hxxps://click[.]mail[.]virtualtrainings[.]co/?qs=ABp7ImQiOjUwMjcsInQiOjI3MDgsInMiOjEyfQAMAAAAAAN5H5rSj9634aKlKgtV26OW1-5EhDDnpsaajFONCHXtps9WxGu_CoCmuzPu1Qn9G_S0rIwkXkr8jQK9tjAP7EeGzAOEk_0-IDeYVvwGrYpw

Analysis

user interaction
yes
max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/10/2026, 17:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://click.mail.virtualtrainings.co/?qs=ABp7ImQiOjUwMjcsInQiOjI3MDgsInMiOjEyfQAMAAAAAAN5H5rSj9634aKlKgtV26OW1-5EhDDnpsaajFONCHXtps9WxGu_CoCmuzPu1Qn9G_S0rIwkXkr8jQK9tjAP7EeGzAOEk_0-IDeYVvwGrYpw
Sample261012-vra85aec49

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2848	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{2CC906D2-BADD-402D-BE39-226680414DD4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 452 wrote to memory of 2724	452	msedge.exe	85
PID 452 wrote to memory of 2848	452	msedge.exe	86
PID 452 wrote to memory of 2624	452	msedge.exe	87
PID 452 wrote to memory of 2624	452	msedge.exe	87
PID 452 wrote to memory of 2624	452	msedge.exe	87
PID 452 wrote to memory of 3360	452	msedge.exe	88
PID 452 wrote to memory of 3360	452	msedge.exe	88
PID 452 wrote to memory of 1032	452	msedge.exe	89
PID 452 wrote to memory of 1032	452	msedge.exe	89
PID 452 wrote to memory of 1660	452	msedge.exe	90
PID 452 wrote to memory of 1032	452	msedge.exe	89
PID 452 wrote to memory of 1660	452	msedge.exe	90
PID 452 wrote to memory of 1660	452	msedge.exe	90
PID 452 wrote to memory of 3752	452	msedge.exe	91
PID 452 wrote to memory of 2428	452	msedge.exe	92
PID 452 wrote to memory of 3752	452	msedge.exe	91
PID 452 wrote to memory of 3752	452	msedge.exe	91
PID 452 wrote to memory of 2428	452	msedge.exe	92
PID 452 wrote to memory of 2428	452	msedge.exe	92
PID 452 wrote to memory of 816	452	msedge.exe	99
PID 452 wrote to memory of 816	452	msedge.exe	99
PID 452 wrote to memory of 816	452	msedge.exe	99
PID 452 wrote to memory of 4908	452	msedge.exe	100
PID 452 wrote to memory of 4908	452	msedge.exe	100
PID 452 wrote to memory of 3008	452	msedge.exe	101
PID 452 wrote to memory of 3008	452	msedge.exe	101
PID 452 wrote to memory of 3648	452	msedge.exe	105
PID 452 wrote to memory of 928	452	msedge.exe	112
PID 452 wrote to memory of 1852	452	msedge.exe	113
PID 452 wrote to memory of 640	452	msedge.exe	114
PID 452 wrote to memory of 1656	452	msedge.exe	123
PID 452 wrote to memory of 1656	452	msedge.exe	123
PID 452 wrote to memory of 3864	452	msedge.exe	125
PID 452 wrote to memory of 3864	452	msedge.exe	125
PID 452 wrote to memory of 3404	452	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://click.mail.virtualtrainings.co/?qs=ABp7ImQiOjUwMjcsInQiOjI3MDgsInMiOjEyfQAMAAAAAAN5H5rSj9634aKlKgtV26OW1-5EhDDnpsaajFONCHXtps9WxGu_CoCmuzPu1Qn9G_S0rIwkXkr8jQK9tjAP7EeGzAOEk_0-IDeYVvwGrYpw
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff865edc188,0x7ff865edc194,0x7ff865edc1a0
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,4757298244937076847,17723693074076115023,524288 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,7866951821813314635,11274231200490800080,262144 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,17967754836509044446,13292374172852969756,524288 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,8754447967376018997,1799383904688289629,2097152 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,5563202443970978917,17967667471818295065,2097152 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4120,i,13935923120707605821,13894193996846354260,2097152 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4160,i,15519247825134690455,5812966571096726256,2097152 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:2
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5068,i,7902753254347305346,15800057823152789643,2097152 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,12786850550097616890,833093522538288618,524288 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,1729594453964742986,14005637510290202885,524288 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:8
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,3457839019205282950,942723746276539055,524288 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,3457839019205282950,942723746276539055,524288 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3556,i,17638113914371735653,11603467532227729207,524288 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,14736612834629444254,962678610846327296,524288 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:8
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,8109108982623867849,13772616553769391396,524288 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
  2⤵
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6352,i,6576951956088039873,14923672792561794912,524288 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=744,i,13810529358375425550,3892195041929939197,524288 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6116,i,7144226140241707340,6676746497282723938,262144 --field-trial-handle=2324,i,8853700279347941348,10359115556948460633,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3404

