hxxp://medsenior[.]veries[.]com[.]br

Analysis

user interaction
yes
max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/10/2026, 13:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://medsenior.veries.com.br
Sample261006-qzcppszxgy

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2344	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{55B523C5-0BB5-4010-99D5-EB1DD5807269}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1236	msedge.exe
1236	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 2120 wrote to memory of 4756	2120	msedge.exe	89
PID 2120 wrote to memory of 2344	2120	msedge.exe	90
PID 2120 wrote to memory of 4016	2120	msedge.exe	91
PID 2120 wrote to memory of 4016	2120	msedge.exe	91
PID 2120 wrote to memory of 4016	2120	msedge.exe	91
PID 2120 wrote to memory of 952	2120	msedge.exe	92
PID 2120 wrote to memory of 952	2120	msedge.exe	92
PID 2120 wrote to memory of 4768	2120	msedge.exe	93
PID 2120 wrote to memory of 4768	2120	msedge.exe	93
PID 2120 wrote to memory of 4768	2120	msedge.exe	93
PID 2120 wrote to memory of 3612	2120	msedge.exe	94
PID 2120 wrote to memory of 3612	2120	msedge.exe	94
PID 2120 wrote to memory of 3612	2120	msedge.exe	94
PID 2120 wrote to memory of 4512	2120	msedge.exe	96
PID 2120 wrote to memory of 4512	2120	msedge.exe	96
PID 2120 wrote to memory of 4512	2120	msedge.exe	96
PID 2120 wrote to memory of 1548	2120	msedge.exe	97
PID 2120 wrote to memory of 1548	2120	msedge.exe	97
PID 2120 wrote to memory of 1548	2120	msedge.exe	97
PID 2120 wrote to memory of 3208	2120	msedge.exe	99
PID 2120 wrote to memory of 3208	2120	msedge.exe	99
PID 2120 wrote to memory of 3208	2120	msedge.exe	99
PID 2120 wrote to memory of 2916	2120	msedge.exe	102
PID 2120 wrote to memory of 2916	2120	msedge.exe	102
PID 2120 wrote to memory of 4892	2120	msedge.exe	103
PID 2120 wrote to memory of 4892	2120	msedge.exe	103
PID 2120 wrote to memory of 2672	2120	msedge.exe	105
PID 2120 wrote to memory of 2028	2120	msedge.exe	114
PID 2120 wrote to memory of 2028	2120	msedge.exe	114
PID 2120 wrote to memory of 2028	2120	msedge.exe	114
PID 2120 wrote to memory of 2960	2120	msedge.exe	116
PID 2120 wrote to memory of 2408	2120	msedge.exe	117
PID 2120 wrote to memory of 3536	2120	msedge.exe	118
PID 2120 wrote to memory of 3308	2120	msedge.exe	120
PID 2120 wrote to memory of 3308	2120	msedge.exe	120
PID 2120 wrote to memory of 3260	2120	msedge.exe	128
PID 2120 wrote to memory of 3260	2120	msedge.exe	128
PID 2120 wrote to memory of 1672	2120	msedge.exe	129
PID 2120 wrote to memory of 1672	2120	msedge.exe	129
PID 2120 wrote to memory of 1236	2120	msedge.exe	133

