hxxps://app[.]mktg[.]genesys[.]com/e/er?utm_medium=email&utm_source=eloqua&utm_campaign=FY27_Q4_NORAM_EVENT_XPR_NY_Broadcast&utm_content=FY27_Q4_NORAM_EVENT_XPR_NY_Broadcast_1_Invite_1&s=1260946616&lid=15420&elqTrackId=1a2505d70043460aadafc331ea6c9f4c&elq=62a82f20a33b4d1bb3e3f884feb7f293&elqaid=18545&elqat=1&elqak=8AF5FA4AE68CE495F5BA58D540322F3DE6FEE2FF2CABF1FD1E5FC7CAE84B2D682BC7

Analysis

user interaction
yes
max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/10/2026, 16:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://app.mktg.genesys.com/e/er?utm_medium=email&utm_source=eloqua&utm_campaign=FY27_Q4_NORAM_EVENT_XPR_NY_Broadcast&utm_content=FY27_Q4_NORAM_EVENT_XPR_NY_Broadcast_1_Invite_1&s=1260946616&lid=15420&elqTrackId=1a2505d70043460aadafc331ea6c9f4c&elq=62a82f20a33b4d1bb3e3f884feb7f293&elqaid=18545&elqat=1&elqak=8AF5FA4AE68CE495F5BA58D540322F3DE6FEE2FF2CABF1FD1E5FC7CAE84B2D682BC7
Sample261026-trdhtae14t

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4648	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{DC41BC08-96C5-4EEB-BC95-32F9F1530F32}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4524 wrote to memory of 4572	4524	msedge.exe	85
PID 4524 wrote to memory of 4648	4524	msedge.exe	86
PID 4524 wrote to memory of 4160	4524	msedge.exe	87
PID 4524 wrote to memory of 4160	4524	msedge.exe	87
PID 4524 wrote to memory of 4160	4524	msedge.exe	87
PID 4524 wrote to memory of 392	4524	msedge.exe	88
PID 4524 wrote to memory of 392	4524	msedge.exe	88
PID 4524 wrote to memory of 4852	4524	msedge.exe	90
PID 4524 wrote to memory of 5636	4524	msedge.exe	91
PID 4524 wrote to memory of 4852	4524	msedge.exe	90
PID 4524 wrote to memory of 4852	4524	msedge.exe	90
PID 4524 wrote to memory of 5636	4524	msedge.exe	91
PID 4524 wrote to memory of 5636	4524	msedge.exe	91
PID 4524 wrote to memory of 2704	4524	msedge.exe	96
PID 4524 wrote to memory of 3360	4524	msedge.exe	97
PID 4524 wrote to memory of 2704	4524	msedge.exe	96
PID 4524 wrote to memory of 3360	4524	msedge.exe	97
PID 4524 wrote to memory of 2252	4524	msedge.exe	99
PID 4524 wrote to memory of 3856	4524	msedge.exe	105
PID 4524 wrote to memory of 3856	4524	msedge.exe	105
PID 4524 wrote to memory of 3856	4524	msedge.exe	105
PID 4524 wrote to memory of 5092	4524	msedge.exe	106
PID 4524 wrote to memory of 5092	4524	msedge.exe	106
PID 4524 wrote to memory of 5092	4524	msedge.exe	106
PID 4524 wrote to memory of 4428	4524	msedge.exe	113
PID 4524 wrote to memory of 4452	4524	msedge.exe	114
PID 4524 wrote to memory of 4620	4524	msedge.exe	115
PID 4524 wrote to memory of 4632	4524	msedge.exe	117
PID 4524 wrote to memory of 4632	4524	msedge.exe	117
PID 4524 wrote to memory of 4796	4524	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://app.mktg.genesys.com/e/er?utm_medium=email&utm_source=eloqua&utm_campaign=FY27_Q4_NORAM_EVENT_XPR_NY_Broadcast&utm_content=FY27_Q4_NORAM_EVENT_XPR_NY_Broadcast_1_Invite_1&s=1260946616&lid=15420&elqTrackId=1a2505d70043460aadafc331ea6c9f4c&elq=62a82f20a33b4d1bb3e3f884feb7f293&elqaid=18545&elqat=1&elqak=8AF5FA4AE68CE495F5BA58D540322F3DE6FEE2FF2CABF1FD1E5FC7CAE84B2D682BC7
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7fff30bac188,0x7fff30bac194,0x7fff30bac1a0
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,5053500721049934464,17854793656351913597,524288 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,8346208351027657571,15520854242146925263,262144 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:2
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,11992513839075311388,15531067132044189197,524288 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:8
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,7096297882839159256,15100670509478972991,2097152 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,8922574749996423185,11941058841304968765,2097152 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,16269711846506921842,8937873007791428301,524288 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:8
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4948,i,1737314523752507568,15512576855386002695,524288 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5772,i,12656112841212261442,13434338322185512515,524288 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5772,i,12656112841212261442,13434338322185512515,524288 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=6040,i,5219700861216467951,13151342160263259128,2097152 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=6216,i,5775468644455881070,6478442639230403571,2097152 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,5355657612807595987,11092436658688274351,524288 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,5493147955300092253,11325156627248493183,524288 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,6450840494125200464,11723698663532412169,524288 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:8
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2092,i,16954353719897616697,9406013349881790207,524288 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5248,i,8174839715644632173,15905613938472410835,262144 --field-trial-handle=2416,i,16879819798735959656,10233375398700678171,262144 --variations-seed-version --mojo-platform-channel-handle=764 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4796

