hxxps://no-login-task-collab[.]vercel[.]app/

Analysis

max time kernel
900s
max time network
901s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 16:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://no-login-task-collab.vercel.app/
Sample261002-txwlkszzcx

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2516	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{CAEC914D-1AA9-474A-909B-A20E61A95EB5}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4948	msedge.exe
4948	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 4384 wrote to memory of 4880	4384	msedge.exe	88
PID 4384 wrote to memory of 2516	4384	msedge.exe	89
PID 4384 wrote to memory of 752	4384	msedge.exe	90
PID 4384 wrote to memory of 752	4384	msedge.exe	90
PID 4384 wrote to memory of 752	4384	msedge.exe	90
PID 4384 wrote to memory of 3828	4384	msedge.exe	91
PID 4384 wrote to memory of 3828	4384	msedge.exe	91
PID 4384 wrote to memory of 2168	4384	msedge.exe	92
PID 4384 wrote to memory of 5036	4384	msedge.exe	93
PID 4384 wrote to memory of 2168	4384	msedge.exe	92
PID 4384 wrote to memory of 2168	4384	msedge.exe	92
PID 4384 wrote to memory of 5036	4384	msedge.exe	93
PID 4384 wrote to memory of 5036	4384	msedge.exe	93
PID 4384 wrote to memory of 920	4384	msedge.exe	95
PID 4384 wrote to memory of 920	4384	msedge.exe	95
PID 4384 wrote to memory of 920	4384	msedge.exe	95
PID 4384 wrote to memory of 4420	4384	msedge.exe	96
PID 4384 wrote to memory of 4420	4384	msedge.exe	96
PID 4384 wrote to memory of 4420	4384	msedge.exe	96
PID 4384 wrote to memory of 2760	4384	msedge.exe	101
PID 4384 wrote to memory of 2872	4384	msedge.exe	102
PID 4384 wrote to memory of 2760	4384	msedge.exe	101
PID 4384 wrote to memory of 2872	4384	msedge.exe	102
PID 4384 wrote to memory of 1776	4384	msedge.exe	104
PID 4384 wrote to memory of 396	4384	msedge.exe	118
PID 4384 wrote to memory of 4820	4384	msedge.exe	119
PID 4384 wrote to memory of 4052	4384	msedge.exe	120
PID 4384 wrote to memory of 452	4384	msedge.exe	123
PID 4384 wrote to memory of 452	4384	msedge.exe	123
PID 4384 wrote to memory of 4948	4384	msedge.exe	127
PID 4384 wrote to memory of 5088	4384	msedge.exe	128
PID 4384 wrote to memory of 5088	4384	msedge.exe	128
PID 4384 wrote to memory of 3252	4384	msedge.exe	129
PID 4384 wrote to memory of 3252	4384	msedge.exe	129
PID 4384 wrote to memory of 408	4384	msedge.exe	130
PID 4384 wrote to memory of 408	4384	msedge.exe	130
PID 4384 wrote to memory of 2180	4384	msedge.exe	131
PID 4384 wrote to memory of 2180	4384	msedge.exe	131
PID 4384 wrote to memory of 3728	4384	msedge.exe	132
PID 4384 wrote to memory of 3728	4384	msedge.exe	132
PID 4384 wrote to memory of 1708	4384	msedge.exe	141
PID 4384 wrote to memory of 1708	4384	msedge.exe	141

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://no-login-task-collab.vercel.app/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff85e47c188,0x7ff85e47c194,0x7ff85e47c1a0
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,7939746612633979084,14345982046673267519,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,8553572755237770777,5466813336416805914,262144 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,604422540944848294,18204815078864026287,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,10472167858400300615,12250783256269336357,2097152 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,16796791410504998798,16247471999420518417,2097152 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4116,i,10097366449216748961,11362181298957789491,2097152 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,10374004664498387184,15904003324173253353,2097152 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:2
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,15172289466520105762,18135906470553834565,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,2444098831812969303,5724568440612485609,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,17324048975272055332,17394160575348725495,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,17324048975272055332,17394160575348725495,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,1810202146762545141,1607829950742414119,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:8
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,17716717745497067849,9522690010802746804,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,4070032035624427273,9033435737385351143,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,5325920078571787745,2540052349604631036,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:8
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,6641350402090192652,16871646946641561717,262144 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,5511071277296398587,8010262275873009655,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=4056 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3356,i,16137211758165714047,6816883492873099794,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:8
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2084,i,6386298012478349619,2182367404897445620,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3956,i,12555673687499434730,10810934947321896346,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,12443211261168352985,15697487331721569423,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:8
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,6450696371389640386,12447198918931136633,524288 --field-trial-handle=2192,i,13624600104561581648,8237319866395737371,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1708

