hxxp://azure-barrel[.]ngweb[.]top

Analysis

user interaction
yes
max time kernel
150s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 11:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://azure-barrel.ngweb.top
Sample261110-ne94cssvhw

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4820	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{C33C5579-C6F9-4B59-9181-6B2879B4A48B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1672	msedge.exe
1672	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 2676 wrote to memory of 2228	2676	msedge.exe	87
PID 2676 wrote to memory of 4820	2676	msedge.exe	88
PID 2676 wrote to memory of 4572	2676	msedge.exe	89
PID 2676 wrote to memory of 4572	2676	msedge.exe	89
PID 2676 wrote to memory of 4572	2676	msedge.exe	89
PID 2676 wrote to memory of 4664	2676	msedge.exe	90
PID 2676 wrote to memory of 4664	2676	msedge.exe	90
PID 2676 wrote to memory of 2116	2676	msedge.exe	114
PID 2676 wrote to memory of 2116	2676	msedge.exe	114
PID 2676 wrote to memory of 2116	2676	msedge.exe	114
PID 2676 wrote to memory of 4464	2676	msedge.exe	93
PID 2676 wrote to memory of 4464	2676	msedge.exe	93
PID 2676 wrote to memory of 4464	2676	msedge.exe	93
PID 2676 wrote to memory of 2808	2676	msedge.exe	94
PID 2676 wrote to memory of 2808	2676	msedge.exe	94
PID 2676 wrote to memory of 2808	2676	msedge.exe	94
PID 2676 wrote to memory of 1180	2676	msedge.exe	95
PID 2676 wrote to memory of 1180	2676	msedge.exe	95
PID 2676 wrote to memory of 1180	2676	msedge.exe	95
PID 2676 wrote to memory of 4340	2676	msedge.exe	97
PID 2676 wrote to memory of 4340	2676	msedge.exe	97
PID 2676 wrote to memory of 4340	2676	msedge.exe	97
PID 2676 wrote to memory of 1612	2676	msedge.exe	99
PID 2676 wrote to memory of 1612	2676	msedge.exe	99
PID 2676 wrote to memory of 3036	2676	msedge.exe	100
PID 2676 wrote to memory of 3036	2676	msedge.exe	100
PID 2676 wrote to memory of 4016	2676	msedge.exe	102
PID 2676 wrote to memory of 3056	2676	msedge.exe	111
PID 2676 wrote to memory of 3228	2676	msedge.exe	112
PID 2676 wrote to memory of 4816	2676	msedge.exe	113
PID 2676 wrote to memory of 3624	2676	msedge.exe	115
PID 2676 wrote to memory of 3624	2676	msedge.exe	115
PID 2676 wrote to memory of 1672	2676	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://azure-barrel.ngweb.top
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x258,0x7ffa7ecac188,0x7ffa7ecac194,0x7ffa7ecac1a0
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,8560369618641079730,15096159552740334499,524288 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,3680734025796490130,18342234130910954843,262144 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,1718162224882379115,11255674537357087501,524288 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3516,i,8872371609810130908,4488205732533715450,2097152 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3512,i,16856106554303459784,5788016158454842619,2097152 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,2617013043980808471,10081810120887250773,2097152 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:1
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,12896381686824456924,14656096466904546788,2097152 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:2
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3976,i,15605411164239483304,6000057090002413619,2097152 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=3992 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,14109157489321281868,11958109807496628418,524288 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,13305212640813590859,14549452087987144961,524288 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,14234125936914623960,3188465738633946561,524288 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,14234125936914623960,3188465738633946561,524288 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4592,i,12802690481783869383,9208521799838869949,524288 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,1089914802086149822,8183533007438924161,524288 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,9278557242659842006,7152706498990383768,524288 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:8
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,10393233382118221235,13664769851331021337,524288 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3032,i,8769222356098368567,12290248058412329800,262144 --field-trial-handle=2260,i,17867802552461786983,12164505718418172947,262144 --variations-seed-version --mojo-platform-channel-handle=2984 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1672

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3312

C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1220_none_7e21bc567c7ed16b\TiWorker.exe
C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1220_none_7e21bc567c7ed16b\TiWorker.exe -Embedding
1⤵
PID:2116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2e147b7d-9b9c-4542-8e66-99114bb90725.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2e147b7d-9b9c-4542-8e66-99114bb90725.tmp
Size 12KB
SHA256 a277c42a5108c68d78439884f1cdf80f00e47a2b65dad9427aed2ceeede2a61a
MD5 65dd76d2b297d5baa6fcc6a1cb78069d
SHA1 5b156131585e4e7381c7ba00206347467fc3dbfb
SHA512 6350f84f1176445cd57de32d7a69a24efa9898e3e6a32b3d8e78ecbb64d7acd06ee1c27422e47c3f81edee6809fedb848f2c9087cf4333166408cc3184f0ded0
SSDEEP 192:uPLsN41QhMbmYphv9caQmiU1jeEB4BGYX59ezrCOszV3eSkH1Gq5MUO:AsN416Mb55V0EuBGYX5EiOszVy6X
TLSH
T1F4423A35A874AC276DA3A955F84B36139FF8911BABC47FA4C5EC5B1C00DF298034B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

