hxxps://genesyscustomer[.]everestengagement[.]com/ea/vT7hD0K2NM/?t=f&e=EmailAddress

Analysis

user interaction
yes
max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/10/2026, 16:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://genesyscustomer.everestengagement.com/ea/vT7hD0K2NM/?t=f&e=EmailAddress
Sample261022-ttya1aag28

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2080	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{0B96E9B5-273A-48A1-B648-0D20AB8A691A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1132	msedge.exe
1132	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe
3900	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3900 wrote to memory of 4164	3900	msedge.exe	84
PID 3900 wrote to memory of 2080	3900	msedge.exe	85
PID 3900 wrote to memory of 2284	3900	msedge.exe	86
PID 3900 wrote to memory of 2284	3900	msedge.exe	86
PID 3900 wrote to memory of 2284	3900	msedge.exe	86
PID 3900 wrote to memory of 3824	3900	msedge.exe	87
PID 3900 wrote to memory of 3824	3900	msedge.exe	87
PID 3900 wrote to memory of 4040	3900	msedge.exe	88
PID 3900 wrote to memory of 4040	3900	msedge.exe	88
PID 3900 wrote to memory of 1292	3900	msedge.exe	90
PID 3900 wrote to memory of 4040	3900	msedge.exe	88
PID 3900 wrote to memory of 1292	3900	msedge.exe	90
PID 3900 wrote to memory of 1292	3900	msedge.exe	90
PID 3900 wrote to memory of 4904	3900	msedge.exe	91
PID 3900 wrote to memory of 4904	3900	msedge.exe	91
PID 3900 wrote to memory of 4904	3900	msedge.exe	91
PID 3900 wrote to memory of 3744	3900	msedge.exe	92
PID 3900 wrote to memory of 3744	3900	msedge.exe	92
PID 3900 wrote to memory of 3744	3900	msedge.exe	92
PID 3900 wrote to memory of 4764	3900	msedge.exe	98
PID 3900 wrote to memory of 4764	3900	msedge.exe	98
PID 3900 wrote to memory of 4440	3900	msedge.exe	99
PID 3900 wrote to memory of 4440	3900	msedge.exe	99
PID 3900 wrote to memory of 4840	3900	msedge.exe	102
PID 3900 wrote to memory of 4088	3900	msedge.exe	111
PID 3900 wrote to memory of 4972	3900	msedge.exe	112
PID 3900 wrote to memory of 2296	3900	msedge.exe	113
PID 3900 wrote to memory of 1988	3900	msedge.exe	115
PID 3900 wrote to memory of 1988	3900	msedge.exe	115
PID 3900 wrote to memory of 3128	3900	msedge.exe	116
PID 3900 wrote to memory of 3128	3900	msedge.exe	116
PID 3900 wrote to memory of 1132	3900	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://genesyscustomer.everestengagement.com/ea/vT7hD0K2NM/?t=f&e=EmailAddress
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffd1508c188,0x7ffd1508c194,0x7ffd1508c1a0
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,9150267671960761593,17281956625129614822,524288 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,3390598549454883801,5614275931033955833,262144 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,13043633242279144198,18006478184887902500,524288 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,12318544455149078043,3675579861500928325,2097152 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3516,i,8440029757000831742,18233301132790449554,2097152 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,12056750556173778167,3961205439774790553,2097152 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,15027496485192923662,18213866771003850914,2097152 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,14355824283772808901,10154333645030522448,524288 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,7406999736902540310,6944656174075674723,524288 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,9822009063047779407,17842428509689748544,524288 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,9822009063047779407,17842428509689748544,524288 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,6913770176902016398,6900046422146435260,524288 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:8
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4596,i,9587970466619973889,7747621199286670729,524288 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,6640987497504339518,9264182640448473312,524288 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3068,i,6806239976406948114,17683710483844012615,524288 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,10367576795324332882,6788603601491894497,524288 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,9320495954204266184,5098690785601992440,262144 --field-trial-handle=2272,i,1882450803094063149,2358760100413323622,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1132

