hxxp://giveyourbrainrot[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 16:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://giveyourbrainrot.com
Sample261024-ven98aa14w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3860	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{FBFAA289-E5DD-41D9-BFF0-1DF499575830}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe
3028	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3028 wrote to memory of 1552	3028	msedge.exe	87
PID 3028 wrote to memory of 3860	3028	msedge.exe	89
PID 3028 wrote to memory of 2116	3028	msedge.exe	90
PID 3028 wrote to memory of 4200	3028	msedge.exe	91
PID 3028 wrote to memory of 2116	3028	msedge.exe	90
PID 3028 wrote to memory of 2116	3028	msedge.exe	90
PID 3028 wrote to memory of 4200	3028	msedge.exe	91
PID 3028 wrote to memory of 4116	3028	msedge.exe	92
PID 3028 wrote to memory of 4116	3028	msedge.exe	92
PID 3028 wrote to memory of 4116	3028	msedge.exe	92
PID 3028 wrote to memory of 5060	3028	msedge.exe	93
PID 3028 wrote to memory of 5060	3028	msedge.exe	93
PID 3028 wrote to memory of 5060	3028	msedge.exe	93
PID 3028 wrote to memory of 2112	3028	msedge.exe	94
PID 3028 wrote to memory of 2112	3028	msedge.exe	94
PID 3028 wrote to memory of 2112	3028	msedge.exe	94
PID 3028 wrote to memory of 4560	3028	msedge.exe	95
PID 3028 wrote to memory of 4560	3028	msedge.exe	95
PID 3028 wrote to memory of 4560	3028	msedge.exe	95
PID 3028 wrote to memory of 4456	3028	msedge.exe	98
PID 3028 wrote to memory of 4456	3028	msedge.exe	98
PID 3028 wrote to memory of 4456	3028	msedge.exe	98
PID 3028 wrote to memory of 4220	3028	msedge.exe	100
PID 3028 wrote to memory of 4220	3028	msedge.exe	100
PID 3028 wrote to memory of 4220	3028	msedge.exe	100
PID 3028 wrote to memory of 2252	3028	msedge.exe	101
PID 3028 wrote to memory of 2472	3028	msedge.exe	102
PID 3028 wrote to memory of 2472	3028	msedge.exe	102
PID 3028 wrote to memory of 2252	3028	msedge.exe	101
PID 3028 wrote to memory of 4988	3028	msedge.exe	104
PID 3028 wrote to memory of 624	3028	msedge.exe	107
PID 3028 wrote to memory of 624	3028	msedge.exe	107
PID 3028 wrote to memory of 624	3028	msedge.exe	107
PID 3028 wrote to memory of 2824	3028	msedge.exe	110
PID 3028 wrote to memory of 2824	3028	msedge.exe	110
PID 3028 wrote to memory of 2824	3028	msedge.exe	110
PID 3028 wrote to memory of 3840	3028	msedge.exe	111
PID 3028 wrote to memory of 3840	3028	msedge.exe	111
PID 3028 wrote to memory of 3840	3028	msedge.exe	111
PID 3028 wrote to memory of 560	3028	msedge.exe	112
PID 3028 wrote to memory of 560	3028	msedge.exe	112
PID 3028 wrote to memory of 560	3028	msedge.exe	112
PID 3028 wrote to memory of 624	3028	msedge.exe	116
PID 3028 wrote to memory of 624	3028	msedge.exe	116
PID 3028 wrote to memory of 624	3028	msedge.exe	116
PID 3028 wrote to memory of 4420	3028	msedge.exe	117
PID 3028 wrote to memory of 4420	3028	msedge.exe	117
PID 3028 wrote to memory of 4420	3028	msedge.exe	117
PID 3028 wrote to memory of 2960	3028	msedge.exe	118
PID 3028 wrote to memory of 2960	3028	msedge.exe	118
PID 3028 wrote to memory of 2960	3028	msedge.exe	118
PID 3028 wrote to memory of 1508	3028	msedge.exe	119
PID 3028 wrote to memory of 1508	3028	msedge.exe	119
PID 3028 wrote to memory of 1508	3028	msedge.exe	119
PID 3028 wrote to memory of 656	3028	msedge.exe	120
PID 3028 wrote to memory of 656	3028	msedge.exe	120
PID 3028 wrote to memory of 656	3028	msedge.exe	120
PID 3028 wrote to memory of 2636	3028	msedge.exe	121
PID 3028 wrote to memory of 2636	3028	msedge.exe	121
PID 3028 wrote to memory of 2636	3028	msedge.exe	121
PID 3028 wrote to memory of 3700	3028	msedge.exe	122
PID 3028 wrote to memory of 3700	3028	msedge.exe	122
PID 3028 wrote to memory of 3700	3028	msedge.exe	122
