hxxp://strategic-portfolio-framework[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 07:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://strategic-portfolio-framework.com
Sample261027-jg31lsda34

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4188	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{FA20ED24-A2C6-41F5-BFE9-F22635CEABE1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3116	msedge.exe
3116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4840 wrote to memory of 548	4840	msedge.exe	86
PID 4840 wrote to memory of 4188	4840	msedge.exe	87
PID 4840 wrote to memory of 1064	4840	msedge.exe	88
PID 4840 wrote to memory of 1064	4840	msedge.exe	88
PID 4840 wrote to memory of 3992	4840	msedge.exe	89
PID 4840 wrote to memory of 1064	4840	msedge.exe	88
PID 4840 wrote to memory of 3992	4840	msedge.exe	89
PID 4840 wrote to memory of 1604	4840	msedge.exe	91
PID 4840 wrote to memory of 1604	4840	msedge.exe	91
PID 4840 wrote to memory of 1604	4840	msedge.exe	91
PID 4840 wrote to memory of 2572	4840	msedge.exe	92
PID 4840 wrote to memory of 2572	4840	msedge.exe	92
PID 4840 wrote to memory of 2572	4840	msedge.exe	92
PID 4840 wrote to memory of 532	4840	msedge.exe	93
PID 4840 wrote to memory of 1660	4840	msedge.exe	94
PID 4840 wrote to memory of 532	4840	msedge.exe	93
PID 4840 wrote to memory of 532	4840	msedge.exe	93
PID 4840 wrote to memory of 1660	4840	msedge.exe	94
PID 4840 wrote to memory of 1660	4840	msedge.exe	94
PID 4840 wrote to memory of 4716	4840	msedge.exe	97
PID 4840 wrote to memory of 4716	4840	msedge.exe	97
PID 4840 wrote to memory of 4716	4840	msedge.exe	97
PID 4840 wrote to memory of 4592	4840	msedge.exe	99
PID 4840 wrote to memory of 4332	4840	msedge.exe	100
PID 4840 wrote to memory of 4592	4840	msedge.exe	99
PID 4840 wrote to memory of 4332	4840	msedge.exe	100
PID 4840 wrote to memory of 5040	4840	msedge.exe	102
PID 4840 wrote to memory of 4440	4840	msedge.exe	111
PID 4840 wrote to memory of 764	4840	msedge.exe	112
PID 4840 wrote to memory of 3408	4840	msedge.exe	113
PID 4840 wrote to memory of 3956	4840	msedge.exe	115
PID 4840 wrote to memory of 3956	4840	msedge.exe	115
PID 4840 wrote to memory of 3116	4840	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://strategic-portfolio-framework.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff872abc188,0x7ff872abc194,0x7ff872abc1a0
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,2127511688243521892,18278990015103324736,524288 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,2842095795500605227,6978238382816182983,262144 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:2
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,5941624882878700508,1369735874834675907,524288 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,1294770895394351216,13692435956644689327,2097152 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,16798295333353256029,5471092175188060844,2097152 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,9382099226327671880,4698665956715351260,2097152 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,359118250038661778,9406977621035131945,2097152 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5004,i,3681417209325371083,5217846514452586957,2097152 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,1768054186353850031,4283161033229573534,524288 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,14910766377417781502,9947321897538071468,524288 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:8
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,2780506940844137442,7285240018075855884,524288 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,2780506940844137442,7285240018075855884,524288 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,15163037223571077207,17104000074608701575,524288 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,16242485165112462739,9279205269111254258,524288 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:8
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,14807219556697242960,4808586223508045676,524288 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,17667123380593374728,4219749776464042614,524288 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:8
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6212,i,12424497627347124325,12092565419732256933,262144 --field-trial-handle=2380,i,14102204346397763197,7763867261399734340,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3116

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2160

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1987e224-6619-42b3-b6ff-3e35b8233e5b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1987e224-6619-42b3-b6ff-3e35b8233e5b.tmp
Size 8KB
SHA256 1ecb3a70dd6da145ed654e9467fc697c6755f42045548a8175cce7779334c116
MD5 876fe6956ed69210b38220289cb83617
SHA1 55806f4e1f9b146bb3a904c4bdf1067a5e945359
SHA512 aa8536101b0308d3a49e92340b70a436990a80c27e1744ab9d5931544fea280a95bd090ba4e05c23d2f1d55bba6e76f0ff27cbdf129e0c238c53d311fa940a14
SSDEEP 192:JONy6JUHQmiUyJGFo//jjzorB6ywxW5XQMNxcqEU6:JONy6+ptFo//z8ExUXQ+SU6
TLSH
T1A8120A36B878BC6B6EE3A585F08732139EA4413BEB856F90D6EC2F1C01DB15C5346D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

