hxxps://frudi[.]site/ttsj[.]html

Analysis

user interaction
yes
max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/11/2026, 23:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://frudi.site/ttsj.html
Sample261104-3xjrfset2t

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3364	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{286BA81E-E034-4AFD-B281-28AAB7BE5FC6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4600	msedge.exe
4600	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1760 wrote to memory of 2460	1760	msedge.exe	85
PID 1760 wrote to memory of 3364	1760	msedge.exe	86
PID 1760 wrote to memory of 888	1760	msedge.exe	87
PID 1760 wrote to memory of 888	1760	msedge.exe	87
PID 1760 wrote to memory of 3244	1760	msedge.exe	88
PID 1760 wrote to memory of 888	1760	msedge.exe	87
PID 1760 wrote to memory of 3244	1760	msedge.exe	88
PID 1760 wrote to memory of 3368	1760	msedge.exe	89
PID 1760 wrote to memory of 4320	1760	msedge.exe	90
PID 1760 wrote to memory of 3368	1760	msedge.exe	89
PID 1760 wrote to memory of 3368	1760	msedge.exe	89
PID 1760 wrote to memory of 4320	1760	msedge.exe	90
PID 1760 wrote to memory of 4320	1760	msedge.exe	90
PID 1760 wrote to memory of 1812	1760	msedge.exe	92
PID 1760 wrote to memory of 2484	1760	msedge.exe	93
PID 1760 wrote to memory of 1812	1760	msedge.exe	92
PID 1760 wrote to memory of 1812	1760	msedge.exe	92
PID 1760 wrote to memory of 2484	1760	msedge.exe	93
PID 1760 wrote to memory of 2484	1760	msedge.exe	93
PID 1760 wrote to memory of 3584	1760	msedge.exe	98
PID 1760 wrote to memory of 3424	1760	msedge.exe	99
PID 1760 wrote to memory of 3584	1760	msedge.exe	98
PID 1760 wrote to memory of 3424	1760	msedge.exe	99
PID 1760 wrote to memory of 8	1760	msedge.exe	101
PID 1760 wrote to memory of 4192	1760	msedge.exe	110
PID 1760 wrote to memory of 3088	1760	msedge.exe	111
PID 1760 wrote to memory of 2284	1760	msedge.exe	112
PID 1760 wrote to memory of 2420	1760	msedge.exe	114
PID 1760 wrote to memory of 2420	1760	msedge.exe	114
PID 1760 wrote to memory of 1456	1760	msedge.exe	115
PID 1760 wrote to memory of 1456	1760	msedge.exe	115
PID 1760 wrote to memory of 4600	1760	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://frudi.site/ttsj.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ff9785cc188,0x7ff9785cc194,0x7ff9785cc1a0
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,11718838952313186543,5327380126000643616,524288 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=3008 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,7013397018538260087,10085682523352694666,262144 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:2
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,7912237013714867983,14724306387792314452,524288 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:8
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,17235628494463638757,14368423554910129187,2097152 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,13362206553985583005,13259728313259143715,2097152 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4116,i,13565271089979360135,11548134057550830575,2097152 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4128,i,4491307396597294793,17437323356525805058,2097152 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,1988520161582553633,8653267034159340032,524288 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,10870958641240278593,6346934717993177053,524288 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,16909369060463879218,4283547607112828809,524288 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,16909369060463879218,4283547607112828809,524288 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,15241011366945004776,5109445639007082833,524288 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:8
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,4006505326287964527,14503832411918656796,524288 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,1865448204816703701,10635246168804229193,524288 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,17313235831606634188,9042271874799338068,524288 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,4453151123475285915,4458775646938036241,524288 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5404,i,714153008023739720,6581914405436598240,262144 --field-trial-handle=2924,i,367120102029183793,12720922107329500684,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4600

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:808

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0fc71548-2696-417f-8afc-532c89fb3fa0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0fc71548-2696-417f-8afc-532c89fb3fa0.tmp
Size 21KB
SHA256 41ba5234aa22354d7a4c055a25dc980bfed6deabf9127e37a2ef553380e550a1
MD5 7a3e8b972da6a42b7bd3feeb2e4ee6f0
SHA1 e06c931ce607610cafba9e0c3362c4c4bf8483d9
SHA512 6725403272d0ac0178a3dc381b05b6c794f8092ee7a7a5c7bd66f68e621583187b8ea9ac0a590b04bbb28a25bc3687aebe63f0987c34c8e5e5dfa27e68a3ca67
SSDEEP 384:KiFzQkUSvSzsNd8TUNTUlIlRym1AZezIGmxR89MX3cisvaTZc5IIlm:BFd64wgHYomuE3cisvaTZc5Lw
TLSH
T111A26D33D8A8DC3F9EA3AA54F54A3603DEB4416BC6C49B50E7CD9A2C00DB19C134BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

