hxxps://siemens[.]com/de-de/community/

Analysis

user interaction
yes
max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/10/2026, 04:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://siemens.com/de-de/community/
Sample261014-fdvnaaee48

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4744	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{8A759A3E-0DD9-4770-8CCF-C2DCE38EAB65}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5552	msedge.exe
5552	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 4904 wrote to memory of 5152	4904	msedge.exe	84
PID 4904 wrote to memory of 1132	4904	msedge.exe	85
PID 4904 wrote to memory of 4744	4904	msedge.exe	86
PID 4904 wrote to memory of 1132	4904	msedge.exe	85
PID 4904 wrote to memory of 1132	4904	msedge.exe	85
PID 4904 wrote to memory of 4868	4904	msedge.exe	87
PID 4904 wrote to memory of 4868	4904	msedge.exe	87
PID 4904 wrote to memory of 1804	4904	msedge.exe	89
PID 4904 wrote to memory of 2328	4904	msedge.exe	90
PID 4904 wrote to memory of 1804	4904	msedge.exe	89
PID 4904 wrote to memory of 1804	4904	msedge.exe	89
PID 4904 wrote to memory of 2328	4904	msedge.exe	90
PID 4904 wrote to memory of 2328	4904	msedge.exe	90
PID 4904 wrote to memory of 1896	4904	msedge.exe	98
PID 4904 wrote to memory of 2544	4904	msedge.exe	99
PID 4904 wrote to memory of 1896	4904	msedge.exe	98
PID 4904 wrote to memory of 2544	4904	msedge.exe	99
PID 4904 wrote to memory of 4148	4904	msedge.exe	101
PID 4904 wrote to memory of 5776	4904	msedge.exe	111
PID 4904 wrote to memory of 5616	4904	msedge.exe	112
PID 4904 wrote to memory of 2228	4904	msedge.exe	113
PID 4904 wrote to memory of 848	4904	msedge.exe	123
PID 4904 wrote to memory of 848	4904	msedge.exe	123
PID 4904 wrote to memory of 3708	4904	msedge.exe	124
PID 4904 wrote to memory of 3708	4904	msedge.exe	124
PID 4904 wrote to memory of 5552	4904	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://siemens.com/de-de/community/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x210,0x264,0x7ffa4504c188,0x7ffa4504c194,0x7ffa4504c1a0
  2⤵
  PID:5152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,3882388024497694157,14323463855629150137,262144 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,9067030692927806730,12055405309794659039,524288 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,8325536276652424111,14297822247204575244,524288 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,13290032313890461068,5285279484214905865,2097152 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3504,i,13374281123545768186,13251329254937568316,2097152 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,8401894536400319285,4627570785462061822,524288 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,5750577314396268605,5668108561437939080,524288 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,5794919196341034563,10996580365468294020,524288 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,5794919196341034563,10996580365468294020,524288 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,6106601296265705312,9446499198161703247,524288 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,18062819983729284318,1790581628168537667,524288 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,16640644640753715196,9331273677273368198,524288 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6324,i,2752103974486327344,12417849461190720243,524288 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=5736 /prefetch:8
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,59543844940701194,9109252429178126854,524288 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5124,i,5434995158110519123,6287053954820006244,262144 --field-trial-handle=2248,i,7282112110384630434,18430142859211828771,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5552

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5364

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2424

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

066af9c5-91af-4167-97ab-38b4831b7ad5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\066af9c5-91af-4167-97ab-38b4831b7ad5.tmp
Size 26KB
SHA256 9fea8264d88bebb7b334b8d71257b20afb50d8807349e039c3de7738c37e5184
MD5 04287658ee39e37db49349b334be6b8e
SHA1 53c46e3421827651a2128528dc8dd0ff135675df
SHA512 d3ec3f7c4859aea2adc74598bb685cd5ef4042aa4f07d14146162f32430c1b0da27f819442836120af7e9f7d603fe032d781811ebaf41abdada1ba27914d9a7c
SSDEEP 384:n3iFiZcIs3sNC8TUNTUlI4gaKMO93XRw2fvBC50mvy1s2uvq5iBPJAxJ7ogL/7I1:yFQs3jwgMuLBCm68s2/iBPkJu
TLSH
T11BC24A72ECA4DAB7ECEA5B95F74A3A03EEE04223D98C5AC4D5D85D1C00975DD030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3b2607b5-7d68-40c1-860e-d155a395cd1c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3b2607b5-7d68-40c1-860e-d155a395cd1c.tmp
Size 26KB
SHA256 edbcda6f21f470e58e67efa41c5baa4208981e912565e8528afbfdbbe883338f
MD5 65c475b6842b1b4fb7943282aed6243a
SHA1 c1c4ed00137421b5bec4a77d50ea186bffb382a4
SHA512 8aeb67bf34e5e82b49b6faa0d5d095112ebb8e5fbd18f3f21c98f31a01ac370f9a9125341cabd4acd8f37339d8248a113afd40172785f2a248b3aa1221a1c548
SSDEEP 384:naiFiZcIs3sNC8TUNTUlI4gaKMOj3XRw2fvBC50mvy1s2uvq5iBPJAxJ7ogL/7I1:RFQs3jwgMALBCm68s2/iBPkJu
TLSH
T1C1C24A72ECA4DA77EDEA5B95F74A3A03EEE04223D98C5AC4D5D85D1C00975DD030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