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

06b9b6e2-7e76-44b2-9467-c4d1201e961f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\06b9b6e2-7e76-44b2-9467-c4d1201e961f.tmp
Size 8KB
SHA256 d846a1b49965adb78a1483481cb4c4d9f7cc534bea922a834c0781dee40df028
MD5 ac13e18b10f5b01844bbd5a7fc90c5dc
SHA1 3b6e69b6a0e762d836ef4b4f837c6dda90beb743
SHA512 e37d828d7a2e03a285c0db53a5bf51e432b7cb6849b127406f5ecf9b5f0289123760476dfe2318fc4b772791051f56b31fd13bb0cea3474fc44a2990a3e92710
SSDEEP 192:aONj6IE7QmiUy/gTPuIGmAcjzor5RZSC7steeU6:aONj6Dt7PuIGmAs8RskeU6
TLSH
T1A902FB35AC787C6B9FF3AD09B4473A23AEA4113BE6952F54DAE81B1D00D725C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

24dc7723-2322-49bc-903d-d0c23cfe1faf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\24dc7723-2322-49bc-903d-d0c23cfe1faf.tmp
Size 26KB
SHA256 362cac67213305fe9ef50e3259d6342a36d89ff6fb0f51facf8b2215052deb1d
MD5 68e5d3ae55383a7079300c85e5e208ad
SHA1 0f0a3167b0682bc65a8911d10b044dc5518b2a31
SHA512 65a17eaa7de09c83a56faea12c13a92a11e68c930ba0365acd5f74bbcdb6c3d78987fa73aab692517caeeee245f9003f6ebda75bb3abd7146a3fc71af3e9f7fc
SSDEEP 384:2iFiZcIuzsNn8TUNTUlIlMrOAC1+Ge3bzIGmAs8PDXu4iOtgOIwZOyALm1ou:dFQu2wgXACcj3vLlLu4iOXszul
TLSH
T1D4C23AF248EB987AD9AE8747A73D2D138EBCC163B5849A54B3D8560CCC9A17FC306911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

26b2baf6-58ab-44d1-a251-6722559271ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\26b2baf6-58ab-44d1-a251-6722559271ac.tmp
Size 8KB
SHA256 14f2ead59aa8eb274b8ffdcd85e755073526776b0fb3913c3f91a959cc0042e5
MD5 9bcb95ee7839b150b436a289c38c9f62
SHA1 83f0edd1129ab29ac309a01de3c34bc3ad0baec0
SHA512 459cfd440a29556ec31ded83c2f785c126890ef192b4dfd9f269d91e5ca5267dec92d991668ec68378ae2e78baecf669cdff223a199b9c9925a49fa191713c6f
SSDEEP 192:aONQ6IEeAQmiUyngT35uIGmAcjzor5RZtDXq27HUqAU6:aONQ6DeA535uIGmAs8PDXTHOU6
TLSH
T14C121B36ACB8BC6B5EE3A944F44735239EA44227E7C86F54D5EC2B1C00EF25C5346927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e73b391410b47c494ee7953905a0c60fd04c6bc35617583539b46b92968689a8
MD5 c67fbef7f62bf0056c3e3f786716b78a
SHA1 45f832458a5b84f29df5280a7973ebf46d014c4b
SHA512 623599849df6e275e849b53aa15de4c0c6df018ceb72805f4afbfea2a8577410fc6f21085b8473298805a9eec11bfc75b61276472cfcad39c54461995984dd1a
TLSH
T180D0C0F0CEF896F0F031343C01344142308C274122021211B432001C0C900C34265DE8
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

