hxxps://links-1[.]govdelivery[.]com/CL0/https[:]/content[.]govdelivery[.]com/attachments/CAINSUR/2026/09/30/file_attachments/3801009/Insurance%20Agent%20and%20Broker%20Briefing[.]pdf/1/010001a0f4ed03d5-935376ec-9e10-4589-891d-7f2624ee166d-000000/oFuDTdxsAHSe6OhEAryMNe_4qZLkXvZBb7KZW4F_Mh0=452

Analysis

user interaction
yes
max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 17:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://links-1.govdelivery.com/CL0/https:/content.govdelivery.com/attachments/CAINSUR/2026/09/30/file_attachments/3801009/Insurance%20Agent%20and%20Broker%20Briefing.pdf/1/010001a0f4ed03d5-935376ec-9e10-4589-891d-7f2624ee166d-000000/oFuDTdxsAHSe6OhEAryMNe_4qZLkXvZBb7KZW4F_Mh0=452
Sample261002-vwl67afa52

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2180	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{349D7232-2E84-4789-998E-E4E34D4107A8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2392	msedge.exe
2392	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4444 wrote to memory of 3252	4444	msedge.exe	84
PID 4444 wrote to memory of 2180	4444	msedge.exe	85
PID 4444 wrote to memory of 768	4444	msedge.exe	86
PID 4444 wrote to memory of 768	4444	msedge.exe	86
PID 4444 wrote to memory of 768	4444	msedge.exe	86
PID 4444 wrote to memory of 3956	4444	msedge.exe	87
PID 4444 wrote to memory of 3956	4444	msedge.exe	87
PID 4444 wrote to memory of 2224	4444	msedge.exe	88
PID 4444 wrote to memory of 3668	4444	msedge.exe	89
PID 4444 wrote to memory of 2224	4444	msedge.exe	88
PID 4444 wrote to memory of 2224	4444	msedge.exe	88
PID 4444 wrote to memory of 3668	4444	msedge.exe	89
PID 4444 wrote to memory of 3668	4444	msedge.exe	89
PID 4444 wrote to memory of 3456	4444	msedge.exe	91
PID 4444 wrote to memory of 3456	4444	msedge.exe	91
PID 4444 wrote to memory of 3456	4444	msedge.exe	91
PID 4444 wrote to memory of 2976	4444	msedge.exe	92
PID 4444 wrote to memory of 2976	4444	msedge.exe	92
PID 4444 wrote to memory of 2976	4444	msedge.exe	92
PID 4444 wrote to memory of 1684	4444	msedge.exe	94
PID 4444 wrote to memory of 1684	4444	msedge.exe	94
PID 4444 wrote to memory of 1684	4444	msedge.exe	94
PID 4444 wrote to memory of 2640	4444	msedge.exe	101
PID 4444 wrote to memory of 4164	4444	msedge.exe	102
PID 4444 wrote to memory of 2640	4444	msedge.exe	101
PID 4444 wrote to memory of 4164	4444	msedge.exe	102
PID 4444 wrote to memory of 4568	4444	msedge.exe	104
PID 4444 wrote to memory of 3296	4444	msedge.exe	120
PID 4444 wrote to memory of 2232	4444	msedge.exe	121
PID 4444 wrote to memory of 700	4444	msedge.exe	122
PID 4444 wrote to memory of 1612	4444	msedge.exe	125
PID 4444 wrote to memory of 1612	4444	msedge.exe	125
PID 4444 wrote to memory of 2596	4444	msedge.exe	126
PID 4444 wrote to memory of 2596	4444	msedge.exe	126
PID 4444 wrote to memory of 2192	4444	msedge.exe	129
PID 4444 wrote to memory of 2192	4444	msedge.exe	129
PID 4444 wrote to memory of 2392	4444	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://links-1.govdelivery.com/CL0/https:/content.govdelivery.com/attachments/CAINSUR/2026/09/30/file_attachments/3801009/Insurance%20Agent%20and%20Broker%20Briefing.pdf/1/010001a0f4ed03d5-935376ec-9e10-4589-891d-7f2624ee166d-000000/oFuDTdxsAHSe6OhEAryMNe_4qZLkXvZBb7KZW4F_Mh0=452
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ff972c8c188,0x7ff972c8c194,0x7ff972c8c1a0
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,14850005659888998480,84069280775453990,524288 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,6203713704250075007,15526453054481195559,262144 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:2
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,15458896569170753636,10355021651062018390,524288 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,10418552270246307498,13685699281077700448,2097152 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,1109264027805864368,3613499872884884387,2097152 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,3500336191632006533,1881719055937499787,2097152 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,14599184677661743987,7638470846404328294,2097152 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3592,i,11366276608830678734,460561295178503627,2097152 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4056,i,15682671927415583421,9169678456138349666,524288 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,11625908918697814555,11654223391488376463,524288 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,1466188199196603159,10701262892269524599,524288 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,1466188199196603159,10701262892269524599,524288 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,8355684094515286003,6805358593927031270,524288 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,8644104620799285088,5490349138248891345,524288 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,16324848198221411619,1764568394836836443,524288 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,16901744302730363861,15384154860881735833,524288 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:8
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,17920464622952636787,16545181349517285491,524288 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:8
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5636,i,7243643888710995799,3647817069381563215,524288 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5476,i,7611376030754901313,7714064037591890929,262144 --field-trial-handle=2172,i,14942429976871555056,3247088167023166444,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2392