621f2712-c672-4dac-aa0c-1964405c73e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\621f2712-c672-4dac-aa0c-1964405c73e5.tmp
Size 26KB
SHA256 c529515d651617edd6a206ed34be64622a717924d5d422e9501e5ec4810552d1
MD5 2fafe50051d932ea0da8422ac6ef60ab
SHA1 c3ec8dd75c3a112e372ebc7882049aef92f7f572
SHA512 fb321fb033acb47bd5646d0aa00b665b942057fed62b811e39509f2355045c57174b1332ae717647460e0f2fd67f3328be3388b21e5e16e4fa63cb22b307b4b3
SSDEEP 384:nQiFiZcI63sNm8TUNTUlIm2aKMYylSw2fvBC50mvy1s2uv3iBsa+VYBRgL/7IzWP:rFQ63zwgcvOBCm68s2iiBhgHP
TLSH
T180C23A72EC98D9ABECE64BD5BB4A7603EEF4425385CC9AD4D9D81D1C00DB59D030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6c33deae-d02f-4234-abb4-6c7394b3bcd4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6c33deae-d02f-4234-abb4-6c7394b3bcd4.tmp
Size 31KB
SHA256 f35dd171bdb7d9f7f825758e14b2cd521e1e07742d86fdb901c061cdc00a1989
MD5 f1a50d4bc8453a5857ee662931fd154d
SHA1 dfc9a91c3845c3e3220b85ae9f3534eccf183bef
SHA512 f248601df492048a895f32609d08fa7949d47a9565f61d621385870c429e00933ffbdf0d80457e7d03bbd29846f772bdee85643eccafc69e9f4cbc89220a23ab
SSDEEP 384:nRiFiZcI2K3sNC8TUNTUlI4gaKMOj33Rw2fvBC50mvy1s2uv35mBPJAxJ7ogL/7q:4FQN3jwgMsLBCm68s2UmBPkJu
TLSH
T150E2C2F198D79977E89E4B87A77D2D029AFCC113B5884A84B7D81D1CCC861BFC30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

0f0fd4bc-1acd-4dbb-874f-30ded85c8586.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0f0fd4bc-1acd-4dbb-874f-30ded85c8586.tmp
Size 12KB
SHA256 fc31a52416646287fac1e34e94d42b16c50f88d964166104a6a869d519ac13d0
MD5 8f4d6ce235db6e231ab808aca33c08f8
SHA1 c77e51907bd3e239737dcaf6d147c46bbb615e74
SHA512 e6f5039291a0e6ce626dfc6d52a238020cbee3efd33d53f68e3c316fd454f8e162b19970db1a4fc57bfbf933cf992d937d730cb2c4a898113282775ef11c46a6
SSDEEP 192:sxZ1RwkL/fwsHaQZLr8RzodpcKHW6+WNgJm/Yo4lySw5IgjtNJ:sxZ1lL/fws6OkaPHb///SCjtX
TLSH
T1C042D815AD28A93BCCC7E219FA55BF53E3F91133A1911E44AAFC8A1C14EB6DD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3370f050-3be8-4023-a576-46104f22a507.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3370f050-3be8-4023-a576-46104f22a507.tmp
Size 414B
SHA256 f3b9444f7574b46f13363b094e8031f94056a6da2169f908f6c8dcee24dd3c55
MD5 a3604b786475cca1759e05bf6e6e7940
SHA1 7e8afbdabd7a64ae65fda5960511a0c8f44b26cf
SHA512 aeb353214355536677f4854d6ced23a57d90278efc6b2ec5b0b7248afb63a2a23aa810da2948471d32fc8acf251cf9c9c8a65fffd99b60f2d9b21beec7ca5f6e
TLSH
T182E02B6AC815EC3B08FD1B7CA0944645E70213A72A419D4B3B3D80088FF09364685C6C
MD5 SHA1 SHA512 TLSH

