hxxps://contabilidad-deacero[.]com

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 22:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://contabilidad-deacero.com
Sample261027-2xj7jsxtet

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4704	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{F299B297-9EA5-48D4-B0B2-A5F7D0EBC345}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2240	msedge.exe
2240	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4864 wrote to memory of 2760	4864	msedge.exe	85
PID 4864 wrote to memory of 4704	4864	msedge.exe	86
PID 4864 wrote to memory of 1796	4864	msedge.exe	87
PID 4864 wrote to memory of 1796	4864	msedge.exe	87
PID 4864 wrote to memory of 1796	4864	msedge.exe	87
PID 4864 wrote to memory of 4840	4864	msedge.exe	88
PID 4864 wrote to memory of 4840	4864	msedge.exe	88
PID 4864 wrote to memory of 2716	4864	msedge.exe	90
PID 4864 wrote to memory of 2716	4864	msedge.exe	90
PID 4864 wrote to memory of 2716	4864	msedge.exe	90
PID 4864 wrote to memory of 4832	4864	msedge.exe	91
PID 4864 wrote to memory of 4832	4864	msedge.exe	91
PID 4864 wrote to memory of 4832	4864	msedge.exe	91
PID 4864 wrote to memory of 4288	4864	msedge.exe	92
PID 4864 wrote to memory of 4288	4864	msedge.exe	92
PID 4864 wrote to memory of 4288	4864	msedge.exe	92
PID 4864 wrote to memory of 888	4864	msedge.exe	93
PID 4864 wrote to memory of 888	4864	msedge.exe	93
PID 4864 wrote to memory of 888	4864	msedge.exe	93
PID 4864 wrote to memory of 1220	4864	msedge.exe	97
PID 4864 wrote to memory of 720	4864	msedge.exe	98
PID 4864 wrote to memory of 1220	4864	msedge.exe	97
PID 4864 wrote to memory of 720	4864	msedge.exe	98
PID 4864 wrote to memory of 3640	4864	msedge.exe	100
PID 4864 wrote to memory of 1476	4864	msedge.exe	101
PID 4864 wrote to memory of 1476	4864	msedge.exe	101
PID 4864 wrote to memory of 1476	4864	msedge.exe	101
PID 4864 wrote to memory of 3588	4864	msedge.exe	110
PID 4864 wrote to memory of 4488	4864	msedge.exe	111
PID 4864 wrote to memory of 4264	4864	msedge.exe	112
PID 4864 wrote to memory of 3792	4864	msedge.exe	114
PID 4864 wrote to memory of 3792	4864	msedge.exe	114
PID 4864 wrote to memory of 4156	4864	msedge.exe	115
PID 4864 wrote to memory of 4156	4864	msedge.exe	115
PID 4864 wrote to memory of 2240	4864	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://contabilidad-deacero.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x218,0x7ff92094c188,0x7ff92094c194,0x7ff92094c1a0
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,2763485961842056139,16652172455712640041,524288 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,15925934545434306934,16267595541953964788,262144 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,8883548966649346651,12095478330588979618,524288 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,3204031585325284530,10127935558477637088,2097152 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,6797003250199375178,1911678819496478125,2097152 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,1189735958681740027,11584572740235274973,2097152 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,2713560113159185677,9140193181378305549,2097152 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,3118760694068534199,7985602966814324650,524288 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,13635053949884734751,11948127187320948047,524288 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,3826390861254247588,3687167984957606753,524288 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,3826390861254247588,3687167984957606753,524288 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6176,i,9918362934514999570,9368482822846945911,2097152 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:1
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,5913956164571492699,17802864464531081171,524288 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1660,i,5008780735230792389,15376773987507423985,524288 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,6516473750731828557,11280183629996058142,524288 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,11270837966500605607,3733944694240193503,524288 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,2971287047850044002,15386591936722530304,524288 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5156,i,12174347448941125722,6001352556517945423,262144 --field-trial-handle=2312,i,17255609749746820920,8316657449017316106,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2240

