hxxp://curier[.]ro

Analysis

user interaction
yes
max time kernel
148s
max time network
149s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
26/10/2026, 19:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://curier.ro
Sample261026-xtcabagy4r

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4136	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2814447569-4053889695-374664695-1000\{C504925C-E7AE-4238-8D6C-595AAA779D57}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3988	msedge.exe
3988	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe

Suspicious use of WriteProcessMemory 62 IoCs

description	pid	Process	procid_target
PID 720 wrote to memory of 1680	720	msedge.exe	84
PID 720 wrote to memory of 4136	720	msedge.exe	85
PID 720 wrote to memory of 2856	720	msedge.exe	86
PID 720 wrote to memory of 2856	720	msedge.exe	86
PID 720 wrote to memory of 2856	720	msedge.exe	86
PID 720 wrote to memory of 1496	720	msedge.exe	87
PID 720 wrote to memory of 1496	720	msedge.exe	87
PID 720 wrote to memory of 2356	720	msedge.exe	88
PID 720 wrote to memory of 2356	720	msedge.exe	88
PID 720 wrote to memory of 2356	720	msedge.exe	88
PID 720 wrote to memory of 4652	720	msedge.exe	89
PID 720 wrote to memory of 4652	720	msedge.exe	89
PID 720 wrote to memory of 4652	720	msedge.exe	89
PID 720 wrote to memory of 3060	720	msedge.exe	91
PID 720 wrote to memory of 3060	720	msedge.exe	91
PID 720 wrote to memory of 3060	720	msedge.exe	91
PID 720 wrote to memory of 2548	720	msedge.exe	92
PID 720 wrote to memory of 2548	720	msedge.exe	92
PID 720 wrote to memory of 2548	720	msedge.exe	92
PID 720 wrote to memory of 4036	720	msedge.exe	95
PID 720 wrote to memory of 4036	720	msedge.exe	95
PID 720 wrote to memory of 4036	720	msedge.exe	95
PID 720 wrote to memory of 4720	720	msedge.exe	101
PID 720 wrote to memory of 1676	720	msedge.exe	102
PID 720 wrote to memory of 4720	720	msedge.exe	101
PID 720 wrote to memory of 1676	720	msedge.exe	102
PID 720 wrote to memory of 2804	720	msedge.exe	104
PID 720 wrote to memory of 4340	720	msedge.exe	108
PID 720 wrote to memory of 4340	720	msedge.exe	108
PID 720 wrote to memory of 4340	720	msedge.exe	108
PID 720 wrote to memory of 4608	720	msedge.exe	109
PID 720 wrote to memory of 4608	720	msedge.exe	109
PID 720 wrote to memory of 4608	720	msedge.exe	109
PID 720 wrote to memory of 4456	720	msedge.exe	110
PID 720 wrote to memory of 4456	720	msedge.exe	110
PID 720 wrote to memory of 4456	720	msedge.exe	110
PID 720 wrote to memory of 2908	720	msedge.exe	111
PID 720 wrote to memory of 2908	720	msedge.exe	111
PID 720 wrote to memory of 2908	720	msedge.exe	111
PID 720 wrote to memory of 2152	720	msedge.exe	112
PID 720 wrote to memory of 2152	720	msedge.exe	112
PID 720 wrote to memory of 2152	720	msedge.exe	112
PID 720 wrote to memory of 3848	720	msedge.exe	114
PID 720 wrote to memory of 4452	720	msedge.exe	115
PID 720 wrote to memory of 4316	720	msedge.exe	116
PID 720 wrote to memory of 5848	720	msedge.exe	117
PID 720 wrote to memory of 5848	720	msedge.exe	117
PID 720 wrote to memory of 5848	720	msedge.exe	117
PID 720 wrote to memory of 5880	720	msedge.exe	118
PID 720 wrote to memory of 5880	720	msedge.exe	118
PID 720 wrote to memory of 5880	720	msedge.exe	118
PID 720 wrote to memory of 5944	720	msedge.exe	119
PID 720 wrote to memory of 5944	720	msedge.exe	119
PID 720 wrote to memory of 5944	720	msedge.exe	119
PID 720 wrote to memory of 6024	720	msedge.exe	120
PID 720 wrote to memory of 6024	720	msedge.exe	120
PID 720 wrote to memory of 5260	720	msedge.exe	121
PID 720 wrote to memory of 5260	720	msedge.exe	121
PID 720 wrote to memory of 5260	720	msedge.exe	121
PID 720 wrote to memory of 5176	720	msedge.exe	122
PID 720 wrote to memory of 5176	720	msedge.exe	122
PID 720 wrote to memory of 3988	720	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://curier.ro
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x308,0x7fffe3dac188,0x7fffe3dac194,0x7fffe3dac1a0
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,9092382787176174318,81013007067021811,524288 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1772,i,10155858658543064869,14037153005110064448,262144 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=2812 /prefetch:2
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2320,i,2129011052317903004,16301209352743511226,524288 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,7116820083777833804,18197778803655571393,2097152 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,8061146298424110249,16503974239619450934,2097152 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,8754674849759442098,14169506418990565852,2097152 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,7745079407936286278,11259832576185661677,2097152 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3420,i,2350217318249441280,4491944094451619048,2097152 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3388,i,6911878345988514965,4796653117706928485,524288 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,12927978970687151528,15540862500366507004,524288 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:8
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,9342288860447213856,2164700926266780857,524288 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,9342288860447213856,2164700926266780857,524288 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5828,i,6348536715400535363,12040983619509672202,2097152 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=136 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6192,i,10963004531349023320,16023116787524355376,2097152 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6288,i,10738500108927491862,5688583980916067064,2097152 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6448,i,16730820141795587723,13304758843848574247,2097152 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:1
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6496,i,18359658009568963032,3667971018816067436,2097152 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,7842860803364490671,11974057529614209196,524288 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:8
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7040,i,17678710067517616210,7162292205144068889,524288 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7056,i,2545325696869615977,13560041994444452332,524288 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=7348 /prefetch:8
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6224,i,11102836206340731284,185964968127021968,2097152 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7136,i,6321676492401500024,11845172913454506916,2097152 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=7068 /prefetch:1
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7056,i,7962534741684569256,17988806449207667182,2097152 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=7100 /prefetch:1
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2028,i,12964731450247205047,14557394248760988479,524288 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:8
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6524,i,17099577713562893770,788750554446469687,2097152 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:1
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,17045319139273512133,11346236063298627527,524288 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:8
  2⤵
  PID:5176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3500,i,3768196691884591743,17189136220832977485,262144 --field-trial-handle=2816,i,5227760679130135633,1389416079075747580,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3988