Submit Download

40ae919a-9955-4754-8d12-ac65b21526cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\40ae919a-9955-4754-8d12-ac65b21526cf.tmp
Size 12KB
SHA256 bbd8525b71f5f43be558de4f050bd4a73c1be421173f31ecbeeac99416fa1684
MD5 b4b4ddf2890cf5837e5daee009cfb9ae
SHA1 92f33299726ea230e88caf9a279ae2c7a3f53c69
SHA512 cff9976c00c3ed96966bf3676baf354f5ee96245c32d4ce660f9ab5e3d3e8e05ca8b31d352f5db33a429b0f423848a05fbae29bf012a2d41bd7ac1089a44d07d
SSDEEP 192:sxZ1RwkL/fwsgQZLr8RzodpcKHW6+WNgJm/YovlySw5Ig5htNJ:sxZ1lL/fwsgOkaPHb//KSCjtX
TLSH
T19342C915AD28A93BCCC7E219FA55BF53E3F91133A0911E44AAFC8A1C14EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

42a5ddcc-3945-4173-9cf1-6514b07bdb9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\42a5ddcc-3945-4173-9cf1-6514b07bdb9c.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6304f023-4f45-44f6-977d-f3f8023bfc37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6304f023-4f45-44f6-977d-f3f8023bfc37.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 60718af896743d03efd4f754e95d4983c36b180c4eb1e63156d1effa55d71f14
MD5 d7f458260c9a000b7009aae1f964c9b8
SHA1 cb224928d1e9897b43c4ad1246bc6bba636a29ba
SHA512 f0d9f25c29f28b7c809b51dbe5619417fe4330fe80874af68e476cde9614961586f9fa2e43ccc175d57694b2977c93fc7d91a02149798a9e6bde1189b5e821f9
TLSH
T1AFE07D880AC8C23EAB08F44B0168570CC38037AAD3C0698E1F40CF88B00FA70F7C6E90
MD5 SHA1 SHA512 TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 68KB
SHA256 616fb6d532c1a2357c688d924047ab1265768fcb5336ff6afa22733ada1cf01a
MD5 5a51b3960487eac8ea626e24d4162084
SHA1 e63826c77edf48cba38533385e28bef9a2b6a001
SHA512 cba27ba59c1e80ffaad47d22b08dbd025e9b3d419e9689f646be8f0d101bca8135dead374ac1311f18f1edbd42124877eabe41881d56b86a52d13c693d812840
SSDEEP 1536:T5UoF9/WBvOtWHrRdS04aMf4Pbdmo/2qsn1Z4BXXdYx8WO5F:T5lf/bYHriaMOMoY1ItYx8WOz
TLSH
T19063129017935058EF7F36BE78019DDB8A55B51EC5B100FF386EAC354234B98811EEE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000073

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
Size 68KB
SHA256 369cbdc0a138e2e683709abdb00a407e4d3e4304bb70f776eaa8d5738473e15d
MD5 1c558d9016458827845d81c2471719e8
SHA1 66bafbca7b16a18f7a79be6b4630fae7e28986f7
SHA512 c99b72aebd5fcb6e61b750f2cd300d75a5c1245dd5c8c860bd173f66519e6756d03b9a235d647aa0aceab34b8c599c5feefd59efcfe6b217582238b8a44d6390
SSDEEP 1536:hR2CcwYV6QI2PAO+M5dZG+TT2Tb9Fy+lRD0UvYKDCw:7dYV62OM1GUU90pQV
TLSH
T1E06302169C17CD69C9E8217021E20C4F2FABAD4AE5C72098E5D7F2C2D83A9BFC435543
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 2f5530364167fa94a42c0529284a117201b6f5a6de62ccdb6ab06edb7a93d881
MD5 9eb119cbfecac11223f44d39acf9c8c7
SHA1 e101b6a62df863edfcc9bfa2754707a6bdf160b4
SHA512 55393e37a94b0da947ebf6a34a73481de80db1a08acf074705eee8acc26d93966b0819ffbea5b9832aa92d31351106fac5529a5142b4919109058e3003d9f2b0
SSDEEP 48:le3lC+F9r0ZB9DXt316fRzznLfejG3mAhBYLaO0UN5RjVWSp1kHmR4ZthsSbo1zI:leyYaJMc10kgLn8Hx+8eeb73Z5G
TLSH
T1D29175405684D2F2FF2C2C70A6C2654F363AD1F999832F7F00F0E6B9E742BA2651C844
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b742fd1433eaf640bf6b36b99c11f38804a8ae5a5a991dd2fccecb1ddc7ddb2e
MD5 a904e0d13ccb65e5f7b73f97368e1501
SHA1 1bca420c7c5add37b1b172e1f16e9ec9ea2cd475
SHA512 8697e2a72bc4dc8911d5db33c1f48bde375495a9063cd26ff65f7dbb10ec7d9087c9c7613650c7a991ee3ce1a96a2d759ad9724bd4fa92dc7391efe0170478e6
TLSH
T10B6184405450C172FF6C2C70A6D2A287363AE5F94D873F7F00E4CBBA9B86763640D894
MD5 SHA1 SHA512 TLSH