02e80866-e39d-4f23-b838-c086896bf605.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\02e80866-e39d-4f23-b838-c086896bf605.tmp
Size 10KB
SHA256 2fb40d99dd25e4d4c919f56767861b80878b06bed846de3c226a5e6ec8a6c497
MD5 257893189ab682aab207488d8c4e88cb
SHA1 7202562a7ba90275d65300e47fd2ae5b9e9360c1
SHA512 df114f785bb86635883c169521d6934cc7d2ce94cb4a4bacf6aa83fe78e4a2d324122ab944952f1b4ba4fce22d974dbcd36a3f516058c1abaf0f60ae6a9d6785
SSDEEP 192:sxZWRBW2/fasZm0KIdpfIYHW6+WN9kK/Yap5Y5Ig5XJ:sxZWy2/fasZmoxHbL/AX
TLSH
T1A222E9526E28697B8CCBE20DBA55BF63E6F9507250910E4CA6FC961C14E7BCD234780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14a204ed-7751-4b81-8d76-ac5e7e707d94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\14a204ed-7751-4b81-8d76-ac5e7e707d94.tmp
Size 27KB
SHA256 82baed53e2d8167aa3f67e768c6df7e58806d077719b848897a6a72f3b0bffe4
MD5 a327feff75dbbb1f9288e5c0abe4732e
SHA1 8eff78915121f7067062cbba36255b72d90b6d6a
SHA512 e8634f9b477dd3530fe2acf35ac0d95d1edcbf3b9097f0f62adedf4622f0ea934164bdc12449bfc774eefbf97ec326f53b41e3fb5aa4e13bcb2eef8aab45189f
SSDEEP 768:rxWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy70ro4DIfeFmR92:rxWPcLKWvKeEeu1jaClLiF7f40WFmR92
TLSH
T154C2EA3F644CCB7E5FC01A9DDC5A6FA76E9802C79A648D4047FE944C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

