hxxps://taprunfun[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 19:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://taprunfun.com
Sample261107-xt8zaaft2n

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2728	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{AE2512C4-D965-4213-92D5-D508224C12A9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
400	msedge.exe
400	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4724 wrote to memory of 4400	4724	msedge.exe	85
PID 4724 wrote to memory of 2728	4724	msedge.exe	86
PID 4724 wrote to memory of 2644	4724	msedge.exe	87
PID 4724 wrote to memory of 2644	4724	msedge.exe	87
PID 4724 wrote to memory of 2644	4724	msedge.exe	87
PID 4724 wrote to memory of 4172	4724	msedge.exe	88
PID 4724 wrote to memory of 4172	4724	msedge.exe	88
PID 4724 wrote to memory of 3536	4724	msedge.exe	89
PID 4724 wrote to memory of 3536	4724	msedge.exe	89
PID 4724 wrote to memory of 3536	4724	msedge.exe	89
PID 4724 wrote to memory of 3928	4724	msedge.exe	90
PID 4724 wrote to memory of 3928	4724	msedge.exe	90
PID 4724 wrote to memory of 3928	4724	msedge.exe	90
PID 4724 wrote to memory of 3352	4724	msedge.exe	93
PID 4724 wrote to memory of 2328	4724	msedge.exe	92
PID 4724 wrote to memory of 3352	4724	msedge.exe	93
PID 4724 wrote to memory of 3352	4724	msedge.exe	93
PID 4724 wrote to memory of 2328	4724	msedge.exe	92
PID 4724 wrote to memory of 2328	4724	msedge.exe	92
PID 4724 wrote to memory of 3252	4724	msedge.exe	98
PID 4724 wrote to memory of 3252	4724	msedge.exe	98
PID 4724 wrote to memory of 4828	4724	msedge.exe	99
PID 4724 wrote to memory of 4828	4724	msedge.exe	99
PID 4724 wrote to memory of 4668	4724	msedge.exe	101
PID 4724 wrote to memory of 2228	4724	msedge.exe	112
PID 4724 wrote to memory of 1076	4724	msedge.exe	113
PID 4724 wrote to memory of 1244	4724	msedge.exe	114
PID 4724 wrote to memory of 4604	4724	msedge.exe	116
PID 4724 wrote to memory of 4604	4724	msedge.exe	116
PID 4724 wrote to memory of 3660	4724	msedge.exe	118
PID 4724 wrote to memory of 3660	4724	msedge.exe	118
PID 4724 wrote to memory of 400	4724	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://taprunfun.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff89516c188,0x7ff89516c194,0x7ff89516c1a0
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,4394368425443404517,13137345742294261566,524288 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,3187504030131758470,3261222106593035228,262144 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,10047250165856325965,11998270607431877851,524288 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,8659164651148558952,13375004568969664712,2097152 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,8767321067932469685,12284050812577849796,2097152 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,12041168312046911003,2467724103516168735,2097152 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,16892828484970649766,11752686565429835128,2097152 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:2
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,637458498513044004,17194480934866358996,524288 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:8
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,8762754307803318041,17702968988636444112,524288 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,16272884821248327228,13841557102450201065,524288 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,16272884821248327228,13841557102450201065,524288 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,12434185761646814376,9887934777758056825,524288 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3408,i,17777591636742194409,4234136247820292546,524288 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3560,i,10611729084407826171,3826473558787581950,524288 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,6270099017191008926,2299524697879963292,524288 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,6381122681648563716,16759982023443396839,524288 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6196,i,4117424902640671444,13073097362214773776,262144 --field-trial-handle=2140,i,12103762083604473331,5233447964537374142,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:400

