hxxp://my-verisure[.]br[.]all-app[.]top?entity=32896852

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/10/2026, 14:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://my-verisure.br.all-app.top?entity=32896852
Sample261026-rraqtaev3w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
384	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{16BC8E20-486A-4003-8C8C-D9570B1F2F3B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
680	msedge.exe
680	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of FindShellTrayWindow 38 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of SendNotifyMessage 36 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of WriteProcessMemory 52 IoCs

description	pid	Process	procid_target
PID 4300 wrote to memory of 1196	4300	msedge.exe	86
PID 4300 wrote to memory of 2328	4300	msedge.exe	87
PID 4300 wrote to memory of 384	4300	msedge.exe	88
PID 4300 wrote to memory of 2328	4300	msedge.exe	87
PID 4300 wrote to memory of 2328	4300	msedge.exe	87
PID 4300 wrote to memory of 4976	4300	msedge.exe	89
PID 4300 wrote to memory of 4976	4300	msedge.exe	89
PID 4300 wrote to memory of 856	4300	msedge.exe	90
PID 4300 wrote to memory of 856	4300	msedge.exe	90
PID 4300 wrote to memory of 5012	4300	msedge.exe	91
PID 4300 wrote to memory of 856	4300	msedge.exe	90
PID 4300 wrote to memory of 5012	4300	msedge.exe	91
PID 4300 wrote to memory of 5012	4300	msedge.exe	91
PID 4300 wrote to memory of 4424	4300	msedge.exe	92
PID 4300 wrote to memory of 4424	4300	msedge.exe	92
PID 4300 wrote to memory of 4424	4300	msedge.exe	92
PID 4300 wrote to memory of 3556	4300	msedge.exe	93
PID 4300 wrote to memory of 3556	4300	msedge.exe	93
PID 4300 wrote to memory of 3556	4300	msedge.exe	93
PID 4300 wrote to memory of 3988	4300	msedge.exe	97
PID 4300 wrote to memory of 3988	4300	msedge.exe	97
PID 4300 wrote to memory of 3988	4300	msedge.exe	97
PID 4300 wrote to memory of 4700	4300	msedge.exe	99
PID 4300 wrote to memory of 2080	4300	msedge.exe	100
PID 4300 wrote to memory of 4700	4300	msedge.exe	99
PID 4300 wrote to memory of 2080	4300	msedge.exe	100
PID 4300 wrote to memory of 4188	4300	msedge.exe	101
PID 4300 wrote to memory of 4188	4300	msedge.exe	101
PID 4300 wrote to memory of 4188	4300	msedge.exe	101
PID 4300 wrote to memory of 4644	4300	msedge.exe	102
PID 4300 wrote to memory of 4644	4300	msedge.exe	102
PID 4300 wrote to memory of 4644	4300	msedge.exe	102
PID 4300 wrote to memory of 4384	4300	msedge.exe	104
PID 4300 wrote to memory of 744	4300	msedge.exe	109
PID 4300 wrote to memory of 744	4300	msedge.exe	109
PID 4300 wrote to memory of 2620	4300	msedge.exe	114
PID 4300 wrote to memory of 5012	4300	msedge.exe	115
PID 4300 wrote to memory of 3356	4300	msedge.exe	116
PID 4300 wrote to memory of 1452	4300	msedge.exe	118
PID 4300 wrote to memory of 1452	4300	msedge.exe	118
PID 4300 wrote to memory of 4704	4300	msedge.exe	119
PID 4300 wrote to memory of 4704	4300	msedge.exe	119
PID 4300 wrote to memory of 4704	4300	msedge.exe	119
PID 4300 wrote to memory of 1860	4300	msedge.exe	120
PID 4300 wrote to memory of 1860	4300	msedge.exe	120
PID 4300 wrote to memory of 1860	4300	msedge.exe	120
PID 4300 wrote to memory of 4228	4300	msedge.exe	121
PID 4300 wrote to memory of 4228	4300	msedge.exe	121
PID 4300 wrote to memory of 4228	4300	msedge.exe	121
PID 4300 wrote to memory of 3816	4300	msedge.exe	122
PID 4300 wrote to memory of 3816	4300	msedge.exe	122
PID 4300 wrote to memory of 680	4300	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://my-verisure.br.all-app.top?entity=32896852
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff26ebc188,0x7fff26ebc194,0x7fff26ebc1a0
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,9594060022717349382,14910381907633772773,262144 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:2
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,12429458804616462937,12023293399806001045,524288 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:3
  2⤵
  - System Time Discovery
  PID:384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,8375300755829944455,16473366385304231897,524288 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,5158233797575318906,2810265703495691303,2097152 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,9412852072289346079,2316396818185213656,2097152 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,8955366183385820163,13753208262677970782,2097152 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,18282550306874857338,12015041467092216356,2097152 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3624,i,434319368517659446,5535590272721398351,2097152 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,10426307016508716479,12031287017293810503,524288 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,2417198082889113817,7759950007360871221,524288 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5348,i,10737124575144079612,6710496277476126276,2097152 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5584,i,16977048718284104590,15045524742934496366,2097152 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,9205072629201121545,8485832201568390605,524288 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,9205072629201121545,8485832201568390605,524288 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,8361318476379026497,11421179795363046175,524288 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:8
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,6070689420330329738,2088471521201768549,524288 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:8
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,10696491167775438831,13366705172745068333,524288 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:8
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,3519891585946440198,16000907223647128724,524288 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3020,i,16075173895682629360,4778340937695250125,524288 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=3036 /prefetch:8
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5504,i,9175218439420497896,16327610865382744679,2097152 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5936,i,8512245698647053417,13118855836741098863,2097152 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5912,i,3244228037278178308,9420525028004101363,2097152 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,10909142430238625928,30912693548891516,524288 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6764,i,8885089578094676757,6130432759854989944,262144 --field-trial-handle=2032,i,14922328292480806844,2501593354196443364,262144 --variations-seed-version --mojo-platform-channel-handle=3984 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:680