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4796

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5440

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0016148a-b170-4660-b039-67f59fc8d4a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0016148a-b170-4660-b039-67f59fc8d4a9.tmp
Size 25KB
SHA256 c98c98b40e38f4c7e82bb99949f2a289f1bafec35ffc7e6297f3da38f55bf8af
MD5 a26d08832cf574427b773a3bb7f77204
SHA1 82ae8cd5af04ecb4806699584de7080a024ccae7
SHA512 1c80b916279761493228750908c00d2c4b6cd2b48e9f3c0a2525a775ff0fa85b1297f9cda79b1b8f6062344880b46358cfcfea53c2d5827351a607c73ae9f038
SSDEEP 384:n/iFiZcI63sN38TUNTUlIm2aKMik4w2f0BChCAQP4XE87O6R2FeoZgL/7IzEoj:KFQ63Wwgc7ZBChFQwXE87TRrg
TLSH
T1D8C25C32EC98CAABEDFA8F99A74E3A47EEF00163949C5AC4D9D81D1D009359D1707C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

074819e9-cf29-4e4e-b7aa-b06ce17d3cbd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\074819e9-cf29-4e4e-b7aa-b06ce17d3cbd.tmp
Size 32KB
SHA256 ff78aa5d7c90167a0dcb628c47fca2d0e4a247c1ec538ab75b1f43ea1b878f99
MD5 921dcbdadcba73ccf028b0b90eb00ba2
SHA1 53fcef38b78cfa4072931103ecf5206a3763da70
SHA512 d3f4933862ee5b08400cbbfe3a16a1991a2307423b4d153d1d5bb83d98ec9e381d40b9de11ecde8be9d69bc991ae3808beb584a7f228fdf53ff2e0224cfc4429
SSDEEP 384:nXiFzQkUSveO3sNv8TUNTUlI4vaKM8aLw2f0BChCAQPwuosErxNFskBQgL/7IztB:SFdJ3mwghReBChFQYhsErzFsOuLt
TLSH
T1F3E2B1F298D79977D9EE4B97A33D2D4299FCC113B4881A94B7C81C1CCC961BFD20A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

99d48e16-d5ec-474d-a8d6-bb1506ce675d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\99d48e16-d5ec-474d-a8d6-bb1506ce675d.tmp
Size 26KB
SHA256 a9530f7879ce0095ba1e815f619430c94a510100153b650832cba94d998dfb9d
MD5 2ed4aa2a84fdc7208b2839c3deeb7e6e
SHA1 8b05a5a0075cfa2eceff72c9162f0ab90a6da1c1
SHA512 6359b3182c6f3f1b30468a215fd0b3d6d6dd1db5ce72ccefc4ed5a317cf07c0e360ace63fd580663016125564edb89f35b737bc2f17b8b96b9bf9d09e5acf592
SSDEEP 384:nHiFiZcI63sN78TUNTUlIm2aKM8uow2f0BChCAQPwuzkEr7O6R2FeoZgL/7IzEoj:CFQ632wgcpJBChFQY2kEr7TRrg
TLSH
T15BC25A72EC98C9ABECEA8FD9A74A3543EDF04263D58C9AC4D9DC1D2D009759D130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