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1f1b248e-8959-4670-be41-da5cfc46ab90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1f1b248e-8959-4670-be41-da5cfc46ab90.tmp
Size 18KB
SHA256 ade9f35c1cb393cedcd1c1b8809d01b7ea1953e96e32e87512bf1f28c57e212c
MD5 e5065b41b2a1cbd24d3f0453363209b3
SHA1 17c7fa2fb1413c9bc1b40dc1e16785a615f5bbaf
SHA512 b43710259ed311abda853861e69661d082cbbf2b501a1e4842def716e0b341f45085df65793a387f1ea694478b1c5b8ae6c2e122b8398145380c5c15c2915549
SSDEEP 384:XQkUSv0sNk0wGkPnOL34OjTVYudkG8+nsqaaX1L9tL8SSWIIlC:p0AL3LnhlnsqaaFBt5jLg
TLSH
T1E1826C3668386C774AB27511E14A36439FF4D163DAC82B90E6DD6F1C01CE2AC2317E26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27ab6ccb-c804-4940-8e07-dc0942daea94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\27ab6ccb-c804-4940-8e07-dc0942daea94.tmp
Size 26KB
SHA256 a18ff18e5973a1520792f95d41e4df7dcd4fb955f1c49115de55bbf138230d93
MD5 6a62487e621be88e200a387b9e142fe3
SHA1 1019d115fc3ad639d70a30867273ac7efe87a747
SHA512 74a509c690c8e4de1f9093a870d816e7417dc7c313c7b715f5f9037c8da38ff967472ba897d799db244dbec23e0a8196e0933173dc3c7361394d2aa1bd5ec5da
SSDEEP 384:MiFzQkUSv1zsNs8TUNTUlIllwGkPnO034OjTVYudkG8+XsqaaX1L9tL8SSWIIlC:3FdNhwgb03LnhlXsqaaFBt5jLg
TLSH
T12BC207F258E75877D9AE5B03A37E2D028EBCC153F5846A90B788591CCC8A1BFD306D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7582b247-fae7-43b6-9ca5-6b2c098bcfa4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7582b247-fae7-43b6-9ca5-6b2c098bcfa4.tmp
Size 18KB
SHA256 e822efe894a5a506f3454b5f4405f3f863e22e091bb7df532350a57a7c83c07b
MD5 6316a97feeff06e492c59eb7eabf1657
SHA1 05b5ef268ed4dc250b2d09489f585adb360c8b00
SHA512 82c1f16249ddee434fde5ec9486de77aea024360daa452ef8cc42e45af55ec8349fd8aa672da81d2d3542ed11088ab5099a9908ee890aa61613fb166bdc0aa05
SSDEEP 384:jQkUSv0sNklwGkPnOL34OjTVYudkG8+nsqaaX1L9tL8SSWIIlC:N0pL3LnhlnsqaaFBt5jLg
TLSH
T148826C3668386C7749F27511E14A36479FF4D163DAC82B90E6EDAF1C01CE2AC2357E26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9b693030-076b-40fe-8a7f-efecf785a8f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9b693030-076b-40fe-8a7f-efecf785a8f4.tmp
Size 8KB
SHA256 d540b368892ed329594270e5d74a13ed04f8b3a906865d4adfb881fb509cd480
MD5 daab8ab2366bebdf3783dc7a09b15ee1
SHA1 bd0b25ad304e74ea5b4ecd5dc404a33fd0a8c8cd
SHA512 bcf252e8e8e8d1f67b3aeaeb06f278a6d7d15bbe3f0b6016505e74fcf966de2ab84a0459d0ae27fc1846e974c59b67bcdea2407d6a58eadb720aad4aaa56f677
SSDEEP 192:SONU6ygpQmiUyGSWtOCTVgvR+FdV6R0ozP+GU6:SONU6lHrtOCTVYudkGSNU6
TLSH
T1C102D835AC783CBB8DF3AE06F48737139FE4116BEA952B94D6E81A1C009765C2346C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

76a785cc-d087-4d41-99b9-4b456cd43cd2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\76a785cc-d087-4d41-99b9-4b456cd43cd2.tmp
Size 10KB
SHA256 d2d937b14dfe77b201049890560c83cbae51ef998699b0c9a3cf0322157767a7
MD5 313b9ac31668d8298cae1abe342eb49b
SHA1 400acb6bf2b680507f4791d0ec147cb2d4241c13
SHA512 493a3e93327ad5035f38a5056a23855e62881212a87ee975e9e34193599d75f65b09747617e8c76d12bbf3de6d078753732fc0669fb83fedc4b28445ea4bd213
SSDEEP 192:sxZ5RuWE/f8soIIdp97HW6+WNgZIWZYRPKgwxIg5g0J:sxZ53E/f8so5hHbIVZm0H
TLSH
T1D632E9566E38A9779CCBD21DBA54BF53E6F9503291901E48E6FC961C04E77CE230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

932a888d-4d69-4877-95e6-dbe82e072745.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\932a888d-4d69-4877-95e6-dbe82e072745.tmp
Size 10KB
SHA256 cca010c1c1e1010442512a570c1381ef425ddf96e101f257eb1324faff8d9061
MD5 a39e7bfc40795aaf946e28d4bde1f3c1
SHA1 6b523a8b9f17dfbba188ac9e6b9ca95b727ae5c3
SHA512 c81926ca2edc1e79ba66c5a030a5abef398c10cc5d93c4dbe924ecf51d23b699851c3d38f78dbdede826e97db11c409172d21d4909913624d6c70459b25e6c2c
SSDEEP 192:sxZ5RuWE/f8sMIIdpb7HW6+WNgcz/YRPF9bxIgrJ:sxZ53E/f8sM5nHbj/mt9
TLSH
T15D22C8566E38A97B8CC7D219FA64BF53D6F95032A1D41E48EAFC961C04E66CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

