hxxp://container-progeco[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 15:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://container-progeco.com
Sample261027-shf2xadh23

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2064	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{864D820B-F814-4B25-9C25-7E3C479CEEB8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3944	msedge.exe
3944	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 404 wrote to memory of 5544	404	msedge.exe	85
PID 404 wrote to memory of 2064	404	msedge.exe	86
PID 404 wrote to memory of 3460	404	msedge.exe	87
PID 404 wrote to memory of 4688	404	msedge.exe	88
PID 404 wrote to memory of 3460	404	msedge.exe	87
PID 404 wrote to memory of 3460	404	msedge.exe	87
PID 404 wrote to memory of 4688	404	msedge.exe	88
PID 404 wrote to memory of 2932	404	msedge.exe	90
PID 404 wrote to memory of 2932	404	msedge.exe	90
PID 404 wrote to memory of 2932	404	msedge.exe	90
PID 404 wrote to memory of 2936	404	msedge.exe	91
PID 404 wrote to memory of 2936	404	msedge.exe	91
PID 404 wrote to memory of 2936	404	msedge.exe	91
PID 404 wrote to memory of 6100	404	msedge.exe	94
PID 404 wrote to memory of 6100	404	msedge.exe	94
PID 404 wrote to memory of 6100	404	msedge.exe	94
PID 404 wrote to memory of 2112	404	msedge.exe	99
PID 404 wrote to memory of 2112	404	msedge.exe	99
PID 404 wrote to memory of 2784	404	msedge.exe	100
PID 404 wrote to memory of 2784	404	msedge.exe	100
PID 404 wrote to memory of 1572	404	msedge.exe	102
PID 404 wrote to memory of 1988	404	msedge.exe	106
PID 404 wrote to memory of 5664	404	msedge.exe	107
PID 404 wrote to memory of 1988	404	msedge.exe	106
PID 404 wrote to memory of 5664	404	msedge.exe	107
PID 404 wrote to memory of 5664	404	msedge.exe	107
PID 404 wrote to memory of 4008	404	msedge.exe	108
PID 404 wrote to memory of 2104	404	msedge.exe	114
PID 404 wrote to memory of 5588	404	msedge.exe	115
PID 404 wrote to memory of 5312	404	msedge.exe	116
PID 404 wrote to memory of 888	404	msedge.exe	118
PID 404 wrote to memory of 888	404	msedge.exe	118
PID 404 wrote to memory of 5396	404	msedge.exe	119
PID 404 wrote to memory of 5396	404	msedge.exe	119
PID 404 wrote to memory of 5076	404	msedge.exe	120
PID 404 wrote to memory of 5076	404	msedge.exe	120
PID 404 wrote to memory of 3944	404	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://container-progeco.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff896e6c188,0x7ff896e6c194,0x7ff896e6c1a0
  2⤵
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1996,i,13848573756701428960,4709475130817110038,524288 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1888,i,3129054959327235176,7834396945653530289,262144 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:2
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,13782362618095703254,15687930966651036408,524288 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,10267717639769073390,1642662577754054955,2097152 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,6447897154397051869,1284446380841892655,2097152 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4900,i,5921425873049281563,13349762466468947304,2097152 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,14006533601029730746,12042445827829995734,524288 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,12235788890159001675,11866762974470880280,524288 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,9269865154374552376,18388822180259304084,524288 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,9269865154374552376,18388822180259304084,524288 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,18130714510764575610,15300549336398695394,524288 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6180,i,1422183358139736840,13668192389522791834,2097152 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6636,i,10886396712717211892,5583872128361929384,524288 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:8
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,3836606418817646684,13568934388017119032,524288 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:8
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,9224836772962980595,1781404287295984695,524288 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:8
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,16035035196419694929,17579432506592503323,524288 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,9775884765254075278,6323425439525109630,524288 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,9641988324054065514,5130881382135086192,524288 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:8
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,2087901689928657520,8930768636893212935,524288 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5160,i,10430984023900451776,14550886963074155549,262144 --field-trial-handle=2364,i,1206710396883607944,15097839555693241542,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3944