PID 3028 wrote to memory of 628	3028	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://giveyourbrainrot.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x1a0,0x260,0x7ffda245c188,0x7ffda245c194,0x7ffda245c1a0
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,14598573267947735260,2026777483136736717,524288 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,16290528179802261422,5184432829823637571,262144 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:2
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2204,i,9857045326589012333,454332362182698353,524288 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3540,i,10565287584492606272,2725623420160338413,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,7641399952401622615,9604952029169791640,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,2099003334873745301,4239074716472424169,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,5939795178849105161,2036213444972292694,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5096,i,17157450084024164630,4673010496629572917,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5312,i,5718554156014715797,15849284540680270623,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:1
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,7890034715498101419,8609788033897001969,524288 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,303154042466454992,17326959183985334033,524288 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,16478850304865294437,13609206376972152330,524288 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,16478850304865294437,13609206376972152330,524288 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=3632,i,16428198124654712537,15132026222627971779,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=4028 /prefetch:1
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5368,i,1010430879145975757,2630043023510957783,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5364,i,9263339178030829221,1400496639868056501,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=3516,i,292044068486754966,2338292092900628053,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:1
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6456,i,5132216292103927052,10293188648815972777,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=4024 /prefetch:1
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4952,i,2404776367126236743,7716091396922021539,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6476,i,6505124407800192404,1302166835517054590,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4996,i,12707159573715673465,18404427977174363360,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:1
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5180,i,15570785103265268583,4524217889073733677,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4944,i,1407459837351818582,3266880343238130336,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6272,i,12226082887377346114,2252886173560200669,2097152 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,17943802401623654947,12916151297979629396,524288 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=4012 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,8452726208289580702,11969179494483458904,524288 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,8873646182697499799,11678273666819251543,524288 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,2660575610479479011,1518868730466392515,524288 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,16212785281698623612,13931478817005939571,524288 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=3020 /prefetch:8
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5568,i,9692554286024317489,4854970397873611379,262144 --field-trial-handle=2820,i,5868911720572751203,16659448006629079765,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5020

