hxxps://us01[.]z[.]antigena[.]com/l/8P-vRbEm8iIj6AeSeqqOmll~KtQf1A9RcaDA9nY-qhA7V0BUtebq4KWpt5048yep_T8OByLK4VWoV3bRvQC_LdXAu8v7w4yRTa7Fu4b9Psyn1FryiWGkA5tmT-aTzExM950eujM2AV_2jWyAjERKF~pU94v1QnyAmtW4Loe6b6yJNGV~XtlI-uke9DRJl13zfpFKX_vM6WhHim

Analysis

user interaction
yes
max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 13:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://us01.z.antigena.com/l/8P-vRbEm8iIj6AeSeqqOmll~KtQf1A9RcaDA9nY-qhA7V0BUtebq4KWpt5048yep_T8OByLK4VWoV3bRvQC_LdXAu8v7w4yRTa7Fu4b9Psyn1FryiWGkA5tmT-aTzExM950eujM2AV_2jWyAjERKF~pU94v1QnyAmtW4Loe6b6yJNGV~XtlI-uke9DRJl13zfpFKX_vM6WhHim
Sample261002-qs53nsbb79

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4620	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{54DF174D-881F-4397-997B-567F8047DCC6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5824	msedge.exe
5824	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4204 wrote to memory of 2032	4204	msedge.exe	88
PID 4204 wrote to memory of 4560	4204	msedge.exe	89
PID 4204 wrote to memory of 4620	4204	msedge.exe	90
PID 4204 wrote to memory of 4560	4204	msedge.exe	89
PID 4204 wrote to memory of 4560	4204	msedge.exe	89
PID 4204 wrote to memory of 2808	4204	msedge.exe	92
PID 4204 wrote to memory of 2808	4204	msedge.exe	92
PID 4204 wrote to memory of 3088	4204	msedge.exe	93
PID 4204 wrote to memory of 3500	4204	msedge.exe	94
PID 4204 wrote to memory of 3088	4204	msedge.exe	93
PID 4204 wrote to memory of 3088	4204	msedge.exe	93
PID 4204 wrote to memory of 3500	4204	msedge.exe	94
PID 4204 wrote to memory of 3500	4204	msedge.exe	94
PID 4204 wrote to memory of 2236	4204	msedge.exe	95
PID 4204 wrote to memory of 2236	4204	msedge.exe	95
PID 4204 wrote to memory of 2236	4204	msedge.exe	95
PID 4204 wrote to memory of 3756	4204	msedge.exe	96
PID 4204 wrote to memory of 3756	4204	msedge.exe	96
PID 4204 wrote to memory of 3756	4204	msedge.exe	96
PID 4204 wrote to memory of 2204	4204	msedge.exe	100
PID 4204 wrote to memory of 2132	4204	msedge.exe	101
PID 4204 wrote to memory of 2204	4204	msedge.exe	100
PID 4204 wrote to memory of 2132	4204	msedge.exe	101
PID 4204 wrote to memory of 3848	4204	msedge.exe	103
PID 4204 wrote to memory of 5784	4204	msedge.exe	119
PID 4204 wrote to memory of 5792	4204	msedge.exe	120
PID 4204 wrote to memory of 5800	4204	msedge.exe	121
PID 4204 wrote to memory of 5248	4204	msedge.exe	124
PID 4204 wrote to memory of 5248	4204	msedge.exe	124
PID 4204 wrote to memory of 5660	4204	msedge.exe	127
PID 4204 wrote to memory of 5660	4204	msedge.exe	127
PID 4204 wrote to memory of 5824	4204	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://us01.z.antigena.com/l/8P-vRbEm8iIj6AeSeqqOmll~KtQf1A9RcaDA9nY-qhA7V0BUtebq4KWpt5048yep_T8OByLK4VWoV3bRvQC_LdXAu8v7w4yRTa7Fu4b9Psyn1FryiWGkA5tmT-aTzExM950eujM2AV_2jWyAjERKF~pU94v1QnyAmtW4Loe6b6yJNGV~XtlI-uke9DRJl13zfpFKX_vM6WhHim
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff8f606c188,0x7ff8f606c194,0x7ff8f606c1a0
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,5786753105775918483,6754962318741152656,262144 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1668,i,15517189167866431943,635292617186190151,524288 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,14473966173014948645,12137558059494585903,524288 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,8563483335544756848,9632875557166435293,2097152 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3404,i,16181142142711450249,5859990984188030587,2097152 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,13881329116760216283,15428507845471418058,2097152 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4152,i,5175024940215995656,10056459687219181385,2097152 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,875001453440046859,974279262178129703,524288 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,3595122632464375979,8846934630464182241,524288 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,466933740235469475,10368319376606020977,524288 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,466933740235469475,10368319376606020977,524288 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4172,i,4559668527404857155,17603527826830741941,524288 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,5241492153929104060,12536960339783883760,524288 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4176,i,15380823626292629255,6312319924153825303,524288 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,18422689320640843970,11871874353186817698,524288 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,4670159923927703858,8774696158948539895,524288 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:8
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,12346778421377361153,13441579133800713851,262144 --field-trial-handle=2080,i,6153654772246147719,9098181767845797628,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5824

