hxxp://brelecom[.]com

Analysis

user interaction
yes
max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/10/2026, 12:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://brelecom.com
Sample261011-pxmapavv4k

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2084	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{31A2081A-116A-4239-B268-906919588129}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
216	msedge.exe
216	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 4592 wrote to memory of 4604	4592	msedge.exe	84
PID 4592 wrote to memory of 2084	4592	msedge.exe	85
PID 4592 wrote to memory of 4260	4592	msedge.exe	86
PID 4592 wrote to memory of 4260	4592	msedge.exe	86
PID 4592 wrote to memory of 4260	4592	msedge.exe	86
PID 4592 wrote to memory of 4432	4592	msedge.exe	87
PID 4592 wrote to memory of 4432	4592	msedge.exe	87
PID 4592 wrote to memory of 5520	4592	msedge.exe	88
PID 4592 wrote to memory of 4576	4592	msedge.exe	89
PID 4592 wrote to memory of 5520	4592	msedge.exe	88
PID 4592 wrote to memory of 5520	4592	msedge.exe	88
PID 4592 wrote to memory of 4576	4592	msedge.exe	89
PID 4592 wrote to memory of 4576	4592	msedge.exe	89
PID 4592 wrote to memory of 4048	4592	msedge.exe	95
PID 4592 wrote to memory of 4048	4592	msedge.exe	95
PID 4592 wrote to memory of 4048	4592	msedge.exe	95
PID 4592 wrote to memory of 1108	4592	msedge.exe	98
PID 4592 wrote to memory of 4216	4592	msedge.exe	99
PID 4592 wrote to memory of 1108	4592	msedge.exe	98
PID 4592 wrote to memory of 4216	4592	msedge.exe	99
PID 4592 wrote to memory of 2052	4592	msedge.exe	102
PID 4592 wrote to memory of 1540	4592	msedge.exe	115
PID 4592 wrote to memory of 3944	4592	msedge.exe	116
PID 4592 wrote to memory of 1408	4592	msedge.exe	117
PID 4592 wrote to memory of 5600	4592	msedge.exe	118
PID 4592 wrote to memory of 5600	4592	msedge.exe	118
PID 4592 wrote to memory of 6088	4592	msedge.exe	128
PID 4592 wrote to memory of 6088	4592	msedge.exe	128
PID 4592 wrote to memory of 216	4592	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://brelecom.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ff841f0c188,0x7ff841f0c194,0x7ff841f0c1a0
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,15608522948395159014,378009875183283381,524288 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,8069176064076986393,3418892086744093505,262144 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,11753399080332758869,4382636140817879853,524288 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,17576515842125101514,5584301126590293347,2097152 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,10541449969369454518,4340826569450724565,2097152 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4984,i,8180263050143591983,4427419944477038446,2097152 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,15109729123354823573,7898432959863857066,524288 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:8
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3736,i,2785555359925924282,542985018686697470,524288 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,11172750489228092094,14294303513533771634,524288 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:8
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,11172750489228092094,14294303513533771634,524288 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:8
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,2879809529426828681,12129266038560564931,524288 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,533576743743822661,17448842397543596613,524288 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,6974619592967960238,3026302788381911786,524288 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2852,i,5765681511001205241,15625672906700182103,524288 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:8
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,10024867010052812259,6206505877418425641,524288 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:6088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3440,i,2865778650662816276,9291681787588898244,262144 --field-trial-handle=2288,i,13999004955184466468,11967996603989809987,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:216