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1860

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

254ba628-7930-4cad-bbb5-c246e5c0ecb5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\254ba628-7930-4cad-bbb5-c246e5c0ecb5.tmp
Size 26KB
SHA256 ecc5aad593a256196e96ba8d05063cc368a9f8bc868680ec5d23f2363eb99bf2
MD5 97b8b104b5147d1f1fa5094d1e69067a
SHA1 c9c2b09f94519e4b04dce217008db9e42984bd81
SHA512 fb664e9e9f0253eae86f50d9f23bde56b46c67c7815607f2ea8eabc87da883265853ae97ff46bcb3399c4a0b3daf8f542ba6366e5107f25843bfef636900dc3d
SSDEEP 384:LiFzQkUSvSzsNo8TUNTUlIlYM1/lzuzIGmYMoULMXXMfiK2I+uBIIlQ:mFd6FwgjT8HMXMnMfiK5+uBLe
TLSH
T187C21AF248E7A837D9AE9B03A73D2E039D7CC117F5845A50B788591CCC861BFD30A915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3aac1643-71d8-4310-8fa7-604ff1296f8f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3aac1643-71d8-4310-8fa7-604ff1296f8f.tmp
Size 18KB
SHA256 b8bc04c3d8a3366e49c8cde369b63beaf82712162570e9fd3ee2afdb4f4fbf1d
MD5 197a199bb7167d637898caa7ba47df97
SHA1 0d0c1fea5d49c508020d9ab724f2ec65a19c3081
SHA512 5a6235cbf4bfbbb465a2762220a69d84a22fa912193da45c2d69c4b55400ff580a36b015cca7b0c6a838043f0cf06aed09a5805d028cd278037caed96bfef9e6
SSDEEP 384:VQkUSv0sN4YM1/GzuzIGmYMoULMXXpiK2I+uBIIlQ:v0hQ8HMXMnpiK5+uBLe
TLSH
T104828E369C78BC2BAEA3E510F50A3A53AE749127D6C45F90D6DD6B1C01CB29C134FA17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