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2692

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1b1aa23a-c6ce-4f8e-92fa-0da986b5b01a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1b1aa23a-c6ce-4f8e-92fa-0da986b5b01a.tmp
Size 18KB
SHA256 df6f3a4e6a71d103a88158e8e53ac24706845c1c49c67f07fe874302101d7a63
MD5 1d0e7d82e9fbe02e5ddc40cb4920aa06
SHA1 b7bc73160fc1d530191858f5e9cde84fcaf4d47a
SHA512 16617592768223f157aca634666a581ce3691647fe7a047642ee04c80f8261d1c322af45f8ba532debc2f31fdcfb8ab9d280e9685a8f9c6bb2b918a7e26bc4fa
SSDEEP 384:/ZcIhsNu23ObQ32bPh//GJMNi4/uANEbEeUbI:XhDZ/ZNLJCbETE
TLSH
T10B827C76BCB4A83669A7A441F4873A134EB89477E7C56FC4C5EDAB1D00DA1EC130B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

214f66d5-3984-41a5-8e60-396922972c93.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\214f66d5-3984-41a5-8e60-396922972c93.tmp
Size 8KB
SHA256 f6b8df74b18e73b534ab265a25be324f115e42d9a38d31505aa10ed09359fed3
MD5 25782d4eac978696dacbf41168e5f95e
SHA1 870a0c24e0f1ada518ad2ba1ea36c3f327440c07
SHA512 0fe826a0080f843b96a5f895515ea4c4328c1f83df2f85c0b7915d8a77c35a9d6698682707a0846969cf506c684b88bf668cc1e46c2c43cdc225149d679653f4
SSDEEP 96:KqONk5QsjpfbUmjH5ih/cIPURHl8h4otop5waD6BKP4v+Y1xf//ojdhxZBmqBCH4:BONd6JUm0QmiUypqso//GBmqBC9kU6
TLSH
T19002D938BC687CBB9EB3AE45B0877B139FA41067A6952F84DAD92E1D01D719C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c8660b8-e6bd-4e26-9fe7-0d87146bed92.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3c8660b8-e6bd-4e26-9fe7-0d87146bed92.tmp
Size 18KB
SHA256 0feb5ae66c2b82cc5332c25940dc515065be1d69c17018b13b20c28809dc7514
MD5 4890b7d6dbd77e99e69bc59ce78c9597
SHA1 657e360ff82896bc9bcbc2e879d84b66ba39f260
SHA512 386d2d6aed1b956495d9c137c7b8c22c82745822bd9ed0756a44e0b83e9ab40438a5fd0950914206281d4f247e1722f76ca9968777b2d631cd7a4e728bfc54df
SSDEEP 384:HZcIhsNud3ObQ32bPh//GJMNi4/uANEbEeUbI:vheZ/ZNLJCbETE
TLSH
T152828C36BCB4A83669A7A441F4873A134EB89473F7C56FC4C9EDAB1D00DA1EC130B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4366acf7-dd9c-45fa-8f65-122c97b0aa95.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4366acf7-dd9c-45fa-8f65-122c97b0aa95.tmp
Size 8KB
SHA256 32063b387f8f8fe7bd92d8c75f8984588da1a9e5c0a0840084748792e14b6aaa
MD5 c4c997ea515fe2fa3ba7b0cde31254cc
SHA1 eeee1e392cb0ee9add43bea1ed588c9893981030
SHA512 b34ef32ace56df0d8183010a030a10908b89bf364809d83f2634321d282f22446f9909ebf2254296276b28731145b4c5bd0bb10e68e87ddce0c80d4d0945a8ed
SSDEEP 96:sqONkXQsjpfbUtH5ih/cIPURHl8h4otop5w5BD6BNP4v+Y1xf//ojdhxZBmqxxLu:3ON/6JU2QmiUyMxqNo//GBm8ENxOqZU6
TLSH
T1D5120A39B8A8BC7B5D93A941F0833A135EA44227EB897FD4D6DD2E1C05DB1DC130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