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0e45eec3-4ae1-4551-8497-b332c821bbd8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0e45eec3-4ae1-4551-8497-b332c821bbd8.tmp
Size 8KB
SHA256 0edade01ab0c47cc111bc94de163bd31104deaa292cd80e326e1384e8210dffb
MD5 1e42dd12fdfa976a07e4ae3df131b826
SHA1 ffccfe0aed02f24519885d311b8f6fe78837cbe0
SHA512 a60943db919d583ed65672a25f666b7b4e4556057672e4e16a1013cd733c7af81858e74c05a5da4ab0f46debfdfa8d823d93722c733b37ceb56e71d8c82fdde7
SSDEEP 192:LONv6AmwprQmiUyzt6siX5FC3jzor9mylJiwMU6:LONv6ipdq6siX5FC/8TiFU6
TLSH
T10A02FB35AC786C7F8AF3AE45B18737139FA5116BEB942F84CAE8172C01D725C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70644595-041f-4077-a67b-a35c16a1bfee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\70644595-041f-4077-a67b-a35c16a1bfee.tmp
Size 18KB
SHA256 5ca9ea21914bec25ac0db723aa87ef78418c05e3d487d0a3cab3448bde6579bd
MD5 3a308664ad1956678932d8ca70db351a
SHA1 ac13222fd1657df258a0933a31e34da1f47a108e
SHA512 b12b2127ad04f427320def3e523ab263eb81618cf36e845ef85dd25c7b025f3bfebcfaac5a6498368a7f3ecd66f36c2d0e30f1cfda7fa619970e8591c2011fa8
SSDEEP 384:MZcIhsNWVhCnE6xMpu93zu9iX5FC/8TXX1i+2S+tgOIwZOyKo3od:ahEMq+auMclS+Xs63K
TLSH
T1A0828E329878AC7B59F6E145B18B36035FB98127EBC8AF94D5EC672D01D61A9030BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7122ff2a-0d18-4ec3-b683-bb02ac6fe2bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7122ff2a-0d18-4ec3-b683-bb02ac6fe2bb.tmp
Size 18KB
SHA256 b273996baea3c3fd92c91675069dcefb3ad53f63709af7311ef584362a9cae9e
MD5 ef3b4f9880e6c6aa5aa1e976465ee573
SHA1 e1a58238fcc49f5d8ae30a37f235d5a260a120e8
SHA512 d1e8bdd2e47e974d91ff2da8568adf8aca4ab6288a936e342c19cd4fde23d8d512ea1d11d656005d4e83d8e3d54ff0d0bbc1177c0f97388477d14b2ad8d8af66
SSDEEP 384:SZcIhsNW8hCnE6xMpu93zu9iX5FC/8TXX1i+2S+tgOIwZOyKo3od:gh/Mq+auMclS+Xs63K
TLSH
T126829E329878AC7B5DF7E145B18B36035FB88127EBC8AF94D5EC672D01D66A9030BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