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0be93e63-570d-4b5d-bea0-545127e53140.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0be93e63-570d-4b5d-bea0-545127e53140.tmp
Size 8KB
SHA256 fe64a27f956e6dae592639c3dad61dc09c4686f2217858875410fa3cbe1a7d8f
MD5 3d98cff04a622317cf0144ca7f53f9ac
SHA1 1467b6850276355e8acb07914935634f3aa6914f
SHA512 7cd7bd95b3d7f986795b704799beb466f6c18e2f22480bb878ac9d70aee245e644889b14bef00c83e6964cc597b229ecd2f3b451bdeb31e06c1bb6e272e785f4
SSDEEP 192:SONH6iDCQmiUyqAHq5u88PpPCPSq5icU6:SONH6/QHq5u8ipaNBU6
TLSH
T1E802F8396C787CBB9DE3AE15B54B7B139FE5116BE6941F84DAE8161C00D768C1303523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

871278da-fd8d-4dc9-8b80-21ebe3cc79d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\871278da-fd8d-4dc9-8b80-21ebe3cc79d2.tmp
Size 18KB
SHA256 4cc90c8f8fd27fdecb2a1b1ea1bf0d01ae8fa2aad32c309f14702b24bb87271b
MD5 d324102e0a41811d7377f3a39bdb7426
SHA1 a34d2dad70ea910ae7aa0107a5d59f8a3232596f
SHA512 74a76b4bf37ba0d7da644d0324de74c14452ec666b8bafeb93e8bf8a9e13938ac56dd03efe4354a536612d1aa149f34b650b9f14885746744e2185ae152491aa
SSDEEP 384:UZcIhsNtu7sI6x4p5u8ipaiNacHtgOIwZOy3oBoE:ShuxykpUcHXsxB7
TLSH
T15B828C325C785C7B6CEB9611F58B3A039FB8816BA3C89F84D8ED971D01EA5E81307913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b5cd270-7c71-4bdf-83c8-cef51f01cc51.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8b5cd270-7c71-4bdf-83c8-cef51f01cc51.tmp
Size 18KB
SHA256 9f822a3920fe55291d7b85140b076dc717acf377f718e9f7a9f46d73f2c079df
MD5 1722f0b8db9420d816c1d6322e5ccb58
SHA1 24f5c285537ad5e1f3bffd6e67fa639e0a27df5b
SHA512 22d092746465ec6f9ff4de32c62a060cebe24aea97df8e810439845f49dfc2527215af8c3b566b31d0b60e0dc65c4f718d45b436cc93ec1ae764f83f172f064b
SSDEEP 384:RZcIhsNt77sI6x4p5u8ipaiNacHtgOIwZOy3oBoE:5hhxykpUcHXsxB7
TLSH
T1DA828C325C785C7B6CEB9611F48B3A039FB8816BE3C89B84D8ED931C01EA5E80307913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