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3256

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1ae20903-80fb-4c1a-b64f-fb57ea470ff9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1ae20903-80fb-4c1a-b64f-fb57ea470ff9.tmp
Size 18KB
SHA256 d8bae2d07042178aeeb0d5d05e5f02b1b920e9834d67ce95f37a815e9103b9ca
MD5 5c4f616ae4d473f1ac72a19123f08f0c
SHA1 ace134c6159657d3e9c0c28e9f8ae2abbbf1bfd7
SHA512 d0472d015a46167b802dbbd4d851a3c4d683ed4271ba45c7e62f45c93dd5828244fed2f874884b929b9f9a1daa441bdc87f942c9720b7ce4aa063813742da963
SSDEEP 384:xQkUSvPsNKCQL30Qtb5RtEh//p+GqAwp82IuuoIIl0:jPrr73I/hZwm5uuoLu
TLSH
T1FB826C3668A9AC378EB3D550F10A36139FB4906BD7C44F94DACDAF3C06CA1AC1347A16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

51e99f86-dd6e-4811-9e9a-b2d696d7a3f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\51e99f86-dd6e-4811-9e9a-b2d696d7a3f7.tmp
Size 8KB
SHA256 c4561e7779aaaced7c06c4c97614c8652f4ea3ff363096563ff9d3d46d1756e8
MD5 c1ef572cb94de96d43ec7347c738e481
SHA1 0998651fefd11ebbb73a845b87ebdfd8089b383e
SHA512 b491783675ed6d068c477bbfa5821ad22456330613d7a99b9562180bd3f0134ad3741d4637bddf40b8758ebb91b0d0012941cf35837075b9483f41832d2c00f0
SSDEEP 96:KqONkTQsjpfbUmjH5ih/cIPURHl8h4otop5IpaDIaBKP4v+Y1xf//ojd6x/eYzRw:BONb6JUm0QmiUyDRso//p+8BCAOU6
TLSH
T14502D739AC68BCBB8DF3AE45B5477B239FA4107B9A955F84DAD81E2C01DB15C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a734bc82-d412-4ca5-9d67-bc920709334f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\a734bc82-d412-4ca5-9d67-bc920709334f.tmp
Size 105KB
SHA256 73d0e97f18eabd66ced5f78af8d0ee3a36d197f120279f6fe22862877514d939
MD5 48ffe64f366166704c21161efe0b504f
SHA1 a6403dde2edbd6b341ad301811396e7d3aea1af5
SHA512 ad78beb367abbdbb0a58e28566138180a03a9826f30f2dc412a05e0ca179742f6e123202adf44a50da1f4b71145ff6cb0cde66f326d4e9b116ce56b2281ea253
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T1B3B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