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2832

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0c64f00d-2d0e-4020-a3a1-9dbc45991822.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0c64f00d-2d0e-4020-a3a1-9dbc45991822.tmp
Size 26KB
SHA256 87b8fbe1dbe53746b06229e5e95576aba755e62154b34f4a0560faee97f2fa0b
MD5 134d663af456aef698eb41a580bf1de9
SHA1 dfedfd137b67b4a4f06cb4d4b4083e01d5e4895e
SHA512 d579b2fa166a72dbb293c47577ac523615614d3ece27c57cfc768188a90f7bea30cc294265875b8b3f05d3327c968938a2b39ce9a9f30962523ec6d14ff123eb
SSDEEP 384:n0iFiZcIB3sNO+8TUNTUlI4r5mgrgJEpK2fLBVR8+cnVzMT6gL/7Iz1:PFQB3j+wgrG5BVR2VzMT0
TLSH
T10DC25B32ECA4DABBECEB8E99B74A3607DEE04123969C9AC4D5D95D1C00D71DD030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e5617ad-8ffc-4005-9dc7-1dbf30f1936c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1e5617ad-8ffc-4005-9dc7-1dbf30f1936c.tmp
Size 32KB
SHA256 2c4705995787ad66a60b9b73f65b3b5efe9467bf736a40ecb02b3afb27219008
MD5 ce6ed072aee2363e9e1ab369e275a691
SHA1 632e920eeb66dda05e7e3a255f38d7098fbbff64
SHA512 2a0240a28409816de86ed6ed8c8d2961920f886a9fb9ff0ca98df954802488633cddfa0f7adeb4688dbed64219be9ff82f31cf7e5e537e8153dcb635f10f7af7
SSDEEP 384:nRiFiZcIdz3sNO+8TUNTUlI4r5mgrgJ+pK2fLBVR8+cnNzMT6gL/7Iz1:4FQF3j+wgr85BVR2NzMT0
TLSH
T170E2B3F198D78977E8AE4B97A77D2E069AFCC113B5884984B7C85D0CCC961BFC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3b0d119f-a13f-41f0-a241-8d42dd26cf1c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3b0d119f-a13f-41f0-a241-8d42dd26cf1c.tmp
Size 26KB
SHA256 f8d5b0673229e2a615a47af37c0a436b4120a8193386024c606c52825a7a8fe3
MD5 e1c70d665575319b51fc89420091e1c6
SHA1 498bc6bc663b1b06efeaec6edaccdaf54282db68
SHA512 d1e3c9f53cf92087c7c00590d01137417fb7614876a18b8955f3ee99e9bfaf1a7df59fc86ef13e6cc21ebe9efd001a6cee1d2d37f8e2c71825197958975f5e99
SSDEEP 384:nriFiZcI63sNS+8TUNTUlIm25mgbQJ6K2fLBVR8+cnVzsa+VY9gL/7IzIop:GFQ63T+wgSzmBVR2VzhgfC
TLSH
T196C24B32EC94CABBECEB8BE5A74A7607DEF04253959C9AC4D6D85D1C00D759D0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9dbadf3c-5dd2-4357-895e-efb89ec7bf5e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9dbadf3c-5dd2-4357-895e-efb89ec7bf5e.tmp
Size 26KB
SHA256 1859842642d877d46274d485e0aae10f2da3e148db88d54cbb2df89545f8132d
MD5 70f297d0722fb343cb087a954d0bec19
SHA1 eca7ed83e6756a9f55667d8cefb31455aeaa6776
SHA512 052bfbb57e19edad6b393745cf230bf82051ef87b6afe22ce929eb02d44d5d921eeef62f24061368c2467c3f5cbd6b96c5e61356061501e6bbaa70ecdb56c992
SSDEEP 384:n7iFiZcIB3sNO+8TUNTUlI4r5mgrzJEpK2fLBVR8+cnVzMT6gL/7Iz1:WFQB3j+wgr55BVR2VzMT0
TLSH
T1F9C24B32ECA4DABBECEB8E99B74A3607DEE04123969C9AC4D5D95D1D00D71DD030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

