hxxps://manage-benefits[.]com/ssa[.]gov/%22,%22emailId%22[:]%2236ea0b07-6a85-46ed-abd9-ccf4563c7125%22,%22iat%22[:]1791475549%7D%EF%BF%BD%EF%BF%BD%EF%BF%BDg%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BDu%EF%BF%BDU%EF%BF%BD%EF%BF%BDB%EF%BF%BDv

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 01:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://manage-benefits.com/ssa.gov/%22,%22emailId%22:%2236ea0b07-6a85-46ed-abd9-ccf4563c7125%22,%22iat%22:1791475549%7D%EF%BF%BD%EF%BF%BD%EF%BF%BDg%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BDu%EF%BF%BDU%EF%BF%BD%EF%BF%BDB%EF%BF%BDv
Sample261023-b4anksca77

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3304	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{A3B01B0B-AEC5-461D-882D-0138BC4D0776}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4196	msedge.exe
4196	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe
5740	msedge.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 5740 wrote to memory of 5776	5740	msedge.exe	84
PID 5740 wrote to memory of 3304	5740	msedge.exe	85
PID 5740 wrote to memory of 3340	5740	msedge.exe	86
PID 5740 wrote to memory of 3340	5740	msedge.exe	86
PID 5740 wrote to memory of 3340	5740	msedge.exe	86
PID 5740 wrote to memory of 4824	5740	msedge.exe	87
PID 5740 wrote to memory of 4824	5740	msedge.exe	87
PID 5740 wrote to memory of 1892	5740	msedge.exe	89
PID 5740 wrote to memory of 1892	5740	msedge.exe	89
PID 5740 wrote to memory of 1892	5740	msedge.exe	89
PID 5740 wrote to memory of 5320	5740	msedge.exe	90
PID 5740 wrote to memory of 5320	5740	msedge.exe	90
PID 5740 wrote to memory of 5320	5740	msedge.exe	90
PID 5740 wrote to memory of 868	5740	msedge.exe	94
PID 5740 wrote to memory of 868	5740	msedge.exe	94
PID 5740 wrote to memory of 1624	5740	msedge.exe	95
PID 5740 wrote to memory of 1624	5740	msedge.exe	95
PID 5740 wrote to memory of 2356	5740	msedge.exe	97
PID 5740 wrote to memory of 1772	5740	msedge.exe	110
PID 5740 wrote to memory of 4852	5740	msedge.exe	111
PID 5740 wrote to memory of 384	5740	msedge.exe	112
PID 5740 wrote to memory of 4444	5740	msedge.exe	114
PID 5740 wrote to memory of 4444	5740	msedge.exe	114
PID 5740 wrote to memory of 1188	5740	msedge.exe	115
PID 5740 wrote to memory of 1188	5740	msedge.exe	115
PID 5740 wrote to memory of 4196	5740	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://manage-benefits.com/ssa.gov/%22,%22emailId%22:%2236ea0b07-6a85-46ed-abd9-ccf4563c7125%22,%22iat%22:1791475549%7D%EF%BF%BD%EF%BF%BD%EF%BF%BDg%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BDu%EF%BF%BDU%EF%BF%BD%EF%BF%BDB%EF%BF%BDv
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffe2235c188,0x7ffe2235c194,0x7ffe2235c1a0
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,5423606002234225794,16754717029265624280,524288 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,16097747805253356451,18235075229342693402,262144 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,6180410885199625116,10998544717933989620,524288 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,11128037223060997288,7843939375485643844,2097152 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,17799920319996514750,12453190231544000812,2097152 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,3339755531521403912,12754792477587055449,524288 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:8
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4884,i,6741490366558130028,14112895617900734235,524288 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,8887168060566191075,5682156181125785223,524288 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:8
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,8887168060566191075,5682156181125785223,524288 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:8
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,16479785113734191990,8635275080692839378,524288 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5676,i,14282558344896205403,11952837668335468763,524288 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5648,i,11498892248021967051,3007306749537485400,524288 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,16266127117427392903,4214517577542412924,524288 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,2093220461201819651,3565125035422250461,524288 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6284,i,11002524518269160139,563651915902563945,262144 --field-trial-handle=2208,i,15104312725059170993,12452101901549237434,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4196