52b6fce2-fce6-4d12-9000-1bb4ee99d5b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\52b6fce2-fce6-4d12-9000-1bb4ee99d5b9.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56abc03d-0d03-40e5-a568-c543cea24161.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\56abc03d-0d03-40e5-a568-c543cea24161.tmp
Size 27KB
SHA256 bf8768e90c3ef0f092474e6d894f3e4b84e356398beec0e2df8479c405575fc2
MD5 25c17384b58b30709c988c2342945cfd
SHA1 b8fe9016b68c01ae9a304b8d712e6a3d7350bc44
SHA512 c1afcc6c27f487c24d8a90a54378aeb7abc1f5f38cd6c244245716a8809c3e92bfe90174236bfe70d3b9100b2e47e6d990877f8cbf54770e9402c3dbc4ee4974
SSDEEP 768:s+Klm7QWvUYm08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/HroZa:s+Klm7QWvUYm0u1ja8/L/E/UZa
TLSH
T1CCC20A3B640CCB7E4FC04A9DDC5A6F976EA802C7A6588D404BFA984C02C77EA51274DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5da2b2a7-18a4-467c-a485-93f74b534795.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5da2b2a7-18a4-467c-a485-93f74b534795.tmp
Size 11KB
SHA256 e20f04b8d9df1ef61b69abf58138e322e201d642176d85479d061bf9226e2233
MD5 95c2d46f96524f7818929b272ba2ff2d
SHA1 49cb4dc1d2893a04229a51df1f75199b9abceef9
SHA512 5a3718a7222c632f40a0f07ba1b3ef4549c076f57453e1cf8b3b539a4772702417d31206e6a110d850b5cac5d6e53437f67b76ef108f97ae8215ac49e0af7d5f
SSDEEP 192:sxZp7RgnOO/fuQsUrNIdpPqlUHW6+WNRmvbXY36Qkm/Ig5aJMBJ:sxZp7IOO/fuQsUruBHbAXXG0ML
TLSH
T14D32D952AD38653B8CD7D21EBA55BF13D2FA613251D10E54A6FC8A2C05E67DE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 7b58d79ca0190931cc2f69949f6933ca6d33128cb026657b680c911ec5020f3b
MD5 9cfc1104b25e5e15b1cd57b8d74ef75a
SHA1 5e816370c628d433edad196cf1eabcbc266ad916
SHA512 a43113d5aa4d4446c19c7aa70ed5b430987d9157e95fb9dcbc5765f448bd0190e4e1b8679d0a878f720fec4add91398e85c422a4f324360f0442189ff9f7a142
TLSH
T1DFE07DD404CEC32FA30875C7016CF30D8390365AD2C1AD8E3704F98476850C0B3C3692
MD5 SHA1 SHA512 TLSH

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
Size 18KB
SHA256 4eb442e41584b813dd662065b66bf0a0334a08a125c5fc66050017b68d23cff6
MD5 faf291638aa4af0951b4ec97e98de63f
SHA1 c578097f1fc3cd047c138996bfdfa36c37ff012f
SHA512 60388427de4224e4a9f3246c04daacb21ddd8851844553b6b850d121d1ba70ae257314d4a85804a06db43dcce2a2479ffe7dcc9a4323c62f08cd70171dd0a1f4
SSDEEP 384:JSxrHaKDg6UYC0kImZx/+pHL1+HfEcc1ia6Y5NzfomY97TCksQspK:JGaKMFJ0kSpp+fslbNbuVT3
TLSH
T17382C02604714BDF25E0B1F455CCEB50112F66B1473FE3F7A6BEA18E416143E991E0D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000052