288e0554-f307-4b96-9a66-b961429cf53f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\288e0554-f307-4b96-9a66-b961429cf53f.tmp
Size 10KB
SHA256 146f31458cce32764c49d611103b31b08c9f8496042c459e28333e7749ef9755
MD5 29a70a6db1f4ea7b0bf72dc4d669682f
SHA1 949a187f8c144249a0dcf2015d0e0062465909e3
SHA512 05f859ab9f2a380db2832e63a6900d43ba7e3b6625542bc6e16a9dc0dbd9fb89c9205e51ffd1d9a3d4039a35bea71b26f943545e1ad4faffea42cf2b8d239b7b
SSDEEP 192:sxZWRBW2/fasZm0KIdpVIYHW6+WN9kK/YapFY5Ig5XJ:sxZWy2/fasZmoTHbL/8X
TLSH
T16922D8526E28697B8CCBE20DBB55BF63E6F9507250910E4CA6FC961C14E7BCD234780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e108594-f32e-4ec3-bcb9-13e0da759a5e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3e108594-f32e-4ec3-bcb9-13e0da759a5e.tmp
Size 9KB
SHA256 cfaa8ab12ee35a116d09fc7d38e0a64ae7e3ef640d249faa52a5cba570cd6856
MD5 e3adfe823bfc6dcf4f79ecafce5bbbe6
SHA1 fe67cc304aed36097c7324b4ae2ea90dce124a54
SHA512 99caaae7a378f99a51cc660162a00e252ef134a10971e9327ce77814e08b4502f8901d49d11e5234ed9c23ae37d7b9a0bba6beebf2f05fcd1f4ae8b3606fc874
SSDEEP 192:sxZWRBW2/fasJd0KIdpVIYHW6+WN9kK/YapkY5IgrJ:sxZWy2/fasJdoTHbL/b9
TLSH
T10522C7526E28A97B8CCBD20DBA55BF63D6F9507291D00E4CA6FC961C04E76CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a0ad18f-f89c-42e5-a26c-3d28611618a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9a0ad18f-f89c-42e5-a26c-3d28611618a4.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 0c1005a28c7b269b3c3d4f9ef79d7aaa353781a331150ca3ac1091fcfc289234
MD5 36a710fd526e6dadb460339d348ee7c2
SHA1 0c62d5c70b560924489cb2ae561c7d62b3218dae
SHA512 017d49cfa95e78605542c4c3dcf88a57b62df0a123614911f01117a4b08c633018d7a2e736b8c6e42bcfe62ad8a0def6abf461f4ef9ec8d79a9383e5313f5976
TLSH
T160E026E516CCC32EE21EA48B0668574CC3A0365BD3C0AD1E5700D9887546060A6CAAF0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 0fc2fba84b4066cfc54a84fa366f7a3717fdbdbd00f9a76c32a983961ba9005a
MD5 7634e73d651e74c15d0249719915fec2
SHA1 92b3222e353521b3cc3a534d9aac88df165e0b7f
SHA512 9cd519b7de7979b881a966b3e76d6a0eadac2fc181d4829c1d0488c0d1976e551810b52f39db517f84c91f0361d9f394b9b92c7e6aea86d385ae11dfa74341b9
TLSH
T145E026E414CAC32FA20CA44B0168970CC3C0B61B93C0699E2728CAC5748B040E6837A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 20f410613070029f2785e5bb7c72477713f1efc621f4caff29f8015fe9094092
MD5 06289f8f16e6c8a82b038ed759964dcf
SHA1 06df6af3bc1b8a50eaf3c20d2205c577c5acdd0a
SHA512 0f5c00c540998b26bfddb18797788cf36f397251b78c28dbb4dc010250e04163d780840772c324551700f84cde5b2d0d90af66cfbbe1dc86ce167755182b3873
TLSH
T185E026E406C8C22EB64CB657426C630CC3C03B3B93C0A91E6B00C98474C6040A687EEC
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 9b828a313747cfdc55340cfb6656a3bcc8ce312e941cf6133a2d9dbd51d723b0
MD5 dd0ff37ffe182ab0f34e192df23320e2
SHA1 2d6f4adbef1531364837785ec0428d0fa5de4805
SHA512 b2d2a46511cafb414c73ffbf9d15cfa4f8616e4b5d9adf1ad5d2a6e009fb5e76ccbe99de92986a10b93063e14201226024a482b6c3902fb5469417effdcecd1b
TLSH
T11251DA445AA4E070F7A4397992D4118F3E36A5CC86DF1DD11268C4B9FC4E35D93C407C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1bce654c848fc6d86395c6f3805e3d64d5e9d3c4b3f7a3f1ebf727848f472201
MD5 8dede7550d870e12a7fc220572e7c316
SHA1 a358828f82c0fa3e95ceae87752f65412b106641
SHA512 4ca324a8202ab522e4d06b63cde2151488e0da70e446cb88e320fd3b5547fd29de864f32c432017cb98b73dec8dc7bc3087e9769e201a88f215274cbf90402f3
TLSH
T19E51B8855A95E070F7A4797992E0128F3E36A9CC86DF2DD51168C4B9FC4E39D93C407C
MD5 SHA1 SHA512 TLSH

Submit Download

fe124bbe-c1a0-4651-8293-0f756179d296.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\fe124bbe-c1a0-4651-8293-0f756179d296.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

04dd0277-2fb1-4742-a221-deb673443e66.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\04dd0277-2fb1-4742-a221-deb673443e66.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

1682ac4a-3113-43e5-a937-b38c1f220295.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1682ac4a-3113-43e5-a937-b38c1f220295.tmp
Size 1KB
SHA256 44d4467b57f62df328e7f38080763c27ccb15c961822a20f2ce5f14e3366d713
MD5 4d1629e0c393016adf13efe5d0010215
SHA1 bb5ab44e9a2fb9fa32d804ed6307d8ba3c9a582e
SHA512 bcc13df11e74d4c5d361920a622a897a2070488deb384b19b1d1dd768db64eb62bb62a4bf9f80805915aed81a9324ba22e613c04ad33c76025ec37838505c93a
TLSH
T14431CEF783A445AEDE1156F09918BE2BCF2C0415421C3C6E85D0AF5793E3071E142E6B
MD5 SHA1 SHA512 TLSH

Submit Download

2f1001b1-5d7f-4409-952d-b6a64be74391.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2f1001b1-5d7f-4409-952d-b6a64be74391.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