976532a5-1c4f-4703-b505-85a323bfb4da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\976532a5-1c4f-4703-b505-85a323bfb4da.tmp
Size 10KB
SHA256 c82fffa34a664ff4aacff420afd764e9458c2e881d01fe7478f20a5c55fd2d83
MD5 200eea2e04b980d269d0e0da218b2819
SHA1 78436a6861e9054389069b7c70dfc8203aaba73e
SHA512 47f239781b80efed0527bcd38955e19527629524713159e9aaee07d908094848ce96f9121a69a7441fd452059460d8a4fa2482fdb984205a8064f1fbdd58febc
SSDEEP 192:sxZ5RuWE/f8sSIIdpb7HW6+WNgyI3XYRPe9bxIg5geJ:sxZ53E/f8sS5nHbTgXm2h
TLSH
T16322D9566E38A97B8CCBD21DFA54BF53D6F95032A1D11E48E6FC961C04E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 4d26069ae3de9f91cde9a27094201237779c9d1d8d601fa6abfbd63e220bcb52
MD5 dd63d2642a796021414aededf74b71c0
SHA1 0c2d0b5bbc68c619b2afbfbf216071bac1be345d
SHA512 43e6ade140ec4add75c1e6307709ad4fce850a4a99f43abb4832341024d20d7fbf698e708e29532b84f92f4f0dd6cb42022dc965c40db99c8f051074ba3a8ae0
TLSH
T15CE020D925CCC21D7144688742BC634C83C0369A9BC06E0F3704C44DF547454FB8D760
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 f55da530fe90fd635dac3f34e2a664737ae260ea2cb3e1cef20cb4dd8f6438cf
MD5 e6989cdca8b2953d02a1b6dcadd4768e
SHA1 dbd556a5b0e03528d479fb7285d95619ea4b9d0e
SHA512 45b2085409f7be164855375e1b26b8e910224dab7c5e6a249c2b6881ad6c69c1c81e2a6e48c402c9193923d4d6d905bb25d386165c114c50a22f4ef927d51f2c
TLSH
T1AB5174429B5343ADF7BB603281D529CF3A35454A594B5F2AC1E4C278B49F714A71806F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7d5004ba5b4c04b569ee89c323f7c573b2963274c08e2d7b5b5d0926b2c3e990
MD5 be786b3b6d524fddcefdc8fd2815087c
SHA1 c7294388638d9e5643e09f54b5b3553a6e9bb959
SHA512 f220111b10d8780a3094c13177ca3b6100c59ece5b48e52cf63847e6704944e1f4363c1569e4aac65948b2f50c02e93d734b0636801eec48881f3a0574ff87f9
TLSH
T1C45194429B1343ADF7BBA03281D519CF3A31454A484B6F2AC1E8C278B89F714A71806F
MD5 SHA1 SHA512 TLSH

Submit Download

35a10f9e-b659-42c2-8ecb-7c3edf1f44c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\35a10f9e-b659-42c2-8ecb-7c3edf1f44c8.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4368b430-1ec5-4d65-99da-6923ceb01583.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4368b430-1ec5-4d65-99da-6923ceb01583.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

8928f961-1011-453e-99a2-5237372b89d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8928f961-1011-453e-99a2-5237372b89d1.tmp
Size 949B
SHA256 7a969f88797c5474154f023887190285ac53ff7cf4d9d57bc1f068b49321f6bb
MD5 a2c276b31c7d800c59fec1766dbf3740
SHA1 e49f18bf8e4f2b2f3496ea0636972468b786393c
SHA512 673d47d6c1cec6e5332dfdf3d3f938142bb3cf5d9e440c9e5b6fadd7443373aeaf11fafe0507eeed0954811277ea121a755167a0b6f7ba5e69ffe131a5e70d21
TLSH
T122117DF3C7E5956E891116F05A28AF1BCE1D0515421C7C19C9D4EF6793E3475E00255B
MD5 SHA1 SHA512 TLSH