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3665ba3f-a49e-4430-a45f-6fc70f771e1a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3665ba3f-a49e-4430-a45f-6fc70f771e1a.tmp
Size 8KB
SHA256 6913fd5ab193c6a469fd50d7362fde5d7869e7a394cfac3f6b45a8b80c26751f
MD5 e6e4e03548c38be9850731a209dcf894
SHA1 0aaee79d5f8f28df08047e49f15e5913272bf7dc
SHA512 5e03c166f973aa678e59326d434613d09915160505590de0a459103d2f931a72d07eec255145bde736aba38b33e0298a411fc96f87bd8031de3fbdc6aa93d04e
SSDEEP 192:NRON06iD0qQmiUySmOVq5u88PijzorLeLXiPwoWuZuqwU6:NRON06jmnVq5u8iu8LGXiYoJcU6
TLSH
T1DC122C3668787C6F6DD29855B44F32039EA5412BE7896F80D9EC1B1C05EF29C530BA23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53ef5d3e-df42-493a-be25-b852d5321ad1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\53ef5d3e-df42-493a-be25-b852d5321ad1.tmp
Size 18KB
SHA256 2efbb6d052c094c188be327f22933b87e076ae3f32a9a48460c1a14a24c9d361
MD5 f13663b39af063507c8a46e6e1d26fb0
SHA1 f7d269168c6c9ecf8141785c6ff6f6b78fee39fa
SHA512 d79014582ab03537ee595f02a171395104da024e499a60060ccceed6b232c55cdaf85ffbeea1ee6d4411b10f1d56b43d734e16e13dce167f2c768a6ec46d1df9
SSDEEP 384:pxQkUSv0sNZoi0VEk6BtrfTnp5u8iu8LGXiYo5cvaTZctbteIIlZ:pj0qkQtzT/kvmihcvaTZcDeLf
TLSH
T198827D36ACB96C3B5EA6E561B54E3603CEB0811BD7C91F94D9DD972C01DE28C134BA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80ef8f6d-e626-45ef-8b11-a4ddba41f5a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\80ef8f6d-e626-45ef-8b11-a4ddba41f5a0.tmp
Size 8KB
SHA256 6fd919e96fcfb69c11d85aff71b20fcd8fba7828cd65eee8f3985e9c682e9e87
MD5 820a310b4e86ab2a7ffd567571da1951
SHA1 f1ea845bbf0bffe3e92302b10c7c3227715e0e9f
SHA512 97773fe98e17fcabc220d23d245ddc5a968f88bfbcc91e669892847cb440afbba91e16d3cdcfb6c8b11978f5d177f7736096c145f09d2a865d8b44747f9fed4f
SSDEEP 192:SONo6iDCQmiUySBOHq5u88PijzorLeLSqSFZFU6:SONo6/4Hq5u8iu8LOsFU6
TLSH
T1BE02F9396C787CABAEE2AD05B54B37179FE4012FE6952F84DAE8162C01D729C1307933
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

5ee66197-5d65-43a0-b3e0-dcbce03cd152.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5ee66197-5d65-43a0-b3e0-dcbce03cd152.tmp
Size 10KB
SHA256 2cc736c72c7c71dd2de70c3c6bbdea7200ca076306acc2112b33943d87d3331d
MD5 870edb6046bfe983ce20f3dc17927d31
SHA1 a8b792bb0e4d23bd10adde2fcb0519803ecfef79
SHA512 9b6598f990de0ce90430540953102f5cb85ad567381638d05914683494908b747b9d7c991c279048df5fb4732db99f102bb16e03caae9f31b0988cd1db681c01
SSDEEP 192:sxZbuzRQqWgj/fAes4b1qEIdpS2HW6+WNBHk/Ya2pzEIg5+J:sxZbuz+Fgj/fAes4b1qdpHbe/bc
TLSH
T16022C9526E38A97B8CCBD20DBA29BF53E6F95032A1D51E48A6FC861C05E77CD124740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

669802e6-0292-4d5e-a2db-0dff36f4b59b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\669802e6-0292-4d5e-a2db-0dff36f4b59b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