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2536

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1484

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0dcf56b9-433c-429d-9a36-2aa23dd7d359.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0dcf56b9-433c-429d-9a36-2aa23dd7d359.tmp
Size 25KB
SHA256 47c476b92a4d2a94eb19ad4a99dbb2a7eae1e5c590a4bdcf08684597ea07b917
MD5 4c491311658b5d44d875d59e06cf09cc
SHA1 bb30746d96b002ddc6cbe5ae2c6d68b81419c31c
SHA512 a28caaa05a87a4ebb9685efcfb2de6781107b60dcac2b924c153c80fc0397aaa023b4f3430dbd5350ac0f23d5fd5c7d1c3f832430033ba37aa5b86643be514c9
SSDEEP 384:n6iFiZcI63sNP8TUNTUlIm25mg5JnK2fMBVp1yqcVTN7O6R2FeoibgL/7IzMoc:xFQ63KwgScYBV6dTN7TRn4D
TLSH
T194C24A36EC94DABBECFA8FAAA74A7A13DEF00163859C4AC0D6C81D1D009759D0707C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7eb9303f-f333-4fe6-92db-9c8aa72d4ab0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7eb9303f-f333-4fe6-92db-9c8aa72d4ab0.tmp
Size 27KB
SHA256 2b2e2c06e0ac5bfcdc911e3c54ca8352aaaa67a604376ae7a9c4d349eb9fbb47
MD5 22cb63d7f4aade8d40e54088fba2d8b2
SHA1 f43488040247cc4e4851f794500647947b695e3f
SHA512 ed646af40d8699d0ee39d6649926299dd5bfe57efd1d12b14b1794ce9df7e9834d4b3b9790d3779986d18b3c882e2e1381aa719c7ad6a41062a4927c4babc9f9
SSDEEP 384:n6fiFzQkUSvR3sNp8TUNTUlI4I5mg7XTuK2fMBVp1yqcVyKMKvaTZcNgL/7IzoIA:/FdR3swgWm/BV6dyKvaTZc2L3
TLSH
T1E3C24C32E898D9BBDDEB8EE5A74A3643DEE0825389DC4AD4D5C91C6C00DB1DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

193a9b6c-c87d-46df-8e3a-0cf51d263e4e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\193a9b6c-c87d-46df-8e3a-0cf51d263e4e.tmp
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

202e30f6-cd1e-467f-a26d-99c63d76a428.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\202e30f6-cd1e-467f-a26d-99c63d76a428.tmp
Size 12KB
SHA256 e4580621866f106c7a1e5f4293efbbfa6029b65e3a5c430ccd17242b0d7772b5
MD5 9a7955d0cac6f2e99c192d4a360fd34c
SHA1 841e5c15e0d8ede668a6dc9ba21ffe0616dc8b12
SHA512 ffe2600e9a7e909faee906abc0913725393c017efcbf6bc71841edc0284f62cbd842b5f4286e70fba18f98a47c5fcd91456cecb812fb2e2739764c35758de5d6
SSDEEP 192:sxZBRS9+/fDs3QZZ7xzodp5QHW6+WNcK4/YbI3t/YFKZIg5N6J:sxZB6+/fDs3OZ766Hb+/FNYOn2
TLSH
T1FF42C715AD28A93B8CCBD20DFA55BF53E7F95033A0955E88A6FC9A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45bdd7c9-e841-4bfd-823e-90c386636784.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\45bdd7c9-e841-4bfd-823e-90c386636784.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