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4056

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

35e2347c-931e-441d-a181-031426a5da9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\35e2347c-931e-441d-a181-031426a5da9c.tmp
Size 8KB
SHA256 b2e1da02f283021b8f0c58357815f13318a3c7ec98f0c7c366cf46dbea73f54b
MD5 23371dfacf2631e4f0e6903f06997376
SHA1 d5900e5bd49b154774eb284b7a0a9efa7bd20061
SHA512 9690c770805d06a1b3c6f8feef309fca3c6f09eabbc08d5f92a7d0d98c70cfec82969abd5b3b5ecfff5a132bdec7982a5cd372ad25ce76d410b62145ff977023
SSDEEP 192:SOND6ygpQmiUyYrtOCTVgFpOsR0XzPSBSU6:SOND6lHFtOCTVSpOsGzVU6
TLSH
T1B302D735B8682CBB8DF3AE46F48B37139FE4116BE9552B84DAE81E1C01D765C2346C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ac560c7-5a09-4695-b2a0-5359928c61d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9ac560c7-5a09-4695-b2a0-5359928c61d3.tmp
Size 8KB
SHA256 db5dd8101267d29eb79cbe8bee5a1617fa32b9f446625cd7304545a190f8a3da
MD5 3ef17d66b3eca05dbc56af3a377585b8
SHA1 914df5a1e4ab33ee9aef38fcb7b3b13646fe6775
SHA512 3be992ea2842c7a9285951559d8c284e500d610c2331aecfb741e6b5c87a45611e87d0138d5e712aa7f8917b6277ee628cea545c5ae211d1c92146c24bf33eb8
SSDEEP 192:CONa6y9QmiUy7r+OCTVgFpOsR05bjHEg3UYqbU6:CONa6IY+OCTVSpOsG5bjk1pU6
TLSH
T16A12083278786C7B5DE2A545F48736138FA44167EA457B90D5EC1F1C02EF6AC234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

46b20d01-fda4-48b7-8efa-e37bcb4cafe8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\46b20d01-fda4-48b7-8efa-e37bcb4cafe8.tmp
Size 10KB
SHA256 e28e587d33aa09a827850c572f80543123b56fd4f125d69a686bf78ad1193722
MD5 9473aadfa033cba8b451f19d9edac18d
SHA1 99aeddde9e4e511a2f0f88de7e87c7628f6cb16b
SHA512 269baf3e1f7cdddebf55d9e9e609fb64594943e08f2d7d324a3a07ff37ce50d1657e46d6d38592338d3e581e539825954cd92833b21196e1ba61f96ade549b65
SSDEEP 192:sxZlRPWl/fYsa+Idp1NSHW6+WNMFN/YRPYWPHIg58J:sxZl4l/fYsav/SHbU/m5q
TLSH
T1B522D9526E386977CCCAE209BA15BF13E6F54032A1911E58FAFC861C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48a5597f-0165-4e30-9742-0f2d11e035f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\48a5597f-0165-4e30-9742-0f2d11e035f2.tmp
Size 10KB
SHA256 d02d209fdc993a67f5725337c0188f3c895eea3ba242e36984da98b396efb804
MD5 5370187b6e88941e0d26fce11eddbcba
SHA1 79e22717051ef68840930c1c2fe9825123fc5159
SHA512 426384dc150415fb89d71d81caa8a73c3ef6d9b39533ce99f726b0be2eb7a74cf3478578221a0cfcdf58b592188907b83d0147eefd43ebba31821bd4343a817a
SSDEEP 192:sxZlRPWl/fYsa+IdpfNSHW6+WNMFN/YRP9xPHIg58J:sxZl4l/fYsavFSHbU/mrq
TLSH
T14E22D9526E38697BCCCBE209BA15BF53E6F95032A5911E58F6FC861C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

686f8ab0-d4e5-4f9e-8839-5b222469ef10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\686f8ab0-d4e5-4f9e-8839-5b222469ef10.tmp
Size 9KB
SHA256 d452110687b11672581f38c1bcf9d7e88c099b5fb7e777af127e74ded3e5f01d
MD5 7b5689e431524cd1321fd39c736d32a5
SHA1 941f5d17b0babe234e35ed0bde6b7d76ebe08a7d
SHA512 b67d50be028786bbd66bfbac17af9683cccfd33b24236f10cd448594d58368c754ac72764209af290cefff6dff8838f53e22c4b3a3f003a3f43f5255401396de
SSDEEP 192:sxZlRPWl/fYsn+IdpfNSHW6+WNMFN/YRPsPPHIgrJ:sxZl4l/fYsnvFSHbU/mO9
TLSH
T16222B8526E38A57BCCCAD209BA25BF53E6F95032A5911E58FAFC851C04E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