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://medsenior.veries.com.br
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffe3612c188,0x7ffe3612c194,0x7ffe3612c1a0
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,14679060199850589994,9068419603820603521,524288 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,16065709365599165496,2268331316356491767,262144 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2632,i,6343364442416106953,6757109819632289373,524288 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:8
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,5931548971995433079,5266574836747258348,2097152 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,12318034723570630928,6731924041317713785,2097152 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,2672402047876387862,17604964530431884517,2097152 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,2564504074316178868,1101263752780173777,2097152 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3688,i,4386527772061826025,13460377738770800434,2097152 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,7623030362829490576,16035196222917387858,524288 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,13085760263566795282,4262465684190657744,524288 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,10787761687744684882,17670801000986225676,524288 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,10787761687744684882,17670801000986225676,524288 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6256,i,1606110793136998073,16134181001145975683,2097152 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,16072412320449756765,4407077848930392606,524288 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,13858559199789815948,7114304205099399352,524288 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,16765481348395316946,4041081152370773126,524288 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3048,i,10776861745377108420,5304441302861908776,524288 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=3044 /prefetch:8
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,11134739871308723663,16248919952403611294,524288 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,3982822024228259273,4395387432054773748,524288 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5688,i,1109913973731136036,11814976112063512564,262144 --field-trial-handle=2348,i,17871029450389766397,4164516593755883827,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1236

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2320

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

18948987-ca10-432d-b778-d3418e13fea0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\18948987-ca10-432d-b778-d3418e13fea0.tmp
Size 8KB
SHA256 e6aedc50685d59fb24f1a5fcc986f66e6387f79e77ae939025d6dc5f4692f7dd
MD5 214b17c84cca4ed7a8bb6bdb9da7aa01
SHA1 020e004e65a612f161b230aec47ef8f59ec7b3f8
SHA512 9b76d6961316a2bc9697bb67f837ef30d507fb0c85c86a16a9fe96e95120baf3e30ee389120f5468672780c37bee94ff37c6568d871bc21cdf1c498506026912
SSDEEP 192:EONr6nnHHQmiUyw5JPYcX5hQDP1wO01g8SJrzg3iq5aU6:EONr6nJjzPNX5+DtwO01gLJroZaU6
TLSH
T15B120B31B9A4EC7B5EE36595F08736139EA55127DA897BC0D5DC2E1C01DFBAC230D822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9dc353d2-9d0b-41b8-b63a-f6be18b5c07a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9dc353d2-9d0b-41b8-b63a-f6be18b5c07a.tmp
Size 21KB
SHA256 6cb331a0b2a6493bf70de868a7b3386297daadd3ab92b3bbc4158d339d68d1c2
MD5 09af2864fc9545def9afd6aeff27ab88
SHA1 594b499e48550ab6125dd8f46d3ac6c0d2c98e6c
SHA512 26c0f3122c3fb7a395a636f839a0242fdeb15552303d385cd00786075cd1035005b01708a0b93c315f7dcd87f0ed6288cb43e5eb4b44ef74d5033fc45edefa2f
SSDEEP 384:9iFiZcIazsNi8TUNTUlIloUOkdiV5KK2NQX5+DtwO01gLJr/ZatgOIwZOylLzoj:0FQyvwgukdAA6kDmOfLh/ZaXsGv4
TLSH
T175A26D3398A4C9BFADFB9B85F54A32039EB45063D6C5FA90E2DD6E1C009B5DC130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