5b7e8933-7465-43a0-949b-24320d3eaec3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5b7e8933-7465-43a0-949b-24320d3eaec3.tmp
Size 12KB
SHA256 25cacd583eb61d49127e852d0b4384cb4f5b65ea8bc291db11aca1014d30c5df
MD5 c9df942c30f6e9f6c5659370a1ac2ad5
SHA1 66a39045cff6d9883c206b0e274e42bdf40beb40
SHA512 74b32925eadfddd8bf9a2e5e1c2e90b297d7c39b7079d6a53e8947c62fa51f1bb071672436d0d6be658b0db0696a9cb8cd0adf07889cc19dd85fb1a01553c5d2
SSDEEP 192:sxZBRS9+/fDsnQZZ2xzodp5zHW6+WNcK4/YbI3t/YFKZIgj6J:sxZB6+/fDsnOZ26BHb+/FNYOj2
TLSH
T1B742B615AE28A93B8CC7D209FA15BF53E7F95033A0955E88A6FCDA1C05E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62f3fa88-aaec-45cd-8558-50e7a789d9b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\62f3fa88-aaec-45cd-8558-50e7a789d9b2.tmp
Size 12KB
SHA256 eaf5b938376dd42efe5155b41e2d239fd67d3296e0462b5999e38052dabc6d73
MD5 b7e0880c4d27444ac8cb507e8f2a485b
SHA1 e7c07e3e7e275c6ae3102b3a904c95d69fa18e13
SHA512 a20049b56236a78a03d441dcb5fcd86cdb3170fc7d29c45ee4830808162502993392d26c8933876e9f1e65052739a1c1d324f94456cd2ea0e2c3634770ecbb7f
SSDEEP 192:sxZBRS9+/fDsAQZZ7xzodp5QHW6+WNcK4/YbI4t/YFKZIg5N6J:sxZB6+/fDsAOZ766Hb+/FAYOn2
TLSH
T15142C7156D28A93B8CCBD209FA55BF53E7F95033A0951E88E6FC9A1C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91394713-90f1-4e03-b24e-176c13fe3345.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\91394713-90f1-4e03-b24e-176c13fe3345.tmp
Size 414B
SHA256 a0dbc27cc56463b8eb735695b99cbe96439eb7979816c05a25477266f4560cfe
MD5 dbf20d04eae0a838eccf1718b17fbde6
SHA1 0b2b67b0fc956a351f7537163073faf0d1d71a94
SHA512 91d5b1b531c4d22497e48bbe5ea94b225567fb81babb039e69ed8189c32c6908475e556888c31cd51ff1e84d0112cbd0cb1553b38f3014d70dd36a4eefd1e194
TLSH
T145E02BF5C819BC3708FC472854540685EA51035B2A80888F773DD01D8FB1A76458686C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 9d5d896a9aa6ca825076037a3b217df3d0d269884ae9b69978cc3a6e58762af2
MD5 0704b1608a30c18740552a9448211bec
SHA1 7d22e6f6980e4b476a896cfcccab0c1391729bd7
SHA512 704908bd9b4ce7d86e0bffa425e1e1b11dd85261f9dc52c5483ebd99fbb124fd58c2a9b46a1a9dec2bad2df273fa6f9791d37890634ebb9c28dc2f0a10d48b07
TLSH
T192E07DA518C9C22FA20874D7837C638D83A1373AD3C06A0E5714D6887207850B6E2790
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 a1bf49f423e7ad9bde792e4246265583036373daa33a51b641e66e28f4c37505
MD5 ff596c338f5e2d8e8f0858ffcc3a475f
SHA1 eb771644ab5e9397891521180b1cc48e37fe8bf4
SHA512 7b860fcd9bf5a0dc4c70686ca6ff513f051fb34ec0484c51daea8a081ceeafc155996a0deeb9bc0ed9e213232e792240ef264e88fb2dd93db9822957432a91bc
TLSH
T13DE026C517C8C22FB20E644F436C570D93A1272A92C0BB0F3700CACC7707880E2C3690
MD5 SHA1 SHA512 TLSH

Submit Download

74d629de-c4ad-4b17-8cc5-d3a3ef31bca7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\74d629de-c4ad-4b17-8cc5-d3a3ef31bca7.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

143c876c-21da-4b65-8552-51cb1b745f75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\143c876c-21da-4b65-8552-51cb1b745f75.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

21b87107-bde5-4b0f-a5ac-164a7f569847.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\21b87107-bde5-4b0f-a5ac-164a7f569847.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