7cac26f5-41e5-4edc-9648-c02c5e7441d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7cac26f5-41e5-4edc-9648-c02c5e7441d1.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 1885a134ad2bfeb2915290401471928261307e9096de9bab34f1f160bfe5e006
MD5 d9c414f478b50f68b2226edce960d3a2
SHA1 b9d5a4ddee5698838c436cc131fd162e5eaaa52f
SHA512 7c5399529714fad631db70456c8255c2e261694188f18f465268427c5ecbc80d6428681acc12a01963af10ef23492d000e2bde9f0e6e7ae195dbc039134c92d3
TLSH
T1B6E0DFC41BCDC23EA2A8748B026C6B4CDBE0271B92C0699E1B04C984704A844A2AA6D0
MD5 SHA1 SHA512 TLSH

Submit Download

f_000058

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000059

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000059
Size 68KB
SHA256 9a184f33ae7f406bc55bb497748336469980585b53ccc41f863c96306dbf238a
MD5 0e776a9829f2513dc6b150e6e74178aa
SHA1 60fcee40a3ce00c80e125cad5c0a55fa02d15f2e
SHA512 39f0ccd6a44b69d59611679d725ad12187393d9628d977f9848796d5855fb145f3bfe2a3998bd2bbf8b5240c33cd6ecd9d49ed09f4d0270d5ae40558cf7acb54
SSDEEP 1536:H51miTVgrQ7JaUf76Z+AGYguWv0KxwhGPkMxOIdzz/SIWT27zQMPvp+elQDQ:ZYMR78X9GjuW8KxwhGPkKB5JWTMzz5+e
TLSH
T1026302329668F371BDE5B98DFECAD32F58485C204207CA11167E3DF3852549954D8C7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005a
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005b
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005c
Size 45KB
SHA256 940e937d624dff1d92f851eb934d25d8f553b21ece4ea0cd28ce09a9c26d42a3
MD5 44e017eb03ad119606b480cec663fa30
SHA1 9241911887c38c5465f7c2e52241aa36cef8fe71
SHA512 fa9327022c36d67b6a43370f035d1e7817e65e0a8260a14084dff52665372fafa909c2b1e41e7590aca67086c84f975093ceeb0c2169afad18f7dd066ea3bbe8
SSDEEP 768:n5tNF8slLi+NBxYf86HMA0PF8/3SDtPoHMzqQqZKq1r/sFD5f0tjlLILDkF1OYh0:5tNHxNBx286HaGfSDtPo0q5rwDetRwDH
TLSH
T17523F10BD1C595933AE03B3E3ECE143C80846699A757B2E2F12A350AC6E4F59C50F5E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 bbd2f256fdaadbc0ad915cb8b3c07c154d75bd3b9693a42dcba10dc4946f7171
MD5 cdae877eb2b910d4d215137b5c4d8f6f
SHA1 215fcf108fd5dc91f24e882eaf2dedf1af581581
SHA512 731933d687d24e69611ad6130f68e22a077c4d4aac87393d0c9fef6cfa5f38d0c9ee4f3a017ed12e1b22140df7e0a3e50eea77914cd0ea26c538fecb65698bc2
TLSH
T1D761808CAB1DC3F1F7F9877E80E523473A72C58185834D420A9BD478989A3E7923B010
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 68522cb15bc3e52291d8143eb2c31fae7152a0d6019b2c267414a0f0fbd2ace9
MD5 022c0a26ccdfb13fdb93f99ef4225425
SHA1 866eca30724eb77ffe1849b9045d3300f6f08101
SHA512 bfa86fa332b261e9723d032e5a1475e88424962b5f473104f55666a1812b560a9114b71c0bd77e473c5780ce40542628246d3d3fd136c5a79bea41137d679bf1
SSDEEP 96:3+Gh2ZKTNmNFKfH1J5m2HCmiccUEnMLtpfP:3j1mNFKP5FRBcUEQp3
TLSH
T1FBA14D8C9F18C2BDFBF4867A40D46F863ABE93C1B4835D32169AD43A5C5E3D791EA050
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5f2ff499084caee27daeec469552de9f42b07485cd97b83ac9e57c130ad19b92
MD5 0b6f15cfc9c1305a95be930d89fd04a0
SHA1 7ad8cd31eead9bb3bc2e2d77b61ff34698ff321d
SHA512 b28ace91cf75fdd169e3b10b5a24b0214da1dff03ae647f1cfbf00796a72d060bc2481de147ba7146cc532ca807aecd7433fb903320b1dda175e37b1f1cd4a6a
TLSH
T1A461808C9B1DC3F1F7F9837E80E533873A76C58184835D420A9BD478889A3E7923B010
MD5 SHA1 SHA512 TLSH