00cd1a84-6a2c-46dc-aa79-b85ed5729b99.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\00cd1a84-6a2c-46dc-aa79-b85ed5729b99.tmp
Size 9KB
SHA256 d60eb380ca18421317d9143650b213cfc18ee5fc65c1520475106c4f0e22bfba
MD5 9d3e427e67b12296a615fb5bb90d4f8d
SHA1 b73078455d20049a287c6db6aa56507b6b03cdfe
SHA512 c2d2facbd9b414fc0e2b46a50f36f956d7bf3a817dcec06c3b63e93e432699a3dd372b409d00cda0feaee8a970644c92764a8f559955375897d542331ce86ffc
SSDEEP 192:sxZKSR9Wc/fpsV7U9FIdpcVHW6+WNGYaQRXZIg5XJ:sxZKSqc/fpsVg92EHbG4L
TLSH
T18422B752AE28A57B8CCBD20DFB55BF43E6F9503291951E48AAFC861C05E76CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0c68461e-ac62-441e-ae91-a6839ab002ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0c68461e-ac62-441e-ae91-a6839ab002ed.tmp
Size 9KB
SHA256 da6bb5f6f703a5efce96ef8401d265c71b0b0f29e72141375b73c34c5fd9b191
MD5 983093ce627aef226b59626ac2a00ed7
SHA1 0fac5811974c48c173674298365783e319853bb2
SHA512 6313b5a99b27b69dc37ad93cb1372b5ad63c1f923775500f3d2647d2b0b83dd18f7d4b135b24cd5b236003706de032ebf01985354332d3d9b02f51681e4a051e
SSDEEP 192:sxZKSR9Wc/fpsV7h9FIdpcVHW6+WNGYaqRXZIg5lJ:sxZKSqc/fpsV192EHbGiN
TLSH
T19D22B8516E28A97B8CCBD20DFB55BF43E6F9503255951E48AAFC861C05E7ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22690adb-61ea-4967-8f19-3b3574e7b531.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\22690adb-61ea-4967-8f19-3b3574e7b531.tmp
Size 10KB
SHA256 6953a0e915a1f6a8baa76ef7eb920db21ccf647eaac96736804c8279ff12cda9
MD5 704a55c93a92b9fd59cd83b9ebd1eb99
SHA1 ef029e262126437538202a286ef9bb7cb859c089
SHA512 c3f5768bb20ccd6a6b48d2348f8e1958c3b2809bc642a0037ab3e90111177f93502cca5565cb0df9dbe63db74aaad186e995bfc76b0711374a4ddaa208b3e934
SSDEEP 192:sxZKSR9Wc/fpsV7h9FIdpCVHW6+WNGYaoRXZIg5lJ:sxZKSqc/fpsV192uHbGAN
TLSH
T18322C8526E28A97B8CCBD20DFB55BF43E6F9503295911E48AAFC861C05E7ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