020a76c4-0792-4446-a530-c16ee7a5a929.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\020a76c4-0792-4446-a530-c16ee7a5a929.tmp
Size 10KB
SHA256 b0c7456be1c3a78aa268ae235cbe0c286d8ffde7f40618fce7979aae621fcab4
MD5 1189b2fd1acb2dedff0f0add892d8bef
SHA1 92ed581ceb6082a810f7a84f22a0c5986bb3b6f7
SHA512 9d9e323d9f44fbe5e9e77314350bc361e8223e84a18275961bb80260fd32f991b342a767e7f4bcd0ac869909223e0485ed734329a28671c1a5de3f17cc835e6f
SSDEEP 192:sxZ3fR7WVn/f1UsXGpMoIdpecHW6+WNtc0/YapiewdBFIg5qJ:sxZvMl/fKsX1/HbJ/mQ
TLSH
T1B822C6126E28697B9CC7E21DBB65BF53E6FA103691D01E48B6FCC61C04E76DD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

780606b3-5aa2-4165-b400-9f7de204dae5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\780606b3-5aa2-4165-b400-9f7de204dae5.tmp
Size 10KB
SHA256 c9fc60333ee0056b726fe1e7eec759b6ea2c98f4a0dc8f88faf6439476d46229
MD5 f9525baca238626cc86a1eedba6fbd48
SHA1 0b7320ae8b52f2ac7fb56a9c3b570bcb444ddf4a
SHA512 b1b74fe8c0843224968504c43194256d16a3ec70eff96032932da5a5b8ac1c298d9fcb58f64cc5e42c8db5466d001254fadd85617f13d1948cd5a6a8d091bd50
SSDEEP 192:sxZ3fR7WVn/f1UsXGpMoIdpwcHW6+WNtc0/YapMRwdBFIg5qJ:sxZvMl/fKsX1hHbJ/5Q
TLSH
T19322D6126E28697B8CC7E21DBB65BF13E6FA103691D01E48B6FCC61C04E76DD224380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96d2ce01-b53e-4287-bb36-525164bc3820.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\96d2ce01-b53e-4287-bb36-525164bc3820.tmp
Size 9KB
SHA256 edf04cab85bcb69ce83cec073d4ca6f133eeb28233844173800965b10fdd5fa2
MD5 d921e32f206e244d79398974bfdeef3e
SHA1 70883f5e28ae6a0dcfbd8411be8109f0436f10ff
SHA512 f53b546f3d88e718dfc7b91f35e9d37f94e0e2380bffff0695425e226a204bdb6fe2eb2bef38ee7eef77474fd4c9ddf4167be42ae16f53db284de90b297207e9
SSDEEP 192:sxZ3fR7WVn/f1Us0GpMoIdpecHW6+WNtc0/YaphawdBFIgrJ:sxZvMl/fKs01/HbJ/X9
TLSH
T14122B6126E28A97B8CC7E21DBA65BF53D6FA103691D41E48B6FCC61C04E76DD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a9daeae-ff28-4984-9f2e-7210a4f5e9ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9a9daeae-ff28-4984-9f2e-7210a4f5e9ae.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 6ff9eb90d9f3f0890982ab1b05ef089b5c10ca66870d31f61c14069fdefc7e9e
MD5 df2fd8c10fb581c02b58dfd2281ca811
SHA1 914e331a52ad9d124a66b228c6dacbb61b19eca0
SHA512 a216127f74f76608a8b053ff18591b5f770af1d8389da387b84a05d7e84aff248fd0381e048a0d2234ae914fa248a42b8ff661b5830d5cd1f427d779c62f4fe9
TLSH
T11DE0DFA416C8C32EA25B745B22EC678CC2C0371E93C0E98A1F48C88C7406898A2E66B0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 894238fdcc62d0e217db97c2f52d6f9cd59e5889920e6e172265df57a0d720db
MD5 7a567386a6f04e5d0bff282197c9905b
SHA1 61415f5a036e9b1870f55b215e9b1ab66a381667
SHA512 b79edb5183724c440d606fc69eb7bc34beac25039bed72837060ec9b3f90297ae66c82799f25a4b7309885040ce372484c3ac717c40934fa2b711c6586ef9dca
TLSH
T1156160B465D081B2F7698D70E2DD26873B736B8347839D5132BCF87B08BA709584B7A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8724679ddb20b84d634b83e98747d47486e62cdd5ba88277f643e16b2d62f9ef
MD5 d54a2d976de630118ed08fa86260a5f1
SHA1 acbd83b342c46b778186c225acb15c01815860a8
SHA512 e38de0dc14818ad6bee556f15f78dc034b6b64252304e1bae3909732cfba2dc9b401e1116ed5fcd4b2ee2df55a1bf7ee66140883052af78acbc03593b343c0d5
TLSH
T12D6170B464D081B2F7698D70E2DD26873B736B8357835D5132BCF83B08BA309584B3A0
MD5 SHA1 SHA512 TLSH

