hxxps://genesys[.]my[.]site[.]com/customercare/?case=0004190196

Analysis

user interaction
yes
max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 21:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://genesys.my.site.com/customercare/?case=0004190196
Sample261024-1v63vset9r

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
896	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{59AACA81-90A6-4EE1-94AB-9E99617F8D87}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3992	msedge.exe
3992	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe
1716	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1716 wrote to memory of 4604	1716	msedge.exe	85
PID 1716 wrote to memory of 896	1716	msedge.exe	86
PID 1716 wrote to memory of 3808	1716	msedge.exe	87
PID 1716 wrote to memory of 3808	1716	msedge.exe	87
PID 1716 wrote to memory of 3808	1716	msedge.exe	87
PID 1716 wrote to memory of 4276	1716	msedge.exe	88
PID 1716 wrote to memory of 4276	1716	msedge.exe	88
PID 1716 wrote to memory of 3792	1716	msedge.exe	89
PID 1716 wrote to memory of 4072	1716	msedge.exe	90
PID 1716 wrote to memory of 3792	1716	msedge.exe	89
PID 1716 wrote to memory of 3792	1716	msedge.exe	89
PID 1716 wrote to memory of 4072	1716	msedge.exe	90
PID 1716 wrote to memory of 4072	1716	msedge.exe	90
PID 1716 wrote to memory of 2596	1716	msedge.exe	92
PID 1716 wrote to memory of 4664	1716	msedge.exe	93
PID 1716 wrote to memory of 2596	1716	msedge.exe	92
PID 1716 wrote to memory of 2596	1716	msedge.exe	92
PID 1716 wrote to memory of 4664	1716	msedge.exe	93
PID 1716 wrote to memory of 4664	1716	msedge.exe	93
PID 1716 wrote to memory of 4844	1716	msedge.exe	98
PID 1716 wrote to memory of 4844	1716	msedge.exe	98
PID 1716 wrote to memory of 4844	1716	msedge.exe	98
PID 1716 wrote to memory of 756	1716	msedge.exe	99
PID 1716 wrote to memory of 756	1716	msedge.exe	99
PID 1716 wrote to memory of 2492	1716	msedge.exe	100
PID 1716 wrote to memory of 2492	1716	msedge.exe	100
PID 1716 wrote to memory of 2868	1716	msedge.exe	102
PID 1716 wrote to memory of 868	1716	msedge.exe	114
PID 1716 wrote to memory of 2932	1716	msedge.exe	115
PID 1716 wrote to memory of 1564	1716	msedge.exe	116
PID 1716 wrote to memory of 2300	1716	msedge.exe	118
PID 1716 wrote to memory of 2300	1716	msedge.exe	118
PID 1716 wrote to memory of 3992	1716	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://genesys.my.site.com/customercare/?case=0004190196
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7fff6d6dc188,0x7fff6d6dc194,0x7fff6d6dc1a0
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2004,i,5674433302658946407,17359446159445049751,524288 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,16871547518978650720,15234536374880753419,262144 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,14736807367604812775,18254010158078622083,524288 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,5429679405735943121,5477725866768366889,2097152 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,10736067079963099439,14451703693658061417,2097152 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,2229145352918822933,9199465141596850610,2097152 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,1475999394089402335,8329298514791458862,2097152 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5124,i,5833194503609930947,12514558133764097707,2097152 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,10598338913399833334,11777143032337259709,524288 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,422155874995958248,3994608861831751572,524288 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:8
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,2836542461761777094,6540376918752982926,524288 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,2836542461761777094,6540376918752982926,524288 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,14459146471557465768,1313000087359950492,524288 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:8
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,88970757420200706,12764330223007195197,524288 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,596041141059972694,18436793521798425279,524288 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,10680478504369593421,793132780851593378,524288 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:8
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,16828539205094750765,10812241136982712640,262144 --field-trial-handle=2324,i,14920958295779347330,16451270702313928549,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3992

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3252

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2a81d7b0-5587-49c6-9186-c6394641b199.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2a81d7b0-5587-49c6-9186-c6394641b199.tmp
Size 8KB
SHA256 cc60e32205ff85ddb281dc3fe3a6cf62905bc2f69863b08e5ae4318daf489443
MD5 a7b3a1db3ae024d091b727504ed17b3c
SHA1 8e28ed6681df6408c211f129a791260beb5fbf8c
SHA512 eaba4f82adacb1acbed409fc44957c06ce9ce43f6941c0692b0c6a04765ac449684e10a28c90d3a2eb29e2ac381002678f488a826fa45a60100875d19bd75271
SSDEEP 192:/ONN6yHQmiUyvnGOCTVg5WOiR0ewjE+2H3U7qbU6:/ONN6WgGOCTV+WOiGewjE+2EMU6
TLSH
T1DC120835B8686C775DE2A645F4873113DEA85167EA867BD0D1DC2F1C02DBAAC230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

