93bf02ff81.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 304b99fd05b3c14396b6933ec53d077c16946ebb88865aa24c581c2ade7e3f4f
MD5 55f92d35a55ac98f003b1e3f86680fda
SHA1 e5c29119c00684d9674e31113073a7f04518832b
SHA512 67531c7984801cf6dc173feb311fdf4deae6cee8e12bc497e839e211312ad7e1d937d978ffd4c8062e0ff69eaf4a270cff63ee5f1e9d9433384b9e8031b5ffa9
SSDEEP 48:KgdcRtfLPwbD2jISlwK9l1Hwx1gYmnddyLmBcJ4FZDHb0bni/ISx0K9x1b0xZkYD:KwWYKHKiW+YKTiWSwwK5uUBoFhR
TLSH
T11891E410327F420238BE29C886B5CB1B125132F77154E52BBFBC5492D96EE586DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ac28812e-97cc-424c-81a4-d97b5e2ff731.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ac28812e-97cc-424c-81a4-d97b5e2ff731.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b14c3d3b-e147-4cb3-a0a1-334f297b38b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b14c3d3b-e147-4cb3-a0a1-334f297b38b6.tmp
Size 27KB
SHA256 bfa05b9a25b4300063f243425d7ecacdfc059984a11dcba5e1c6cae18080e3ad
MD5 b572c298a348952114b7ed90cc557cbc
SHA1 f126b07bec54eade54808dfe438fbafb53370d00
SHA512 d7d744e175d0f683b7ab6c9699cbb3dead53a3dddedc53cd26742fe23b3a945539b51e3986d1248dabf8dd1f2cf63d4d86e40c73238682c7347dea1ab5884b68
SSDEEP 768:xOyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXaropjPP:xOyYR7jWv3NpBu1ja/CL8OXRZ
TLSH
T17CC2E93B640DCB7E4FC01E9DDC5A6F9B6E9802C7A6948D4047FA944C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d2e80d04-29c1-4f89-93ae-5274af51adb9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d2e80d04-29c1-4f89-93ae-5274af51adb9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6cafa0d1-050d-4114-bb37-84df8164bc0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6cafa0d1-050d-4114-bb37-84df8164bc0d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d9706386193a0e9e4aadcc812821cbab1f2e98d8ea9cd71a6892f86fd86754cf
MD5 8bb2066422519c5c251e341e47ce8b98
SHA1 2873a7e27afa780416ad679ceb0c8b3fb2419300
SHA512 49577c1b1e846861cef0662f561b3224f6f282d972b1da613d854324f20cb1acd61332b21b35d313cff085ad444c5291ec776489fbc4d99c176753972552c734
TLSH
T10941E948B6ED1148B3B76F5A6BF6A86D487F7D772E06845D00120E8E4676A40CC72B37
MD5 SHA1 SHA512 TLSH

Submit Download