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000052
Size 55KB
SHA256 8d5b5df1129ab7a8d8f2b7d1a441ae77c415a950fa347ed416df57acd9e50baf
MD5 a0be976f3876624587891c81cacbd840
SHA1 2e59ebd5e2193d019b846b2ed8bf3568c6dc5619
SHA512 7e6448fe7e6908c7fbab1cb0929d8027ff59d7b1a43d8cad240152a3308292ebc885176f05a29e4f2fa86c791104053089f7da2ab31638af0b44847dd27d08c9
SSDEEP 1536:XFOveS03EaT6T5k+0YO1UDipvSobIRC+ZMRSCGo6:XyeS03x6NYADiI8IRC+Zgpw
TLSH
T1AE430250CFD429BF2D275D7B5B1D4010BE4A646C788AD46D66362CF041E75FA6AE03C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000053

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000053
Size 123KB
SHA256 a67bc98afcc43fa1a3f9fc4e6add92fe593d523f523695598923ab7693f989f9
MD5 6e025a52440c4eebe53d462865861c90
SHA1 f2bc35a34d8a925c9cf8545f12bee1f4ffea0c17
SHA512 e47fb639c8d6aa9602634cc1300e47c8bd9a0a6387cec0fc5b8227cecb49641c9d08c86aa4f24ed91e6f0d817b9dcf099e5432e7aa0bcd968a88b9a6c6e0223a
SSDEEP 1536:E8wZoOFYP1UvmW1qm3ys3b41VCl1TO9xAQJVWTWxLTxzDVt7zQmx+ge/249hMxwB:aBeyxYm3ys3EXec75+gu249hqZBNNxs
TLSH
T11EC3134AC80462AC16F2FB26754DA6CB0B96DE7D49F61D4E055C0B335FAC27390C937A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000054

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000054
Size 165KB
SHA256 77e08b5e982b9d1cde547708eee5aa18d5b0ca00da6d887a549b1ebde27a95f7
MD5 12b82c0ce436f0d07726be95649dca69
SHA1 3cfe6cb79c74d1ba8ec470ac5bb14964171ea73f
SHA512 eaed598a10b95f1def1494043b86a4c7bf5199e3d1dc702cadeea4a286d810a7f8eb14cee67977648639312e47657298c1bb1510789a674baae19c804e6c7d41
SSDEEP 3072:dplBoGzRfRu/rRn0ILOxx9EFttEeLbxJOlUM4BeJ:dPfR09NLO9EFbl1JOlUtBq
TLSH
T179F31200B38AB8ACECD261D149E1DDDB74BC4A08AB28B9251F1E77E40F9E811B747F55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000055

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
Size 180KB
SHA256 68dbaf4a5a28e9742d157416e9749294f8c4c5a3b0d2b29936d0e11367f383d3
MD5 ba270a85d1748e8301783fc33ff9d7da
SHA1 e06946827b86d5978d0f96701d1e74adc1510597
SHA512 7e3820442cc95cff9e2573bf5a0e4ccd492ff8e0d2102f558e48ce7df8f93d2a9f532950e944a769285a1ddc2ab07ee7cfa32ddf025052b98d0936c38374be03
SSDEEP 3072:7zdS7mui9B6HQPXCx6KAbZIApfmqET8Lkpkv0WeGh35xOVqFNV0dkpjrlUqvQBsS:7zd3uiH6QVKKCIuq3kpkvzVbFNV0dGjw
TLSH
T1B104239B63AA3F1068DFCA67368D39407CACB704E3BC554694DB3D7C2A039815364B36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000056