483616d7-92e2-42f1-936d-d5d8d502fa3b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\483616d7-92e2-42f1-936d-d5d8d502fa3b.tmp
Size 18KB
SHA256 c16ea7d41fb19d57a1f027df840c3ae8896e6fd7c2745e710290d096118007dd
MD5 404bed70a8d76c322f93a221b39eaaab
SHA1 c1e19707c7067667dfb9955ce17a7d7b48fb2d24
SHA512 488be78d354508e3c230a43634c77b9655defffdbcf2b8d63699ccda49571bea5ffb43f19df629c867735feef98bcf714a64e59e52bc9673e73879409a5f1e48
SSDEEP 384:vQkUSv0sNEtwwhxaOjTV+WOiGewjE+2MM2I9MtUBIIl4:x0tZnzODjElMM5EUBLm
TLSH
T1F3827C35A8782D3389E7E640F54A3643DFA4915BD6856FD0E5CDAF1C02CA2EC234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

693ac637-3ebb-4b52-906a-6fbdd3293b6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\693ac637-3ebb-4b52-906a-6fbdd3293b6e.tmp
Size 8KB
SHA256 a05bf1ddf1cbddefe9f80d0b04b2ac0a14aa794da0e5f574221ef1af89b135d7
MD5 06edc2334f54361cf40ef2093e6a5d42
SHA1 8fc67c9d62289e8c62a889a4be820f0ca731a8ea
SHA512 6e5d3c65f3c223996fcc8554ef7f6b68076852f57e26f1cc09a75b3cc22c41e4b657a48423bc1c609061d666006a28cb4576edfef713a88d6cdad1ada629e651
SSDEEP 192:SONu6ygpQmiUycntOCTVg5WOiR0KzPcAU6:SONu6lHptOCTV+WOiGUBU6
TLSH
T11D02B734BC682CB79DB3AE06F58B37179FA8116BE9552F84DAD81E1C01D766C2306C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

72406ee0-020f-4e13-8221-0f6779e56c97.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\72406ee0-020f-4e13-8221-0f6779e56c97.tmp
Size 105KB
SHA256 aa204e7f585c1f2b64ec2dfe226fcda3dd40e2d6c7acaecb8bc39c51bf5021a2
MD5 82ef5ef3fd97f3d79a47f09529d45307
SHA1 4d70248d33884063e95777b4e6e0d998931440a1
SHA512 a3e3e08187ec16facc64907edae849970f4fffaceb0ff69b6b9421c352de4ae4396f6c7d28c814160c616bf604747c73d4cf8a04f10f2fc8fa4a07c14210288d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P73:fwUQC5VwBIiElEd2K57P73
TLSH
T1F8B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4945E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

6314d63a-7003-43c1-8b41-02886afdbe89.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6314d63a-7003-43c1-8b41-02886afdbe89.tmp
Size 10KB
SHA256 7c1f6e71b2514331f6c98242d4581150f7ee29d4e9f0f2495ea01abb82b905ae
MD5 ad2d8b36cb3cc9f9c798ccf8afe813c3
SHA1 6d419cad79007fd8cf2e1f5243cbd79fac06fe32
SHA512 70aaf242502128d9fee6706e877318474d14e5d105291838cd215d98f57c499e04e85db0ebe0b4db62a648bf0a1ad317f35d5b08fe8f0ca5af6769d35401e6a8
SSDEEP 192:sxZmRrW6/fPssRJVOIdp5HXHW6+WN44H/YRPOIIw8Ig5BJ:sxZmg6/fPssRJVf1Hbr/mWLB
TLSH
T11932D9526E78A9778CC7E21DBA15BF53E6F91032A5D05E48A6FCC61C05E66CE120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8027c45a-742d-4013-8c09-3d194a9e2070.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8027c45a-742d-4013-8c09-3d194a9e2070.tmp
Size 10KB
SHA256 c3bc8dad82c93b1b5649218f266dc193a53369d1e8a850b7ac9f63dd4fe84cfe
MD5 021de6dadb78d785725515f7826f3887
SHA1 97474ea82f853f0bde54f92189b8709090d313bb
SHA512 471fd08deaa82b3a61c7e8423be072d6d114a015fc4cf5efc5b473514faa69b5ff10535edc2140f83a59a45edddb16929e83baf1aecd90a0412fd2ed8ffb163e
SSDEEP 192:sxZmRrW6/fPssRJVOIdpXHXHW6+WN44H/YRPbIzx8Ig5BJ:sxZmg6/fPssRJVfnHbr/mTXB
TLSH
T1A822D9526E38A97B8CC7D20DBA15BF53E6F91032A5D15E48E6FC861C05E66CD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