6d2b2f30-c58f-4630-8711-f83ba5caabf8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6d2b2f30-c58f-4630-8711-f83ba5caabf8.tmp
Size 12KB
SHA256 28eea9ed11fc7300ea45cbea03018b61b284abde6881ec02a85579687a43032e
MD5 6f62e002199c570817543c5a2b278ee3
SHA1 bab355307a452a19db94d5b785e3099e56f1ce19
SHA512 1f33afbab01b1cf3e9ca2122db6404490f3914ea807f5d77234ea9b5547c1549c0d8e446a5e2709e15b9323f0895d2cca5d9cd91ab70cc3d0750fa6d6534ab1b
SSDEEP 192:sxZ3R+ko/fFs1QZZevjzodpVQYBHW6+WNeYAkL/YbIqoWYg+1Ig56/J:sxZ3Xo/fFs1OZev47HbJ/FsYg4cB
TLSH
T1B442F8156E38AA3B9CC7D609FA55BF53D7F91033A0905E48A6FC8A1C14E7ADD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

846f05f4-d27c-42d2-8b1a-7eaf0d6a4d7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\846f05f4-d27c-42d2-8b1a-7eaf0d6a4d7a.tmp
Size 414B
SHA256 3054c1bc25c67add769d6d2a2c87799ffa0a37d48c8f45515c5270215e64dc26
MD5 b54af8c2ed481dc2f2b0932f034804b4
SHA1 f17b0fd3b9dbc96076f101dcccf6cf06dd238691
SHA512 310124273b1a3f101cda9781e9af58d99d097d65da059e0249734364b1dd2dc3ff0fdf36b5f68d755c629add080a458cf791199cc69904045248f7c01a526286
TLSH
T1B7E02BF9C926EC3B08FC0B1850954641EB5103573B80948F3F3C811D8FF167A41869BC
MD5 SHA1 SHA512 TLSH

Submit Download

8cd4dba1-4a22-412e-9cc8-384cbeff48b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8cd4dba1-4a22-412e-9cc8-384cbeff48b6.tmp
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

953903a2-240d-43bb-875f-33eb8a9c6cef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\953903a2-240d-43bb-875f-33eb8a9c6cef.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 799a1a4836b6b1ba86647bd898c26cbf2302d49cdbffcf8ef39fb5639766d94d
MD5 0cbc353f1cafaf16a5efe7d8c74fd121
SHA1 5dc859f5ead4e856cf10a8238592988cc25d8fee
SHA512 8a6cd57fb530df796f93cccc43bded5a68869e7ba29d292d18851ae6293ab8f2faf8e7da7c36e8159f5f5aad2858947e552770d31b92a9b7b54b3ed863e807e4
TLSH
T1AEE0208404C4C27D534CF5CB1274A34CC382262EA6C46E4F3700C98A714574067C1555
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 58f3d536dc64c20d85af7e342c8bad7c4f9ef61bbbac7fd432c462f02f0a649c
MD5 0326ded5ce8aab707c6280ad01e3e61c
SHA1 35cdf8ac10cd660ff66bd1302031f142350d0b0d
SHA512 a2d03cd4b0e734aaecab607c00e372f20e1c1bf3c0b4fd8c233a718b58dbd1a248797bdee42fb13ec6997d894bff8efa6acf1e903995f5ed2739ff2d2f66a1b4
TLSH
T18F51D685566D30B8F3A8943181E131A3B6BC85B23DB31F5305E4F8BB9A0EB5F8D17080
MD5 SHA1 SHA512 TLSH

Submit Download

acdc59de-7797-44a2-b598-9effd9e1dd96.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\acdc59de-7797-44a2-b598-9effd9e1dd96.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3d422703-dc4f-4eed-ba1c-13fdfb22d404.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3d422703-dc4f-4eed-ba1c-13fdfb22d404.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

47e81b34-869c-4823-89dd-704f80a89b18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\47e81b34-869c-4823-89dd-704f80a89b18.tmp
Size 2KB
SHA256 4a05b2450a21fb7222cba5b843488e811710eec78d769de94cf1d3895342a256
MD5 d8408bd02f0e4544e1585d1283ae95e6
SHA1 bef41216eddd228d537adf23c2722b6b90034e51
SHA512 47f9349022c6d5d26937238aa7fe8c8c9919391e3fccad5d4d8b6e72c518c3934b92c4bdfc0e51ac008812d6654d371d04fadddc1fca5a736435169409f624e4
TLSH
T1E241B0F7C3F4867E891196F0AA146E1FCE1D0514531C7C5AC9D49F2793E24B1E101A5F
MD5 SHA1 SHA512 TLSH