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4824

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

01ee2956-e45c-4732-949e-ffe0d9d9f3db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\01ee2956-e45c-4732-949e-ffe0d9d9f3db.tmp
Size 15KB
SHA256 2ac8878e2ad9cbbbe53ddde0b9fa60390bca488fe755d236d4ab2455ac2e5036
MD5 d4dff93fdd9908a3e9ed9bb170c9c2d6
SHA1 d8d03ae46cc2696bc0ab355c3ef6ef5fb2031152
SHA512 cc0fbf7e520a84a7ca9d6c2e276b27f21c9e6e3c2bbac8ad678ce813b264e0ecd29f0f7cefdfe944a2f759ec39e19ef104522f36839c5ba8fe55445090610370
SSDEEP 384:OQkUSv0sN0UkcpLbXoO4XlOl//oodQqbp:+0iLsXlOlntdQqp
TLSH
T165624C3269697C375EEB9550F58A3603DFA49067DAC82F80D6DD6F1D01CA2AC230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

149ca7f8-50e0-4b30-be32-d802c0d1ed65.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\149ca7f8-50e0-4b30-be32-d802c0d1ed65.tmp
Size 8KB
SHA256 5b4ad827573478f53fa1d62189d230e0cfd44293e9a54187be14e30224bdf195
MD5 b47eb994daa50bf024d16976e552cd42
SHA1 0bd84dc8b487d4809821f6c9552b94df1ec46604
SHA512 492a0e327c2e03b828af97fdc1574ae01a38ee3b0cabd5a386039af900701da9b9049221be9d83feea23ad7d6d66e45a0b9a11a80f2307f8f8c9b49f8f06a12a
SSDEEP 192:FONN96owQmiUyXNpvX4iOdim/orn22fYJU/u:FONv6VWpvXlOl/MdgJU/u
TLSH
T15202E835ACA97C6B9EE7AD45F48B36139FA8116BE9851F80CAD82F1D01C769C1307C32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c3a0c78-42c5-48e3-96e1-f86aaa9f27c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4c3a0c78-42c5-48e3-96e1-f86aaa9f27c3.tmp
Size 15KB
SHA256 544ba233b0080f7392b948a67ee35eb72b1c18178b3634d96695404217ec0f46
MD5 d1e2797f0bc838515c44a9be2702e532
SHA1 fee9ff9ad2b4ca7e3901cdeab9f4fc772346f275
SHA512 754930f767c6feb3221b2455e1abb151b5fa1d2d3507c25370beadcf3c6b9b3d877d89ca1da5c691eba52d4212d229e0787d070459db39e03ec41da189ce471c
SSDEEP 384:DQkUSv0sN0UkVpLbXoO4XlOl//oodQqbp:t0LLsXlOlntdQqp
TLSH
T17F624C3269697C375EEBA550F58A3603DFA49027DAC81F80D6DD6F1D01CA2AC230BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7e8d99e8-2246-4397-86b0-e30df57ff9b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7e8d99e8-2246-4397-86b0-e30df57ff9b7.tmp
Size 23KB
SHA256 f4769b00784b94ce96ec3bb13d9dde79a2481af498c32b3ce80658b7ecb80755
MD5 1e6b2faa8345fd8f571caf3e89643d44
SHA1 64a126de37c1b3e8ebec50dfa64d6e9e8301315a
SHA512 bfde28911bb45fafbcbe3556834a0ca86e592b37e461c0867bb9f7578e25d900726d875f58662227a009a7fd33e9e67aae2034846bce5488332cdb2992045cf4
SSDEEP 384:fiFzQkUSvczsN18TUNTUlIlkVpLbX1O4XlOl//o0fdQqbp:qFdgEwgcLBXlOlnLfdQqp
TLSH
T116B2D6F258D79837D9AE9B43A77D2D038E7CC067F9845A80B789591DCC861BFD30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c576cbd-49f2-4302-8cf3-cf8dcc3c280a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9c576cbd-49f2-4302-8cf3-cf8dcc3c280a.tmp
Size 9KB