3b4764d9-6f4e-4209-9727-0f67d2564bb8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3b4764d9-6f4e-4209-9727-0f67d2564bb8.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6cc4d7ce-ee60-4540-9df9-a9948346ceb5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6cc4d7ce-ee60-4540-9df9-a9948346ceb5.tmp
Size 10KB
SHA256 f142ddcb7e673369e7dc1765ecf2239009bdca42f25b975a70d24a3b6739f77c
MD5 6018874ae031aadb660c2c5fcf0ead2f
SHA1 12073d29db15b4ae9e289dc37353bb05ae9c9a8b
SHA512 099b19e679b90661bc1725753c71dfdacb3e27e286e317ccb4f523f5c6bb840389b3191b5aa4e8659eef97a4605b058f26125a33cca2484bc21c7a5b6c9abca0
SSDEEP 192:sxZHRbW2/fesECPIdp9oHW6+WNHIv/Y36MkiFIg5gJ:sxZH82/fes7g2Hbo/X4C
TLSH
T14032C8567E34693B8CC7E609BA55BF13D6F95032A1D11E88AAFCCA1C05E76CD130740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ad67667-0630-4336-9d28-7e4985db5785.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9ad67667-0630-4336-9d28-7e4985db5785.tmp
Size 10KB
SHA256 7f54142c5643be5687d969e532106c5db445314049cd621c941796f4bee9633a
MD5 6000b76540ce28842b591725258e75be
SHA1 dcab3affa9cff25e858e871a57f20dc25cfb10dd
SHA512 446c2532902906c1aa29c9a2549a1fab4dc79ebad7d4ac92cc5f1bebd0f156b57c556b7c30e2211aed0b52c97dea3c71b757b79fa50d54c92eaa57d0f35a59f3
SSDEEP 192:sxZHRbW2/fesuPIdpvoHW6+WNHIv/Y36Y36FIgrJ:sxZH82/fesugAHbo/Xn9
TLSH
T1BC22C8167E34A93B8CC7E609BA65BF13D6F95032A1D51E98AAFCC51C05E66CD130B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 b13e52c4418972f2f77259119c6c3f4c8719bbc304ee87dfaf8629220b7a35de
MD5 f2b6d46c9687cd8e4d8f9e59c3fe52ff
SHA1 5a266146f67701726313d5615852693387ca2b6b
SHA512 64c417e83bd0e837ef15f3cd0eb615843be5bc396000add5185a66518a58097f4216a0439d3f7115f05c28a75d79f92a4d789d59c8815c632b273846e89ba92b
TLSH
T1C1E026C819CAC32EB7C8648702A8B30CC7C02A9BD7C0690E5F04C989B485E80A3DAE90
MD5 SHA1 SHA512 TLSH