850b00d0-b413-46e3-8295-471ba1aced96.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\850b00d0-b413-46e3-8295-471ba1aced96.tmp
Size 8KB
SHA256 87a6f182c7410ff54e47b8627dd44e744249db8bf236b3545d957c112d4f91a9
MD5 c80b07d712e3c522a410beaf34f8174c
SHA1 a53e03691577342d7bc786592e3fb4846cc6c288
SHA512 0a828e616eb6c4118ee6443ec6feaa8336cb9a1872a0d5f9f98917dd173ebaa17c472bd27132a3b025827b7dc87224c1691e5f44b9a751bb54e89e111a0aea75
SSDEEP 192:+ONh6DphWqQmiUy80PwGYX59ezrCOszV3e8kIIGq5MU6:+ONh61RSPwGYX5EiOszVK6U6
TLSH
T173122B35A8B8BC6B5DD3A951B48B36038EF4521BEB897F90D5DC2A1C01DF29C134B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94cd6c14-4924-4f29-9dc1-eb1b80a419de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\94cd6c14-4924-4f29-9dc1-eb1b80a419de.tmp
Size 21KB
SHA256 0c46fe91bfbf41b9513e736ddb65b33f9d73848ece76c75de6de1d25cf2ed8e9
MD5 dbc558f0133f181e852824c07ac18e8b
SHA1 125cb9dd3d68ba70ebcbb9a80df99eedecfaea8c
SHA512 11b335dca428e7c41f6ca0d41c996b6485079802d9316acf082050c612dac756a6bca9fec38dce1c7f3eeed95e2dc925811000dcde78fd4db2f6e9d06b5f5846
SSDEEP 384:LiFzQkUSvUzsNo8TUNTUlIl86Mb55VgEuBGYX5EiOszVG6vaTZc3IIlW:mFdohwgx4kvGYuiOszI6vaTZc3Lg
TLSH
T1C7A25C3298A4AC3BAEA79A51F54F3603CEF49157DAC4BBA4D6CD991C00DB1CC138B925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

01c0dfd0-efc9-4265-8c1c-fd305642baa4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\01c0dfd0-efc9-4265-8c1c-fd305642baa4.tmp
Size 9KB
SHA256 423cdb3df7e3e226b04645bc921ea4e22a251e9e89afb43a8cdc865cb495b6cf
MD5 c35963284c66b7c5085fa60ee96a1263
SHA1 bd97c31583a3d936f84e45d330bc757275093348
SHA512 e120e570451fde269941f9d87729dc1e17f1f901b3855445128e994f9c04c38325648abcc1961f18f4565daded4e88c1d449a1e3872b228eb83f4860ae4d896a
SSDEEP 192:sxZvROWS5/f7sIzKEdpR7HW6+WNWqw/Ygq/wIgrJ:sxZvTW/f7sI5JHb0/T9
TLSH
T1E212A5526E38797B8CC7E21DBA25BF53E2F9147261D51E48AAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