733f8fc3-82ce-4913-9fa7-b000141fb516.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\733f8fc3-82ce-4913-9fa7-b000141fb516.tmp
Size 8KB
SHA256 c1fe8d48d4a7d9f09d118bbd8136e679212507335db82c17ba77278ef67b4008
MD5 8b738d2579ee6c262fb872314271d1ee
SHA1 32f1e71232d80f9aff4d4d067ea7e74da6a475a3
SHA512 a21750b162840233316fb07d097019746efca8a164cfb61480440b593a1bdbd8e90c0514b7fcf7e665a7ad12bf429c259854d1b0efd8fa3f973e68971eebfd29
SSDEEP 192:LONv6AmwpuQmiUyFtmsiX5FC3jzor9myXXXFi+2ilRRqTU6:LONv6ipqWmsiX5FC/8TXX1i+2g+U6
TLSH
T1A1121C36B878AC3F4DE2A595B08735139FA94217EF896F94D9EC172C01DB65C530A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cb29521835d0887aef733d211fa43d2903333bb5e86e2580dbfe7db3b16bb1ca
MD5 ae441104cfb514988d8468c296b33f4c
SHA1 1de1bdd3ad0b87ba57d165cd0d5b72d99a1a48f2
SHA512 4178d6169908ca49fae4773c8986a0c9d71a515b2fb4d7ce8fb9bcc8b10c415ac00698c7add7cc45f427547535401a518211221bcfe6dfc2bdc0f71f62b0105f
TLSH
T150D0C028AD78EFF4F021113C0330400031CF88138642210A58610D174C302C30380DF0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

8f0721a6-d162-4397-98f0-b43754c30667.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8f0721a6-d162-4397-98f0-b43754c30667.tmp
Size 10KB
SHA256 ae433c2dc3b5f71faac5dd3a97ac17ceee3af60c9a5fa364f59298b6b034ca4d
MD5 9f234748b04e5eb8d8ed652740764363
SHA1 a63592e25e41b638e1078999122fdcc2b7082637
SHA512 408103853a1cc05fc619bd3f1ff5b2c20a2e28b389c36aea63ddb1e2a00df65aaf20a91d36640c8fd900270445d442223d051f4b042debbc558fe3ec62fab960
SSDEEP 192:sxZ8RMWv/fFsiAWIdpPQHW6+WNFih/Y3s5YIg5KJ:sxZ8Bv/fFsiAXIHbq/ko
TLSH
T1DE22C8526E38A97B8CCAE20DBA15BF53E6F9503291D01F5CEAFC961C05E76DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

901de10e-3943-4843-8a9e-0dbcb033dd7f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\901de10e-3943-4843-8a9e-0dbcb033dd7f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

93ffecbd-e28d-4c97-9fca-2d4f46d611bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\93ffecbd-e28d-4c97-9fca-2d4f46d611bc.tmp
Size 9KB
SHA256 cf81cf0bb24a331623ef703570b899252d76d739dbdee609f0a56f35b0cd4b3c
MD5 e3e515da5f5b8a3384763ad2cb032bb5
SHA1 e3f86a2f882dc83bbece3695120dcbd3ca205694
SHA512 7969bb6985e4b8f8a2065e8e6d468ac2533de32a0fbcda0fa02d26fd2e6bb9dad0b0b424453ccfb376147944a24e126af545c7f5d4105084d1090816f0af84aa
SSDEEP 192:sxZ8RMWv/fFsiCWIdp9QHW6+WNFih/Y3r5YIg5oJ:sxZ8Bv/fFsiCXKHbq/Fa
TLSH
T1B422C8126E38A97B8CCAD21DBA15BF53E6F9503291D41E5CEAFC961C04E76DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 ca9de3fe0e660eb58b797d6e87881aedfd367db24b07b3aacfe206a10c528923
MD5 cdb3686eeae2d63205cceefac782c315
SHA1 f14b0a9fa50558c3e8baf7c3d3e39a1a828dcf02
SHA512 6320541d51584c48540b4ac49e206d5d3c0c9dd88c97b88cc63004bc5c7be92e6b1f3df213d9a608d0d829acc0bde3515ded28e6f59098ee93803edaeb3abc81
TLSH
T1A8E020F409C7C23DD59465970274530C97C0771BE6C0B90D2740C9C87807850FA855E8
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 a24953b3d3bde5c9ca9984137f37e2746c1b421653db4272129c4fdb31176cf6
MD5 6bec10052d39e5ffba76426a9f210da5
SHA1 964f11a961a243f9c5683b3daa5d4c8d50c0435e
SHA512 2b26cc5cf5a0b562be88072d2369006dada21fe04c531f02050a2425f6031ad9b5546ab6f6c21d8c5df3354646f5505545f70b8c23a4681fcef0e9a17f7c0ec6
TLSH
T156715F4BC5B34A53FB9897F185D62487BAB77E9306A30D9E01E8E075682F7370C251E0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 be055ff1f1a17e43a5b154a411e27cdd765c2ec299a2c2449a11d353c70ccb46
MD5 6ba0763ebc765c6ca6d599906e15e8e7
SHA1 bfbcbb90881f3e728ec28fa6e9d1a01ac9876325
SHA512 e185710466503824469ab5cce02a7cd20601c5f018cb92be583975b2630ad6b5533fa89ddb696f4531338cb3fe0a1578aed5587148de4858bfad539d1d2a87b9
TLSH
T144615D4BC6B34263FB9887F1C5E42287BA3B7E821A930D1E11A8E475840F7370C151E0
MD5 SHA1 SHA512 TLSH