98779bf2-23ab-41d6-96c9-31b4dfa30825.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\98779bf2-23ab-41d6-96c9-31b4dfa30825.tmp
Size 1KB
SHA256 7c4263e9b37f14b035e7b4382323577621d13aaa609e1eabbc0fa563b6910cf8
MD5 dcbb891b9861f084077922262f9df8b0
SHA1 f54567f78fed9e506027a51768d3ddb64640acfa
SHA512 e495570bdec6458a9fc9941bf820346d17159e6734a0aa0094745cb4595371754bb79ed95955da93184b5a65989c0d3b58a6c19f0fab4af325ca68ebdbbb59ec
TLSH
T1BD217DF383E4496E8E015AF05A28BE2BCF2C0515525C7C2D85D5AF6B93F3476E101A9B
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9898e691-ad57-4e89-b582-a5edc6c6b1ad\index-dir\temp-index
Size 768B
SHA256 586578db9bbacd56c13c0cc1d708bc6f2920f4f405790e9769f2acb5c5b26936
MD5 f6216d2219e73f54d00f6038a0ba5fba
SHA1 a12323255ba8284a1c537b8411c9aaa5f8d3c77b
SHA512 a9e34684f7a45796f49a8cb8f53c7fb31bd1b0691a8c8cfe3e5e02cef6b8001c7206aab660a5644372fc12a694504d6e23488e6c5bf1b604ecae89ad9c102f53
TLSH
T11D01E1DA0D134E66FD540234143CA805967502DC1390F98FB2FEC4269CBA7447E86AA4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9898e691-ad57-4e89-b582-a5edc6c6b1ad\index-dir\the-real-index
Size 768B
SHA256 025c7b421b2e8acc6744397060b7787816b8da7bca68475bff602d7826a0e611
MD5 f7526cc46d77d7ff530daaa68bb9e288
SHA1 106f5723c4b17d06cbf4a5cab0724a5a255a9b4e
SHA512 fefebb2aa2fda6794bff0c0cd9d167717c939c86195bbdd36bb10aa798c55fc082c79ce022fdd8db36f92f3c5183413c297123739ae868bccbf9faf7f9b5eaa1
TLSH
T1290120D600134B43FC0043709E3CA8062166414863907B4FE3FAA02ADC62780BE83EB0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 371B
SHA256 0792f7e716b661b24f335d1643568f30279bce8937be29cf137380b0c64a9756
MD5 89acf7a003aa3e5553eb748cc7118a1c
SHA1 bc0da3c7e037e69a2a16ed26dc6fa96f331067be
SHA512 b15c00aea5183800ad759d9ab0d3d6f0d7ecec052c66030fb0e00802bb6188dcc392749143715d73926f0b08d960182452569ee7130394380f0109df22589755
TLSH
T1A6E068B32CF72920E8ABC7C554B144E141A1B4158641AD4F291A93C320723A1744AC63
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 9153405d6ec2f0493f749e617245c4d44de10e1322b4b71a0dfbf38dddee403d
MD5 523f16b6d207cb8cb61bfb372631118f
SHA1 73e5b1b350e1c4bfefbb6bef12c398e0364d1929
SHA512 2ecfb964ff9d401c0c0d7d49dbc0efa05842e15c8ce770d51faed2cd7e31414ca52765a3e922134f563ff74244fec4c77783e5aab5bc80a4fc4dac03ced674a6
SSDEEP 96:Kc0AKla+CaQKTSMr6KIIS6EwKRyitE/Da:SDPeJnJtE/Da
TLSH
T1EDB1F319717B535038BD298880B6971E528231B3365CE62FBFBD10B64D6EE484DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1a5656f-80dd-4372-96cb-a6a560a68015.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d1a5656f-80dd-4372-96cb-a6a560a68015.tmp
Size 24KB
SHA256 4074203695cb61962a0ab0af6cb9a86654ef9d9c66f4058da57e96c392b9a014
MD5 1b0369cbe047ca95db3a657d7ab47ac9
SHA1 37e35919c90f5c18b2d4f8d11e3b13d253a5b2d3
SHA512 3d8f15ebf3d9417ac7a77037f0c743e6fa76635f989e280df0d783b52682066cb54fb258c58bc1809416ca85027bab6c4cc738986cb7ccea79dc39800c2da601
SSDEEP 384:sxZWy2/fasZV66s8qMpRiYnazAW8pZS15posJWeT+xoxHbL/OX:sOy2/fTV4Mnc7WeT+x0HbzM
TLSH