Submit Download

a8489952-db37-4f96-bc32-84350c56a868.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a8489952-db37-4f96-bc32-84350c56a868.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 74f8b106c2c4a868eb860760a329e354f11c48a179f0a306aa949e3ea5b92c22
MD5 6e3c1d7d446b670d8637b0d291c3b0b1
SHA1 d900ead60680906579cf4d5303de47f64e36efac
SHA512 6323c28934ec3ad81246f2715802c898ab6cd42af8eed4450bfdb1eaa954c68bbe64a9d80f6c3d557e656e058792185303f096c72064ba061f4ac8dcf593929e
SSDEEP 768:86K9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k33rol+5u:86K9uzYWvcQWsu1ja0HL7Q3kl+5u
TLSH
T186C20A3F640DCB7E4FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a7fdc1397f9ed87f2b580c0fa1d91384edac890a309be6ee6af5c24c196646f8
MD5 bb83a8c796853236cdf8321825ef9197
SHA1 f03a05f440c22151c4ca7f8114ffed6773e3d025
SHA512 934a1450c9db7b319fbd243a11589a844a0b336e3ea70a246dde942b302ba22bbf9935aeeb62e399fb0c538edbd0b5617c4abcd324b993c0055e20d8a0d0cee3
SSDEEP 48:K0mIm10JF3jXYbLuLISdYK991vYxdIY+vF1yLmBcAeEE9bI/wISY9K981+9xWtY0:K0mpukKLCm2JiKSMBGMKjN
TLSH
T10191F16131BB029078BE255C44B5866B128132B33059EF2FBFBD44A18E6BE055CFD8DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a3534703-ce97-446b-95a9-90fb52e407d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a3534703-ce97-446b-95a9-90fb52e407d8.tmp
Size 10KB
SHA256 c128bc81547db3095108ef8fc7925460df4e13a510a8e952cc2ea24c4b9415dc
MD5 d7adb1ec738485854c1522771a722860
SHA1 6e81e240b867ba4b7d2ce4b422ded548758ff04f
SHA512 9192a140c448ca44313cdb87e6a15d422a683fe1d0853a42250a6c2deddc095a44687858a1194428e63420cc3b991cb6d3b84c7d58cfeb34c6ebf5936436c008
SSDEEP 192:sxZ5RuWE/f8soIIdpb7HW6+WNgZIWZYRP47bxIg5g0J:sxZ53E/f8so5nHbIVZmAH
TLSH
T19A22D9566E38A97B9CCBD21DBA54BF53E6F9503291D01E48E6FC961C04E76CD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8ae7081-e5e6-49f3-ac6f-5243e5aaf576.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8ae7081-e5e6-49f3-ac6f-5243e5aaf576.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d69af036-9626-4b96-b362-29cffd9e30aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d69af036-9626-4b96-b362-29cffd9e30aa.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

70d78c43-c441-4f90-ac2c-b8f7672acf41.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\70d78c43-c441-4f90-ac2c-b8f7672acf41.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

92077657-d460-40a2-957a-3e2e39b25fcd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\92077657-d460-40a2-957a-3e2e39b25fcd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f9bb169a-9f30-419d-aac7-bd904c5c7ae1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f9bb169a-9f30-419d-aac7-bd904c5c7ae1.tmp
Size 8KB
SHA256 6c323a3aa429637a0aa9f9d6c6aa3bcd1d8056f567c9bc4898ba4384eb9fbedf
MD5 892cfe3b0a2d341af55c69036cd6babc
SHA1 5fcfb168c1faf2c66d2d15a081a5356bad3a823a
SHA512 0267bfe4344321f9bb5159aeac5113b0c2437527380c5a49430e284bed72abbbfb6a6c8be427f3df27c316d7b0b33926a20c5ba17006220c122a3f2fe44baf26
SSDEEP 192:eON16yzQmiUyG1W4OCTVgvR+FdV6R08dMV3UVqtU6:eON16O44OCTVYudkG8+WsU6
TLSH
T1AC12F831A8382C7B5DE27541E48736139FE49167DE893B90D5EC1F1C01EF6AC230AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 864fd7e626820bc156102773428475f94f2d4f35e4af677596b16c4d11a0e05a
MD5 b3d08781814f98f15ea5f606845c1260
SHA1 4c340b94df56f0f9a11ed3506da3ef892e50d918
SHA512 c02595e975be28ead8202c98054e77b3ad7f4a5085eeb9f471f337feb9db628d293453b49f176481b20881aae811353f1d22f9b33c387e6f970f4cb35b15d9e0
TLSH
T1CF414A58B6EA110CB3B76E59ABF6A46D847FBD772E0AD49D00110D8F0A23B40C961B37
MD5 SHA1 SHA512 TLSH

Submit Download