ab51f1aa45ecd92a5edc5e3f8be4d91ac818e79c59f500a3e7fb45410e2d9143

Analysis

user interaction
yes
max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/11/2026, 04:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download this 56 and unzip and drag/Juij_更新发布地址.html
Size 5KB
Sample261113-e9kyaazx7j
SHA256 ab51f1aa45ecd92a5edc5e3f8be4d91ac818e79c59f500a3e7fb45410e2d9143
MD5 fb41ccdff6b42c538a6cd6a6ee9ca5e1
SHA1 66657e8ba69643c94796d732187dcb7e1f3cd50c
SHA512 aeabf2d1a67fb6fe92a1a7333006e9c6cdeeb1f4901618b5df35eb20d821e09d0676ae85ec0510786919838b93a7f9fb9b512d702a2a7f34ba7ccb638ae71950
SSDEEP 96:2asxp7aY2ZFQQqFoBd4oGvOTYQVSmpRKkorfWclxBOoxOE:Rsxp7aVKoVlVSaRKkoamz5
TLSH
T177C1802251C1956A6237C36CABB3E30CF6169047CC02AB8E3AED33434FBA5741193B9C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1428	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{CB11C434-2854-49D4-814C-DC2C8D161963}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4312	msedge.exe
4312	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4612 wrote to memory of 4476	4612	msedge.exe	85
PID 4612 wrote to memory of 1428	4612	msedge.exe	86
PID 4612 wrote to memory of 5012	4612	msedge.exe	87
PID 4612 wrote to memory of 5012	4612	msedge.exe	87
PID 4612 wrote to memory of 5012	4612	msedge.exe	87
PID 4612 wrote to memory of 2484	4612	msedge.exe	89
PID 4612 wrote to memory of 2484	4612	msedge.exe	89
PID 4612 wrote to memory of 2912	4612	msedge.exe	90
PID 4612 wrote to memory of 2920	4612	msedge.exe	91
PID 4612 wrote to memory of 2912	4612	msedge.exe	90
PID 4612 wrote to memory of 2912	4612	msedge.exe	90
PID 4612 wrote to memory of 2920	4612	msedge.exe	91
PID 4612 wrote to memory of 2920	4612	msedge.exe	91
PID 4612 wrote to memory of 1260	4612	msedge.exe	92
PID 4612 wrote to memory of 1260	4612	msedge.exe	92
PID 4612 wrote to memory of 1260	4612	msedge.exe	92
PID 4612 wrote to memory of 644	4612	msedge.exe	93
PID 4612 wrote to memory of 644	4612	msedge.exe	93
PID 4612 wrote to memory of 644	4612	msedge.exe	93
PID 4612 wrote to memory of 5096	4612	msedge.exe	97
PID 4612 wrote to memory of 3612	4612	msedge.exe	98
PID 4612 wrote to memory of 5096	4612	msedge.exe	97
PID 4612 wrote to memory of 3612	4612	msedge.exe	98
PID 4612 wrote to memory of 1468	4612	msedge.exe	100
PID 4612 wrote to memory of 2296	4612	msedge.exe	109
PID 4612 wrote to memory of 2912	4612	msedge.exe	110
PID 4612 wrote to memory of 2848	4612	msedge.exe	111
PID 4612 wrote to memory of 1652	4612	msedge.exe	113
PID 4612 wrote to memory of 1652	4612	msedge.exe	113
PID 4612 wrote to memory of 4312	4612	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download this 56 and unzip and drag\Juij_更新发布地址.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffd6610c188,0x7ffd6610c194,0x7ffd6610c1a0
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,16233897057492474937,8652607834164777224,524288 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,5944989307382832713,6580710725783868731,262144 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,37387305629142829,41684141401486451,524288 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,8206977500388570700,7989287356067383401,2097152 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3396,i,18320638320614220276,10241559740610898080,2097152 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,10446028329920339104,14742626312034274064,2097152 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,1662334580948679070,6492719944939433547,2097152 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,8372332750506169050,7940929453375392967,524288 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,11159965525936472947,6969520887303181169,524288 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,6722160924819295666,4730002151622858475,524288 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,6722160924819295666,4730002151622858475,524288 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,8708911041958294833,3896969239603457528,524288 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,5566274527278900196,10415226896030787930,524288 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,13391841330681681000,1429799222560290381,524288 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,14877159725955614480,1356447238428122539,524288 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6084,i,12132781539401736312,5393361282554814536,262144 --field-trial-handle=2180,i,7619823462191833138,4598538441125464101,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4312