30df120f-d11c-4c35-86e1-aafcfa7645e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\30df120f-d11c-4c35-86e1-aafcfa7645e6.tmp
Size 27KB
SHA256 480bb148dcbd76398374f220d378dc486fed495d6f9de9ba4954741ca6bdb503
MD5 79a046f6abfb52ee0e7c2a495f6b8b36
SHA1 79580217ee69b3762cf3e514915fc5a53fa007e3
SHA512 53a05fe7a28051696fdc2ac4b274900fa82883cb859e3ca98b836d0f58a43d2eef9d15855aef600dea7b3d977253e7187724fdca9509d7f4d83b9fad2fbd59dc
SSDEEP 768:pWyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXSrop71a:pWyYR7jWv3NpBu1ja/CL8OXJq
TLSH
T1C3C2E93B644DCB7E4FC01E9DDC5AAF9B3E9802C796548D4047FA984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3ea6a622-182e-465a-a137-3576687a25b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3ea6a622-182e-465a-a137-3576687a25b0.tmp
Size 10KB
SHA256 9973407ef8e5f35fff5cd87b889f3bc84c68ad4fe846679a37fd35008b30c912
MD5 a666dd032ff2c9209975f99fe0fab717
SHA1 013354b80e821edc9f38a8def6ed434dcc272ea6
SHA512 8973fbe1752dd1147057f37de1e6b35da1d06c512a9523e9d0250e0f58b82161905ff04051ed2ee92c0b1da20f3ce35505a13663d028874bb20c2ac3a9d15483
SSDEEP 192:sxZ9RuWD/fmsZkIdpK7HH66+WNGYYBFTZIg5DJ:sxZ97D/fmsZ94H3GfXn
TLSH
T15222C7516E38697B9CC7E219BB15BF53E6F95032A5D01E48AAFCC61C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6c655260-e6e4-4721-8072-4613859957cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6c655260-e6e4-4721-8072-4613859957cf.tmp
Size 10KB
SHA256 f350262ace0cb3b4c3630fa191526c6a2e799a42090d5e5a9bf5afc15bfc0b8d
MD5 66918d4bd3b23784c8d577af93e7faba
SHA1 53571baa9806fe2d43cd0313e813aa3f6b68a17f
SHA512 5e4f29c0fbea7c71b7d9a55fe197e74c56901e49604233ee67e382e6ef5b4d8787063ae05414fbe872553e6f862bc8e3618295e90661f8f87ebcf066a020edbd
SSDEEP 192:sxZ9RuWD/fmslkIdpI7HH66+WNGYYBaTZIg5ZJ:sxZ97D/fmsl92H3GfgB
TLSH
T1AC22C9516E38697B8CC7E219BB15BF53E6F95032A1D11E88EAFC861C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87e1c588-7cde-4a34-a913-29babce62622.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\87e1c588-7cde-4a34-a913-29babce62622.tmp
Size 9KB
SHA256 6c2a5a25596bdde4a9c4ab1c12c7e9a55e432be59533c2f45f80ad34b5b71c5c
MD5 ff2d13fd7c75e977ad92cc673020ad57
SHA1 771577b16316ae2118143219b8652f333e656082
SHA512 62f72de16a15baf7f72804b94566ef8cf7bc58fe75d7860e7ac38da749805c93823459acce9a74414fd221d9c12520a9e6ead09d3b72a3bc8d45c47459f537d3
SSDEEP 192:sxZ9RuWD/fmsqkIdpIiHH+6+WNGYYBaTZIgrJ:sxZ97D/fmsq9jHzGfg9
TLSH
T1A322A8516E38657B8CC7E219BB15BF53E6F95032A5D11E88EAFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 a2c57f4230ab607ccb9590d3eddd0fd43a945c5ec95869fd74513666ff292cd4
MD5 76725c72f500bfa9aa41d1fc665fc755
SHA1 2c6c387771ff3c188a4bbdbc8dea9c4fa256654f
SHA512 800b15584e2a2f6b1a8ef0f8fbe8544a29ae2a454fe168ca70578ea88c6b13c654bec4b7e6b4590d5457d35f35a160153fe0441574a83d64d59d0115bcfa6c57
TLSH
T129E078E414C9C21E51046487417C530CCF903A9FD2C0AA1E1700CDCC78474507BD1FF4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 3a289c301a6cf96278b1a7f889dae2434240b8cd57f5aec23d6c0f290a9d8a20
MD5 0004e1c96998919b836ea7c41d0a90db
SHA1 9dffa786701d51b78825f96b435c2cfe4ceb7a48
SHA512 78924bf0854abb55cbc899c628c21bc823fd31c458658405b01f34dc632765552c7a4e4699cfaddaf69018eac499f53828ab22c0cbb00a9f9cb863deaaa41c08
TLSH
T184E026F458CEC22EA608A45F8268578C9B80365BDBC0EF0E2F00C5C578C6040E6826A4
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 8e1e22c6b7203467db3f7165882de074413cb273ae605a0724878bf7137b6e92
MD5 85119ec71ad8e102c109f74f7c5bb676
SHA1 883e22956b31cca9df24cf7c46a5bfe79462a3fb
SHA512 fa2bef432939c46127f3274806fbfe97874b783a18637c8c3b04b5c8a408985c7cc80e78257a222735aeefe0b9dab07875533090860f74d309805036b574c344
TLSH
T12941FC00DE907391FBE40675AEC41EC37AB68EAC91431F013EB8C1BA6A8FB5B7140C54
MD5 SHA1 SHA512 TLSH