55eedeaf-38a1-4981-aea5-0e7702b1b598.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\55eedeaf-38a1-4981-aea5-0e7702b1b598.tmp
Size 18KB
SHA256 d4a6598a2f0ac9a126b9281312ccfc98294957768dd933672bf8ad6210ec4c3d
MD5 a5a3ae55997f2475cb11e830230c25df
SHA1 da380a1fc0d93f0bc511f93583f89287dcd7fbcb
SHA512 2b2bab96574e04574e71575f1b4eaeed16caf4a8e84e6166567329e3f8175d59c23b750b73bed4de3ed83336d70a947edb0158a8ecd6d44e2d6096b86d3cfed0
SSDEEP 384:NQkUSv0sNP6pboZSuh//z8ExUXQ4SvaTZcTbt3IIlb:306x/D8Q4SvaTZcF3Ld
TLSH
T19E826D36B8796C2B5AE7A151F14A3213DEB4C02BDBC41F54D6DDAB2C01CB29C234BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b3351e5-9ff1-4395-97c4-6585c93bdebf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8b3351e5-9ff1-4395-97c4-6585c93bdebf.tmp
Size 8KB
SHA256 848de97d09e2dc2df13d29dae7c710837fe527c9e121e4fcd81c5bd946f5ae7a
MD5 56eba04ad2b2360fe5aa0645a248380e
SHA1 c50fea8aa3795e249039c0f86ed6637183e051d2
SHA512 c73917dde07cfddd0f911c66532f47e5536cc8b5d5ea6b43f575a7eb9c1547b5727b53cfedf4d2d316871653599eae956d2a97033143fa86cc15020b708cc601
SSDEEP 192:BONN6JUm0QmiUyJGso//jjzorB6ywxWjBC/aU6:BONN6+mE3so//z8ExHSU6
TLSH
T17002C739B8687CBB9EF3AE45B48737139FA4107BA6951F40DAE81E1D01D725C2302D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

194ae6f9-b5b0-4885-b5c7-c2f4dce129b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\194ae6f9-b5b0-4885-b5c7-c2f4dce129b5.tmp
Size 10KB
SHA256 24393ea0418c29e1730a010d03953fcb040920761e0bc99557021bdf88848b64
MD5 22992a1012cf245701c07d13bd5aa435
SHA1 05dd3aba3e5ee7e15bd434da514d44144db9c6a7
SHA512 fffa3c6dbfbc1ef5cf7d2ada490a8fd30707d622ba6752cd4c07c4e4df85fb6d2817c17de3400717ad216813c9c9d966fd2dacd4324fe66caa0401242cd0549d
SSDEEP 192:sxZ4RCW4/fQ/stnwIdp6tHW6+WN5PYh/Y36wGOaIg5tJ:sxZ4j4/fQ/s5RaHb5c/Xf5
TLSH
T1E222A6526E28AD7B8CCBD209BB55BF13D6F9503291D11E58BAFC861C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

37769123-f493-4e9c-925c-f3a5e757e300.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\37769123-f493-4e9c-925c-f3a5e757e300.tmp
Size 10KB
SHA256 6b5aa46ed91edf3d73bf5eb3c281cef776ca4a467a94087613d9f18d6cd6268e
MD5 94e15c3b6107fc9e1345c28294ab0540
SHA1 b7ad3959e746ea70bf44e0b4621fe736c0335401
SHA512 12c60afd85b84630f25fd2c96753acfac98d61b63b74d6c3062ed505b1a16e911156e9d67f2d4728a24d0c99c2d02a5108bceac7aa041cc77bfbd577dbfa0148
SSDEEP 192:sxZ4RCW4/fQ/stywIdpItHW6+WN5PYh/Y36g/OaIg5HJ:sxZ4j4/fQ/skRsHb5c/XIP
TLSH
T1A122A6526E286D7B8CCBD209BB55BF13E6F9503291911E58BAFCCA1C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4155372b-6744-432f-a112-ba9c26e646a1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4155372b-6744-432f-a112-ba9c26e646a1.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