Submit Download

f_000060

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
Size 38KB
SHA256 a22176398ce6cf99e4ebab76097b555e91afecb6f3209a66025d6afbe8c070e1
MD5 4df60744cb781f01326e5b4d76c6bc7d
SHA1 3a077ee05146fbae55333e049ebc4f795527cf2d
SHA512 45a4c3eed65bf6d8196351f286bd4e124083a0968424d5daf0140ffec7a4e469d7bf40b8c0e13c832c89513e9adf29a794e71a81970925cfa4a6424c17fa5591
SSDEEP 768:dH/3sTtT+/XUx4TIGCacFNOqgnShDammVQ9PciUeFaj+Qdr1+hLDa67E:RUxT+/XIuCTFNOqgShDeVmPciUea/X+S
TLSH
T1C003F22513D06F789D655B3F11EA2661A072F0A86BF0C5E641C96317463FDAA0CF7CE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 629e120184587b42f650856318be3c918d32e60d932a3f2e609ec7ec407bc398
MD5 86f797dda053b6cd0af1a99cbc80a7f9
SHA1 c4579389ba47c7cf296c0570d6e189c69de93081
SHA512 c85f98cad207a221b248d5f2d7a0c8357baf9f10271fefb83ac30de343e12a14f4b82ecf864ea09eaface0b24b6cdd5be8a8d99bb4e4b4d7711633c9be52e254
TLSH
T1BE7172A05FA1A594FBA487F4F0D1197332B06462A8830F5F0593EA7DE8273F954943AA
MD5 SHA1 SHA512 TLSH

Submit Download

510b1762-d289-46bd-aa57-a420486b9f26.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\510b1762-d289-46bd-aa57-a420486b9f26.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

32faf958-9897-41b1-845b-21165c404f8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\32faf958-9897-41b1-845b-21165c404f8c.tmp
Size 3KB
SHA256 35ce166b254ec8c1a3664843b8f95c178da5f13ceb144f8313e4494d9ea66bbf
MD5 1d03135ec2f0d4717e3e84187476c72b
SHA1 552cff78c82c8f05192e1f3b60d2a1a93b2caff9
SHA512 087ca593c26ec8f79e16d7ec008167c277fb207478aa5e683c09c4b5a6b5e4263b23dad954b6cbe16f4d5d20db0f6c953e4ea9357af73f50e2ed18628317c70b
TLSH
T1ED6156F787B0867ECA1155F0AE142E2B8E6D0124577C786AC5D5FE96A3E30B3E140A4F
MD5 SHA1 SHA512 TLSH

Submit Download

54ffcb7e-7a9a-4c60-b0e9-94e310cc2c3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\54ffcb7e-7a9a-4c60-b0e9-94e310cc2c3f.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

76e53506-1542-4b1e-94fa-d9d014833c69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\76e53506-1542-4b1e-94fa-d9d014833c69.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8315b235a69ae52ff4480825cd76bc2e5c99bc24e7e934cd5d83943d1d6183c9
MD5 e6236a59b2ed20535b2aa3b8c8f01082
SHA1 823aa87e70e8f931322c5521898cc8e63cf3de96
SHA512 a3cd8e24a45c909bc8c6df78805edf16205800cd14c376a6dadec6802223cc055d1dd8085bb915cd6f8b1562dac4b365503c36d3fec63e7c2bd72656144e2bff
SSDEEP 96:Kg1SK+Maun2KIQYy7mSU8M2a8N9MS2KETMY2IKyFoynPJi3DB8:Yt9dR1
TLSH
T1A291519075AB121938FE654940B5C62B425131B33028F93F7FAE50A28E6FE445EFE9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b2cf8061-835b-4f4e-acc6-22379e615016.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b2cf8061-835b-4f4e-acc6-22379e615016.tmp
Size 27KB
SHA256 8cc1acdd7c5639a3ee356febe608d3f6792aa2edd31696dccfba1e0ce534e09a
MD5 3d22555d8342c6a9d05cd33a0fd2c5cc
SHA1 5015eb3fc8caba894128a44abd34957007d3a144
SHA512 f1043b6da82128df812c53ed1ff15a1ca2ee87a324610fcbd4189b76e9df7175f6498e500c517be834965a551cc9f24dfa4cc6910596236f86117513b3e5e560
SSDEEP 768:IKKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/hro01:IKKlm7QWvUYe0u1ja8/L/E/a01
TLSH
T179C20A3B640CCB7E4FC05E9DDC5A6F972EA802C7A6588D4047FA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d61f8ca0-3310-4860-b00c-7b88fd2f11a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d61f8ca0-3310-4860-b00c-7b88fd2f11a2.tmp
Size 10KB
SHA256 c76ccdee1467d42985b56131c713bd5bf442398e900554be0b4abc655c97cc96
MD5 23e47b0a9359683a280012f5c2650573
SHA1 3f151d4d7521bca79fb7589e88512ec50c5fe6ce
SHA512 57d09d40ccb5b10211389cc1a99e78982e3585ad13cabc36e5fcd8a2c61be53fbf3af8c6b3c5bcd0e6284bd6539c26df08c48d2c0ca76914a8d2f87413db4a23
SSDEEP 192:sxZHRbW2/fesECPIdpvoHW6+WNHIv/Y36sT6FIg5gJ:sxZH82/fes7gAHbo/XpC
TLSH
T16122D8567E34693B8CCBE609BA55BF13D6F95032A1C51E88AAFCCA1C05E66CD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f577765f-2337-4dcc-ba72-4307275100cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f577765f-2337-4dcc-ba72-4307275100cc.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