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3760

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3b554795-d1a8-4f6c-adaf-a0ae7ce9395d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3b554795-d1a8-4f6c-adaf-a0ae7ce9395d.tmp
Size 18KB
SHA256 0d46bac74cd0be2df8039bb039ff89a506f2cc7fb054e68105b76ae5ce05240b
MD5 64d0d3c8d5fb5a2fe17f87f9beda88ad
SHA1 b0e186901bc6a8473056907ae1cdd8bf801e3d8f
SHA512 c925e413c8a6dba6d490f60f14719bdfe1a2a0286f5d663a0c9bde9bd84bb8911da7652615047dd3fdcdf4dc39a9187864fba535dc0867b563377faee9d65c05
SSDEEP 384:5QkUSv0sNT/qol7O5rbi5BGYX5EE6qvDeH7vBEhXGgIIly:b0uOkbGYuE6EDeH75EhXpLI
TLSH
T19D827D75A8B86C3B4EA3A551F18A3A139FB89117DBC86F90D5DE5B1C01CA2DC3307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4cb01057-6ac7-4312-a4f1-1d0c9122113a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4cb01057-6ac7-4312-a4f1-1d0c9122113a.tmp
Size 21KB
SHA256 cb5715e7faac76aaa9275b6f7b69be6f34b9562c530943d4564ffcc81bdcfaf0
MD5 f4ba69858250d35c0d4d8b09e82eb039
SHA1 e5b12e3f3aabb9ecc290ad7c7a08a02ec653b808
SHA512 7bdac4c15b5b4f32900bc0fb5eda516b08b5706f30f247d5deca267b6e56ec8867aba45a912ea42a39b8761a1a4d76338c2429c2f1b84183fcb0052e98a08624
SSDEEP 384:xp2iFzQkUSvYzsNt8TUNTUlIlwqol7O5rbi5BGYX5EE6qvheH7vBEhXGgIIly:xTFdkIwgWOkbGYuE6EheH75EhXpLI
TLSH
T165A28C7698A89D3F8EB39A51F14E3A138FF49167CAC4ABA0E6CD5D1C01CB2DC2307915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

619fe118-5555-4829-9edb-b768561ffb80.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\619fe118-5555-4829-9edb-b768561ffb80.tmp
Size 8KB
SHA256 120baee0776b56e635cf808fd2d88bc073e86896b2c39d76982dddb071538229
MD5 65c4d50b4965587a0342f79e75edc91f
SHA1 c54bc082eac188fd870507051e8f1c25bbc43625
SHA512 3dccd78fa28ccdfef2d23a6c04d750fb66c400b58ea5fec3d2e152ccd1b7cd68a609adba48c7dd317bb25a7e2e0ff4cc797fa8f2f935684c3a6786d8e87c149f
SSDEEP 192:LJONi6DphmqQmiUyu9q8wGYX59ezlCwm0kk7ggU6:lONi619jRwGYX5EEwJU6
TLSH
T15702E934AC797CBB4DE36E45B5873B139F98112BAB916F84D6E81A1C01D769C2307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e00d138-2e69-4efc-a3bc-46ed26b0026f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\3e00d138-2e69-4efc-a3bc-46ed26b0026f.tmp
Size 105KB
SHA256 42c3507647b7d5fd8b7eb42a73a5223ac6678df500cdf9a4255fcee2b4fbc3ab
MD5 4efc5ed92763ff88af9bc3b1b0f13ff0
SHA1 477fac9d96670fdc5126c3e6d75ade0b495e86e0
SHA512 d8a10c0af06f07a5ba37a06c3962115433650f3feae6211425afbccb8efe8bd9469cac63f761eeb455be3eacb7d2dbb3c036cf0d9d19c450a50fd67066cbc397
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7T:fwUQC5VwBIiElEd2K57P7T
TLSH
T171B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27f6aa5d39c98b4843eaed7972cf93d10e75e08f497afafa54ccf4057f6d52c9
MD5 a91eafa1aeb7b35d5c7abac6d2c83384
SHA1 a76b97105496dbfe28857282f5b661789a032b25
SHA512 4bebba8a121156a8e7e31bb49955c0375f1ca3be7dcd3c9b113d261a4618ecdf6781fce438d8e56020e438286e1619d3844f48e91b2b2c3cbb4a55d4c199972a
TLSH
T17AD02B24C9E41E90D0131434002241453F8CC03858023012D0B812AE15419D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e364ae2365b95ee5142a1a0abe3ee5065b85c554bc5cb9fcb1f31bcd0a1af4e
MD5 75bc6f9debcf49d2312740dfba56733a
SHA1 af0f5dfe4b330cf62c24c0003f6c57159b23e268
SHA512 c0a6cf9272c224460d1e7d25cf8159aa43733ebfb5f2761293ec6a5f2b4d71e061daa60092335856322f566a072c79184d7ad45d2b04b7cf8f3628e3a4bd4d35
TLSH
T176D02B2489E41E90D4131434002141453F8CC03858027113D0B812AE05429D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