686abdf1-3b0e-4fa7-8744-6d3bf6947936.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\686abdf1-3b0e-4fa7-8744-6d3bf6947936.tmp
Size 10KB
SHA256 c112bf99aed7e27bffd5a4cdc4b4619569a490fdeb3198845361198b4f0b2407
MD5 6f7fcc60214592e4177bcdaa2a3438b1
SHA1 cf43e992c1364c37bb4cb97b7cc8d6c4a0e83fc4
SHA512 5a6dea44ca1f3da5a46eed8f0c0b2761442f500c7d785ad56e17c9cde04c262c6d7e088fd42b4ad2dd9aa0f8292ad5b3af12249871ba5689d2bd99c9d71303f9
SSDEEP 192:sxZ4RCW4/fQ/stywIdp6tHW6+WN5PYh/Y36ucOaIg5HJ:sxZ4j4/fQ/skRaHb5c/XRP
TLSH
T1E82296526E286D7B8CCBE209BB55BF53E6F9503291911E58B6FCCA1C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

73e65e31-3c5c-445d-b64a-39ead7a7fc18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\73e65e31-3c5c-445d-b64a-39ead7a7fc18.tmp
Size 27KB
SHA256 66f5f7485c04fdad7fba57b27ae00f0fc94960fb779067032e6442e0657899d7
MD5 8e372e7ec8cb9b0cb4c5ae7dcc68abdb
SHA1 7fa0bf36d33a690a13a3200b948475013b30dbde
SHA512 79c499d7c9fb6b3975ae347994c8f0cd5bf701b131ca3ae197090abf22b75aeb0a5be6912a5280be65131ff68def1eaca3f45c6accaa4fa2cfd3534e6edb5560
SSDEEP 768:xZKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/+roVL:xZKlm7QWvUYe0u1ja8/L/E/VVL
TLSH
T167C2FA3B740CCB7E4FC05A9DDC5A6F976EA802C796588D4047FA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

914fd7d6-cac4-4046-b210-afb5f87521cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\914fd7d6-cac4-4046-b210-afb5f87521cf.tmp
Size 9KB
SHA256 32cfd6edcc6948946bc05cac89541827748fa63401ce5d9bb2e2d2a287903901
MD5 6c190fb3ccca4b633056d05dae285c54
SHA1 522738579893953ee30d9b769cd553b1746f4004
SHA512 ea2c9c984c038bb281f940e4e2f9e46e8a42e24b3a787175a98e7fa448c0a256e48cca07352f170cb6684f2c0d89027c9ee7c332b05a27e08ee92ac57827ebb9
SSDEEP 192:sxZ4RCW4/fQ/s2nwIdp6tHW6+WN5PYh/Y36wGOaIgrJ:sxZ4j4/fQ/sWRaHb5c/Xf9
TLSH
T17422A7526E28A97B8CCBD209BB25BF13D5F9503291D11E58BAFC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 8676f0ae925f23e3a87a1cdec2bc68f02ec813c3d94ac9aa8dfd5bd457a8a41b
MD5 eefb9a8f6f6593112b67c34cb71f31d3
SHA1 8a42708f8ab727e3c8c78def6cf6c4e16877f172
SHA512 26043bb5f2e2113bf3eb19accbadebb58bd4ce3614feca7709ee4a7a617b298f0e27ea252a535396d457e1d2f45b4ab5998534e58f6d98e826d5c9b1f77ecf4f
TLSH
T157616090BFD178A1FBA87FB9DFD714833AB3A7840AA7ED50A190D8F99E067905060354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2fd670affbac3e476620d942b56846608ea5a14a147660e7c3ec72efb1a222df
MD5 b24fae9da0b403928e9c13699dae0448
SHA1 74101a317c2471c10349c4816b9fa779fda910e9
SHA512 5bc14618084ca584b5b10353294aae1b710cc4012e23fd2f515f00b07e74c1e229771d96b686c3c33d880a8719484f9917fe7f9b0407516684e6b64c85f0542c
TLSH
T16D617E90BFC078A1FBA87FB9DFE7048336B3A7C01AA7ED41A090D8F95E0679050A0354
MD5 SHA1 SHA512 TLSH