771c8085-2b85-49dc-9d72-bb7471c9c17b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\771c8085-2b85-49dc-9d72-bb7471c9c17b.tmp
Size 10KB
SHA256 6b5b6daea376a1233d387a8f4081f48ab32e30f15f3e935f9e4f5576741c6004
MD5 ee403d4dcfdd5843959e01e569aa6780
SHA1 697a46fa628689105bb76221443490ffd2dd54e4
SHA512 b3a07b2c553c3dd8086eb23fad850aeee22b2e15c736a05ce2112dea0a1d3a1a46e6eb601a2fdb7113b5ff1fa68dc68b51923288d49d2fcfc1f1b0b16dd92fe5
SSDEEP 192:sxZbuzRQqWgj/fAes1b1qEIdpS2HW6+WNBHk/YaQATzEIg5UJ:sxZbuz+Fgj/fAes1b1qdpHbe/opW
TLSH
T13822C9526E38A97B8CCBD20DBA297F53E6F9503291D51E48A6FCCA1C05E7BCD124740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 cbad803a4c3121429b92b2bea67d0968672c1bd95f6102ff393e40b3dcd01856
MD5 bd5b6197e40b52196e0d81b04999eb22
SHA1 44c1a962d3c8a066bc8a740bb9b2fab39b99d70b
SHA512 988b92c98642b7df3b0f15f1aedab185330e23be80b3a5f25a7a2636c315f2870ecc169741b03ab393670974ddb0981ff09d39081bff81176a709eedebfa38bf
TLSH
T160E020C805C5C32FD2346497016C971C87F17A1F92C0791D1704CA8470C614463D39E5
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 f01e3ad173b8cb746146199685ec7837bb52fc0f7ce616f7b59284fc37d5098b
MD5 dc19baadd1cdc8944142cf75555e9153
SHA1 70603c5c490377fd7b4b9de1d8897a53da834815
SHA512 d0fde92bd2a05cf4031d2fc68a552b77578a1383e0a436ebc30873d79406f42ca8a046ae8115dd030262ed96b33b533d8f5c7d2b626ab024bd67a66199ed041a
TLSH
T1166193B07F404964F7AC133E56DB52833F38169A9DAB1E5AA0D4ED7864067B89D3BC08
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 aaf740e145e154cd3d2a5b6b36ca92cd7e83dd3b15e250df23a514778b830ef8
MD5 f908b5bb1eaec89a42fc222b591ef34a
SHA1 c51b709e6997b4112b53e09a0f96ff38597dabf9
SHA512 3b11d500174f69fe047b94b5a6e6036ee179c0a38df5019035c11516942c08e3c8274ae9e8953b0786c196c0d40addde5fe9d427986f299b138288002b7c2721
TLSH
T1EC61A4B07F404964F7AC133E51DB12833F3815AA9C6B1E5AA0D4FE7864063B85D3BC08
MD5 SHA1 SHA512 TLSH

Submit Download

ab8a45c2-2e44-4fbd-b090-f2fb4158e74b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ab8a45c2-2e44-4fbd-b090-f2fb4158e74b.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0ad53dd3-def5-4b5c-bf23-f224f90c032e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0ad53dd3-def5-4b5c-bf23-f224f90c032e.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

9ce0270a-52e4-4034-acbb-30a18d2f6caa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9ce0270a-52e4-4034-acbb-30a18d2f6caa.tmp
Size 1KB
SHA256 0bf89ec3ddd9a458571e71f1b27b2fa8b5f1d0e23de73907fdcdfd9abf3848da
MD5 c69dbec7c1842bdde5af9439129806b6
SHA1 44c875fd095edfbbdebbe3798edbbe6dbc4ab03e
SHA512 90233de7aaee81e57e2b8f312f90de20cb64c6393a28bffb3d3d96e55a4525254323aba023c32cc1f16936c6b9453f8948f7f7002b39287a961c968c69b311de
TLSH
T10F31BFF38BB0466D9B214AF099286E2BCE2E0056831C7D5A89D4AF27C3A3472D001A5F
MD5 SHA1 SHA512 TLSH

Submit Download

c46b9d45-ed69-4928-9dcd-4f62a59c1995.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c46b9d45-ed69-4928-9dcd-4f62a59c1995.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 945fffef853cc94cc7c8f323b787d08de0a59de6e914ae4be83aec02c1c6108d
MD5 7ba1bd451f2bfc4ab11958c3718910b0
SHA1 ce3ef8cba5f9d0656a7b121dfb7ce3aa01bd9f24
SHA512 748f2a7d87dd97552d51d240c77c908e2f2b6bb48ab46c8c7413056ebd986d7139464e55f942c03d2c70eb2644153e08f4b8976cf47fb341a3f8d6c5977ac87b
SSDEEP 96:KHZQjPZzTxavKs4HxKg4auiUoKxu6wQKFeibwZUgamSkimY:GZQjPZzTkvKjHl47TarbwZUgamSnmY
TLSH
T1BE91855270BB0342387D294C80749AAA4A9235F33465BA2F7BAC41F54F6FE044EFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad9041bd-246f-4c66-a763-b857ee744c97.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ad9041bd-246f-4c66-a763-b857ee744c97.tmp
Size 9KB
SHA256 e2be9ca66935cccc10a2e4560c3a39a2765cf28d0db67935649b6ecf6bc962eb
MD5 71fd8f76feda95705c5f982e927ac5c4
SHA1 c83b933d71692a13e5cab438be5c7b8318ad9d48
SHA512 d4cddf1d339d0f0a9403c13cae18736377bb183c1741a1dadf366dfa3d0f5c49adfa7e8f173520c870880444c48d8ef54b530c6c046791f1ef2b28ac67f032c5
SSDEEP 192:sxZbuzRQqWgj/fAesbb1qEIdpS2HW6+WNBHk/Ya2pzEIgrJ:sxZbuz+Fgj/fAesbb1qdpHbe/b9
TLSH
T13922C9526E38A97B8CCBD20DBA297F13E6F95032A1D11E48A6FC861C05E6BCD124740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