SHA256 67306ac2d1066e1d86f6d78991eecadf6c6b4114e8f0c7e65037a44d3f273b80
MD5 0192d3d4c7ce15a11c81ab4e18cfee01
SHA1 f604b73b3390ff49192712afb4b3736015f7e159
SHA512 8e5dbeb18919076a358c98b9bb20361cac664c0a75c537a0309b31028b657b38f9c9cb4c65afdce2e52f3c40007e2ddd9588c80118a8cde6ab27c32f0cdd0bc1
SSDEEP 192:2ONW6olQmiUypNqvX4iOdim//iNXPM22uqEU/u:2ONW6maqvXlOl//oEdQU/u
TLSH
T1C9120A32A9B9BC275DD79581F4CB31039EA49167DA896F80DADC2F1D01DE6AC130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7fbf286a-011a-462d-8f02-fc6d69291b9a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\7fbf286a-011a-462d-8f02-fc6d69291b9a.tmp
Size 105KB
SHA256 aa204e7f585c1f2b64ec2dfe226fcda3dd40e2d6c7acaecb8bc39c51bf5021a2
MD5 82ef5ef3fd97f3d79a47f09529d45307
SHA1 4d70248d33884063e95777b4e6e0d998931440a1
SHA512 a3e3e08187ec16facc64907edae849970f4fffaceb0ff69b6b9421c352de4ae4396f6c7d28c814160c616bf604747c73d4cf8a04f10f2fc8fa4a07c14210288d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P73:fwUQC5VwBIiElEd2K57P73
TLSH
T1F8B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4945E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ece119565cb5ea1654292803ba06971cbd385bd7bed4f8e00a3c159ecd391524
MD5 80c5e669176d41e636b49561ebc91645
SHA1 f1d4a06d81840ebfc7b69d0eaf7571112d1882c9
SHA512 6cb089daf527e445320420bde705656c35c54451e79061f31a3cb14f2657a8460a0b189300b89420c6f806f0e80e92df7c3cf3e9dafe535c2b3756bc635610c0
TLSH
T163D02B18C46A4550F023247501264BE13288A80826821002F0710275280170102DF890
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 824f8d077338df9c22cfff8221add35eb9c9eaeeb6c3d977c00b25a28d06607a
MD5 7be7c8970acc3d8ba944d7bc3c820229
SHA1 282baafddda5eb25fa4514aac0b00a2b106c7162
SHA512 026129433867da41532ea4d02467a0f16aa1ad5ffba5d699b8b980d3fd1902a017cf96dee8996acab370c37f3ee6282775659aed433b447af847b173e4400b35
TLSH
T1BDD02B1884AA4950F423247501254BE13288A80826825003F0710275180274102DF890
MD5 SHA1 SHA512 TLSH

Submit Download

138a8331-8651-4cf5-ac3d-fd72040e0bc9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\138a8331-8651-4cf5-ac3d-fd72040e0bc9.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

17523a2a-748d-4315-a97e-61a51d5e45e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\17523a2a-748d-4315-a97e-61a51d5e45e3.tmp
Size 10KB
SHA256 9afc5a06489def4c8cc2eb7e37db92e22d7b092236b8f4696e663114a6f55c0d
MD5 a97dc83061fca10352840f6ae0467bd3
SHA1 add20e57647638ad2ef1bab443a6a2546d2103e7
SHA512 2675fc8d3554ded4f51b11cf09c98da98019e4c365f5a85ae2ae03bfd2752739548871bc1c26060a7c938ea02ba1f4e34c7a1b46adc946f502d2d4ab28533bd7
SSDEEP 192:sxZfRDWx/fss1THMIdpQlPHW6+WNnrB/Yh2WJ+aIg5PcJ:sxZf4x/fss1JaHb9/+ltA
TLSH
T17932D9116E38AD7B8CCBD609BB557F53E6F9503296911E44EAFC8A2C04E77CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