26922a9d-668e-4007-a609-df8838c819a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\26922a9d-668e-4007-a609-df8838c819a8.tmp
Size 27KB
SHA256 64507defff916cbebe070adb8593693a9a2e0af4a96f7ce1235f7812a3fddcca
MD5 0e9fdd7308e64a49f54d08c8602d8bf6
SHA1 40cc29dff41add0224600d096ba93862350aa5ff
SHA512 094967ac6c3d011d37b36c9959881c3e57fa4bcb282ed4e23c502fd159d1c44aec249524cfce0ef10901460614f5900712d9b571726d5d1d8b07d655b784621f
SSDEEP 768:w9yQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH33roZZi8:w9yQRbrWvvlpZu1jaXKLf33kZZi8
TLSH
T135C2F92B640CCB7E5FC01E9DDC6A6F977EA802C766588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9cf6896b-1238-4fd0-ba8e-a9dc92a9eef8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9cf6896b-1238-4fd0-ba8e-a9dc92a9eef8.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 c34dc19f25054dfbb1500369136e241797aa4f6ab3842c5f866a9a8d2495b9ca
MD5 e729c5e0f423b36f3e6932cea06c8c8d
SHA1 ba36b91298d6d6ca919b8624b22dd6f7d1540d51
SHA512 601b3f8ae027609d9eb1e989a61382f2a812a4d947bfdcce13308dae0f773c6dfd06629ac8a9d506564275a18de3d3b2aaf9234004c787fedefdf3a4049c1306
TLSH
T1AEE026F505CEC32EB61864870178634DC3F4361FA7C46E9E1718C58C7A0644CB6836F5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 42da645320cbd83daeb32dacacea7ddb95c9e512b2c4b4bf53465ba3ffa70253
MD5 8c6de29cee7fcfd048adf9580ca8ff00
SHA1 3ef7baad64af0f752822d13daa6565c86c1c2d8f
SHA512 43c9d571b6c13a97dd487438fee0e72decf21e09ad985715339a39dd07b474dce596ef6125b22254c110ff144bfc276ef9cecf7648fe01cadeaccc0a5daf072f
TLSH
T169E026E954CCC23EB60AA457016C532C8BB2371F93C0A99F5708C5C87B86A80B382BA5
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 7011fd2dd3e4c385db1a945425be3a7f8ee05419fc2f80da1b01bca68fab42f7
MD5 2f590ba03bc1da955799bea06034f282
SHA1 0f8314ec1f572ea4b89c0cc79500c4fdd29ef051
SHA512 0d5ff65bd229278b1a024f3f3e28a20ed58d8ab982ede5d18f8484beaa4d8e1b8c92ef1f02c9b427ccd1e06ca21b8966407a0335f5fb7a106899d9197586d41e
TLSH
T1CC617083D24342E9F7AA61B091D28DCB3934909380433F3EC8C4CA75A407725DA1C073
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 cf66662402f421c8d1b131853ced00b0c16ace798370ee9ddd7a963a4d6c4392
MD5 d31adf7df54077c9034025036ad4b053
SHA1 de07fcd978f9aa9a80dbd08008a53bd86cf82eb4
SHA512 54944b7435a0dc1bdb98c6646d854af4c598e56709e0529a9df087366caf9c87d7f6fa1c309da287c2832312ba57ab4a4bdc601ab250d340d7c839e37a0783e1
TLSH
T162617083D34342E9F7AA60B095D28DCB3934909784433F3EC8C8CA75A407725DA1C073
MD5 SHA1 SHA512 TLSH

Submit Download

0ee7e2d1-ba76-4f7b-a58b-b3a42477d7d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0ee7e2d1-ba76-4f7b-a58b-b3a42477d7d6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1f5aeb77-41ee-45ef-a9d4-95ba6c1443fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1f5aeb77-41ee-45ef-a9d4-95ba6c1443fd.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

231d4b27-eef7-433c-a324-728d3ac16bd6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\231d4b27-eef7-433c-a324-728d3ac16bd6.tmp
Size 1KB
SHA256 92a1b5cbbbc2a29428256cf38be02c8b543ce9aff4974ddbe935f87d9dc00b01
MD5 201d5e6584a1ebc25146360471223d54
SHA1 8c4f7ac9c7ae9e2970a5ef93e4f3fe5ea9eb7fa8
SHA512 58dccb4ad3cebd7f414edc133122a89dfe113816031139cd30ae9a875393fb4c9b1438279848af9c9a69eb9a01ea8ebf0b72daeffc424cadc41541f96ccc1c32
TLSH
T1A8217FF3C3D585AEC91156F0AB24AE2BCE1D0905831C3C5AC5D4EF1B97E2476E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