16b4d728-830a-4a0f-b2a9-5d882948b25c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\16b4d728-830a-4a0f-b2a9-5d882948b25c.tmp
Size 27KB
SHA256 83b97fc29c26ed1196a28d47ab4dc45ecaea6951308ed80f9ca18178df9420c4
MD5 5d1f78f13f2015e883480cf0267ff4b3
SHA1 66478e0923bf5b0c4ae39638a596cf124fda2d68
SHA512 8e66f8459018f2c7bb0f690b58f5cd40ff9219b152b29567d939b995b70ab99f238f9f0cc79cc2414736d963ab281a9ebce3af98d966f48a0919a23f00186017
SSDEEP 768:KbichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzdro+JLP:KbichfPWvPZplu1jan+LKgzW0P
TLSH
T1AFC2E92B640CCB7E4FC01A9DDD5A6F977EA802C7AA588D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

350119fd-4a2b-4e29-a25a-a405dfbb709f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\350119fd-4a2b-4e29-a25a-a405dfbb709f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d00c6d2-badd-46dc-b616-fb531ca5a5fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3d00c6d2-badd-46dc-b616-fb531ca5a5fd.tmp
Size 9KB
SHA256 c701ae277a2f008e99fe294b0bfd9e664aa0ec57b06316379a3265eecc5e628d
MD5 6f7c6bc1b2100f4473f6e25bf859fa59
SHA1 4809e92c69160e84cdb553efc419bda0ebe2b232
SHA512 0d63bb4ecf6a25b48961d818e8ee0324ba72e5637e35cb5f90be8e29f2c0c3fccde4448a58dbe38d3d9373514a7ab1e25a5088efb5aecc5945e8bb4e15a05810
SSDEEP 192:sxZHR6Wv/fcsI0IdpdFHW6+WNGYgdz9QIgrJ:sxZHjv/fcsItPHbGC9
TLSH
T1A522B7156E28B97B8CC7D60DBB59BF53E6F9103251905E88E6FC8A1C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

424a574c-9fef-4dcb-8a77-6fdf25c01733.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\424a574c-9fef-4dcb-8a77-6fdf25c01733.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

567ac5bf-bbe6-446f-ad95-27c8cd36f1a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\567ac5bf-bbe6-446f-ad95-27c8cd36f1a4.tmp
Size 10KB
SHA256 26b34583d160ba016f884d1daa3da0f0fd88690f734146fe9f8d19a695dd5f66
MD5 d109ca6b8fa1104ba5c4240a2f65ef85
SHA1 1cfb6397a4fd0bf27b829a7f79f5288a3f80bb7a
SHA512 34a91d74f00cfc61e3c3ebf7d8d70fa549ff7e4a7d748c56b50c2c171f42dbef3d937b1b5ae5ccdd1eda9459f9b2ec0e81ebd0833b883d195ef6fdf4e3279849
SSDEEP 192:sxZHR6Wv/fcsa0IdpdFHW6+WNGYg6p9QIg5DJ:sxZHjv/fcsatPHbGvr
TLSH
T1B222C71A6E28697B8CC7D60DBB55BF53E2F9503251911E88A6FCCA1C05E7BCD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