101e2914-e221-484d-a2b1-2da02f56b7ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\101e2914-e221-484d-a2b1-2da02f56b7ed.tmp
Size 27KB
SHA256 9fb6afa84844b1509d88cac0ab6639c2f9f6af15a2f7ceebdfebc8e9ea2416f8
MD5 323ddc3bf3e0c8378f59de08f8e6d69b
SHA1 d4542f769069f6f26986061f8fcc5952c36aed99
SHA512 1f46913db81e666df49640a8b28c349e77bbc95749b788ffe47dbb9258846972798130f8e081432f39c483b197048f4d8d39b0d9df1d10d97dffe39751daf4e8
SSDEEP 768:gxichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzTrorlg:gxichfPWvPZplu1jan+LKgzgpg
TLSH
T149C2E93B640CCB7E4FC01A9DDD566F9A7EA802C7A6688D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e167b3d-9117-4b07-bcaf-1b10f498995c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6e167b3d-9117-4b07-bcaf-1b10f498995c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87874e76-7574-4cf0-9b61-b539182dee40.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\87874e76-7574-4cf0-9b61-b539182dee40.tmp
Size 10KB
SHA256 f6e7da76cdacfefdd92900895332ebe5d9347c6fd9edcd8b1f6f4b2c779651b6
MD5 6cb01f6ff5adea750c6a80185b271639
SHA1 e3f2bb135b6b211fef6e1117a6c9c0d786c0333b
SHA512 133945f82c2f76d8bd7b359addd278bfc73ae4a461586697d3e34971137c00565565481d0be6619fc985863b166b5acea1d7ec026829e03c48f11d33eb9841b0
SSDEEP 192:sxZvROWS5/f7sMzKIdpf7HW6+WNWXpmXYgYPBwIg5kJ:sxZvTW/f7sMHDHb1XVK
TLSH
T19E22B5526D28697B8CC7D20DBA25BF53E2F9547251D01E48A6FCC61C05E77CE224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 d803b513c606f80c94da7ecd4598bfe263718909ab3e8c6e499a5a15014bf928
MD5 7ad2dc4b25a733645d7bc8568aff5d47
SHA1 ed5ad47bc5bf52567d0e619362fd0bcbf064b0e4
SHA512 65e56fdc7390c4ec3959c15cff1723562f6cdd8ff66bdbb84f78cc2a8327303407cd4a4e40f219b0c240ce9bee5a06f49b445a854c651855ffed221ea812071e
TLSH
T19B615E405E8044E3E7B97538BFD5229F3E375AF043A3EC051DAEC86CAB0631B524E242
MD5 SHA1 SHA512 TLSH

Submit Download

b37a8548-e53d-4ac0-b81d-7614df6839f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b37a8548-e53d-4ac0-b81d-7614df6839f4.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0891c3bf-8106-405b-ade9-75c81b911737.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0891c3bf-8106-405b-ade9-75c81b911737.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

6d28815e-06f3-452e-9f74-21c13fa87f1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6d28815e-06f3-452e-9f74-21c13fa87f1e.tmp
Size 867B
SHA256 09a8743b18176e7fc5c5179b29d74a38b478f47c9ead0e6e4c64fb21477a0e32
MD5 110dd0c25b83c29413638a99403d4e36
SHA1 cf27e8b5301e15c7798d49b56ede305fad17e5c4
SHA512 7ff49c661870c1daf66e95ba8d27241626df63919c2a5d1ac88614f442f6c8337ac55647ed86e3d3ca19a08e124d11353145a142e2171fdd15a7d4569dbd613a
TLSH
T13A118CF7C3E1996E9A0552F0AB14AF1FCF2C0502432C7D6A85D4AE2BD3F3465E00159B
MD5 SHA1 SHA512 TLSH

Submit Download

dabd376c-6836-40ec-b85d-82f63d399f3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dabd376c-6836-40ec-b85d-82f63d399f3c.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a9bc20d1fc827d569bbc04be5687449d73b90abcfa98d48b4ece25561b28a61c
MD5 6f7e91b880776719cf9a6764514d046d
SHA1 e152daaf027a08c6c552cae5fbdbe88bdd8c45d6
SHA512 b19f4bc9c6e34a05bd0f8ef196fa3c911c0d4232db863d1a78f86c03137b2d9a0d63b008ff9c31fa20ec3858294e81907683a92c4b35d8b9c1eab1f155293452
SSDEEP 96:KcooKByWSYwK1afTY5l7RRd69WQENdKccEbdoDbedRmf868b8W8a8U8J:a7XSTY5l7RR89WRNvcEbODbedRmf868m
TLSH
T1DB91591230A702503ABD284E5979C629425232B33118E9BBBBFC44B74D7AF544DFE8E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b094ebf0-f292-43cb-b243-b72d0ed82066.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b094ebf0-f292-43cb-b243-b72d0ed82066.tmp
Size 10KB
SHA256 caad205424bdae98b346967e2d34f8a4fab760d647d3cfcf7dcad28aac07aeb4
MD5 d54e9555eb22034c87c450f4dd8295eb
SHA1 ef5e4c7929fe02753534ce9b94ce95a06b246019
SHA512 553a63b8c36a1e3f7ca93d4ab4ca14d3bf3cda4609a6e81af07bae2f84cfebcdb578870a9072c9a85070708345c86f3868cbfdb2f88f4b9304b3685985bf6df6
SSDEEP 192:sxZvROWS5/f7sMzKIdpR7HW6+WNWXpmXYgXQBwIg5kJ:sxZvTW/f7sMHJHb1XpK
TLSH
T18622B5526E28697B8CC7D20DBA25BF53E2F9503251D11E48A6FCC61C04E77CD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb551446-c026-49b3-abb8-46bfa6ad5b57.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cb551446-c026-49b3-abb8-46bfa6ad5b57.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