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:796

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

339fa112-b175-4886-9c14-c713ca97f510.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\339fa112-b175-4886-9c14-c713ca97f510.tmp
Size 26KB
SHA256 bbf3d3db21000a443fe732090694a3fe9ad733fca3aff131c7059a59cb49ca1e
MD5 73c092c94e3b599ab80ec84908d8056b
SHA1 94951b225cdbd5a27e293ff49697a0164f1aeb27
SHA512 b76c967968312aa7b888715c7742e8aceab3a453299a0038df0c3fd1f8a1f606e404f7c2f8deec3aba29e8c0492982f0f6f5079ed977c9acb8c9c220da5bc2d9
SSDEEP 384:nZiFiZcI63sN58TUNTUlIm25mgCxsK2flBCupuSAiJ68tsa+VYqgL/7IzaoQ:wFQ63YwgS7CBnpfm8thgCz
TLSH
T14EC23A32EC94C9BBECEA8FE5A74A7643DEE44253959C9AC0DAC95D5C00DB1DD030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

469d41c7-a55e-44f0-b982-b145d5e5a0ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\469d41c7-a55e-44f0-b982-b145d5e5a0ff.tmp
Size 25KB
SHA256 b5f213d1084441eee6e389c3408337bca1d2350f63c6b9d2fa10105de9e71c01
MD5 8b0ed2460efac3022c5306c462434450
SHA1 917339256ef7b91902b709d1abef55b7cd0a10c5
SHA512 8e48b1d694c3be6ee64f3f18dc7443d562d59bcecc607d08de03b63e8ba1320ec339ab4e4d6c24d5d71ff014764004445daad47379ccdc8172bae81ed0e4b850
SSDEEP 384:nSiFiZcI63sNZ8TUNTUlIm25mg5lnK2flBCupuSAiO8sa+VYqgL/7IzaoQ:ZFQ63owgSiJBnpf48hgCz
TLSH
T1B7C25C36EC99D9BBECEA8FD9A74A7A07DEE40163949C8AC0DAD85D1C00871DD0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

50ff5b8d-4792-45b9-9c01-167c47caac29.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\50ff5b8d-4792-45b9-9c01-167c47caac29.tmp
Size 27KB
SHA256 4fce7cfad7bce04b416a52bb3ffa87b6672480444000f83ab6118aeaf241340a
MD5 0f091319af1ca1a24138e2324d1912f9
SHA1 55a30640cef4335f85a72e1ec3962534ef080d98
SHA512 0acb92138b1a7015d49bea0d7e6f54ec758ba816ad3e1a1311841c4b86a1a0d15ffe71041238a18471ce3744f504fe4e7f1451b7ba9662f4d14fc7331abc378b
SSDEEP 384:nONiFzQkUSvW3sNd8TUNTUlI4J5mgTYPvK2flBCupuSAiJ6Kt8fmgL/7IzsmlZ:5FdW3IwgTIYhBnpfmKtcAlZ
TLSH
T131C25A32ECA9DDBBACEA8A95B74A7643DEE0416385DC4AC4DAD85D6C00CB1DD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

066cc931-1063-454a-b4cf-9639c53290f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\066cc931-1063-454a-b4cf-9639c53290f5.tmp
Size 414B
SHA256 8f9876125260acc2398e0d3ef90ee90bd4cd2bc7a955a2f6ca52da3f9002a4b3
MD5 8d545bdde3d15137e535ba80a217e221
SHA1 9f63ea2f9d9e55fcf42f8143078e9a64e56594fc
SHA512 6b8b047e82052642d835a600ff9d444ac4e78a7592d2c1441972a66195460ca3294da27f922b69c072d1b562dafdc039502de59ed260943db0ae04639cfa51ba
TLSH
T131E02BF9CD15AC3B08FD5B6D50640741EA4103572A81858B373C800D8FF5A3A518696C
MD5 SHA1 SHA512 TLSH

Submit Download

4ccbb4e6-ca25-404d-b9d5-cafec7395a57.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4ccbb4e6-ca25-404d-b9d5-cafec7395a57.tmp
Size 12KB
SHA256 65a5f0ac517ca90c3f59d964ecb3a47d9017580a565259ce65d8b13022389612
MD5 de559f9674ae2c74dbf14dfc48fd6124
SHA1 8c1987dfab6d4f344b561a896284794c1b067bab
SHA512 691bc749ad28d63ba3ecbf987d8b6d8b308560735e47d00fccddbc0628b1a27323ec37fca5e38f02b9ac20205eae9ea149e612a9ab83698aaa7c07531e95fade
SSDEEP 192:sxZ5rR/kg/fdsYaQZZoTzodpgQHW6+WNNvs/YbIcRIYhXIg5ItBJJ:sxZ5qg/fdsYaOZoIVHbS/F7YN2tB
TLSH
T1C842B615AD28A93F8CC7D61AFA55BF52E7F9503390D51E44A6FC8A2C14EB6CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e471365-8f02-4f1c-9f5d-5defff8efcaa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5e471365-8f02-4f1c-9f5d-5defff8efcaa.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