60a96908-b545-4988-b6aa-1b9a7bc4eb2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\60a96908-b545-4988-b6aa-1b9a7bc4eb2d.tmp
Size 10KB
SHA256 af09df40edeae2b40b407c4b6b43733df061bba0fd29fbc79018464219409ce8
MD5 f173a61b1d6cade9d266c8d69d4bfbc3
SHA1 6e38fd26a5d3fff50c1507236b9f0f8eb62257ca
SHA512 efb0ba3444d571c6cdce617daf56e06c789693ea256c11111f8c921e38ad8fa6baae6899398c456f251e2a7a894663ba9d840cea8fadc95cb49354e20cf8713d
SSDEEP 192:sxZHR6Wv/fcsa0IdpHFHW6+WNGYgKm8QIg5DJ:sxZHjv/fcsatlHbGXr
TLSH
T11522D85A6E28697B8CC7D60DBB55BF13E2F9503251901E88A6FCCA1C05E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 6a647d3dadcaa8316fa405392d2497d48d43e3f074aab51ec63cadcde55368e4
MD5 422d252622d132e8a0154cefcd907220
SHA1 ddf08cbf843a9062f581514b115606a6757dc18e
SHA512 a01bc599cddbec7cdb4443b1ca282f31dcc19ac54b692054eaa5160898419c8266091696c0a0afa5d19e25a2f547f50ccd3798588c78d1337df583a93cd89082
TLSH
T1DE612C81169190D4EBA44D30D6FA119F3F3988B255C3BD3211FBD1396B4B364DEF4050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 41490d9abb68889140be29d4e006f2c13f49315be0ed2776ab681c1c1f1e9c58
MD5 bae299d0554d97e411e6bf70f1c80bb7
SHA1 cb8dcd02515bb65f091648eb00f0138f99a45a85
SHA512 9e9b6c7cccec6529badf232a4199cac0c1ec71483b25d593f169d6e188e1fcbd148e3e5526ed9216de01d63b595daaa5b46995caf6dec69cdcd7ec0bf4bf52f7
TLSH
T101611B811A9150D4EBA44D30D5FA129F3F3988B255C3BD3211FBD2396B4B364DEF4050
MD5 SHA1 SHA512 TLSH

Submit Download

0d03f745-3a32-464b-acb7-2c185900e094.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0d03f745-3a32-464b-acb7-2c185900e094.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

076977b8-fd5b-4c5b-8ae0-9976d66a7249.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\076977b8-fd5b-4c5b-8ae0-9976d66a7249.tmp
Size 949B
SHA256 dfeb7132e3cba472cc71748d28cca6799b0764d5f88d2c9d6eac9de3259936a7
MD5 1f3096571f9d864d7d7dc0596637e4c1
SHA1 b796628f376c042f636eb142af821a56e22bd79c
SHA512 32646c6a3ca56dc1cdde2ea6e8f2ee55ea97989e277d7c8db071eeaa888b609ad4b0b2837a57e29bbadc0631c02f02efda02654e5bef72b90d3fb1596f9280a3
TLSH
T139117DF7C3D5856E890556F05A28AE2BDE2D0905421C7C15D9D4EF2BD3E3075E00255B
MD5 SHA1 SHA512 TLSH

Submit Download

082935ae-263e-4d58-a955-7cca4529be35.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\082935ae-263e-4d58-a955-7cca4529be35.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a6924edb-8f91-4f6b-9515-f29e6d2a3dad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a6924edb-8f91-4f6b-9515-f29e6d2a3dad.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a38962bfc6e8b40e8b31fd0e04a4de539bd40eebe00aaef7719ae3647155d834
MD5 1d663192d32ec7c5f9f3d3bd4c5600d3
SHA1 9af031282c0c6718d000e808706be38109ce9de3
SHA512 965a052db937fef0959a400c3a76cade45d6ca6d5a21041299008667bb0a72c0d01976301eb200a7fbddf81bbade9a06f1a89ebb1398dd66e724d1c80ff0a187
SSDEEP 48:K0hwdR7/DcbvaS9AsSwQhbM78ISEhK9I1ShxqxYzEwiyLjGnDtFVWbFIdISDWK9b:KUSFeKeYyicIKh6+qQKr6N
TLSH
T10791378130B7020438BE74A945F68B5A565231B3301AE53FBFBC41A64D6BE154EFEDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