74c60737-e801-4bfe-adec-40f1db1b5954.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\74c60737-e801-4bfe-adec-40f1db1b5954.tmp
Size 10KB
SHA256 3a1391410c7e5af2997f66aee4bd5d115984815d443ffc89319509fc6426ffd1
MD5 de814836717de00eb7f37f8e0b47f41f
SHA1 765ffc216735fc8a094e5dd3422cd41f1db9cb13
SHA512 ca5ea1156734bec2fec0a7b1ddf923eceab59d51ed24875c0bcfe1682bf74a153bc87c9056f2b9a29c9f5ca859a6baa1eedb37535600af25d90776a44f2a556f
SSDEEP 192:sxZlRPWl/fYs1+IdpfNSHW6+WNMFN/YRPsPPHIg5WJ:sxZl4l/fYs1vFSHbU/mOQ
TLSH
T1F422C9526E38657BCCCAD209BA15BF53E6F95032A5911E58FAFC861C04E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 e8d931a9065ca015c745276d5df016cbb113229e2552f1e3c6f99cbfabf26c1e
MD5 3d2b4754948878df55f351ea994321b3
SHA1 c28c57e21c9682028aef003935bcb436f23adb64
SHA512 d1fa274adba74e9a2bacc94963acf5a9e63d213e672bd7bbc2671c91d8970b8dd5606084cfcca6c3463ec1be659fb7d39309dec8ae61ca49eca870d14103ae84
TLSH
T1F2E026C808CBC23EA28CA447127C9B4CD390261F92D16AEE2704CE857047141F3867A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 876699754050730fb1e20475999e159acd95ea2f816338931af48b49455108ee
MD5 86ad7dfcb8e4f16caba07854f3fce21a
SHA1 8a4378a18545550a78c324ea4d0a75dbe4e87516
SHA512 993e3a35f4a3a6d29f6121b8930a75ba01c26b3fcb84659aa612b166d19aef819289a6a9dd13990efb79bb909c4b8c877a02d01a9237d81c4c3bd34b07f1baa7
TLSH
T18A61B68255440E69FFA8D97889FE17873635A58124872EC2505DECFA580EFD5E33037C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f39267779c947da95952355081f9da692cf19f5ac8f76f30df35f6e3f7ec6564
MD5 49aeb34b30786ef36a39f3400dd3cd3f
SHA1 af48faa00145d6e1566cf462d02a1d9bd7a5624d
SHA512 168e056d6c208b04a058945b239fc66be550a64356000c98a7be1f79a165b5fa68fe4da5c672cc0870571a36fe82cb06d11dc306ce9218b7672dd116d1e531b2
TLSH
T12A61C68215440E69FFA8D97889FE23873635A58524872EC2509DECFA580EFD5E37037C
MD5 SHA1 SHA512 TLSH

Submit Download

1e44bce9-797e-489b-b086-4b9386c8a11d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\1e44bce9-797e-489b-b086-4b9386c8a11d.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

337c3fe9-2f2a-4b8c-b700-21b503c35fae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\337c3fe9-2f2a-4b8c-b700-21b503c35fae.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

3ac6e785-8f3e-4a1a-afc9-4f468a72e76e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3ac6e785-8f3e-4a1a-afc9-4f468a72e76e.tmp
Size 1KB
SHA256 4f43cee6806dceffcdd31ffa13daae6188c3ed22a11920af72b4832991c06e52
MD5 4bf57a2c387acb6c79cf3a761da9871c
SHA1 3d579ec9066e9caa78435fe072a3225f8f98a222
SHA512 88507c58517b5f1e1ec620c51491bd0e5dfebafb6e022798a15ecbfc31a72e3fdeb1732a57281b0a5f49ef4284e8c6b15c2d16ec8f7d24404b007c9dabc6e64e
TLSH
T16D21BBF3C3E0856E8A115AF09A18AE2BCE2D0601421C3C1985D8EF2BD3E3475E00199F
MD5 SHA1 SHA512 TLSH