Submit Download

7aa53a83-26ae-4dc1-b632-13830baabcfa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\7aa53a83-26ae-4dc1-b632-13830baabcfa.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

068e5eb1-457a-4242-8894-e9a899d467e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\068e5eb1-457a-4242-8894-e9a899d467e1.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

4dff3272-d76f-4cc7-8d97-d5ad8d4c90e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4dff3272-d76f-4cc7-8d97-d5ad8d4c90e9.tmp
Size 1KB
SHA256 b6d2e0133ea46ab1f158ad7a4f9a9c657dbfb844cca15d83cf8653d2bab283e6
MD5 611093cb11feaa162290d4ef8dd245fc
SHA1 cdc2c43dae9f2c2dde9d2c7a8f23e12fd569f8ce
SHA512 e2b987e3fa6e1e2d8d57228820070d88156ec47a81e578ff6c44a12f17f741c3f3ca6b10c2ccabe2a105181cb80a603d3a467c791b3117f1c9cf1b7847dcac92
TLSH
T1C911ADF383E4956E8E015AF06A14AE2FCE1D0605831C7C6989D4AF2793F3475E00159F
MD5 SHA1 SHA512 TLSH

Submit Download

b16ea14d-1b3e-4d4a-b8f3-ec4cf00076b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b16ea14d-1b3e-4d4a-b8f3-ec4cf00076b1.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 118f273d0fbb53f0c89ba4dc1aa8633c55a574d5d8638e9595e87c129b9cd686
MD5 2b5d47555416e06feb2322eb3d1f3d69
SHA1 c43a67cc845ed9c668572c7457c082f690810335
SHA512 9fe9448ed96a3768d18d261c5ae9400b573935391cc15ac91676e25b3067bb7ad194b4b594b8ba5004de63bef27586b3498e48d8bb51c798fec0dac5428861e9
SSDEEP 48:KgHIdK0UInyxQIfK9+8NVItKGgYfyPmj8wWA:KgHmK0UqSQgK9+CVqKGgigmj8wWA
TLSH
T11B91120135BB5260397E2A0D85B98A2A024231B33514EA6F7FFD41E64E6BF585CFC8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a690f36b-48c5-4a4e-897e-f971320999fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a690f36b-48c5-4a4e-897e-f971320999fb.tmp
Size 10KB
SHA256 919445760bfb9937226083f0c335bd9d66dd741cc06d149fcacaea6d380e35ce
MD5 fd25b3c8d8b6891340200d16329df2c8
SHA1 b4d495ba0d5196528d6edaca692057116d46411d
SHA512 9570566682906d9274ab51f4c87b292d8cc355d353f91114ce695b50358ea556c7956512025320f90669bbab14cf84c70534bf0d840affb96d075ba72d792424
SSDEEP 192:sxZ8RMWv/fFsiAWIdp9QHW6+WNFih/Y3p5YIg5KJ:sxZ8Bv/fFsiAXKHbq/Jo
TLSH
T1A622C8526E28A97B8CCAE20DBA15BF53E6F9503291D01F5CE6FC961C05E76CE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b6260a84-4f90-4ff4-bb83-7d6ac81da5a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b6260a84-4f90-4ff4-bb83-7d6ac81da5a6.tmp
Size 27KB
SHA256 3e1ffc1539ab429afab1bd288ee2d9de894798eec150399806ec95c205f11856
MD5 69c8bdacdbf1fc7cc01e1aebf51eac43
SHA1 5822cda0b918e5de57679fdf06b0a60420cb5787
SHA512 35f91e47fffef82421dc3e481d3d3b14f375e82005bfe2f9acd1450818f9f1db522749e26b0ec7b132ec823b5574542f36aaaebde5ca762971796a135fd40e8d
SSDEEP 768:DR30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72ArolZMdv:DR30AbSWvS2l9u1jaLmLZ12Liv
TLSH
T19FC2EB3B640CCB7E4FC01A9DDC6AAF9B6E9C02C796648D4447FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc736559-4060-409a-a12f-c67fe1545742.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bc736559-4060-409a-a12f-c67fe1545742.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