Submit Download

849ea816-30ed-4519-92fd-5944f2dff15f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\849ea816-30ed-4519-92fd-5944f2dff15f.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 e312e7056d9e035412cd102c27103367da8132fd111cbc13cafcb18bb652bdf2
MD5 15aaa63f9e34a3f2db97b1aae38e7b5a
SHA1 f1a1af3ad7761b0affc781b91790960f68320ad1
SHA512 cb7e71f7aa0e919cdfbf1cd12bc0edd11a9105d1460fd8b061f65c1868a0081ed8dcaf55881a79aaf824d11396ab02cec01c5afd5d099d7f86eeca391da56904
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXsfFU:OtfFvpopPxrB4Rhfs9U
TLSH
T177B2371571BA021038FE690C81B6972F464232B33159E63B7FBD14A69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

cdd59aa5-615b-483d-87f0-990fd6523871.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cdd59aa5-615b-483d-87f0-990fd6523871.tmp
Size 12KB
SHA256 9d8aa14126f9eccb1f788f0dacc0a8002c7109287e2e0f8c8742d94999181b05
MD5 cd97b7b63a32d4d9591a04bbe3854bc3
SHA1 6fcbc0a699458349c4201f6b7d01ca5be84fd843
SHA512 abaabfadcf459a45b522ca19601273df3b92ad4322020163145eda51d41a432e646c9152a6b44fde0a8e9e38f15d6a0e7d93cb3a874e9a41c53f12677d482c45
SSDEEP 192:sxZ3R+ko/fFsMQZZevjzodpVQYBHW6+WNeYAkL/YbIqoWYg+1Ig56/J:sxZ3Xo/fFsMOZev47HbJ/FkYg4cB
TLSH
T1EB42F8156E38AA3B9CC7D609FA55BF53D7F91033A0905E48A6FC8A1C14E7ADD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ff6c1ac5-c3c5-4aa3-84e1-11065e0e0743.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ff6c1ac5-c3c5-4aa3-84e1-11065e0e0743.tmp
Size 12KB
SHA256 35c5bd520752d93ed9d8dda4cae2d843c7d93de5ec7d1504c726d0b298e6f718
MD5 4341d0d93229abed97187ab719fddcea
SHA1 07052bbc8205bd46ba4062d7bc59157dffbff888
SHA512 89c41842929ebd1ab70d6c2a1d85d326e44525c171db64b542b98b1bd4d15483114cfe973e991fe31169de9e03410b0306a04d82c4971cec467ab2317bdd5cc7
SSDEEP 192:sxZ3R+ko/fFsbQZZevjzodpVQYBHW6+WNeYAkL/YbIqoWYg+1Igj/J:sxZ3Xo/fFsbOZev47HbJ/FkYg4jB
TLSH
T1C742E8116E28AA3B9CC7D209FA55BF53D7F91033A0945E48A6FC8A1C04E7ADD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c642f9ec1dd42cdc4936a5bd671c9ccb6df06d7051e7b145edff91c0f24aebbd
MD5 0f9de702f98664db962c9080cdac7cc2
SHA1 0fa4f71607277994d11c13f8266f75a410ce539b
SHA512 37dd6bf4ed81ea7274bb8194dda5f86716acf9975ac65dcb218b6a5eb9ac1bda11d294a0d80ba1436d356eaff925b96cfbbf8db4561d50b1fb3bd172ad6f975a
TLSH
T131413958BAEA1148B3B76E5A9FF6A86E447F78372F46D45E10110D4F0627A00C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2052-207-0x00000283E32E0000-0x00000283E42E0000-memory.dmp

Download