T1BAB2E605A924C87B8EC36D19653D7E33DAEC50622285CEDE1AFCCA1C019D1FDAB47857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2f808cf-e5bd-42cb-900a-83736b837b06.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e2f808cf-e5bd-42cb-900a-83736b837b06.tmp
Size 10KB
SHA256 be7db77c0a25ed3b0c9dbaeb2ef2dfe2d16d2edc3e1999f283a8b2d66099ab47
MD5 f5c5c656c9bcd41561da776943e1d85b
SHA1 30293b02fdfb993d7cac8c52dd03a10f8f13bce8
SHA512 cdee23e0c77defa8103e33618235679dfaef3a4eb2fee6b0cb2fad48214cbf41f119a3f729efbb3460e3e3cf89ea50f8743df6c39888570c36ec5b2dd08a65d4
SSDEEP 192:sxZWRBW2/fasZd0KIdpVIYHW6+WN9kK/YapkY5Ig59J:sxZWy2/fasZdoTHbL/bx
TLSH
T12A22C7526E28A97B8CCBD20DBA55BFA3D6F9507291D10E4CA6FC961C04E76CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f7a6f04c-bdf8-4e95-a6d4-728d9c647010.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f7a6f04c-bdf8-4e95-a6d4-728d9c647010.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aca02881-d12e-4f3e-bd88-91f1d30ca415.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\aca02881-d12e-4f3e-bd88-91f1d30ca415.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aaa2f77a-7fe9-45ff-9c90-9880c9e18653.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\aaa2f77a-7fe9-45ff-9c90-9880c9e18653.tmp
Size 18KB
SHA256 b9fa9b868a9e1348f036a5922a1ba5fc6d52c8876e8e9c4745e8b3fd9989065c
MD5 af1c6e608d0603cdccd7fa9d8db96df2
SHA1 08563238331b66b3d9a2bb19aca05265aabf2481
SHA512 de4034ba9142acd60e2739fbedece8c6f45675721066a19e24ea4b9984f2a72b2c81d7e1201a05b7fa6ac412e17e376310a081c4a591eef2694787ec639c2eea
SSDEEP 384:xZcIhsNdMrOAC1+G23bzIGmAs8PDX0iOtgOIwZOyALm1ou:ZhCACcP3vLlL0iOXszul
TLSH
T1EC828D329CBCAC7B6DF7A544F54636135EB88127E3C4AF54D5EDAB0D00EE258130AE26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a3e394f0-1925-4536-8ec8-f6079a4c57e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a3e394f0-1925-4536-8ec8-f6079a4c57e1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f2d5fe17-f700-4e1c-877c-3e7bd0e4f395.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f2d5fe17-f700-4e1c-877c-3e7bd0e4f395.tmp
Size 18KB
SHA256 bf969b2363e5edbbc9a485bb83e99e7a93bc27483270dc9a10b261cee41a6541
MD5 8a9d695449194bf148577a829eff818c
SHA1 3c945462836d817b9e4d3d72ca9c4c711b2173e4
SHA512 0757a5ee5dd4eb4ac7526dcd3cf83bd5b06e4db891646dffa8bfbc2cb73b193b7968e487fb7b2662ae162a5bc75b6062b5314da63b4abd0149bcaaf534f91e60
SSDEEP 384:eZcIhsNdprOAC1+G23bzIGmAs8PDX0iOtgOIwZOyALm1ou:chdACcP3vLlL0iOXszul
TLSH
T1DA827D329DBCAC7B6DF7A544F44636135EB88127E3C4AF54D5EDAB0D00EE258130AE26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2c859acfa507079da3cab3d84a8f8c28bae203f63a1e13a4fa417cbbc0198fce
MD5 81ecea73fab124aa10c9eb7e89ea020a
SHA1 a9a5be7e4a9847ef5bef4199e91f62b2b88acba4
SHA512 c4f8a8deab25dc7bcf2185ed922aed9c2a0501ab7ffe8764b20a59c5636dc6dfcf585e1c1a3f426cce9e9c417ad6607d9447972dde9aa549fa9f8a41568ee4a5
TLSH
T10E411B58B6EA1048B3B76F4A9BF6A82D887F7D372E0AD49D10110E4F4A63A41CC61737
MD5 SHA1 SHA512 TLSH

Submit Download