Submit Download

a4c84dcc-bb90-4de8-bef9-8e3b2356bfa5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a4c84dcc-bb90-4de8-bef9-8e3b2356bfa5.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a8cd7f16-23c7-4e8f-b404-c50b59b4bb27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a8cd7f16-23c7-4e8f-b404-c50b59b4bb27.tmp
Size 27KB
SHA256 eb7ace07471ad49247d4c2703f38b8d97a7427119480e379b11592b0faf8a542
MD5 d916a8dbcf72c5b739b31843eaa10991
SHA1 a855d2fc5090b8492061f05478f8ab433398eef7
SHA512 7ac27f745d3b41abf408740b572be6036d2f43b330adc145c08fcd8145880afc1c6f307dc98feae53c51906a70017bdfacee271f85d013ef10a98d898ef14073
SSDEEP 768:V1K9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3KroY+aC:V1K9uzYWvcQWsu1ja0HL7Q3hY+aC
TLSH
T169C2F93F640CCB7E5FC01A9DDC5A6F973E9802D7A6688D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce87e427-4a23-4197-9079-7fc28bbfc166.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ce87e427-4a23-4197-9079-7fc28bbfc166.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

fff8218d-06d8-4bd4-8a6c-1a6b15c49a8f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\fff8218d-06d8-4bd4-8a6c-1a6b15c49a8f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 719055b687fe0889d4db22abf401d9618baaeef7662185a17e9f32c1287a2ca9
MD5 9fd4be3dd061d3275df1b352507ffb53
SHA1 80e54c5238d662125fdc6453b34a03f878ecf45d
SHA512 c19392db6cb99ea814f32b9f3f147c75cf7bc99ceae00964d0a20a03a877b088cf0ffe5ad04b8c3bed465e69870761032dfe5f8d51d864ac2c938d43ca823090
SSDEEP 384:YiFzQkUSvxzsNp8TUNTUlIldwPAxeiOjTVSpOsG5bjkjpvwQTqs94x6IIlO:jFdBswgKjhnAOrjkjpv6s94oLg
TLSH
T117C217F218D7987AD9AE5743A77D2D039EBCC167F5816A90B388190CCC861BFE34AC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a8893c38-740b-4077-862f-bf844ff36223.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a8893c38-740b-4077-862f-bf844ff36223.tmp
Size 18KB
SHA256 4e3bcfb2bf7d51f049eb269d27493fd333672f48f8d54079a3e2197c0aa2de28
MD5 16e30d3bdb7af6c0e489df0d9fb8830c
SHA1 6f5f08fd837ab5695627f812f7e28cd8f0286cb4
SHA512 0faddba1956785ef16ab1d20360c8818d0c10c91ff1bac68120c1c3f8cbad642106c51f537b51cbe3085baf7365447cbdce7c72c6e2ffc1112e9441b6aa021e0
SSDEEP 384:aQkUSv0sNXowPAxeiOjTVSpOsG5bjkhpvwQTqs94x6IIlO:C0+XhnAOrjkhpv6s94oLg
TLSH
T1B7826C3238686DBB9EB3A545F58A3603DEB48267D6C52FD0D5EC6B1C01CB298334BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d2814e23-f86d-45b6-aec2-2ec62477c57c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d2814e23-f86d-45b6-aec2-2ec62477c57c.tmp
Size 18KB
SHA256 c80cffca9c0f325837228886d336041aee89bb6ef0a126c94c0ff8ccc583238a
MD5 3debb06f91693826229904d210e61f8f
SHA1 70d94889d3255a279d79dcefefe89caa5234029a
SHA512 0f9cf0f8895ddd87251c12df7add6834c4e689f34397de293751ef1f445de1c7d056cb4c58e178c1e447f9e468fa703cecb5624c18bbea354831903a7094fea4
SSDEEP 384:AQkUSv0sNXdwPAxeiOjTVSpOsG5bjkhpvwQTqs94x6IIlO:o0dXhnAOrjkhpv6s94oLg
TLSH
T158827C3238686CBB9EB3A545F58A3603DEB48267D6C52FD0D5EC6B1C01CB298334BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ef0a322-ca57-4df5-865a-34c5c9c2c118.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6ef0a322-ca57-4df5-865a-34c5c9c2c118.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fcd7abe2a31ce609b4309565e53def2d7753b813c7a4c8bef7cbbf4080c31d06
MD5 7266a8b482955f180ab0853c88787aa7
SHA1 9360a42abad2983f5b3975be72e1f6286e8f02fb
SHA512 42c5ccbeebb57ad89f0b49af5d1b3f790984e73505aee1cd4e540e4c99f052ec12bf1cda8df617464dcc2ace8a900721dbccc76c60a7ea625fb34db40ed7d897
TLSH
T1F941F85CA6E91148B3B76E566FF6A8AE447FBD372E06D45D00010E4E0662A44DCB1B37
MD5 SHA1 SHA512 TLSH

Submit Download