fb72955c-42b7-41f1-a8a0-01fa0c0a2227.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fb72955c-42b7-41f1-a8a0-01fa0c0a2227.tmp
Size 9KB
SHA256 b7c800238533bca9c6e35336b7088ff075f5a07c3c2b16208a04a2171f1a2afb
MD5 c3d81555e834ebf03b932758c1157f91
SHA1 9cd0d52aeaa41a7ab17c93edcd0c745577d598be
SHA512 1de9429aad56ec21a3b9801c7f2638f2cf93e9636b784cf17d9b3ac258c86ac60e3ff10661ece8b9e8f66fa57e336022e94f69d197ab59fb0f58aaa9136f7b60
SSDEEP 192:sxZvROWS5/f7sazKEdpR7HW6+WNWXpmXYgME/wIg54J:sxZvTW/f7sa5JHb1Xca
TLSH
T1E222A452AE28697B8CC7D21DBE25BF53D6FA147251D51E48A6FC861C04E77CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fb897da1-a5f6-40e9-92dd-eddf11626bdf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\fb897da1-a5f6-40e9-92dd-eddf11626bdf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7c9602f-7a23-4e69-a0d3-7b57b0a93a18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e7c9602f-7a23-4e69-a0d3-7b57b0a93a18.tmp
Size 18KB
SHA256 33c60a7044c4f1d8428573026bd32fddd022b3d4a209ac5d05cbd449df9a5cee
MD5 e2c180f3bed9438c1ee38bd588208c78
SHA1 937fefddda2ca2aeda32234106e6f911e1a5851a
SHA512 0be43924faa81eb768dcccdbf88040fe6178b3204cd14a06150840fedd7f741ce1199d5e825e80db092df6d4469de21f8fe20e46210af0ae8eb2086f938ef197
SSDEEP 384:pQkUSv0sN486Mb55VgEuBGYX5EiOszVy6vaTZc3IIlW:L0H4kvGYuiOszY6vaTZc3Lg
TLSH
T167828D3198796C275EA3A520F58F3603DEF4911BDBC42F94D5DD9B2C00DF288238B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7d7483e3-20ba-4439-9ca6-4c17446a2cfb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7d7483e3-20ba-4439-9ca6-4c17446a2cfb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f2990365-58d4-428d-b4e1-9960fa941b19.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f2990365-58d4-428d-b4e1-9960fa941b19.tmp
Size 12KB
SHA256 db127210a353dc787a162ac11cb3d7953105d464347df43b36ecb46609acc5fe
MD5 f479bfb0589c9139a0a0e114914a1de8
SHA1 5d5d8134af7e962b1d66ae379f2558fbd151dab3
SHA512 eb57bc308e3d17b6313ae42c91d47fc39e3c2ae3b65fa7203975c9b0b20a369867798483a498e2f31fe29c1c1565429fdd909b872168d68e9c5e00c09baba7b3
SSDEEP 192:WLsN4EQhMbmYphv9caQmiU1jeEBZBGYX59ezrCOszV3eSkI1Gq5MUO:8sN4E6Mb55V0EfBGYX5EiOszVT6X
TLSH
T179423B35A8746C276DD3A955F44B36139FF8911BAB887F94C4EC5B1C00DF29C034B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe37979f-49bf-430a-ac37-ec519d256a60.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fe37979f-49bf-430a-ac37-ec519d256a60.tmp
Size 8KB
SHA256 b66d1b904d63f4ce7245e67e10a6e9f9ab66f1c506b2acd57e080e10ef3e9b1c
MD5 ce74ddf97f4fe7199e737e8f8dcc9a67
SHA1 608a9d1cf5d2f332f92dd8abcec116f8b4466927
SHA512 7864b51ddb4ccf1b7d3ac1cba683c3beeeb7e8bac64246b7852109035683198b050ac92f242a6fe349f7fe6691ab00481efa418d5c12f2265755587ca0491c89
SSDEEP 192:LJON96DphmqQmiUyl0q8wGYX59ezrCOsFkk7n7U6:lON9619RRwGYX5EiOsJ7U6
TLSH
T12C02FA39A8787CBB9DE76D45B44B36139FE9212FAA906F54D6E81A1C00C768C1307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 dc7594505a0227deb32a5e08443e1eb04cb3498a28e4a3da70291ac65463e4fb
MD5 bac9260737a837c594e66c8983ba6a4a
SHA1 bbd028384d43c80af62592b26d6a1251c3e6e2fe
SHA512 bc51b8c02e5112a1e2dc1a8c1e4062e09f6127f64c01888e6d01593cb4a357af451c27c2387366ce8b6cf0f97b81fb296fbc7f1353fe5e8391a244325673ff7b
TLSH
T14F410B58A6E91148B3B76F5AABF7A86D483B79272E06C45D00110E4F0B63F40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download