f417e60d-e9d6-4cfd-ba74-7e772ca80227.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f417e60d-e9d6-4cfd-ba74-7e772ca80227.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a110d238-bf51-4cc7-80ee-d1ffa2ea8e7e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a110d238-bf51-4cc7-80ee-d1ffa2ea8e7e.tmp
Size 9KB
SHA256 7276ded1f696bfeb5e5f1a184d6fa87a68ed724fb76e9d7a7001ee637f759d27
MD5 d60d05f7ec6c787b8d3e92a0f2f3ad62
SHA1 02a17f334382bd609e4c58f9bb1ef96051e1d0da
SHA512 a10942f341e29c586e31a36f4e8ee9cd25b66b9e834b9608b004f764e9b1abf4e454747824c48f9300f81fe46e77a8fdeaf2829d5d0bbd286b399ffd1f08f5d4
SSDEEP 192:sxZKSR9Wc/fps37U9FIdpcVHW6+WNGYaQRXZIgrJ:sxZKSqc/fps3g92EHbG49
TLSH
T15012A7526E28A57B8CCBD20DFA25BF43E6F9503251951E48AAFC861C05E7ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

04c7126c-2906-48a9-bddc-a2c1201a2551.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\04c7126c-2906-48a9-bddc-a2c1201a2551.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a4f2ef09-2a37-411e-bf27-e16c14acb001.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a4f2ef09-2a37-411e-bf27-e16c14acb001.tmp
Size 8KB
SHA256 87e3c791f1f1a261ec0e3e7f033fc02316db4f924d533ed3061ded06e4c8b8bb
MD5 75df551e073d4272acae4a0a06661f6b
SHA1 684b9a25d359cee2b406098758b2c55d5f358cb0
SHA512 b303049c1f73ddf601b5b71bd7f628ff4fb77892d993b76ea2fef417fb6dc5d2a8b46b3aad5f55bb88d1ff27bf0ae3fc6f39eb02c99dc7fe03f9f812f2bd424a
SSDEEP 192:SONY6iDSQmiUyMAOq5u88PpPCi3daFuZLqEU6:SONY6jsOq5u8ipaiNacHU6
TLSH
T1CD124A366878BC7B6DD39962F48736139EA4826BE7886F84D9DC162C02EF5DC1307913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d873aad0-02e5-4561-b8e9-72b89fcc3edf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d873aad0-02e5-4561-b8e9-72b89fcc3edf.tmp
Size 21KB
SHA256 7d48edf0501bc1b1c4f2326191a15e522e799ba37e6dee7333ba2dd7b3437501
MD5 29744df26998b8cb210be077c4e8f4ba
SHA1 db71e3022a4dba06be62fcb49fa967b17e816dcb
SHA512 4bbc455942564c452d62f34a1d584e6e6c0e2643582733bb48ff00370b5960c7a11d050154d9bcf839effe5d0a4b0f0c9274d05074f7fa8dce8c95e94c7388ef
SSDEEP 384:CiFiZcIgzsN38TUNTUlIlu7sI6x4p5u8ipaiNafHtgOIwZOy3oBoE:JFQ8Owg/xykpUfHXsxB7
TLSH
T158A27C334CA88D7FADFB9A51F54A36039FB481ABD684EB94E6DD961C00EB1D80307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67232011-1e36-4604-8274-2c4ae48c07a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\67232011-1e36-4604-8274-2c4ae48c07a5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ad22949579044f0169cdae5fc755582a8c4bc5ec605f47f6f5c1beac95d89c2f
MD5 a2c9d4d545642140f2434f17fc355a0d
SHA1 0ba40a273f6c1e41f155927d1c5337faaedcf1ec
SHA512 5b9a5fc2c608e82f8f6aa431c2c1061b347b287b14b3e5d42a1f79503df0a4c335ceb9a4267906dd8b634003b54edc829a4640b3370061965585582f6fb4fd62
TLSH
T1FD412969B6FD1148B3B76E1A9BF6A8AD487B7D672F06D46D00010D8F0A22B40C971737
MD5 SHA1 SHA512 TLSH

Submit Download