Submit Download

5a486b0f-7841-4d15-bbe1-716ceedc8aff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5a486b0f-7841-4d15-bbe1-716ceedc8aff.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1b076891-3a8e-46c3-a90b-78ba7840542a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1b076891-3a8e-46c3-a90b-78ba7840542a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

529fa8ad-473e-4b33-a602-c0163a181a22.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\529fa8ad-473e-4b33-a602-c0163a181a22.tmp
Size 1KB
SHA256 0bd1a7b21e0ab17b71abfde67581d0f30c20a12dc1bfbbb246cd194b315dc9fb
MD5 dce35f8c2a83eb0d6762076c88d82675
SHA1 2b3b5e8062e05f7c848076b4335cdd5a8f24f896
SHA512 55e74d38c1c4a63d3b717af3c64bbbda97edad83316488f1179c0d5ec734cfe8690d48e5d53122433453842093c419e247d8fc4fa94f497e63eda33228fa1720
TLSH
T1F821BBF3C7D5C55EC91516F05B28AE2BDE1D0A0542183C1D85D4EF2B93E2035E10299F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ca4f7730086c3866863340368459eec1c4ae317331518514286883ee9ac9870f
MD5 d881790cc726ce093eb765877968e102
SHA1 cc305ab30492d5c019b6d7b2f8681880d0571bd4
SHA512 8074de8600491fc16de9cec71f08856486cef257d6c4c2c6d6fd17d9cec3db83fd07a6348cdb02c7ffdf88839ac9ab74ed58d3a5a3463ebe5a2098891ec55706
SSDEEP 48:KglEZVnTHIbbcLq2EGqTba5iISuTK9K1oTxMDYBSqwyLdcRtfLPwbD2jISlwK9lg:Kg5T2KIUCyOgKv6MsQKVqHg
TLSH
T1C6915842307B524038BE254C42A8965A415132B3301DE9BFBFBD45A35E6FF445EFE8E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e825e0d6-0c82-42b5-b466-ef8c4cde9dd3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e825e0d6-0c82-42b5-b466-ef8c4cde9dd3.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f277cab9-89fe-4fda-a066-6271f5caeb38.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f277cab9-89fe-4fda-a066-6271f5caeb38.tmp
Size 10KB
SHA256 73e06f193fd7ea387b7cf8d35c04a970244d1f9ea7bb455f564fba18934a6a72
MD5 eb9f39bc53c7ebd1fd25ebbc0111ba80
SHA1 61c225b26de2172e2e7a0e81a67be2a9573dd99a
SHA512 9ac8e88fffb3f79a0e44fa3fc2eacabefeddcfaf0f701caa67bbc2dfd9d027ba511ba46b727318c00af948ea6126d80e7566d00b0a623a4c0a8e7e67e1e64ab2
SSDEEP 192:sxZ9RuWD/fmsZkIdpI7HH66+WNGYYB5TZIg5DJ:sxZ97D/fmsZ92H3Gfjn
TLSH
T12922B6516E38697B9CC7E219BB15BF53E6F95032A1D11E48AAFCC61C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fecf28d7-1745-47b7-b72e-e935062da5ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fecf28d7-1745-47b7-b72e-e935062da5ae.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