89c41164-706e-455c-a226-67d8ed3629c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\89c41164-706e-455c-a226-67d8ed3629c5.tmp
Size 10KB
SHA256 342d3f18e08e9fbc1633c3d79c502c287a0c41b80d99484f597678cea47c49e7
MD5 ae307a6e519be5218158b87f1cc064b8
SHA1 5f17245e7f17e86cee6ba1aa4c3a4faafb281c7f
SHA512 9290753b613442447d47941b4a4b9a39ea41a6c7ce697f4ce70d4a8f4b5e31a41bc89e2e5ca1441023f370d2abe7861fd19464ebd1f13d03b6c919be17948cbe
SSDEEP 192:sxZmRrW6/fPssRlVOIdpXHXHW6+WN44H/YRP5lx8Ig5zJ:sxZmg6/fPssRlVfnHbr/mO/
TLSH
T1D122D9526E38A57B8CC7D21DBA15BF53E6F91032A5D45E48E6FC861C05E66CD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

95cce65d-4a2d-4c36-ad01-70aa7e3efee2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\95cce65d-4a2d-4c36-ad01-70aa7e3efee2.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 a45042c7db4cfac1e6c18ece8f2c714264b5cbb94679e198faa92cf23a5c7be0
MD5 cdefe7714af2c5c4f4ad4165d3cf5ea8
SHA1 c55106dc2d22f1d23519d914a7894c4629b8c47e
SHA512 a842a9f5c4b4e0c588b440245a598305df0d9f6d0f1e6d4a15686f474836645b5cbd7bdd22f263eca83b9cce8451d050e5674d1109a3a45aa8d3a1ee7350d4d9
TLSH
T1C571618182D2462EFB94D937D6F60E8B3E359A4058932D421177FF799C07FE4E16C018
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 27f1a9547f6f10909f73241aa6905b676b450d6d9a5fe69c7a10da455a0da5ac
MD5 f09a6401f74e319b921cae0c790a9a2e
SHA1 83743b9da1eaa0e11b1c8b0a4ff2d0d7c556837a
SHA512 979adae616b730290550a2f636db4bb9ea4132ba39b3095eba9bb5c4e14afde9321ea1357ed9373a18dbbc9786c80fce24544fff363909f70897fa5ab2620f23
TLSH
T1B0613D8181D2446DF7A5C973D2F91E8B3E35994098932D4221BBFF758C07F85E16C058
MD5 SHA1 SHA512 TLSH

Submit Download

9cc29278-4fc3-4079-a554-74a1dfc52765.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\9cc29278-4fc3-4079-a554-74a1dfc52765.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1239d3a3-fdeb-49b3-8b9b-dca2c95b3c44.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1239d3a3-fdeb-49b3-8b9b-dca2c95b3c44.tmp
Size 3KB
SHA256 7c55038177d26c0c6fc364cff2be684ee0770fb1bdc2057ded8b97c1658c6a67
MD5 1f56df3299e688b772a9d6c618a4c7b7
SHA1 1543556e4cf7cbf4ecad2dc15720886737d6199c
SHA512 4ae991971abd5283b84bbc2abd35b0b308f349bcc8ad4d329595422fd7723ab531de1502218442c1b7b5346a64c61b225fc23744357cc6e93cc52421a5af9a6f
TLSH
T1005189F783E4866EDA115AF0AA147E17CEAD0556432C3C4A85D8EF2793F2471E281A4E
MD5 SHA1 SHA512 TLSH

Submit Download

14df2dfe-9642-428c-b0d2-14188edc631d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\14df2dfe-9642-428c-b0d2-14188edc631d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