202c150a-a7ce-4731-943d-f451bbde189d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\202c150a-a7ce-4731-943d-f451bbde189d.tmp
Size 12KB
SHA256 eeea666951cd07947e1e470c4aac54f67ee6ead3d39a96ec7265c61b395d6a0d
MD5 7feba0f780c11be81dbbf5618c58cdfb
SHA1 086e3d0378fa713ff457e23aad2a4f03fc3696b8
SHA512 173ee510cdb2b3ade7e5efdd6c05f623ce712b892f35dec88e1f42523d0517b08a3ded8ab8007f86a8e8a423a88126743efe61364c2088191b5a646a915a80c4
SSDEEP 192:sxZxRnkN/fys3aQZL/8DzodpsjHW6+WNgyp/YoPA/S1cIg57t9J:sxZxeN/fysqOYYCHb7/wSuptH
TLSH
T11442D8556D28A93B8CCBD619FB55BF93E3FA503290C11E48AAFC8A1C14E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27b4e3a0-7f46-487f-abf1-420e706708bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\27b4e3a0-7f46-487f-abf1-420e706708bf.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

5ec68926-e866-4aa2-8211-6047945678c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5ec68926-e866-4aa2-8211-6047945678c1.tmp
Size 12KB
SHA256 847274fe84f0faa0b8efd4776a2f4d271d40b318441bb7f71ab92efec72bfb71
MD5 17386be5f87c7e235fb3ed9a40d6b1b6
SHA1 849382e9e35b03cdac3ca9687db7a3792d1a777e
SHA512 5ec7525642f7f6a620cfd36d449914b693ee4477042130102efb1c620380ba68744b98efc42318eaa579594cddc58ffeeb3c6d7f3c94758ea94201b4c1522c6f
SSDEEP 192:sxZxRnkN/fysbQZL/8DzodpsjHW6+WNgyp/YoBA/S1cIg57t9J:sxZxeN/fysbOYYCHb7/ySuptH
TLSH
T1E242D8556D28A93B8CCBD619FB55BF93E3FA503290D11E44AAFC8A1C15E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ce4b5e0-70bb-4a6d-b0d5-84416a8c3d9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6ce4b5e0-70bb-4a6d-b0d5-84416a8c3d9d.tmp
Size 414B
SHA256 49854f43c1c0df647cff6828adc5b8f1a55579f1155e059b744216e5d8b240af
MD5 cbaea0bf745e21bdc91e5f30d20eae3a
SHA1 a193fbf2c32a631b4cc1f01a1be9eeef30a9cfa5
SHA512 f629c714fb7c5b43a9765d69d1424dcafa5a44c7460cb9c6e0559249cc68257dfb32ac6c0acb00125250e9cbbe928898978ed898e2315fa0ec56e3fd97463be9
TLSH
T1D4E02BEEC811EC3B1CFD1F7954640345F74013672A409C4B3B3D80188FB053A458686C
MD5 SHA1 SHA512 TLSH

Submit Download

8b3eeba1-dd25-4d92-879a-da2e3366897a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8b3eeba1-dd25-4d92-879a-da2e3366897a.tmp
Size 11KB
SHA256 3102244f9b59edc7bd24692e3ac8507efbfb56ace3a0455ebac5a90d95bad6f6
MD5 e945bc4d8cd4e1f03c4699fef6a555fd
SHA1 8e5ab0a5ff4853770a25d3bfb13775a8ba9ab17d
SHA512 90c9bc1676d0fa8f65b4cfc178e17b021dd9a90f1b45f51fb605753daf939f127f544de2a845ffd9df378cdb53bd7fa7929f9125508212ddfed463e47e5a5912
SSDEEP 192:sxZxRnkN/fysGaQZL/8DzodpsjHW6+WNgyp/YoPA/S1cIgjt9J:sxZxeN/fysfOYYCHb7/wSujtH
TLSH
T1C942D8556D28A93B8CCBD619FB55BF93E3FA503294D11E48AAFC8A1C14E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003f
Size 127KB
SHA256 6909c6145bbda5d6d59dae828408ebaf4e1461ab37d1c8c0972eba2f1be584e2
MD5 adffdba2b136e143eed3fdad467f6b01
SHA1 1df613eae7946fedc19de933d65cbd5cb81d230f
SHA512 7d938d5bf7f6dede7b6a88e1ea73b19b702d5d8485b55eb43db671633735c8d8f30266a7f1f8a056b0fd28fdfc325d1d0aa7a1ebfab017a047a78b3f0ed349c7
SSDEEP 3072:HSfdKv/CbJdp3Ns15NB1GYag0MvI74Yfwm7BbaFKU6Q2NZS:HSU3+Tpc/Yf9s4SYw
TLSH
T152D312FC7CA83C7994E408321AE6209DBC46251F9CB61723B1CDDEC1B96147BBADD680
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000041