Submit Download

4706b271-7c9d-41b9-9a0c-a481eeffed65.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\4706b271-7c9d-41b9-9a0c-a481eeffed65.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

6a4d8d02-a0d9-469f-bfe6-37454a4a64b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6a4d8d02-a0d9-469f-bfe6-37454a4a64b1.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

89a5cdda-7439-4454-8755-ad8afb517712.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\89a5cdda-7439-4454-8755-ad8afb517712.tmp
Size 2KB
SHA256 54123ad0527b8864b0bfdad0b10d4eee0a7c1767e3077085db8900d109157b39
MD5 a849da61111ed2199a062a05541bad8d
SHA1 d08ef9da5628504783324724c7eba44652adebae
SHA512 899ec4ab56cd9debae7c3befdadd7e4a2f2cc94849744d466aae5cf40bd5c49f4791f95f5379aedbdd12815c4ade3154cc03ddd14c1810660efd693ea94bef10
TLSH
T1FC419EF3C7E9865EC91156F09A187E2BCE1C0946831C3C5AC5E8DF5B93F6071E142A9E
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

c21a85f4-5119-4736-8154-e3e3af8e517e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c21a85f4-5119-4736-8154-e3e3af8e517e.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

df6715fc-ebc5-4006-99c3-fe9687505672.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\df6715fc-ebc5-4006-99c3-fe9687505672.tmp
Size 210B
SHA256 2b9de9f2ac3f985d8038824cdc48d99d0af7efc7fcf1e6e29b7fbade96a99194
MD5 ed2f89dd7d04804ae7d9fd21257556a7
SHA1 e4a8a20aa57aed1c46f01aa789c5bf7c1c9886f6
SHA512 93b538143a71e3644d356ad724d8fc093a3fb0a0065633956ac8058064e62fd12a84bde51c78599873c59fef84856e5d723cea127c52211f70d9e4f562213142
TLSH
T110D0222362A472B59A9879DC602AEC4AD7B3002A8806D9D89291D4887EF9C3F080B0CD
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 32e1e8e08814cb42cb1a071a4081e8cc2a0cd3d32b2e8f6746aec03db6aee998
MD5 1d9b7f055500248289443d0e28282934
SHA1 18eb2a4d75fa2484fdbead313a4c2860834d0df4
SHA512 c4639f04a84ac92cd862192fe361ac8fd75432c03dd7329286cca8decfab81264b25041af8227a6c5121df5cfa8488f028bbce9d6d0c11b61c96eaaf8c61a16e
SSDEEP 48:K0KV4kKIYJbUzEIScJK9A16JxyZYLs46yLCNQ8CgARbcrMISURK9Y1iRxaBYDUA3:KgZKK6Aimd6KmkVUgK1SuyP
TLSH
T196916611307B521339BD6A4849B5866A464130B3309DF5BFFBAD80B25D6FE091CFE9C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c7575464-5980-4a0f-a992-3d05a1003d44.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c7575464-5980-4a0f-a992-3d05a1003d44.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d0699b68-fca5-4662-b599-3e09c7ef907f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d0699b68-fca5-4662-b599-3e09c7ef907f.tmp
Size 27KB
SHA256 9708054f4d1c15781975de6ea452ae933b661d9fa93cbdb67edc774a73468222
MD5 abeb98b8e912a95829af9334b4ad0f86
SHA1 b25e60a72aae82d9920b45d92cffffd6232f4aa1
SHA512 8af4fe8048f3fe48ab6872d78cae1cb4089201a6064de90c85dd407ae15a47af12caaabdb98200bf30980476cc022a2c0797c21fcf1997e22f73e17f57202927
SSDEEP 768:22WPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Nro4TfeAmR9T:22WPcLKWvKeEeu1jaClLiF7m4TWAmRd
TLSH
T134C2EA3B640CCB7E5FC01A9DDC5A6FA77E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d26b41e3-f95a-4ef1-9e9b-987191ab3f4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d26b41e3-f95a-4ef1-9e9b-987191ab3f4a.tmp
Size 10KB
SHA256 ebed5a6d9b07ac07b449ba520dc7a40f364f0bd7e4d3295b3598cbd149a64b66
MD5 0093f1b09c84ee030aa1539f2f733552
SHA1 9c51f1ede5500a01c799627f3a63d544d7995644
SHA512 f3efb3f1f81022b44c908688be5c8071234d6984b0f04bb5818f83a9107ee2c8c5383180fa33c05d167d0a486bfe9179c235469c260dee60c1aa60ae2248d3f3
SSDEEP 192:sxZ6R3Wma/fGPsgrPZIdpy7fHIH6+WNSVB/YapkwNoIg5mJ:sxZ6AR/f2sgmUHT6/2M
TLSH
T15522C8526E38A97B9CDBD21DBB15BF53E5F9503291D01E88A6FC861C04E76DD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e8cd4f83-1cf0-4f32-9911-4b098dc18456.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e8cd4f83-1cf0-4f32-9911-4b098dc18456.tmp
Size 9KB