bf873068-73ed-4410-9b2c-e4a24eaec7a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bf873068-73ed-4410-9b2c-e4a24eaec7a6.tmp
Size 1KB
SHA256 5f58ea0ff152cbedade6524e95d7c65f62a6a7e4349a4371c6552e1c4a3e44a7
MD5 dcb1c035268b829c495c641066ccbcb5
SHA1 9b4a894eeca13f5eacd073d23977d0f9403dddc6
SHA512 31b959dc2108f1172c75ebb42f36f709c55b602f4e80d512034137b8ecd5b1ccfe5e60e1dbb7e2580bb07c64bc46ee990c49ca00d6aeca1c74ba0c992d241ad3
TLSH
T16D31A0F387B4C56E8A0196F0AA18AE2FDF2D0514432C7D9AC4E4AE27D3E3471E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 24KB
SHA256 faf80b13beaffe06d40983ebd2c5eac5e0ab169f29653526bff2515b8d5fd0c3
MD5 a51f9258adc60de567e208e5056b3b5d
SHA1 dcef439c5901f0f304e69098d0f894550de79214
SHA512 2a65e9c3aa8f2e99a075156f841d2d6d12240586d42b52ec447ab8b481b561217461663978d51efb4374f0a92573f33d2c6058f43fd6f98e94e03357c09868cc
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvX6mh3Fg:OtfFvpopPxrB4Rhf6a3m
TLSH
T1CCB2331571BA021038FE790881B69B2F064232B33158E67B7FBD15A69E6BF045DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b3904f63-019c-4c9c-92e7-406d79ad2556.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b3904f63-019c-4c9c-92e7-406d79ad2556.tmp
Size 32KB
SHA256 ea5f6c48e26874986f2a647ea649543ccf53b9ca1903f4e58df7218a9c573984
MD5 d643f0322526635aa244ca8aa4c1e483
SHA1 293f77ce63e57e3911ac40c7e0d5bb6a9545db95
SHA512 2f2e021a1358020cf51341f1f1895869e7a14e30d472ab1670c8a8d373c1e865b8106e778d74124d48d702fedd5bddd0c52be21cff05c296836d161e7a3c19df
SSDEEP 384:n4TiFzQkUSvHw3sNp8TUNTUlI4I5mgfRTuK2fMBVp1yqcVyKmKvaTZcNgL/7Izoz:tFdQ3swgWc/BV6dwKvaTZc2L3
TLSH
T1E1E292F1A8D79977D9AE4B97A33E2D0299FCC113B5884A84B7C51C1CCC9A1BFD306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2225f3b-90f2-4437-b7b7-1f1da3dee51b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c2225f3b-90f2-4437-b7b7-1f1da3dee51b.tmp
Size 27KB
SHA256 9b33f7170211580559712b199dac9bc10dc2331a1621b194fac519560069e197
MD5 6d3ffc50a570413104b54c6c6636d6e1
SHA1 9013e77103e3eede9f82f6f1e188eefd080d8a66
SHA512 965bd8072c82e3ac7cafc0931e3c8cc7f1c8e3e5ad93939b519afa4322c1b86ac4ba499ed4c556455287aa0d183b3be0039a0658d7046cf3352017389038866e
SSDEEP 384:n4fiFzQkUSvR3sNp8TUNTUlI4I5mgfXTuK2fMBVp1yqcVyKMKvaTZcNgL/7IzoIA:hFdR3swgW+/BV6dyKvaTZc2L3
TLSH
T13BC24C32E898D9BBDDEB8EE5A74A3643DEE0825389DC4AD4D5C95C6C00DB1DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df91ecd8-4b5a-4868-a2a6-be166694fdd2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\df91ecd8-4b5a-4868-a2a6-be166694fdd2.tmp
Size 26KB
SHA256 4de59e8ee7bce0fc42c4993d4fea5b0f4cd0a2835fa92419e1c21aa9d9d54458
MD5 9532fec016381558e162758c87dec4a5
SHA1 f2451296719447b771e62a4cf9bbb3500ba799ce
SHA512 e805d8f9b03e065632c1862d1e4ef24f37e5a5014b0e2f107c6e2a7bc881ececc44304844bf0488393c204856f917ca6477017120acfc718b337b395b59a1f62
SSDEEP 384:nNiFiZcI63sNF8TUNTUlIm25mgSX7K2fMBVp1yqcVyKmK7O6R2FeoibgL/7IzMoc:EFQ638wgS1UBV6dIK7TRn4D
TLSH
T1FFC24C32E894D9BBECEB8EE6A74A7A13DEF04253858C8AC4D5D91D5C009B59D070BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 76974c5e4118fafa17edb09f3bd469d8c346608a5a85a58e81d3a4651b5d0efe
MD5 3e5c11abea61b1d77715c2087fe8dc49
SHA1 148875cde0b9c774abeeb3667aead6e831f18e87
SHA512 8c7876ec3e574c578d797bcbe4a2859ef73b3a88c88e1d672822fa6771008f75712a083efa57f819c392cda2b24372caf16e217848c1388933ce0325c5aeb9a9
TLSH
T1A1414A5CB7FA0148B3B76E5A9BF6687E487A79772E0AD06D10110E4F0623B40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

f0d04de4-5100-4fba-989d-e1df39c3bbf8.tmp

Path C:\Users\Admin\Downloads\f0d04de4-5100-4fba-989d-e1df39c3bbf8.tmp
Size 15KB
SHA256 17f896bf9f65682f83455c5b9c48857e2a645234176a800222fb71922aa68187
MD5 b25e3296ca87b2b308073f984f3936cb
SHA1 2c5baf99a3b9abb6cce47271448986bde25df91e
SHA512 a6dda278ed9c70e05759510cc22a938a2eac51f84d924b4b9b3d36f3cc7a7bc3407c9225f220f8ca039d2ac7d747e2f4c2285b3a80043020020da4b235422b25
SSDEEP 384:Ufrjov8NlUojEpRyVU4mj0w0rYXBtKihNZyPTP:UfTlUocyVJmj0w4sy
TLSH
T12C72C087FC1F78ACE16EEA6E48495C594E57F060A2AF36D63344DA7E014128DB24E733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1572-207-0x0000023423B50000-0x0000023424B50000-memory.dmp

Download