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000056
Size 16KB
SHA256 53c7c08337b4f5be6f7942897b364afd73bf4753786664659d303b5e660b118b
MD5 9830fb86af17e1952070d26eaac42196
SHA1 4e12ffa4ffa6e553032bb751c66a6da416561880
SHA512 a8bdf80580813515b71e15ec369cdc2c436972f4fa09e72d1314b007c9ebb9e396638081265852b6e09365f8940f38f90404766c903d4e2d8ac34cd6894dd13a
SSDEEP 384:XTir8ItJp0ygYyZ03GIXp7LsQyN0LcS6/NueyF:D7MdgaG8sQygLFF
TLSH
T1A672E099B782FAF42C2E30B5868E2D7EA02274C9A5F5938243D01F902119A1826F31F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005c
Size 23KB
SHA256 ce46db508ee41c28687daa5759d49c45c49fabdbf2fb6830c9a5abaa50970b3c
MD5 a37cddeff05c7cee90d7cffb2f0b4d98
SHA1 2fa4566a0a79cb8f7e2d658e404c28c00b789244
SHA512 afa6307d4b45ec1699b954e3a09d1a784f619389e46e15c9ac8547a67ad436c7cd58db978d26c3159730d912365895759aa8060518dbdd5f1ae4d7116a7f5919
SSDEEP 384:HwUrUEiGnYV5tcxLmW0Qm6oG9PRHF9LGaLHK33h3+mbFeJqmkDaarPI+/moVFsaI:QqUenotmmW0QvL95lRGJ33h3Joqmg3I7
TLSH
T1A4B2E0523597CAEFB7A34082E875C6AE6B5D6010FCEFC89BE2741743068B9585C41E2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
Size 74KB
SHA256 70e4d628843c8aa128f28b04653deba8bc351b4b868d4d6e9ada67a3e2cfb400
MD5 5c1cb34c1dd3766326afedfbef9f4aab
SHA1 da51bf4e974c86eddbca6e3b7e07967b21a08367
SHA512 a42ca1fe34d594fa550c9f806022d3c3674a7f03ccf0359b1bf623883b807fad668fdb2a05e89e4335a98a88bb94a8f9b47423e22f2bc9d882899ed6ff26de5c
SSDEEP 1536:sl9xog1rbd61Os/oqNREWWFkSXI0SlxUbW8uIl/7SpLP/v9:s5Fp6l/RvWFkSu/d7Il8Pd
TLSH
T1DB730260BEEE2E1A9C337F0F5D94C9852562FE9B60CF16EC4FE44D98D15C1E682402A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 23KB
SHA256 2189adb857ece9719580dacedeaa2a98369f932831fc8e115372348546dc88bb
MD5 a3c3e499fa22844d03d7bdb7c37fd6b5
SHA1 cfe7674c199f559d53a693dfb936e02e5662ecde
SHA512 2ef01323749093dea90820ec6c539869b507e20553366c920c551ab1520f630212881808a76121a970cb9564aa8be9ac469498711ed1bf2faa5c7409e734bdf5
SSDEEP 384:GbGrQWgTJFHD4Nl9zaoz9qF2v2tGodYcf2Q9SQfkbMzOFLDu/XPe+4ujgb:GqrQWQJ8l9zakqF2Zo3EQcwsDu/2+fjI
TLSH
T1AAB2D02D8B760E59D6394BEB98B71CE38E61FD906F28740F16430EC74CCA1686C0F551
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

482f4063a2f3e1af_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\482f4063a2f3e1af_0
Size 328B
SHA256 2603910705cb11ae4097127ad00d86576fb045faf86775fc6db97101d1b8965f
MD5 04dfeb6a6ae611dcececabb2dc8a7b65
SHA1 ea19becf234fffdde0ff0913b05b493a6c92e060
SHA512 527dc7b780273b9434036d5d4a5740054bb0b824fa16c9451d7f3d44371c763e18e6097721c7cc9f8c1a8b1c8c38f1e4fdfdba55cf4e002ab8caa837c4c407b8
TLSH
T1C2E07DF320105851EB185EF5D56AE2A1F13A94928FB559C54080A57777004793390620
MD5 SHA1 SHA512 TLSH