258bfdd0-c49a-42d2-846d-c50536bfda3d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\258bfdd0-c49a-42d2-846d-c50536bfda3d.tmp
Size 10KB
SHA256 d83388a55fa448f7d0321d0553445e4cc43d819af7052cf5bd0795a9ffe7042c
MD5 608d65581fbdf14eafc5759419b5d54d
SHA1 b993bdacf03c3c0bb05c209cab7a8ca7e85af47b
SHA512 ec197f40fa125222ca9c582714312d3dfed0b672651c78f2f9d94494df69a531e9982e0dacf583530f4e0a13933a16a34aac3c605bb129c73bda889e3a4d4fd2
SSDEEP 192:sxZfRDWx/fss1uHMIdpil45HW6+WNnHEVYh/hv+aIg5PcJ:sxZf4x/fss16vHbkVOltA
TLSH
T12832C9116E386D7B8CCBD61DBB55BF53E6F9503296901E48AAFC8A2C05E77CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27916c56-0d25-4cbf-b6a1-929eff23486d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\27916c56-0d25-4cbf-b6a1-929eff23486d.tmp
Size 10KB
SHA256 ad3712a09aba4a51481fddcbc236ad1b1e29bb3333c0006fc8f4813f4e5e4bcd
MD5 402fa2560bf21f42a8630a7151fefac5
SHA1 0f2fb20ae7fb7ad33e63544cce078aebb3f392bb
SHA512 19e505cf39732e0c8f1cbaad876f3692ba0aa99e6b67ecac31816178c0407bd2706573022f232672e20619a71d3f2e04001b0a8337e39c1d296dd31994d6d1d6
SSDEEP 192:sxZ4RDWx/fssheHMIdpQl8HW6+WNnrB/Yhh+J+aIgrJ:sxZ44x/fsshKRHb9/vl9
TLSH
T16D22B7126E28A97B8CCBD609BB15BF53D6F95032A6D51E48EAFC862C04E77CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f8fdb73-7830-4c45-a40a-96de357ad0d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2f8fdb73-7830-4c45-a40a-96de357ad0d9.tmp
Size 10KB
SHA256 347948a2b60b1cb084c25941fcfa654b8c725f2e99b6a7854eea726e6dc368ef
MD5 07fc6ccab2d4a01962bbeecc54045ab8
SHA1 d200eaf7deb83e30e311497491562260dc09f3c7
SHA512 bef113c3ee7412f9f8cd56aef723db50f7f4e63fb80581c65ad036c0191fd96a9684b396130ee745f830e0439841195abd3220927b22cc3389690c535210ffdc
SSDEEP 192:sxZfRDWx/fss1uHMIdpQl45HW6+WNnrB/Yh2WJ+aIg5PcJ:sxZf4x/fss16RHb9/+ltA
TLSH
T11732C8116E38AD7B8CCBD609BB55BF53E6F9503296911E44EAFC8A2C05E77CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a892c65-dd49-4cc2-adab-121b784e3ff9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7a892c65-dd49-4cc2-adab-121b784e3ff9.tmp
Size 10KB
SHA256 9a017e53ef8f912e33c0be8083bd61967304dfca1406c48f089330ec5cd7e689
MD5 116e8e63c2cbab4a5b47b86f03b42775
SHA1 e46e98e5f01131d07e7478af44c088ec50e11b8c
SHA512 fcde11f33b05d8de18c28bed9f710861aad0242320ab9746b837e39c93a921b8869ddb2122568006ec499233c6a43db88d2af908a591dae1cb000f686131df18
SSDEEP 192:sxZfRDWx/fssUTHMIdpQlPHW6+WNnrB/Yhh+J+aIg5SJ:sxZf4x/fssUJaHb9/vl4
TLSH
T13022C712AE38A97B4CCBD609BB55BF53D6F9503296911E48AAFC862C04E77CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 24KB
SHA256 0c9e6554e49d4462780f889991716d6f9a53786cb4ea0d26c6f26d0112323d60
MD5 30a10e4edbb3b681ea192c3fbeded962
SHA1 481fe421d9890f6dddde0e9bd9bf6ce485862c34
SHA512 754b08274be68976f07698e643781419d742b422843fc29028f5d9c99da7d8226f8434d8660367fc36442e5f93eaa66899c9bb6b829be9c5f1df606d52a488f4
SSDEEP 384:EDsvgE9xEs9S2HRQAffEKpl2JvtLKfG6uJXtFIpe6Td8j5sqEg2s3Qe5E296ursx:Ee9qsf3c7lhXXBQlQ2Ld2UuLAt2wRz
TLSH
T1DDB2F1DA2D81BB2ED9E92305C667FF0A91FF2DF3960B327CA9AA10F30F05951050458D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 24KB
SHA256 b7ff371d4acc59189edc567eb8b8eecbb4b1836a705f1ba5cfc8d0b496957075
MD5 3afdbde782e36826038484e60e064fa4
SHA1 03c51f175ec7fd1ee06007526ace52957181e409
SHA512 420b07e5777eb38aa4fc5a400289f758e7f425080f384283f45636fac4e5e0a8fcadc48cd0364f8564e66a5e2e464b768ac0c16719650bcd8a440a901e9ea540