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000041
Size 649KB
SHA256 7352cd3cc6a7f7664079f262bf8b99f350fa8b5179df6a4b9f2b42d77b6904e4
MD5 8fada7ae9dd1d4fa9ac023cc45faefbc
SHA1 92efbdc23fdbb2fe3267f8a84442bdb37698227a
SHA512 0223fc6a7c0f82163abe09faee2bca90ea4abb0127fd84433b783fb3cb8c500c47a4add1ad517b1f5dbea82c00f9113c368ea4587f98ebfc137ba599499c9d5a
SSDEEP 12288:90E+YvZl2Glwp0qe1n9hDh4givYF2Om+akadXc14QfuY2P08aGqJYySNxo5/zlZ4:65YqqwyT19h+gigFDmXIHzU08EUNxo5c
TLSH
T1F3E42397215F433BD37D0026007A773B2E627F30234704D62E191BADA6DD968AB472CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 4e62dba7576a9b4ef70b766d0515142bd605d3e83fb43b230236800439e386fc
MD5 de40a588d4b93b5859ebc8b12de96e91
SHA1 ec033c79f7274b446bff89792574da3986c4fe9a
SHA512 5c93f5cf16db97792c52df33d467aa6a88f22f0eb7db5e36b78c84b2cd35420267f9d0057f5ddfdd95601f2a622978c0087cba5c3bb5574bac6dfb813c0975ba
SSDEEP 96:s5wcDusQVbZEl9gtnOfpbWMaS8O4QnMc6S+ZYE/c:s5hu9VblnOfpbWMHZ4bc6S+ZYac
TLSH
T1E181A74165EC54A1FB691A7B6CF11DB3B6B40523FD870E3E0D9AE3B824C37D894642B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b324cc81-fdb9-48ae-82f7-92621e11ad86.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b324cc81-fdb9-48ae-82f7-92621e11ad86.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2dad17f9-cbb7-4e14-8884-b74e8f3b9bf8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2dad17f9-cbb7-4e14-8884-b74e8f3b9bf8.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

916b73fa-b82d-48fe-a814-654a76f2e3f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\916b73fa-b82d-48fe-a814-654a76f2e3f4.tmp
Size 9KB
SHA256 fbc3c9058641632f5a2d378be2984e8a6ab705f870ecc6284713a412b86028c0
MD5 b76a5c1107612ef239309db4f66198b6
SHA1 c2ddca7900d1daac4f947ec06eae2f28bab48c37
SHA512 836934042ad359638fcbc55a97d8f777e29ad39d44cf63119447cd299ac494ed385b2b5f6e0c3cff49b1c4b0832ca965cccee7f2a805aca1c38d1273511897df
SSDEEP 192:D1Dba7aaOOBGBLpK+aaGf1AKNoGiGGRlPA6/AeAIgEIegSxGa0fTugh2sl4gVREE:D1DbUp10dpK+aae1AKNoGiGGRlPA6/AF
TLSH
T1161279F783A4823DD92151F4AB182E1FCE29282503AC7C37C9E6AE46D3E2871E14575F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e3182c4-81d4-4095-92c8-ebffc77e19e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9e3182c4-81d4-4095-92c8-ebffc77e19e9.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ee36d529539ecdf7c09e044778e14cbbb24fd4b3\index.txt
Size 146B
SHA256 2322d8a98cd9100a222c97e1321fb047600ff91511f54a7c474c524203a9ae2e
MD5 ed710656ab1784ef5a5551e88827681e
SHA1 608ec8d459d14e7505332c9c99e2a695b5f6d45e
SHA512 c9cf02dff30999bd48db74e597340f4a79868f771545b1ab46af942aa025576e61e8a5881a22062652e99664ccd2c1dd9d4f9dc5b049e9b6704452ec58655821
TLSH
T11BC08CF28288D3000A215CF2203D71D68A5A6CE4AC80A1A8E41A3600A530317C11AA29
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ee36d529539ecdf7c09e044778e14cbbb24fd4b3\index.txt.tmp
Size 139B
SHA256 c96b5f38ec051a4ec0f1a55a96965397334fe701adc6c5df6e3fe5abb469816a
MD5 d8c3ad923202dbcc2181b8a4616cd902
SHA1 223c56ee872ce303431fcea449e015479757291b
SHA512 1f650fae2ca2c24a89f85aaef249f8c206848456763b6713fd448ce77376e7e69db2c2ec6b4679f08357d03f17173244ae0aa49e5566b54d893e6a39e74e74a5
TLSH
T1F3C02BF38248D3000D259CF1343E71E7C64E60E4BCD161BCE4191600F600317C05BB29
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 3a2fedfab771229b7471eb701506de50b11bd28de6e9ce937ad6e9a400f33764
MD5 06a03a72f0a55e635c03e2e9b8239f5f
SHA1 e7d209e1c8eda262547ab75620cbfae7b158b17a
SHA512 3b78f7795d2bda50fab77484d24c08b0a01a9f4ab3db7fe9727cf78682d39f32f40437522f63980d5fe4ffac4eac802eca5fdc2f4aa582f0fe5314924db85f13
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgE:ST/2dXOJhJlpfnpp3tNXVrN38I5pA
TLSH
T1E2B2211571BB425039FE394891B69B2E064231B33119E66B7FBD00B68E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