fda2b6d4-7393-4d90-a6c6-73aabeeaa0bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fda2b6d4-7393-4d90-a6c6-73aabeeaa0bf.tmp
Size 10KB
SHA256 87a2fb7fc97b36451c3512555d48139f6bd9db004c50ba9c73c052ef43b783de
MD5 5eb2986f221a3b6636ae9237f97946dd
SHA1 824014f287465043b946b8cfbd5e75fbc36d4dfd
SHA512 71cc25e5673c17fed34d7d3831cce69ec853a28bb422d127fa4da45953d973ba610b41160a5f9342c3091b09262ef8ca204adaaf3234062728e239c12ace3a74
SSDEEP 192:sxZHRbW2/fesEoPIdpvoHW6+WNHIv/Y36Y36FIg5KJ:sxZH82/feshgAHbo/XnY
TLSH
T1A522D8167E34A93B8CC7E609BA55BF13D6F95032A1D51E88EAFC891C05E66CD130B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4105070b-27a6-440e-9218-7978aa5aec9a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4105070b-27a6-440e-9218-7978aa5aec9a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

baa9dcdf-a863-4546-861b-16f1fa4ab0cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\baa9dcdf-a863-4546-861b-16f1fa4ab0cf.tmp
Size 25KB
SHA256 251358b9ef916172d57c4c8cdcbbd9917731f2e33113bebafb59ff4e1f19324b
MD5 0787a4c4f60e6c5f0814604b4adb2ec0
SHA1 f70b4626aaff964c9e97c60381f0e4b927239859
SHA512 b43d3ef0ec05b0a715446764ffee797996ae6e1677164fe0a2e604539e7db36c052559c3ccab1bd5d2734ef5bf18955c8de6ae9117ea7469656c9c87a2280061
SSDEEP 384:IiFiZcI9zsN+8TUNTUlIl23ObQ32pPh//GJoNi4/uANEbEeUbI:TFQFnwgZZ/bNLJCbETE
TLSH
T149C208F258E79436D9AE5B43A77E2D134DBCC063F681AA90B7D8590DCC960BFC30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9824e51f-548b-4ed3-9625-6e44f292add5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9824e51f-548b-4ed3-9625-6e44f292add5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3cb43c66edd49062b3655dfac5147e9f2deec9d1dcdd602b4339b6827c0db8dd
MD5 75ff795aa320ed1d9a171655368849a0
SHA1 61542347abcd82cd7655a72e2066c046c5886430
SHA512 d02fd8463a76965c83f1626fda8f8fc03431d0c02fb8343229c6eb381d034e400c4d9e120d264ebcd9e4eeae9da892e3ae61800cf1b059710677024c48628368
TLSH
T113412A5CBAEA1148B3B3AE5A9BF6A86D487F79733E06D45D10110E4F4623A40CC62B37
MD5 SHA1 SHA512 TLSH

Submit Download