SSDEEP 768:sw5PpkC1AVHZ5Gqio7yFSBcrSTX0Pe2kU2QP:xRuLbrSocrsX0PxP
TLSH
T1D6B2F1E2336F6A65CBB1E3AB7C6A76CBEA11870CF337F8E19894104FA1F1404244E519
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 29KB
SHA256 521f1aa84dacf998911e1874ece5d240f4d2cbd71fb7d6eb3ef9b805b2a91aee
MD5 506765c5708d241a89dfe7b139731e42
SHA1 150e865914568a0f2deca646fb2670b210435563
SHA512 04d0a03bda24792c584be4c87fc35c5877f832356335cb399448ecb6a5171daaee2f5c6d2f3ca41fab87f4d41831aa3dd843bdfdbe6d4eb39db6bc58541aae7b
SSDEEP 768:dF7gRXy0duCQup2NvVlLVDk7JVGwpDbse44S:7gRXjuUyVs/tpHse44S
TLSH
T104D2F1525B6F909528CC8FC584D04A5460A8C361EF2FDB5BCABBF95CCF6CF056A2642C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 35KB
SHA256 55c6206d82ffc65e03c5b11f437dda49a422ed771629dbdd68c5de6bfd8e693a
MD5 9a107b90ec77977852efdc0a51b125da
SHA1 53330ab17bac91080211c008e6d0aea83f71804c
SHA512 a6c8f37f18b4a5b773b3a9f16422262112ec6fae7195654c05bad4b718a8c100787a85104c7011d37fc551de255a328e61b8c5d677a6520fa91f169736e57c8f
SSDEEP 768:U8U6bH28gkoaT7pHXCEJhw+rRMoz6sbYkz/B47lNFP7XshXdfHTsKH:lU4dX759Dw++oTbYY4Ndy1oKH
TLSH
T17DF2F1D4DBDE9C78A579B03CC8A0841E552B9D80745339FC0B19EF5EDAAE4283CB7294
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 57KB
SHA256 ffb06f7c7584735201f901dc9a7cb7c8455f6125a475719ae0007d6f04948df7
MD5 6c9a8ccd42daec419665ff6e80363ad2
SHA1 78aea174eeae61b7930e982106d208fe4c890c04
SHA512 534cb41f21ef4db83b3df9f1512ecc0218fa85fa25358a34dc99b46d58fd60f85ab58f2ef9f02582fe81729511749065fd216c725f87c4b13b7a371fd48545e4
SSDEEP 1536:hVzDrmWBKjHqSDmB/hfIU+JNAAUdWIuE9paq2kVT:n3PQjKSkwJNuWIuE1
TLSH
T1F04302388B1B5AAD11C255BC30CC4AA287F114F3952D8E52C81E9F18AEB76B4F4D19CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 37KB
SHA256 59b50fc95002d60332457199c4d2c490d36181b28c4a6633f5fabd22f851438b
MD5 0c3df9d2f63dc4f3135e18f933da24d3
SHA1 4262ce56c1ce43c9c46fb690da2b30d80207bdcb
SHA512 7695924028f82c8ed8e887564a46ba287fa9ed42eb8edb0853aab8bcf71320ac4b38a9dfe0635c2d751df035594a177a13ef8d3f8221ad88f72b79e58b5ef0d6
SSDEEP 768:JDQ7gpxve3l9qc5nCILgQI67jQdaUdNPzE70cg:xQ74SMc5nCx2Qd7dRzDcg
TLSH
T12403F12EA69DC45AF810BA5773BB523F1FEB48685E046EA028F1364E455C10B7FC94F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 35KB
SHA256 37f62084aa872e3b695e87f549c236fda5828bc68036875a771768cd90bf2436
MD5 eabd3755fb73f0e4ef1ac6e474373dd8
SHA1 cd92121ebac48f10a27821172202bb1d06267663
SHA512 b2ceb80e9feb477dff8112395b14a37325f0823a7620d8972cb7d56d3d12a5c607288832110e48f999a52c4db787c07dc27a35edc83dbd5c6772cec3b2256ff5
SSDEEP 768:EsMzBF4dkxxOSpWmzkDs/Ird0jcmMNm9I3UMIDG/vxCXDW+pLtO0IWoH:84dvSpTzYs/IJjmM0LBDG/qW0OfWg
TLSH
T184F2F16269B3DC034FE166B42F7B5059A1C35AC3B4889EA7B1A2156B13970AB8D0642F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 31KB
SHA256 98df5fe6e69894cd95d22128d85bec958f07c12e9a1cf5761eec325990fe3b40
MD5 2c0e03a8a8573c20b94ac059c72d8a8b
SHA1 d00c11707f29840e70a0dc66deb2cd0787976dc6
SHA512 9cf1f41ae25d4236c2d79f80795adcd66ba4adc4508543f408516beb8d3053c6775ac1d1a7aa1ef15f408631dbad96d6a52064212a348f572c2028a86842bbb4
SSDEEP 768:3SIO6pZbbueHSgo4jYBSWD0sCtgyU0Ud5RGY/EHxITwHW:3SwZbK2FbUNDFWtUduY/ERITgW
TLSH
T1B1E2F1EBA90A0D34E514433F02F246FBE36986EAD71ED7E66FB0C4156661AEDE080194
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000090