be862312-d67f-4907-95fe-704482488594.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\be862312-d67f-4907-95fe-704482488594.tmp
Size 10KB
SHA256 5d76da388692ccb60410c4b6accbce4c2ce44922b647e73fb77b373e8dd045fd
MD5 acdb29a4a856cd1db2f752f16f7a8323
SHA1 11170f12ecd27ccf7f972d8eb517cbc4f91685c4
SHA512 45cb00fe3ec2b5be83c0c321a8b242d00483e2d3003f00980ed647a8d18d505f238dd476e1756dc9b399624cecbe80959dc92e5a81ef3307a46ecbac4644a195
SSDEEP 192:sxZHR6Wv/fcsE0IdpdFHW6+WNGYgdz9QIg5ZJ:sxZHjv/fcsEtPHbGCF
TLSH
T1FF22C7156E28B97B8CC7D60DBB55BF53E6F9103251905E88A6FC8A1C04E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23ddac9d-92ff-429e-9687-38f9ba818646.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\23ddac9d-92ff-429e-9687-38f9ba818646.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c97dc850-e332-41ef-8d8c-0691b2911a20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c97dc850-e332-41ef-8d8c-0691b2911a20.tmp
Size 8KB
SHA256 7e261fe8af89ab96c59c5b0806835c2b8c2883c341e6ca5a2cc039c50b12b53b
MD5 f8bf80b70a89eb8028b2cb882f216f20
SHA1 c2f15e0146693a566742106fe857a6e2b031364b
SHA512 1fbe1f91c7be27e5a988418e4d3ba92e3ddf44a3d387c816e32e62a7b598215dfc99e3fca0e6fb7d9f9b6fbbcd3eae2042287caa47b75e5275dba8460f4b027f
SSDEEP 192:1ONu6DphPqQmiUyO97wGYX59ezlCwmIqvskIIJq5JU6:1ONu614B7wGYX5EE6qvteU6
TLSH
T17F122B75A8B8BC6B5DD3A891F48739139FA8422BEB847F90C5DD1A1C01EF29C2307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ec5dad97-d17e-437a-abbc-3b7d3cf4d845.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ec5dad97-d17e-437a-abbc-3b7d3cf4d845.tmp
Size 18KB
SHA256 d7b611869ecdfc8a6c01cc2483b1102412a84e11c9cf5722e0c0a77a06537feb
MD5 8baa5d1895f1a463799551c7808ac73a
SHA1 f6893071415586c93e5819bd5f5e7405356b3947
SHA512 dde84ba129c1116fc15f715a08a87b3216c9cc62e215ea90f9a41397546f6527cfa3c1986b54a060b1bff0df248a03c9d4c0d1c455d18cddb464c0f222f99195
SSDEEP 384:pzQkUSv0sNTwqol7O5rbi5BGYX5EE6qvDeH7vBEhXGgIIly:pd0DOkbGYuE6EDeH75EhXpLI
TLSH
T141828D75A8B86C3B4EA3A551F18A3E139FB8911BDBC86F90D5DE5B1C01CA2DC3307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8949040e-6ed1-4186-8576-1304fde65971.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8949040e-6ed1-4186-8576-1304fde65971.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 47c925089448b57580d37845e992a78e2b27eef5598be942838aecd288148468
MD5 ab0b597a83ab570ee443035cccfa8f33
SHA1 a263aa6216cc4facc55f759efc10f20b821e29dd
SHA512 4cc26fa8bf3c5aef406286d06a4a03f3295a03b38fe1f90171719a83f8c955ac6fc2cd898c333387208d9500a48bf54ec5a22b157d27ba746dbe4d8b0a566cb6
TLSH
T1D341D698B6FA1148B3B76F4AABF7A86D487EBD761F06D09D00110D4F4A27B41C861B37
MD5 SHA1 SHA512 TLSH

Submit Download