Submit Download

cb0337ef75a89f0a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cb0337ef75a89f0a_0
Size 82KB
SHA256 e1a406bf56e4203b88e01525b4d90a17813ac45e6fb7317185b6d020faf83ef4
MD5 36eb7683e8e72611e7c0c5ab5c1bb9ac
SHA1 bee09d24a33129a10629efe651cefb3ff88fdc33
SHA512 869ecf4f000be36dd082a77ae3906c6de57d623e0aba1fd80245ea6d8245a27f06b9a0c5b80e1d28d8301818a41943250758030a0ffc3836f08ba2969ecf858a
SSDEEP 1536:cCAMSU+UwYx7SflAubkmbdIsS8Qxb9tGZ7I:cCAjU+KSfWW3dzQxC
TLSH
T1DA83941567A1BB36CF2663F542A2C9177635848D3ED7820326F0A3353C6B2FA5D5AC0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 f2142c0bed22243d8732412881a5f7a77c4aa373572795ff0d26d19bcbbb9add
MD5 4539ec1573f567de65c3c3c6bcd9c22f
SHA1 90ebee5f436fbc3ff3569efd15e2819c2cd29f33
SHA512 603959843870c69ec95a1ff9109b261114762bbd397b8b78526dbebab7b4a523eaec2c44090cd2cc8061326e99678777f548d71fe3485147dfc9ac9e4236efe4
TLSH
T1AA81A6F031B341D0FB6442B3B3E1C866383054A450A71FA232E6F5755D877A5A8E746F
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 a8a3df6798b1dbf5fea70f0f24abbb34ba8d6a3cea2520a7b244c09fcec982b4
MD5 434c48ec086a2913bba5fa99daf3089d
SHA1 d42f1d908651f9f30aafb66326e31896f8bd78ed
SHA512 755b6e310df2d99d26fd3ef4b596cd35b06d0dc6d483140a0452194349ff847162a9eb1e73d74afff2cec7cc369f46512eb4e6dec49572a894a31d0659eb2117
TLSH
T1998171F031B351D0FB5846B3B3E1C8A6383059A410B71FA232E6F57559877A1A8E786B
MD5 SHA1 SHA512 TLSH

Submit Download

103874de-0011-40f6-ade5-e2fc8ce2a945.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\103874de-0011-40f6-ade5-e2fc8ce2a945.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

798833e2-f642-4197-ad91-41c413c94703.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\798833e2-f642-4197-ad91-41c413c94703.tmp
Size 38KB
SHA256 ddddfb747d1fe1cf81381f5fb0f5e67d4145e23a3203097df1004ec2a29fc5f0
MD5 a884c9112a5bd589f9c7f885553168f0
SHA1 45da2c34755f2a2045a86bfe828d51475b720454
SHA512 84f24042ef947b0027e2f0b2d7bee7bcefe280ad26c912e8290b39a5defae8f0a45490d39a7489adac60134bb5183444ee966460e71bceb1d3c1adefa16fdf70
SSDEEP 384:D2nGO10nJVGNxMZX5h/y/WQga5ifDsBD/wDgYgHYx2n9acB+SnCroZ/RCqhW75Jn:PMyHX9vEpXtuHuGMJ8R
TLSH
T1CC038AE2C6DC462EC85216F99B61F93ECF292D144B343C26C9DA9E4EE3D2071D255E0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94880b0f-3710-4b3f-bcd3-bb33bf00279a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\94880b0f-3710-4b3f-bcd3-bb33bf00279a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

f4bf32a9-3d9c-4e66-bf36-2e7f7f18cada.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f4bf32a9-3d9c-4e66-bf36-2e7f7f18cada.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 169c6bd2b9bf96c55a2f0b62a42663f37125b94a7f442aeb6afa701f1f3b7352
MD5 d99fc03d2e99f17bc4bfa91cbc3ba4ca
SHA1 c3bc937d01070b080827edc35a495ffcddf3f45e
SHA512 09bcc0cfd8a01bb65d83c756ac9e50ff85836834500677446a1105046858d96a1337755fbb62b933eb110ef389c6cad8d26f8dadffaadf5c42f7c8a7f6834373
SSDEEP 48:K08i8t8w8c8i8A8g8xb888L8sIS808xK98418C8xx868hY8j808g8SyLgvmqwaO8:KMkQKxKqG3OKMMDVuKmcKd
TLSH
T1D291619034BB060538BD29484369966A425131F27048FD6F7BBC51F2AE2EF444EFFAC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c4cd83b2-d014-4b4c-9ee2-c93f2143eab0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c4cd83b2-d014-4b4c-9ee2-c93f2143eab0.tmp
Size 10KB
SHA256 3a9888f8d0ab4b0492c1fac89cda7e6388b6e775b13ec45cfd1fce0e1df705c3
MD5 5ff6fadca1fc92fe310d05169588b9fc
SHA1 d2e70d0f279325d7342f00f0a183a88ae5698529
SHA512 4d9ddc2047986d7ef2d36b0e289e4350921a431c5e84f908dd0facf4d82dbbc273373cbc0c3ce87caadf82175d0ad2742c23bc970ceb0e7db8307bfdce1a2f21
SSDEEP 192:sxZY7RgWOO/fuQs1OwNIdpNlYHW6+WNIlS/Y36H+m/Ig/JMBJ:sxZY7lOO/fuQs1Owu0Hb7/X1xML
TLSH
T14C22C8526E38697B4CD7D20EBA15BF53D2FA503651D01E58EAFC851C05E76DE220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db6d0bbd-924f-4205-a4ca-f8ed1f40b14b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\db6d0bbd-924f-4205-a4ca-f8ed1f40b14b.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