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
Size 127KB
SHA256 3ae0d67ab7bdadd01d69d9185fa7a2dee1513fcf610b8c3a9de2f1085eee9879
MD5 fb3841617b143283f4d2ae854fc71592
SHA1 a1c560ff1239b888f614cd04bf38d31c6094fe49
SHA512 1e99ed7de3250f253bb1f68d47a5c31ebce90affb45b42f4140b9907055bd6c98bd007d168f4e34f1453ac33c642af001e4207bb36199af3c12b64c74b77605e
SSDEEP 3072:XTPKdCKvLKihNJhqCnY/3XaYNt1umX34VrJt3sL5l6m:XOdrhhU6YvDn1FuD8Fcm
TLSH
T1E4D30195E9E7B0BAD99E273F3FC603B2E648695EE72E3CC5080D831A4CA5347445E076
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 73KB
SHA256 3b9b3236c5fa7b6eb001fc5396d31223e0ec372d9e26bedca0ad86f7856c484b
MD5 a1b1fa3bd6d929bd532e9090e72cc8ac
SHA1 b7400e52c279cfe55de7da96b91010cec444e9d1
SHA512 8b016db68ceda67e157c751ca4add9f5fd78a4eab2dec750f04dc3f53fc349893bbfab166d4cd042a62891e35b5d102384a918be839dbeb237171dcbebd2b486
SSDEEP 1536:mWq3zLYxkPxuxDTI0OWdVbohzWlYJcSwGJyX:mZjLYxkpkDTI0pdV5xyyX
TLSH
T1527312CFF2B98749AED8058B73C7438BAFEC894079F07080545A2E15EB856E1F6510E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 34KB
SHA256 2eb3a7061cce3f3e396944134348bdd3bcfec008dbbd37663f28df58c6556e04
MD5 d4e073539f2d920cbafd14cb1f708d19
SHA1 abc675846478abd469bebe9d9c6ff114893128da
SHA512 031a39ad58010df2ae543b470e167f150ff72f3c8e39f43346036f0dd88c9321ec5cd3431cfa4b47f565fb39ddbd894fa2100a54a96605e6667d395ca0c7437f
SSDEEP 768:k6bNYGjyiTa08+Ak/0gOKUUFmymrYunZKPxLWru0:k8uP08w/0g93FmymrYunwF
TLSH
T197F27C0787EDDFDAC82697B10CA6A11A48F4E908DF2DE762F9871CD8D0119E84C3A715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
Size 220KB
SHA256 a606dca9b943700122b01dc75a0af0f911e701deac0b2bcb79d1cd95b76cb7ec
MD5 a905b46a8de7aa209861078f33a6736f
SHA1 3256ff9b0ae5af7665dfc1cf48b35835c6b1ce09
SHA512 9069826ad9d3add46f452ac9fc710a74810ef19274139a630e8e183b229ff5bf663167a8477865400e212c67cd9a7525aad0d1f245a8b006725ed6daf3ab4e7b
SSDEEP 6144:89BBBzof7FSByxI3o/Hq9YPZ/xQ167Apr2R/Z84qhPolqq8U:YBBBz07FSbo/8kZQ167C2L8Q0q8U
TLSH
T1DF2413E76B9B3248C8C856F4043D90449FF266CB1A4FD5F169484042C6E6A42FDBB6FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
Size 61KB
SHA256 ce65775a6c499ec29ccc134b461d52d6586b39154af102ee0d9384754518726c
MD5 68b1d913beec75d22971b567cb5aab52
SHA1 1debb2e67e1a7ca962d3c18aa84fb87eb39c7d90
SHA512 4b50e912516799f61d4f0e746c663cc1155ce3c5b25e6d62661d50dc53b1088e96ec4585dc4588d48c6b2c01d47d65fbdfdba288e8684e6dfa3b8cf48ec5bd45
SSDEEP 1536:CF0suSaikefoZ+NOFxHivQ9kVchDy+gtf9u7Tzer3A:AaisHIjDtM73er3A
TLSH
T1865302AB66BE91CCFCB0445E129DDD07B1F95E027A54B59998CA83B9C4F06BF60403BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bc
Size 36KB
SHA256 eee6974aef43343edac65a21ff2f9eed2d44f383f98cc1cbf27361d5fd93c9db
MD5 ea6d7bea5d3d79c925120286ebfed628
SHA1 2772764165a1580269be3a4d0a7619e2a911ed2c
SHA512 582ffb74b1a5b4c03865e546558b3f8deaaac254c55ad3e93e32b48591f557313409741c61edfaca2e7978250b93ee82f12218605e644f3b139e9d287d269e8a
SSDEEP 768:eZojW6YmgBkoQogApS3Kf/9I7U6czNrmgYRad0B4LZePdZtzcFU+sS6lvsYL6RB+:eZlmh3Kf/O4tmWDLZeFIH6lEYeRB+
TLSH
T1F2F2E046131362FBC6D2B5D24F7D9181F682DEFEE8C2AAF881DB703520933569615235
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
Size 47KB
SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
MD5 dcf31ebe107435bd68e0164d59e19b87
SHA1 b68160c9333af833fe483928b3ef7128c07a56a0
SHA512 130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08
SSDEEP 768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE
TLSH
T11623F218F29471F7EDECD4D500A18C72BAA528D442F116ED07B8D53CA36CA817A729FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
Size 23KB
SHA256 2189adb857ece9719580dacedeaa2a98369f932831fc8e115372348546dc88bb
MD5 a3c3e499fa22844d03d7bdb7c37fd6b5
SHA1 cfe7674c199f559d53a693dfb936e02e5662ecde
SHA512 2ef01323749093dea90820ec6c539869b507e20553366c920c551ab1520f630212881808a76121a970cb9564aa8be9ac469498711ed1bf2faa5c7409e734bdf5
SSDEEP 384:GbGrQWgTJFHD4Nl9zaoz9qF2v2tGodYcf2Q9SQfkbMzOFLDu/XPe+4ujgb:GqrQWQJ8l9zakqF2Zo3EQcwsDu/2+fjI
TLSH
T1AAB2D02D8B760E59D6394BEB98B71CE38E61FD906F28740F16430EC74CCA1686C0F551
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000da