Submit Download

16fd024e-1793-470c-8d52-6c43309ecfa3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\16fd024e-1793-470c-8d52-6c43309ecfa3.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

83b792d9-b981-447f-b7d2-0bc37abbfcd3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\83b792d9-b981-447f-b7d2-0bc37abbfcd3.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

b3990399-06c8-4fa1-a7ad-71a5c3ea5098.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b3990399-06c8-4fa1-a7ad-71a5c3ea5098.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

d8566602-dff7-43df-b959-826e08cd0817.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d8566602-dff7-43df-b959-826e08cd0817.tmp
Size 949B
SHA256 2bc97856e0104400dc9415fd71f9c2cf782e984beb25eb736214aa9a0283aa97
MD5 d90f4a0689be500cd6e0e482119eca43
SHA1 d805fb6e5c66bfb34a3a0e893b7e03b9fa4c5b8f
SHA512 b09e4f9c7e24118cfa980991c117bf6093131592e6a1754156f6a3303dc30b56ecf2fc38178f5681a6ee68793ce4b99242648241a2970dc8b3051f32f00641f4
TLSH
T1A611BAF3C7E5856E891516F05A28AE2BCE2D0A06821C3C1989D4EF2BC3F3075E10255B
MD5 SHA1 SHA512 TLSH