Submit Download

ecb61214-4c06-4de4-a28e-337d84f4c8f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ecb61214-4c06-4de4-a28e-337d84f4c8f0.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

8ac91292-a46a-4f16-be71-c17fbb105a38.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8ac91292-a46a-4f16-be71-c17fbb105a38.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b64841f7-b6f7-4077-ae31-70f993cae9c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b64841f7-b6f7-4077-ae31-70f993cae9c9.tmp
Size 1KB
SHA256 c6fc8305af42a43a6dd52bb5445b61c942144fed1bd3aa0ee0190b20253362d7
MD5 b0a7f9d5ae27143c97086a255814f04a
SHA1 43e0bba71d35d869df79b136280ca25a12a27c4b
SHA512 0ef86011c434fd7279a76884d66e9dbfaea26216b74fd8adb5fd466dea6ee92075b7418d9331151b22fd6694728a95d560d288f2c9c73513926d3a55e5466988
TLSH
T181419EB3C3D9811DCD4619F09A28BD26CE2D1A189328BD55D8E4AF5B93F3471D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

ed23d48c-c2ff-40ff-a268-fe58c290e3ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ed23d48c-c2ff-40ff-a268-fe58c290e3ed.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

746b2040-a3a4-4e75-8f07-d1849e656cf9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\746b2040-a3a4-4e75-8f07-d1849e656cf9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e032cf94-c53f-48d1-90a0-7726ff05b2e4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e032cf94-c53f-48d1-90a0-7726ff05b2e4.tmp
Size 18KB
SHA256 21eab85ad46e39d9cff05d0a55fe22a3b589aeace4b3eede561b11156ed7238d
MD5 4bbe3e501319fcb8cfa7dac7e5ef87a4
SHA1 e79d4c485de8d7c86517adcfb1c253668009d7b1
SHA512 b61291631d0ab377ae1e462eaa7aaeadb6946c825a5bd44d01edc67912dd8ff05c2aa31460b48594a94f97e9b8c41af89cf111f8f80bbc9e5b110629589fd09c
SSDEEP 384:/QkUSv0sNPbpboZSuh//z8ExUXQ4SvaTZcTbt3IIlb:B0Rx/D8Q4SvaTZcF3Ld
TLSH
T13A826D36A8796C3B5AE7A151F14A3213DEB4806BDBC41F54D6DDAB2C01CA29C234AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e46419ee-9dc8-463e-93b5-ddaa9c07423f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e46419ee-9dc8-463e-93b5-ddaa9c07423f.tmp
Size 26KB
SHA256 5f1f5ac67e76e4b6d5b45527c05b9f51df79dd15ceb65b4f4c263a9568e87a95
MD5 96bdca51cf24dd1abdbe0f5bc7fa073f
SHA1 7b811fde10be673236f9d88dc54b3432259c3ecf
SHA512 fe4b6e261c3d327ecc73353c48414d6c2f7fd05f80e14585d6f5a4b0dc1f638082e82a9e34536f9e68d37082c1da027ffff0f5cc6c4581778bd562d4c5315868
SSDEEP 384:6iFzQkUSvWzsNx8TUNTUlIl6pboFSuh//z8ExUXQkSvaTZcTbt3IIlb:xFdm8wgBx/D8QkSvaTZcF3Ld
TLSH
T118C2F8F298D7983AD9AE5743A77D3E038EBCC067F6805A50B788991CCD861BFD346811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45b82833-c6c8-48d4-a092-bca251eb60fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\45b82833-c6c8-48d4-a092-bca251eb60fd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1a27ef47a763f662c43a242cc9c9438940fc453f138a3a1c898b2a0c71b6c43a
MD5 fee7380392feae77d9b37d35d9702fea
SHA1 a7d5c572c618485d4cc7d82def7e5f0e33dc7f67
SHA512 e6a4c8582de44589964ba06ac9a5964748bfa4f45b9e847f9619c36a2fc6ac65a4283631bc2055be23f964aa046a6d01b82252ffefba94146c7524365fa64e10
TLSH
T1C3411958B6F91148B3F76E1A9BF2A96E487FB9772F07855D00010E4F0A67A00D9B2737
MD5 SHA1 SHA512 TLSH

Submit Download