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000da
Size 134KB
SHA256 602a9292b19e7a7e5bc4be8cc8c6dee4752eb366e71053d759d17daf1234e1c9
MD5 09859dcc4e73e16b8c1e19dea4d2c0b5
SHA1 26d686f8c2c6c132ff389b4eeef595336c9b57f9
SHA512 27397005cdfacb77ae27e72bd38d24eb2871accdeaee7a691170d1c06020ec021b82db4546e82be17a540cc16d4d9c94d1b1d3f4152d6a926698b56186839317
SSDEEP 3072:wj+owoJYdCPpK2L4PS1nQX3XiPFQ+T3KDxf0yV4+RpzweXd6b5lxNlMox:wjxwoJ2ejUapQ3iPFxTalf/BzwxNlMY
TLSH
T187D31217E11BD22C869C2CDD57AC6304BC3827DCCAAA5D7965A8A01CFB7D597CB0B0E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000df

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000df
Size 42KB
SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
MD5 665db5e157d2138835c4037c971ff3a4
SHA1 41ca6b7e4818eb81531d8006ff7ddd971c640879
SHA512 6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a
SSDEEP 768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW
TLSH
T1F9130231EB70EE59962C903454E7FDA9433B1457D731ACA80E99A1CE6F8103454FACEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e1
Size 28KB
SHA256 cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e
MD5 a6323dda0842401b2923554d0ed8945f
SHA1 6a5e89b2f9b47f5a2fb11831479c02b4eebe3089
SHA512 6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1
SSDEEP 384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd
TLSH
T165D2F15CB579C636A098E4B70DF5E3BF9599CB39224B9B288341C0385AA3941E442B97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e9
Size 1024KB
SHA256 da9ddac0190744734cf2ded185addb4779347f268fc8d58089329cf4f8e1b602
MD5 3cef545ebb83d7ae818fffd2a3875ae0
SHA1 215f70db3ae468a64fe3b01af30f0eae291d0a63
SHA512 7ccd45a56f7400fc53f7fce0d8f56207a7fadc6fb07c696ef5726065d915d59c2dbbee1a7c04aef998ebbec9a37795ca3cb978ae450c043f133cd91a2ced2888
SSDEEP 24576:HXuMoADma1c6NlQhNikgszfrv7GfElM5gsQwlpRawJBS9++FEHx1kUhO:H+M1r1Psjik1aMlXr8awu6HPhO
TLSH
T1E42533C67B10B29ED60FC87C0EE17B18BD0AD3FDEBD9918E4648E569665D11240BCBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1644facd55473b17_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1644facd55473b17_0
Size 2KB
SHA256 7f02a7d835fc8189d29e985f4602b461dde73d7eede54b5059ce437e57f8d0dd
MD5 b44ad7efd47679f7bef0d916d008fdcc
SHA1 455f47d9fe772291b48a36bd95de27b6c21eb672
SHA512 9dea936b48c8dc2264031e8f7cdeaaeaf3c70c47cd8b411d12e5273300fa4162333dfb55d01d6bb4b6f0c713d33448321b5edb9295439607c8834e948a96f8b4
TLSH
T19C51B56163C82C28CA741BFF03914B265379A0495E87E31770F802BC1C9F3E3AE38184
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 5324b77cd1859fa529a284ecf54e0169fe60aa27709d50877ab5bc227478cc5c
MD5 9e8e3fe7a02dc219aebf643411027c0c
SHA1 d9f368b17f0d048fa03d06fff12989f7e44c5f9c
SHA512 7ec4a52439255615d785c75e7288ae453fec229750e061816792d684cda9ebcf5edd552acd451ad70aca1bfe886392b61b4ad690b0b3390562a0ca8f060c3955
SSDEEP 96:Yxn4tSXwV4dVdfJwxU1f8VTmtH41TfbnE9JFwOnILyrNnVJNbPxsLuIXshJwI59x:eVTN91UViPFwhgdOKFD+0gmL
TLSH
T104B1EAA8D2E1AED1DF9847B244E5889231F3D6854CC32F2E2A9EF579674738D1D09328
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1a45867440e3034837402eb815f1773454d755c3f1cfe633aab69385d3340370
MD5 1df2b0a575b5af76733619aaca4ef4c4
SHA1 fc5f1d7aa5b313ffc08a2393f1fb5fa1201e4f7e
SHA512 d67ce8c44ca2e074646e9e351614e4d7adccd394e582fbba793a0cb784ae351e8ab55a1873bf7e8ab326536d4f6432a1a5e6c9a24d4d69e14971730610468e2b
TLSH
T10B615C3DDAE24DE4DFA807BB86D41886363495808DD32D0D289FF079A78735E1D4E324
MD5 SHA1 SHA512 TLSH