Submit Download

b663e3d8-934a-4bf6-9314-0d18109b4149.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b663e3d8-934a-4bf6-9314-0d18109b4149.tmp
Size 10KB
SHA256 868b09d793c09d918bd0c0d64041980b3b2809894978e36e96525139e3669938
MD5 b778c2d83bea69e7266d7fe4a0155917
SHA1 dbd7f9a8bfbcf806177e6789a6d14dcf163247ed
SHA512 82d778483f634538a1b0f4c7a381c8492afe3319d5ba8b6bc68b76f5f9a16aca1a2de40c414086c1c478fb5dffa4aaf452a42626482c338c6e3523550876cd96
SSDEEP 192:sxZ3fR7WVn/f1UswGpMoIdpecHW6+WNtc0/YaphawdBFIg5IJ:sxZvMl/fKsw1/HbJ/XS
TLSH
T1E522A5126E28A97B8CC7E21DBB65BF53D6FA103691D41E48A6FCC61C04E66DD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e32c3b64-b36f-45f0-929c-ea099cd09571.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e32c3b64-b36f-45f0-929c-ea099cd09571.tmp
Size 27KB
SHA256 a7292727479c12517e845de36b8905094618deb120df8d45036b93581d68b9f4
MD5 b82be68fda76d291bbc925a0c1b25206
SHA1 dd5db73faab6cc9f73e98221f5aa3889efaab1c8
SHA512 e3008d722831629610e65162016a1320a1e3949a906aecd5e07695af58f9cd054d2b0d3b043be7128246b552db063a9c389dc214eac2e82b1d7060535ea3bc18
SSDEEP 768:9bWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7cro4jfe4mRvC:9bWPcLKWvKeEeu1jaClLiF7H4jW4mRq
TLSH
T181C2FB3B644CCB7E5FC01A9DDC5A6FA76E9802C79A588D4047FE944C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a92df1f-b995-4bb1-a145-5d904581415d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9a92df1f-b995-4bb1-a145-5d904581415d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a85cd960-027d-4ab3-a552-8b046d474189.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a85cd960-027d-4ab3-a552-8b046d474189.tmp
Size 18KB
SHA256 1e9b1701ef79874cc034a31af2bf9f7a945d076721f518268fd83e31d670060f
MD5 37d944b15ed75d84362f03f958d3c346
SHA1 fd4281904c756d856ba277c4a0909b1cb46b779d
SHA512 03c86e6077788a9d4d1ed91a451aeb2f70165483fdf1e49232fc5359d5f205956be85c3c3f649a63438dfb8c735ab38185828e354463976a38cb0af6a80226b6
SSDEEP 384:FQkUSv0sNDRym1AZezIGmxR89MXHisvaTZc5IIlm:f0eYomuEHisvaTZc5Lw
TLSH
T13B827E32E878AC3F5EA3A514F14A3903DEB4911BC7C85F50E6DD9B2C01CE19C234A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf500f64-ea4d-444d-805f-b514106af03d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bf500f64-ea4d-444d-805f-b514106af03d.tmp
Size 8KB
SHA256 5451cc7cdec09e241e215928fff57d25fe415082c20c6f1a3efdec00c571b5b9
MD5 6689b7a7e8323dba491e15b30a3a2490
SHA1 c4d8c55f1359324e0cda4ccc6eea2eb7153931b1
SHA512 937de18bf1505462fadc75d6944501512edc993cf86fccb647d073e1b012da4dd7cb2078a2c57ac2b03b02840aaf14f97fab8cdad0e6ed406c10c4a0418746fc
SSDEEP 192:RvONg56IEvaQmiUyGPG6TMvuIGmx9jzorHRPMX/eURl27Hj4qaU6:NONO6DONauIGmxR89MX0HsU6
TLSH
T1A0120A32E8B8BC2F5EA3B955B4473923DEA5412BD7896F50D6DC5B1C00DF26C130A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cad76ece-3417-47b7-a2ae-d667ec4b47f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cad76ece-3417-47b7-a2ae-d667ec4b47f3.tmp
Size 8KB
SHA256 a9bd68584c14a3c230dda7d974ac5b88e113a102cfb5075eac1fa1cea5b7086c
MD5 5223a69e5f49966ac93766e3ff92c9ae
SHA1 2dc3798ff241bd5a259a2348f045bf8dc6d032dc
SHA512 dbd9ad7e069b85e93c0dbcd5c3c2d02ff994c5c7a609141b290455048143ac0e17d165f97bad0b5c492739131869e728b9d4c6acab76db21345ddc27efc393c8
SSDEEP 192:aON26IE7QmiUyGZG6TPuIGmx9jzorHRkC7sjiMU6:aON26DtfPuIGmxR8HsXU6
TLSH
T1AD02FA35EC78BC6B9EF3AE09B4872A239EA5102BD6951F54D6E81B1D00D725C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dab9a7bc-cabc-4759-af06-5c01d11326d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dab9a7bc-cabc-4759-af06-5c01d11326d1.tmp
Size 18KB
SHA256 b3ff3d2e7ace7cfad8b2107b60c6356a83e5fb115a7e2e7b2b97bf79d6dedc03
MD5 973ee41435dd015e152492df201ebeb1
SHA1 d9ab5973c3478e1f267f8eba137912a37c56eb66
SHA512 b94b19f90b5eac2e9c5eeeb48faa781e65dc20ca6381a6cb250f513c6eaec0cf35601c54177172d592c70643f46218c26eaf8d3168bfad3ab75098ae2f17d443
SSDEEP 384:aQkUSv0sND4ym1AZezIGmxR89MXHisvaTZc5IIlm:C0/YomuEHisvaTZc5Lw
TLSH
T1DB827E32E878AC3F5EA3A515F14A3903DEB4911BC7C85F50EADD9B2C01DE19C235A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

267b44eb-cf20-4e20-b365-39862faaa6bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\267b44eb-cf20-4e20-b365-39862faaa6bb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c9017a6e80a4f62bcd12b13a90ef2b728a53a64ef7d9c96f4c63ffe23ec0621b
MD5 e7477c2f17faef6b6f0ffa6dfb3d14a3
SHA1 d435591d722dc9cbf54cb16179ff3c998f93ca42
SHA512 588a26c3cdac947a13d9c79b1340779487f89960109f081b19f9926bb080de8719036b2043473a6a259631a2e5309e3f5dcdec0ef1ec99b7c61cdbd860dcc697
TLSH
T1E2411858AAE91148B3B36F5A9BF6A96E497EBD362E07949D00010E4F0663A40CD71B37
MD5 SHA1 SHA512 TLSH

Submit Download