Submit Download

75a92718-6d4c-4d43-b8ea-499fb4698bcc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\75a92718-6d4c-4d43-b8ea-499fb4698bcc.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0d5a760d-bf51-45da-8a57-5a23a9aae920.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0d5a760d-bf51-45da-8a57-5a23a9aae920.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

36fcda1a-41ff-4934-8ae0-2dc2107289a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\36fcda1a-41ff-4934-8ae0-2dc2107289a2.tmp
Size 6KB
SHA256 13dc567f3f816937268aed81656b5c2d4044fabb70f2062a1f4129b99a0bc64a
MD5 c7455e9b979f8cc4e2bb99363b6537cd
SHA1 23fea71834a70396d1c3ceb550f9bfd838b4919e
SHA512 d95bcdd3d6bba2d7dd67d1f6d57d77870828279ff64bd65d5cfb8e1c95ab322566f0f951763db3a14979eb8696400cefbb56f3239d780a8a8105ad289e411013
SSDEEP 192:D1eKNY9v7vC7vYvVaa41EXuVUUXe/1AnbTxuNbqWPTT:D1eKC9v7vC7vYvVaa41EXuVUUXe/1Anu
TLSH
T113D19BE383F4831DC91256F0FB542D1ACF2D096453287C6689E5AF4B9BE2671E242B1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75a94c4a-e1d6-43de-aa57-491eb181775e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\75a94c4a-e1d6-43de-aa57-491eb181775e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 ddd09d65d5c8c10740795cc7a05c14e86c11b0f1f614c801574384eb9bde17e0
MD5 ea2e0a536d4571f5c478cf3f89f700ee
SHA1 7d9bbab030133a633081b30e8f259cc61c934b92
SHA512 58aa9789586087d25d26a255ec3f7702035cabd0f313552b68119d551f198f4cb8f1fffc80f54513f69fb86edc235d759765962f29b8708de59573b6e0831a65
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgz:ST/2dXOJhJlpfnpp3tNXVrN3WRFk
TLSH
T1EAB2011571BB421039FE391891B6872E064231B33119EA6B7FBD04B68E6BF085DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

bcbbf6cc-89c8-4f9e-bdd2-bf082508470d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bcbbf6cc-89c8-4f9e-bdd2-bf082508470d.tmp
Size 12KB
SHA256 d702b1f62eaf0111008c904aa6d34e5d0530a31862702b458baefe5f0eef50af
MD5 63fd86fbd2c78a33ffd59ad9ff87411c
SHA1 ccb8b35bb2bb18ecfd20870dbc20dc9730a256e2
SHA512 6d8e05bbb6822169df50923918e5ba8205d71fe715da652cbe1fdaff85066737e312b742b6ddb5900cee50ac52f73f330da96bf3db2858b5672753c4ea970b14
SSDEEP 192:sxZ1RwkL/fwsLaQZLr8RzodpcKHW6+WNgJm/Yo4lySw5Ig5htNJ:sxZ1lL/fwsOOkaPHb///SCjtX
TLSH
T1CA42C815AD28A93BCCC7E219FA55BF53E3F91133A1911E44AAFC8A1C14EB6DD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 55acc99ee22997d1174b1949fe1e253ae8e2833aab9601f6175e7805aafd0e63
MD5 626b0e26aeb2d09948d4d0b92203aafc
SHA1 6b588e38b02c27e488e8302dc1bd150f70fdcf47
SHA512 4d774b76fd606c80e98c614ec1b51addca0e0e6b12ad04c07fc8836c83c563dc2fd7c8219cc59c84a10c9178659b579b064585592c8c674ff38cb660146822da
SSDEEP 384:nQiFiZcI63sNr8TUNTUlIm2aKMi64w2fvBC50mvy1sqFbsa+VYBRgL/7IzWo4:rFQ63ywgctQBCm68sqFbhgHP
TLSH
T19EB23932EC98D9ABECEA8FD6AB4A7A03EEF4016385DC56C4D9D85D1D108759D0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 68b7f463352ac92d4fce7225105dcb8755fe99e7ddacae287a80410b30348183
MD5 3b38bcd4bf031d44389ce982e3dc4516
SHA1 fb37de89f209786ab3f48a1cae7539997cf82ceb
SHA512 508dc665f4a5efeb95f4488b3bd4d49ebb36398db7ef41fb7a95660a96969147de778cf225b0eaf937a781442bdb8a431cc178503b2f8f8f00f639db8ebc55fa
TLSH
T1BB410858A6E91148B3B76F5A9FF6A96E487FB8772E07C45E10010E4E0A62E40CDB1737
MD5 SHA1 SHA512 TLSH

Submit Download