16bffa9d-3ce6-43e7-9975-de1ef255e0fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\16bffa9d-3ce6-43e7-9975-de1ef255e0fa.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 84e90e35f87f5166f9e93171b60a54882d95ad04d9eaf8f463f30cb1ff3c7f4f
MD5 d84d896d60f0221317ceb7e4b391c0d0
SHA1 bb08550423984f32845f3253414c4591bb031c1e
SHA512 3e2153563026790ba31953873f2a0876b87db40203ab0e9f3c8a4038824b852994d5dd53387cfc91cc867e34f62634d8db0054ff30b0fbde8a728637ef73842b
SSDEEP 96:K0mgyR+isQMoIo77iKoK6tiUomqqrUilPHKlZH1VRI5YMiBRK6YinRmP3gBVxADH:XpnaDg
TLSH
T1E2A12E52307B02407DBE695890A5976AA25135F3345CF62F7BBD40A14E6FE080EFF9CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c92a3d53-3f35-4361-a64f-d77a9c96ff75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c92a3d53-3f35-4361-a64f-d77a9c96ff75.tmp
Size 27KB
SHA256 40b90be50bb16d36589f5c4bebf722077760da89e042a2d85eee738d82ce3c95
MD5 4c42adaff041e1d9d55a53536db2536d
SHA1 0e14942b732ce41d7ff7ce0e616cb2c35de44553
SHA512 3fdd48dde1e8e074b3cbf14bdd290f943aea8c342f2099412e3c7d2b02a3c89218fee3bb0bf9c1c04e806fa29a4600e9cf1512430bc95f18d363a86875068121
SSDEEP 768:BpK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3droe+Cg:BpK9uzYWvcQWsu1ja0HL7Q3We+Cg
TLSH
T11CC2093F640CCB7E5FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c9ce9fcc-2c1c-44a8-8d70-38c5ac5965db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c9ce9fcc-2c1c-44a8-8d70-38c5ac5965db.tmp
Size 10KB
SHA256 d0d54390585cb710b9e814a4dd2ac10187b35d060233043c18a05ffc807f3b0c
MD5 310c46f746485a198f38eb068694f257
SHA1 e73f17ea3428f4b81b0ff74fd80ded8ba993a1f2
SHA512 b20527532b05bc9538662ec9209f0b26e0f4d7961277d281367a897a7dc73cc73e9ced652c329a9f6ae242710c74b741580b896b0c93e719b05af8e396b73182
SSDEEP 192:sxZmRrW6/fPsZRlVOIdpXHXHW6+WN44H/YRP5lx8IgrJ:sxZmg6/fPsZRlVfnHbr/mO9
TLSH
T19A22D9526E38A57B8CC7D21DBA25BF53E6F91032A5D45E48EAFC861C05E66CD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d770e491-386f-438c-bff2-273245ce3083.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d770e491-386f-438c-bff2-273245ce3083.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

001099c9-16a5-42e3-b2cb-f6cda55be9e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\001099c9-16a5-42e3-b2cb-f6cda55be9e7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ae7ddfd5-1e2c-4d56-9bb1-4effbb566229.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ae7ddfd5-1e2c-4d56-9bb1-4effbb566229.tmp
Size 18KB
SHA256 7b39e3d024e1fc5533a2f8b535838ca3ee45a7e35ab94f12d6c2f526e602a416
MD5 b19b221e8adee2a15ef704294938eb62
SHA1 d612de9ff24cfdf4258cd6d4d662bc77cd7a9f44
SHA512 7beb3f0b910ca570bff2933e3fca513fc1d49960b565347de7521de141d390af535355bcedc7a56ca96673cddc290c59ad1dbca5ec9f4e9c92a27e662c6e1050
SSDEEP 384:CQkUSv0sNEcwwhxaOjTV+WOiGewjE+2MM2I9MtUBIIl4:60WZnzODjElMM5EUBLm
TLSH
T1DC827C36A8782D3389E3E240F54A3643DFA89157D6856FD0E5CD6F1C02CA2EC234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c98e06a7-4bde-439c-8a5f-cbf69f8bf8e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c98e06a7-4bde-439c-8a5f-cbf69f8bf8e3.tmp
Size 26KB
SHA256 1465557b91d0544ae613836ec65ea300ffe721e522a394842bd35e89fd34a185
MD5 7b680b67e2ca3066dcbc92de00b5c507
SHA1 481ae3af3a446882aaeb521a2e85aea6b6469893
SHA512 04677f93661b4f4f728f789a8640839c08598e2603ed807d0be554ab2d24b1d5ab6cf9ca69620686dd1e0d507a3a9eb583f8282a502b869a1fa1f082995b3098
SSDEEP 384:niFzQkUSvfzsNM8TUNTUlIltwwh3aOjTV+WOiGewjE+2pM2I9MtUBIIl4:iFdbZwg9ZnzODjElpM5EUBLm
TLSH
T1DCC217F258DB5936D9AE9743E77D2D038EBCC057F5819A90B3885A1CCD861BFD30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ef6646d0-b308-48c9-ae0c-cdd3ebb57185.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ef6646d0-b308-48c9-ae0c-cdd3ebb57185.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e519b97129e202d69499aa2da1b075a22ac74b94e269e164298daf3b85ac00cb
MD5 e250c4fe38d8f1ce2fcd6be5568add5d
SHA1 49e5fe199e2217ccae29c5a8824385c203ac40d9
SHA512 851002691521c80b3f30f39551e2bd13cbed946de262e9ce9eb5b1e2bcbd072a567b2e25afea5f066e201ce7db9696b7fe903083ecff0a3965ba655da04c9bc9
TLSH
T17941275DB7FD1148B3B77E1A9BF6A86D487B7D372E06D45D10020E4E0A26A40C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download