784f3a56-5c96-4f88-8991-de3fa2ab117b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\784f3a56-5c96-4f88-8991-de3fa2ab117b.tmp
Size 12KB
SHA256 9dff78827dc569ad902e84bfc3e046031e52c08864644488466d7c7a64aea792
MD5 1477b711dfd31cd456678dff98eb64f4
SHA1 927400b1578f3044feb29a2cfa464c1b390460e8
SHA512 e958a7e6e3bf9a65dda4dc313c16ec5820f4849e5a846242388bf2fc4fc81bd83fc0316a40208319152507d7efd83d2d898c47aaf953e49905c34a50fe63b798
SSDEEP 192:sxZ5rR/kg/fdsYcQZZoTzodpgQHW6+WNNvs/YbIGRIYhXIg5ItBJJ:sxZ5qg/fdsYcOZoIVHbS/F9YN2tB
TLSH
T1A642C515AD28A93B8CC7D60AFA55BF52E7F9503390D11E44AAFC8A2C04EB6CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a75c705-2dd6-4217-b659-a5617139fdd0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7a75c705-2dd6-4217-b659-a5617139fdd0.tmp
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8f838cc5-7886-4e1f-9d4b-7705367ca8cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8f838cc5-7886-4e1f-9d4b-7705367ca8cb.tmp
Size 12KB
SHA256 77d9608a62be0a81cf832eceaeb9ccf00b0a074438cd2503780df1fa492d585b
MD5 e167d586ed23690f6506ed5ddad23195
SHA1 b945872567a181b4cfeaeb36e4c066ef117afd00
SHA512 fef7b668a5d6bccaaf30496c422ef2b56af21e89d140926ea225678ef4322c76856142d65fc2b22edac5994b775e0a87c45852fa211b1e2a9bd588cb2f1932ee
SSDEEP 192:sxZ5rR/kg/fdsUcQZZCTzodpg5HW6+WNNvs/YbIGRIYhXIgjBJJ:sxZ5qg/fdsUcOZCIoHbS/F9YNjB
TLSH
T1F142C615AD28A93B8CC7D61AFA55BF52E3F9503390D51E44AAFC8A2C14EB6CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 6cece4328dd2f105cda98623917676a160eea8ebcefdd8de49a571897a96c913
MD5 92481fdc54bc6046a4c044aae146f19c
SHA1 7544da946dde96357049b2733f70a5f38b310950
SHA512 03a1a17e6cce1fbf30c4f32ad6ec788dc5ad25da84908c2c836fba71aa1ecc41f79fa894a36964aea08e2563767e62c6c2859fb9b1facfa39a3545c13a665982
TLSH
T129E026C9A6CAC22EA2D8B49F437C63CC8F80665A9BC16D1E1F48C9887205480A782A91
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 6974d8cd9dca1e1a7f9cd2fce03762c0546d7f24360d1970448d3879c79d2623
MD5 52ee01ea932f1181509ae261394b6224
SHA1 f80c6d748aa09f2bdd8391dfb3ead260e59174e8
SHA512 c7d8d5abebb1bae6399f0472b8dba8fd2aa7431251ce15e59c3afb0d84a4e5366ac3380c65bf2b4ad5486e97895f7edece76a5864f9b6dcfc9fe4ba1fceeb9f5
TLSH
T135510E8396807ADDFFA411B385F5138335F1B4429A4F9F321BA4C3796863B0E9158774
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 e76713d1cef1171cd549743727d58fad6f45f0fcf8f631e60cf20931b12e99fb
MD5 445738abf8ec7f669f748f48573bec01
SHA1 288b0070b541b2e23c46c027c748b8283de98fa9
SHA512 6b7a109b0c346498e6e84516ef62e922bd4a3050223a32c095bdd4313d903b4b08579ce9eccbbf039e6185b905fdd97f35a197325cc13a81951b6f9e3c829d40
TLSH
T1F0512D839A807ACDFFA411B385F5138335F0B442968F9F320BA8C3796853B0E9198770
MD5 SHA1 SHA512 TLSH

Submit Download

dc82f061-d6b4-4ccb-b774-d4e3909cbd17.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\dc82f061-d6b4-4ccb-b774-d4e3909cbd17.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