d42b2b42-7aac-4ad3-bf76-cc337d60cadb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d42b2b42-7aac-4ad3-bf76-cc337d60cadb.tmp
Size 9KB
SHA256 e8dd3db3af46dfeee811e2437dbf2a7c2ed977911664fb979a421ea29a27e519
MD5 4946b87b32b9c444d49185715452efe1
SHA1 198825a34ac1e59e0efe65827cc207d929ca8f17
SHA512 a77a9331e335537adf16e1732a9e2ec00c5d7888502073f14682a95fa203154f93ab9414cf172718a62ac897bf3c16b5e3fc401a4034879852e4d7f6e0ecdc37
SSDEEP 192:sxZ8RMWv/fFspCWIdp9QHW6+WNFih/Y3r5YIgrJ:sxZ8Bv/fFspCXKHbq/F9
TLSH
T19722B8126E38A57B8CCBD21DBA15BF53E6F95032A1D41E58EAFC961C04E76DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9863f206-2419-4a6b-a972-e69cddb306f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9863f206-2419-4a6b-a972-e69cddb306f5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

e5ef7a13-377d-4106-960d-37f8df32399a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e5ef7a13-377d-4106-960d-37f8df32399a.tmp
Size 26KB
SHA256 d6abaf4710b9b7b781655a5bb240f7da6949996a2e20d6baf6e57ace49ffabdd
MD5 af09a0e9612ba14b8ecb9b3cc42bbf27
SHA1 12f96c92dad3de932ca9d831b82181395422b674
SHA512 fb27f6d13d0700caf4261a1467e33c27a9c6e411127e2934157836483039879960320b8279f768f38220fe4302c8fae47659c5f547156a533f6b59972a9dad42
SSDEEP 384:giFiZcIuzsNW8TUNTUlIl8hCnE6xMpu9pzu9iX5FC/8TXX1i+2Z+tgOIwZOyKo3K:7FQuHwg3M4+auMclZ+Xs63K
TLSH
T128C219F248D7983AD9AE9743A37E2E034EBCC167F6849A54F798561CCC961BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16e602dd-77e7-41ec-9454-0b1eb01967c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\16e602dd-77e7-41ec-9454-0b1eb01967c4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 54e5931ec78137eeaa3077cdaa0ca19a1a2107542beff639a48adf6665d5de2e
MD5 4907b7d69be3c8b73394e7f3280c4747
SHA1 3dda927c01ce6cd93f795b11e3f2eb7c50a66b97
SHA512 ef6282f13bd26381260a4a2d2d84309aa2f223e9150107d3ebb1babee38b9de3176c3a72a750d313cc619761c5b0e0a995ee259fe6d766bd42916f04439ebca0
TLSH
T154412758ABE91118B3B76E169BF2A86E887FB8772E06C45D00010E4F4673B41C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download