52e6c69f-204b-4ae5-9b50-0e8a0d38a15e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\52e6c69f-204b-4ae5-9b50-0e8a0d38a15e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bbc084ac-4e35-4ef6-b92b-1e958fd080a7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bbc084ac-4e35-4ef6-b92b-1e958fd080a7.tmp
Size 18KB
SHA256 d8a140bcd4c2e40a3afc6800eebe7ee9817c9cbb962e49440e211afca45a4af3
MD5 176295a67c671f64bcaff9e0a9b20aaa
SHA1 3f801ffa36e80cff1750e9d99e7a8ac4710e941f
SHA512 1b2d0e64d7f671ffdff901a5df0b2c061b49ddcc8461a32fc44a99ef8a6256313acac6e5244dfd096aca3394fc00484c4fce92bfebc5d3db07c660910fed66b3
SSDEEP 384:AZcIhsNaoUOkdiV5KK2NQX5+DtwO01gLJrjZatgOIwZOylLzoj:+hekdAA6kDmOfLhjZaXsGv4
TLSH
T1ED828E31A8749CBB6DFBA185F58732036FB45423E2C4ABC4D5ED6F1C01DAAA8130AD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c129e843-d8cc-436d-bf35-69ead6202cfe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c129e843-d8cc-436d-bf35-69ead6202cfe.tmp
Size 18KB
SHA256 81490b8053ae1da7eaa8fe9bd0711190945a38f82f759f59860c5e9ee994c40c
MD5 7cc38b1fe78b77f895ac3e7038bef488
SHA1 d4d7d7650e75b2ff1e31ad8d3ef2b55348911a14
SHA512 82eca8558da3983edfb15221605deb3858a6315c629aef485a30b3b8233efc51342c7b7ea61256a1e6c6e1768444d225a962796e1acf3ddae44a556f315407af
SSDEEP 384:bZcIhsNahUOkdiV5KKsNQX5+DtwO01gLJrjZatgOIwZOylLzoj:Dh1kdA66kDmOfLhjZaXsGv4
TLSH
T1C4828E31A8749DBB6DFBA185F58732036FB45423D2C4ABC4D5ED6F1C01DAAA8130AD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c5f231b3-9a5f-4dcf-8122-8539d5081951.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c5f231b3-9a5f-4dcf-8122-8539d5081951.tmp
Size 8KB
SHA256 48078e5c8480a4b2121491a1b644b2052a4fb80b31238460d28f3d05034b6edf
MD5 7ee32758f4a62626ef27d65a2585ab73
SHA1 fec03bef074648d2701c57f0917761d812f69428
SHA512 08a2a68ed4ab6043d2578fda774f95a7a595cafaca0d54c90b58fb35162fa0a7665007b7ee3af88e58a3cf1bf8381f427b74b93c3c76e9b9a2027a1fcdd2f3b6
SSDEEP 192:EONk6nnHGQmiUydJQYcX5hQDP1wO01KMcC7U6:EONk6nC4QNX5+DtwO01yUU6
TLSH
T17102EA34BD786C7B8EF3AE45B4873713AF952127E5942BC4D6E81E1C01DB69C230A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2b084b91-bd3a-4126-bd15-d6fee9f67862.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2b084b91-bd3a-4126-bd15-d6fee9f67862.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 db5d51298b687b52826aeb0fa34f2b54609408dd25a991ce79bc4b89a62fe23b
MD5 941c63058c02c4188961c0da9cd34736
SHA1 33e2a817b37a4fd3dcd986f83ff7a69633558d37
SHA512 0a6d5a7b0b5faebb41be07c49ab5ff483b2f75ce6b963159dcb7ab11772e4f0511acea764b5ac159d86e9b6f3081cae1d3ee3a12a22115cf323227ead13f3241
TLSH
T1C0412A58AAE91108B3B76F1A9FF7A86E447BB9332F07955E00110D4F0A23B40D961B33
MD5 SHA1 SHA512 TLSH

Submit Download