e3863ee0-abf7-479d-b7f0-4323f113ef93.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e3863ee0-abf7-479d-b7f0-4323f113ef93.tmp
Size 11KB
SHA256 d1d6609eab75e336a20584d750281262b6e658eafec99ea837bdda0e019ac7bc
MD5 be0b02103d4b9352bbfcedc1fcd7fe47
SHA1 b8987f9f7095cc113f8ac0d46211eb35dcff00e3
SHA512 082c54726e02d41e4ec869225e154339ea6520fc65d9a5ec922f2b466caa853416f3c5096ddbcfabe3518de2d2b76c4724e189dd85b8b9fac2e5bc6ae4a53454
SSDEEP 192:sxZp7RgnOO/fuQs0rNIdpPqlUHW6+WNRmvbXY36l+m/Ig5kJMBJ:sxZp7IOO/fuQs0ruBHbAXXj6ML
TLSH
T10E32C852AE34653B8CD7D21EBA55BF53D2FA503651D00E54AAFC852C05E67DE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f02bb484-3c93-4d74-a6a6-d7654b78af6d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f02bb484-3c93-4d74-a6a6-d7654b78af6d.tmp
Size 12KB
SHA256 8f21ef15bebe04df379902375b909a3d90e88e9255a5d1899d4a2cca89c53ed3
MD5 d7076111e8e3a001737ffdb6a8d71bbb
SHA1 ddcd38f0d116fdc5f9da0b0324383184fc9cfdad
SHA512 e4793acd153882bd3bdc37e711d096780d52c8bcf15dfa21b9419671fe83c03876674a71c4ed3878b6359e72de47b5c3eff787a6819387627445d8facb60be5e
SSDEEP 192:sxZp7RgnOO/fuQsUlNodphqlLhHW6+WNoGE0Zp6PdY36GXm/Ig5aJMBJ:sxZp7IOO/fuQsUlGIhHbr+dXx0ML
TLSH
T19F42C9526D38653B8CD7D21EBA55BF13D2FA603251D01E54AAFC8A2C05E6BDE234780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66d1985b-d03f-4ef2-99a4-e0fe08b7a875.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\66d1985b-d03f-4ef2-99a4-e0fe08b7a875.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 71dc0892489c723544d64a4cac1f3cc3d30e2c2d2dcc4f948ef26044906c8678
MD5 438a5f0948a2f76aedd1e083c1cfc2f8
SHA1 542424eda90188f8cf6fa4ae8e660f1312e7b5b4
SHA512 44ba81d69734942a4744772f9fcf4c5eb6893bea9bc716dcba1b463016d5834abba58cf06a5eaabcfd00bed12d3a366d40d2438605efb81207a47b2c1f0275f3
MD5 SHA1 SHA512

Submit Download

b6a5783c-1482-4187-b580-b58f4a4be15e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b6a5783c-1482-4187-b580-b58f4a4be15e.tmp
Size 392B
SHA256 b7cf421fb9b22fef57ed6e3943634998db6d67a3f0cc7270d63fd3895fdcc946
MD5 cf713cae42cd298a36a327ce71faf091
SHA1 63b718a12685f6acf835bd104778c860acafaf8e
SHA512 f92a800c8fe21fdce7e8192e1fbc720fddc239dee661e7ea20fe10994966236e7b126627277a5b77e61932560dae839b40bb0602029e28e82dd78a7bee5594cd
TLSH
T13EE00202570003D6C019033004831B1027E2C43502A307074E1501945C137411D20F50
MD5 SHA1 SHA512 TLSH