beb124b4-da32-42e6-9382-719caae9c2ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\beb124b4-da32-42e6-9382-719caae9c2ef.tmp
Size 27KB
SHA256 ba32bb73fecdc7d6c5d6af39373781c59f90d1330da49abd93800089546ed27d
MD5 2a141b2299410358d48a5ec31f4a9154
SHA1 621ab93b3a07dc3790a0071831547c6b0544de59
SHA512 7cdcacdc1e62ebe3e803a67636e59ae19d58460c700e1217fd0dd4b8ee6000ac208621427c45b2e482de0df692ba2d970b2df0ef2453c0e660caeddcb57d3a1b
SSDEEP 768:GLyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3Vron5ZsU6:GLyQRbrWvvlpZu1jaXKLf33un5ZsU6
TLSH
T16DC2E93B640CCB7E4FC01E9DDC6A6F976E9802D7A6588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9d47b75-943a-44f4-aa6b-5bf25d021ce1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e9d47b75-943a-44f4-aa6b-5bf25d021ce1.tmp
Size 10KB
SHA256 4af978e1ccda2cd850f94a6334d45ac30d52ef5bbad9271e4e225065382fa5ff
MD5 0dcffef2485290e88e53c0dbf5cfeae4
SHA1 95ed2beef35943ba51a913917b8b3015800ad1e6
SHA512 4f93a693d973c5a7e6bc6cfe0710a1b7194e2654c43033b440b88b86cfa132eb8ba92dfa46e5de39b35d81d85920253878bf15cb722960c40d437287a8bcd936
SSDEEP 192:sxZbuzRQqWgj/fAes1b1qEIdpE2HW6+WNBHk/YacAIzEIg5UJ:sxZbuz+Fgj/fAes1b1qdnHbe/0AW
TLSH
T1D522C9526E38A97B8CCBD21DBA29BF53E6F5503291D11E48A6FCC61C05E7BCD124740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a0deb23f-8fca-4123-8642-9e732a646bc8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a0deb23f-8fca-4123-8642-9e732a646bc8.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7e8f5c00dae5fec3336ac89248930c6655a6585cf116f90923b4399ba3881029
MD5 30f997978c4f180a0cc5f3bbe353d5f5
SHA1 14a4d6f8eadb78bc5aacb1bc52b1131c7367cc24
SHA512 4a2da4621454153c70cb99cf2b239a2070dedf8be93dc98c91cd100a8106fa8f6fe9020019fba340e46dc780b043bdceb86593fcf1a9b9eedcd2ecb748ac220b
SSDEEP 384:oxQkUSv0sNZxi0VEk6BtrfTnp5u8iu8LGXiYo5cvaTZctbteIIlZ:oj0dkQtzT/kvmihcvaTZcDeLf
TLSH
T15C827D36ACB96C3B5EA2E561B54E3603CEB0811BD7C91F94D9DDA72C01DE28C134BA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccc4031e-027d-4c83-ab4f-3b44c9b3654c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ccc4031e-027d-4c83-ab4f-3b44c9b3654c.tmp
Size 26KB
SHA256 a64130caf84f49a711d0c0e3169ceaa1026ced10ceb84d59c76d1cc6a3dc899d
MD5 327e3a7dd7928cf96ca1022b2e6d313a
SHA1 81f9919ac3d34a63503a4b5442b4de0c969404db
SHA512 47c3f2911a916bb27891390064361dc0c2ac5a50447677f2171366d6e87c0f011cb3076761c458bba4d54acd7a4790a2648d72c3d6e9407e119a8a0ac3e28555
SSDEEP 384:xTiFzQkUSvjzsN78TUNTUlIloi0VEk6BtroTnp5u8iu8LGXiYogcvaTZctbteIIf:x+FdnSwg7kQtET/kvmi4cvaTZcDeLf
TLSH
T1CFC229F258E7983AD9AE9753A73E3E038EBCC017F6845A50B789951CCC961BFC306911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f061096-27e9-4281-af52-a7abecdfe1f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1f061096-27e9-4281-af52-a7abecdfe1f8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 10538480f1dd19da8a811a02c70c561fb2002be5de8180edc33916d732106f4c
MD5 158bab520ab6f8bde0a9a219247004a0
SHA1 f75a34de1fdf91163bcc083407dc062dd7fde206
SHA512 03a0ddb6f958ecaf21cb0a43dc1619f9a9e36685f50c9a28f7496bffd14dc49e83c5751808d6ad59fdbf5b35b8080f896486bd4e0ff5fc4c5ba16ce7e9b55705
TLSH
T13E412C59A6FE1148B3B77F569FF6A46D447F79332E0B945D00110E8F0626B00C861B37
MD5 SHA1 SHA512 TLSH

Submit Download