SHA256 68c13103d56aa3c55604d5eab2e9c6c5c18aa5aff39a9ebfd9e6ba6cf4f5f54a
MD5 9fcddec25ec419c65ee668af9459c6d0
SHA1 632eee5a5e11ec873ce4faff018c9e85647fbeed
SHA512 ea9cab20916dc23b3df900a30ea0a0772e160c6af3a9cc9376110b5a9bbd0553e1dd7fcb72c59e995878293c42e44cc406816a8a22565783649d2abbe73afc2c
SSDEEP 192:sxZ6R3Wma/fGPsXPPZIdpyfHIj6+WNSVB/YapkwNoIgrJ:sxZ6AR/f2sXSkH36/29
TLSH
T13B22B8526E28A97B9CC7D20DBB15BF53E5F9503291D51E48EAFC861C04E7ACD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fd9b1019-20aa-4039-8e99-d7d34b36f9c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fd9b1019-20aa-4039-8e99-d7d34b36f9c9.tmp
Size 13KB
SHA256 556765fe64c5b8a90a5ef92031b923c2c3da298ee0828852ada5ae0c74e2c2bc
MD5 be5b5b1af3a8ce4fb749506bc1d9a023
SHA1 4daef5e697c215d04d03b1e1bbfa0857802c28e9
SHA512 1d0ca601e2713207b74b5918b9a11191727ddc40f365b3631045bd792fc43e3aaca24087d19c1726f4a886015c1b8c9a34d6f6c05d3095babceef7fb6b4ae606
SSDEEP 192:sxZ6R3ucBzma/fGPsi6PjdpTJCSbHIH6+WNSVB5v3/Yap3INoIg5M9cb5x9Q7:sxZ6omzR/f2sii9HT69/POcb5xS
TLSH
T11F52A8526A24D9779CC6D609BF35BF22D6F510329D951E8CABFCC51C04EA6FD220B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0e376de0-3ea7-40c6-adf8-c11849dfdf5d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0e376de0-3ea7-40c6-adf8-c11849dfdf5d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a58e358c-6a30-4bea-bc97-8382f445a10a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a58e358c-6a30-4bea-bc97-8382f445a10a.tmp
Size 8KB
SHA256 d64fcc2eb3dffe0916696194dfb3b105a18b7c8c166481f676cc79f5c990f154
MD5 6468c1760353793f979581e4964af8a8
SHA1 3df3e598ae336e15630c3960fa989a369b47f347
SHA512 26cb81f77c8c1f3904db752806ccabe4c69064d27efca9ecf450dd7d8acc81c0f0b71936692cb6ce11fb0ff5f2883c5f474dc8a1221a6b00948706294e2c3175
SSDEEP 192:KONZ6IEiQmiUyneTmuIGmYMgjzoFG8MXXxeUC27Hyq6U6:KONZ6DefmuIGmYMoULMXXdHKU6
TLSH
T189120B369C78BC6B6EE3A944F4473A23AE655217D7896F80E6EC2B1C01DF25C130E917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5554a81-3a2d-4fa3-b713-6f6f99cd9d32.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b5554a81-3a2d-4fa3-b713-6f6f99cd9d32.tmp
Size 18KB
SHA256 e4d84683e300b3f55911f06319e09b064dfbcfce1a7e2d611bad5470dec277a0
MD5 65bbeb43521da76cc8669b78d4e160a4
SHA1 7953da78e6eff234b9d67233531489fc70a9d8f0
SHA512 19d054572be3b6be5b14a0d80f3f363a2ddbb4c1df5e729c5b246730f3fccda58b7b1a75f4e8ca6ea72182b64ae0cabcab179ff7cca6b2077a84ce26f3a678be
SSDEEP 384:EQkUSv0sN4dM1jFzuzIGmYMoULMXXpiK2I+uBIIlQ:00yr8HMXMnpiK5+uBLe
TLSH
T1FA828D369C78BC2BAEA3E510F50A3A53AE749117D6C45F80D6CD6B1C01CB29C134FA1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d15622e-2ab4-4421-bb13-db93a3143106.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4d15622e-2ab4-4421-bb13-db93a3143106.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f9b36e0f-cc97-406e-819a-1b306c05c27f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f9b36e0f-cc97-406e-819a-1b306c05c27f.tmp
Size 8KB
SHA256 2ee7d0553c2de4a0b13d66d00b48277509295f31f0982475aefc54c87303dbe4
MD5 2b9c5f75fbba5c67d4bc07e7b7751043
SHA1 affeb84e1dcdccf0675fefff5d675788022579f1
SHA512 6b83aaaa66d674a9da5a12ea00bddf256351c09ccf58bcb04d3e154dc67bee2c81bd7afc999cd8517a0f91572b8a42d675c4310d411b97910179424aeb6f6606
SSDEEP 192:aONg6IE7QmiUyFeTPuIGmYMgjzoFGtC7sYkU6:aONg6DtDPuIGmYMoUVsdU6
TLSH
T1BF02FB35AC787C6B9FB36D49F4472B23AEA5112BA5952F84EAE81A1C00D725C1306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d4cce4b6cfcac4ec47cd81b8e54ae88bbd78bcc8f88b766d0d976a54c3dedb00
MD5 c51f5304b418bacfbe6ec95a15e43c72
SHA1 9c50ed8854f70146a36abb0fe377e79e5ecf0e2e
SHA512 6613bdc8734e671a9b41a8151e5dd3913d5520b088e267efdea27c8612549876c32fedacaa90cd26649df48023f695a8f5f62ac9290902efdd0b9dc504250c84
TLSH
T116413798B6E91148B3B76F569BF6A86E487EBD763F06C49D10010E4E0A73B40C871737
MD5 SHA1 SHA512 TLSH

Submit Download