Submit Download

b95d5764-fc70-4615-8b53-c5cfe26ab522.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b95d5764-fc70-4615-8b53-c5cfe26ab522.tmp
Size 8KB
SHA256 d059ea39a762a06591c0c151a2fb467c1eb3dc1169a70a4f968557ee457fd57b
MD5 19d7d972b88edb62da230e90491f3f8a
SHA1 aed0291733c0a72efcb41b6213a364781be8f1b2
SHA512 e917a06c7d8c81dcbd3f9204bf6873284b9d8d9d63a53bf70ea59df44da1d9c5f6654f4a943e741246a58276f10817bab3160f0ea769249d28abe2422c1044b1
SSDEEP 192:JONr6JUEQmiUy8REo//p+GqLc5NxAqxB8U6:JONr6+U5Eo//p+GqAZp8U6
TLSH
T1E612F835A868AC3B4DA2A591F04336239EA45177DB855F94DADC2F2C06DF1AC5307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c00cfe25-7a50-404f-ba58-576b612c5366.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c00cfe25-7a50-404f-ba58-576b612c5366.tmp
Size 21KB
SHA256 9fe198ed0823c3e90c0405df66a57f3792b89006eeb55ae9f23253a06efecf54
MD5 2ffc20bb84abd8aee92fbca6c65d62dd
SHA1 7ba88339de197f8a2f48998d11729721527fa83c
SHA512 05ab4a7d3aa5c65acd9ef5bf61e9fd1f70cdb0e7a62dfd5c5303e9fd1e1cf2f862c1ec84e27a54186321a8a47decd76e0d8cfc484d01eee7b087cdfd826cab2e
SSDEEP 384:9iFzQkUSvGcsNg8TUNTUlIlHQL30Qtb5FtEh//p+GqAmdp82IuuoIIl0:0FddJwg6r7zI/hZmdm5uuoLu
TLSH
T1B4A25C325898EC3B9EB79A50F50A3613CEB450A7CA949FA4E7CD9E2C02DB1DC1347D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ec85e040-5db2-4252-a507-2f006a8a7b87.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ec85e040-5db2-4252-a507-2f006a8a7b87.tmp
Size 18KB
SHA256 40c0bebbe3f0fb110a2c52e2337b08c9a6996f3836ead8572243b6700d6f32e1
MD5 173758e21f3c8495332d0fc40a5d9b50
SHA1 274685374dbf0b4deb826edab5d80c39382fd33d
SHA512 d87095772e0c10d31a2a30b4d952c5915a6d86480d8b81d1857adcc5651e19914fb61673e0d4067885cd8f52f4ea342d0c06234d280e49ab6db9e8a8e6133851
SSDEEP 384:/QkUSvPsNKHQL30Qtb5RtEh//p+GqAwp82IuuoIIl0:BP6r73I/hZwm5uuoLu
TLSH
T11D827C35A8A9AC378EB7D550F10636139FB4906BD7C44F94DACDAF3C06CA1AC1347A16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69a8e148-a521-4aee-9f00-2652dcd58b86.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\69a8e148-a521-4aee-9f00-2652dcd58b86.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9ea2e36acc26df9915189630f0f3eea4f292551a86bc60d0d4fd8d42ddf3cd60
MD5 cf50f9301bc21fc2f34702ff755ac5cf
SHA1 865a6d2eee7e0c2d1973abafbdf0cb941ed310f8
SHA512 ca509c9525a7149b1bd33665eb976c2ac04892cd68fb88937ef0d5b29e6e40263c15020bae053077a2c5ef0b409fa290e8713a9606f73db7c8b4e3f309782e9b
TLSH
T1F0412B5CBAFA1108B3B37E4AABF2A86D447BB9332E06C05D50110D4E0A33B40C9A1B37
MD5 SHA1 SHA512 TLSH

Submit Download