38baaab5-792a-402b-9f70-5eb43e236b09.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\38baaab5-792a-402b-9f70-5eb43e236b09.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

f4141ed9-703f-4554-9e87-90426e336621.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f4141ed9-703f-4554-9e87-90426e336621.tmp
Size 2KB
SHA256 980df3908f521a80b6d7a6db41f5c827c48fdf45d4d3774d5eb8d714e2975cee
MD5 6781d9fe4e5282205a24270f04454b69
SHA1 eee824edf4404fb70672c27405bbf91bd6d47ea8
SHA512 8fdb6d1d069dba6ce1d6b234ea83f1cdd1a76214582ab1ed5bf174c9d19f03b799fb684b93422b85c85af74b92b2acdd57227bb5bcd246299e3ce5dd9b0546d1
TLSH
T162518BF787E4856D891196F0AA18BE1BDF1D0925436C7D9AC4E8AF1B93E20B0D10165F
MD5 SHA1 SHA512 TLSH

Submit Download

f76f7daa-057f-436f-9843-7b3e2feac1b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f76f7daa-057f-436f-9843-7b3e2feac1b2.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 3fc69166b30e58706d0d5528a950c699ac19544a2ff284fce133cea6798b3605
MD5 3aeffcb9a47cc03662120d0547b19f78
SHA1 bbd9c45b1f34e4b86eae53187cb705f6f47acbb8
SHA512 a1d478fe970b601ed99b2fbd5e97f461edbdfa4e87349db2975691a5cb34c5fd5e0c0fa0a02dd4b4ba8de1463ed74c0d11b1fa25942ed4e564de808107381421
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXSZDWaVu7:OtfFvpopPxrB4RhfS9WaVu7
TLSH
T130B2121571BA021138FE690881B58B2F064232B37158E73B7FBD15A69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a48c351e-564b-4dd1-bc0f-f391c585645f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a48c351e-564b-4dd1-bc0f-f391c585645f.tmp
Size 27KB
SHA256 3e8e09fbf1a8a1edab1823526d6908d9b2627b7bf09cd26405ca05b348b5230f
MD5 ac1985a5b4a81ad95b4153a28895b175
SHA1 27a749fdcca1521f61669ecad80601b1435e624d
SHA512 e3d66d4a17b91fc2f9692bdd3cc6336108845497285ca9807a4098bbd0d29d849ad37cab5535f1b113b96c371a2e8bb9ff959dd59a973153cec58e70208e94cf
SSDEEP 384:nyiFzQkUSvW3sNd8TUNTUlI4J5mgPPvK2flBCupuSAiJ6Kt8fmgL/7IzsmlZ:5FdW3IwgT4hBnpfmKtcAlZ
TLSH
T1CBC25A32ECA9DDBBACEA8AD5B74A3643DEE0416385DC4AC4DAD85D6C00CB1DD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2699e03-5f4d-4db1-a361-46ddc7134087.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c2699e03-5f4d-4db1-a361-46ddc7134087.tmp
Size 32KB
SHA256 9578c0310841d7deca03b82dbb51748930871151ac4049b42158b6a982fa8a10
MD5 69c8302f3f62a32e3d4f34b47b8d6b1c
SHA1 6a1e567f0081d2a1f1c08a7fd30bcf3a073425e8
SHA512 5a34b5a34dccd40c6ed01dd902e91867572227ac0f2daa34061ac3c814c97060bfef710896f5fec358fcedf53c52a06a4e350c07979d4dbf4028a8cc757450c7
SSDEEP 384:nOFiFzQkUSvDP3sNd8TUNTUlI4J5mgTYDvK2flBCupuSAiJ6zt8fmgL/7IzsmlZ:1FdT3IwgTI4hBnpfmztcAlZ
TLSH
T1BBE2D5F198D7997BD89E4B97A37D2E429AFCC153B5984980B7C85C1CCC861BFD30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f6b821ce8bf20ab91f3fd18d6a07a024d8b2c0d1223b99d29cd2e63215a040b1
MD5 44f4ca8308cb0d546113f7b5711b2ec4
SHA1 daf2f3fcf06b68f2dabfbba941aa89f775a6a133
SHA512 d5ad2b63677ff7de12a43db915a153bd7010704998cae6790e2a35e3d2629b1a16b2cd21dd0ed7c99fce50ef6e0c1167ac5237042c6eac6cbcb9d67efeb390de
TLSH
T16B414F58A6E91148B3B76E569BF7696D487FB8732F0BD55D00110E4F0662A40CDB1B33
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2356-208-0x000001592CF20000-0x000001592DF20000-memory.dmp

Download