dbb62aab-d189-49c3-ad31-17c848715af8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dbb62aab-d189-49c3-ad31-17c848715af8.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9f57652-f25a-4a05-b0a9-eaa4c701aa2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a9f57652-f25a-4a05-b0a9-eaa4c701aa2a.tmp
Size 26KB
SHA256 14fbbf8a275b941161d4de1801a1298d5a1f116a16b7d0c0d6ec82e96c4cd600
MD5 538b734244951c6b785939c8251c82ba
SHA1 9aaa9e491eb10e5c2897e5d273c117f958659c73
SHA512 e8f1a2b39696a6e0dd38620e15140da7529a63dbb0563d4802ce1b18162bcf983d419359f3871000dd6b03d8a1e64affe577debaf5b2b31f3938d12693a9b8de
SSDEEP 384:n9iFzQkUSv73sNv8TUNTUlI4vaKMYXLw2f0BChCAQPwu4kErxNFskBQgL/7IztIa:0Fd73mwghIeBChFQYHkErzFsOuLt
TLSH
T14EC25B72EC98D9BBEDEA8F95A31A3643EEE04253C48C5AD4D9C91D2C00D71CE530BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee092f6a-f586-480b-b4c3-2ab8282e9837.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ee092f6a-f586-480b-b4c3-2ab8282e9837.tmp
Size 26KB
SHA256 70d02ec2f028760a11777d1e7c79f1722abb8f50adc992a082415ca6748a44c3
MD5 260c2652a481897db1407ec85ef09612
SHA1 040a37c752928f69ff631c754da647ca18b18663
SHA512 d2969d4b9e996a5fce8af611a53c0ec51fd22e41fa9657d22c6a920fa084748f51b042c535894af88651996014faa77ca5ccfc23462dde35ca3f9b415650966c
SSDEEP 384:nTiFzQkUSv73sNv8TUNTUlI4vaKM8XLw2f0BChCAQPwu4kErxNFskBQgL/7IztIa:+Fd73mwghYeBChFQYHkErzFsOuLt
TLSH
T10AC25B72EC98D9B7EDEA8F95A31A3643EEE04253C48C5AD4D9D91D2C00D71CE530BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 25f3530b6f380d7c0cef0e251037c671c1a7b7752f21d172345589680b878bcd
MD5 1ee7733e4c43072cc39f6a2b4b75e72a
SHA1 d7c439b2b7b137d9254f6cedf2b5b12ba1d998aa
SHA512 2785b3a2fba64f7b087a046fd859524849800387464d281e586c21dcc8f5ffc5d26ab545c23f44b43a858d95a279d85e03dcf33224a002ee1a9c6ee1e7f198b8
TLSH
T163410558A6F91108B7B76E5AAFF7A86D487FB9672E06D45D10110D8F0722A00C9B2B37
MD5 SHA1 SHA512 TLSH

Submit Download