Submit Download

9e8086c9-3f33-4390-9d31-960893917031.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\9e8086c9-3f33-4390-9d31-960893917031.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_curier.ro_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

1dae61f4-c2fb-4827-b178-d1cbaaac1e0c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1dae61f4-c2fb-4827-b178-d1cbaaac1e0c.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

704d8487-b01c-4c9a-b312-ea0627a60d82.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\704d8487-b01c-4c9a-b312-ea0627a60d82.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

9ea81e38-2abd-4341-9b04-1203f3a58fda.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9ea81e38-2abd-4341-9b04-1203f3a58fda.tmp
Size 22KB
SHA256 b558cee5867da2a00e1a84a2f0e585f5ccac61e33b4484293e92b2bdc778871a
MD5 68ee52e7769e24d723477cfb0fbf64e2
SHA1 8e8c8b9cb9215faf751724b39baf972bb4da61b5
SHA512 e3588f126d2113dd8e8819a9bd4a9f4ef040b75e3b9c32c2cb65bbee7c87c12769d6b5211a005e43d3904a0ebfd87fff9e0e6a88b701f67f24e5f10f2b481c12
SSDEEP 384:Dr+YrrClJL9Jmev6qJJe7aEbBee7WJpiNFnOeaZp6InWqHIP9A4vWGJIK1UqhvWl:izII73d1pQPMR
TLSH
T116A2BFF7C3E8522ED97761F46A24AE2BDD9D091443283D268DD89E4AF3F1432D20661E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6a34c95c687fec72d916e8e54eb07f8477ffd7c98e72f0c004c2d3728f8eda66
MD5 7f3e44fae7477dadce1e61e367e5003b
SHA1 0b6e9cdf9fc683f5edb61ce3592a4e9231de988c
SHA512 b63ccc6e959a0cc325bf65f2e6a722747e481943b7d5106430f9df059c803a8381ab0c9560e524815d4fb80c940056b4835595f7e1cf08753daa01416bf1b577
SSDEEP 48:KE+IfKrSALydfI1KE0InymuRaOQYI2WYD9I1O2KgTI82MmmT7sf:KE+sKrSm+feKE0aevSKkwN
TLSH
T14691DF1436FB4640393E29088178AB9B628531FB3474EA2F3FBC50A55A26E156DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a2e1ebfc-29c5-41f3-b806-539f6d43d02c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a2e1ebfc-29c5-41f3-b806-539f6d43d02c.tmp
Size 27KB
SHA256 3e828c2985d9bdc88e8bcc31cc351c8ed5270819647f43f28e4225cdb63e8478
MD5 dbda8b64df39e7bee00ccd9f03ef3854
SHA1 d8dbaecbbdb95f52fd42dd19e5e56a405fc5ed12
SHA512 3d9a207615669e99691129a02e69324de5e6e511b11ef4a6a2f02bfb3f0785b8ff836de84b90d8e30bf27b0d3c9321e39f71d44938a53ae23f5431d20ec0c3e3
SSDEEP 768:g9yI5TTWvvdRx8F1+UoAYDCx9Tuqh0VfUC9xbog/OVyyLlYmHfOronYVu:g9yI5TTWvvdRxu1jaXyLGgfFnYQ
TLSH
T16FC2F83B684CCA7E4FC00E9DDC5A6F976D9802C7A6988D4047FE994C03C77EA51268DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3072981-7b20-47cf-aec5-207cd5f8aef6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f3072981-7b20-47cf-aec5-207cd5f8aef6.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

573ceb89-9a56-4e91-b5ad-1a6a245e59ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\573ceb89-9a56-4e91-b5ad-1a6a245e59ba.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

606707bf-a21f-429a-918d-1dbdc6d36a41.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\606707bf-a21f-429a-918d-1dbdc6d36a41.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2ef95bc9635d12f38184b8d4a043ec0cc8d7579aecc4988aac851d3e0919bde3
MD5 74acfdc9645538fad0902ffc40f84d53
SHA1 757b41fa25fcce8bcf25786aeafdc09aa259d957
SHA512 ee50f046915e3672c6a742a7138cc1116cb4c33909d99cc455b15090e77680ba34549cf6056b982fefeefe09662bf584ab6a98785633fd0477975ee5e2f372c8
TLSH
T1F841385CB6E91108F3B76F1AAFFAA86D547ABD373E06C46E00010D4F0A66B00C9A1737
MD5 SHA1 SHA512 TLSH

Submit Download