Analysis
- max time kernel
148s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/10/2026, 00:09
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://issstecitas.com
Resource
win10v2004-20260911-en
10 signatures
150 seconds
General
- Target https://issstecitas.com
- Sample261030-afh5datydv
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 548 msedge.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier msedge.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{F68097FE-0C77-4805-ACCD-6B2D681A070F} msedge.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4368 msedge.exe 4368 msedge.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
pid Process 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe - Suspicious use of SendNotifyMessage 32 IoCs
pid Process 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe 4448 msedge.exe - Suspicious use of WriteProcessMemory 38 IoCs
description pid Process procid_target PID 4448 wrote to memory of 2280 4448 msedge.exe 85 PID 4448 wrote to memory of 548 4448 msedge.exe 86 PID 4448 wrote to memory of 2212 4448 msedge.exe 87 PID 4448 wrote to memory of 2212 4448 msedge.exe 87 PID 4448 wrote to memory of 2212 4448 msedge.exe 87 PID 4448 wrote to memory of 2072 4448 msedge.exe 88 PID 4448 wrote to memory of 2072 4448 msedge.exe 88 PID 4448 wrote to memory of 1852 4448 msedge.exe 90 PID 4448 wrote to memory of 4908 4448 msedge.exe 91 PID 4448 wrote to memory of 1852 4448 msedge.exe 90 PID 4448 wrote to memory of 1852 4448 msedge.exe 90 PID 4448 wrote to memory of 4908 4448 msedge.exe 91 PID 4448 wrote to memory of 4908 4448 msedge.exe 91 PID 4448 wrote to memory of 1644 4448 msedge.exe 92 PID 4448 wrote to memory of 1284 4448 msedge.exe 93 PID 4448 wrote to memory of 1644 4448 msedge.exe 92 PID 4448 wrote to memory of 1644 4448 msedge.exe 92 PID 4448 wrote to memory of 1284 4448 msedge.exe 93 PID 4448 wrote to memory of 1284 4448 msedge.exe 93 PID 4448 wrote to memory of 5028 4448 msedge.exe 97 PID 4448 wrote to memory of 5028 4448 msedge.exe 97 PID 4448 wrote to memory of 5028 4448 msedge.exe 97 PID 4448 wrote to memory of 2932 4448 msedge.exe 98 PID 4448 wrote to memory of 2020 4448 msedge.exe 99 PID 4448 wrote to memory of 2932 4448 msedge.exe 98 PID 4448 wrote to memory of 2020 4448 msedge.exe 99 PID 4448 wrote to memory of 4232 4448 msedge.exe 100 PID 4448 wrote to memory of 4232 4448 msedge.exe 100 PID 4448 wrote to memory of 4232 4448 msedge.exe 100 PID 4448 wrote to memory of 1212 4448 msedge.exe 102 PID 4448 wrote to memory of 4048 4448 msedge.exe 113 PID 4448 wrote to memory of 4024 4448 msedge.exe 114 PID 4448 wrote to memory of 2180 4448 msedge.exe 115 PID 4448 wrote to memory of 880 4448 msedge.exe 117 PID 4448 wrote to memory of 880 4448 msedge.exe 117 PID 4448 wrote to memory of 1092 4448 msedge.exe 119 PID 4448 wrote to memory of 1092 4448 msedge.exe 119 PID 4448 wrote to memory of 4368 4448 msedge.exe 120
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://issstecitas.com1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4448 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff9ceb2c188,0x7ff9ceb2c194,0x7ff9ceb2c1a02⤵PID:2280
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,17301693443291720966,15368443143114377361,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:32⤵
- System Time Discovery
PID:548
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,2506884849942669597,10063544830426555942,262144 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:22⤵PID:2212
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,12608159536032819384,3739886304833046551,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:82⤵PID:2072
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,10529689731615257748,5440949802770899592,2097152 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:12⤵PID:1852
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,16187472589861682259,17574110154688035111,2097152 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:12⤵PID:4908
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,5908910745268722594,15287441657051004880,2097152 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:12⤵PID:1644
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,11666688244713614503,2227358997458417767,2097152 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:22⤵PID:1284
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3648,i,8252963088436997552,5398876367310478694,2097152 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:12⤵PID:5028
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,13234270763652258914,4055286853685638671,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:82⤵PID:2932
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,12812991467223939505,5581933169314706765,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:82⤵PID:2020
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6048,i,14781415094563119470,4708629809672259556,2097152 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:12⤵PID:4232
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6216,i,7686774489309563061,15481952962657268945,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:82⤵PID:4820
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6216,i,7686774489309563061,15481952962657268945,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:82⤵PID:1212
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,960601673430701550,17630392772405535646,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:82⤵PID:4048
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,3708131363530124273,10783176975388032039,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:82⤵PID:4024
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,10212194669197519788,13490028665238772303,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:82⤵PID:2180
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,13402056132416848339,14333236570724993962,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:82⤵PID:880
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2052,i,2058835599156388708,17572520546152582861,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:82⤵PID:1092
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7100,i,5938471179963690444,10988221696650008736,262144 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4368
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:5004
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3dcdb926-7d8d-4687-b3a1-4c00852a6cc1.tmp
- Size 18KB
- SHA256 bcb43b5367680c1f76cdb6bccddac6ad7c605944ed53f7298280bcea6dc87ff2
- MD5 d5e313e58e8f638e3e278eb3add5cb86
- SHA1 0f85c50e5e6ec181e8324ef0846eec7a9a22dd3b
- SHA512 2a1e3fe5a43e182dce5a7e1f3eb9bfecb4c3548a572aef5830652e5ed37f078feca3ad9789b0a13a05007ad8a037d0a67f58a0fec46be233281d6d49885675cd
- SSDEEP 384:RQkUSv0sNHU7wEGQqLCp1OjTViDOV2Jj0yxp2IKu/IIlG:D0/oneOAj0yxp5Ku/Lw
- TLSH T181826B357C786D738EA3A640F18A3243DE749067D9852F94E5DD6F1C06CB2DC234BA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4e865722-5a29-4746-9133-dd637a43e060.tmp
- Size 8KB
- SHA256 69446469a42a4decc0bce6fc802f256a4ec25b4eedc5586031694668446a26c0
- MD5 615921f03f37883d3a90658659d18c8e
- SHA1 0b6f3480e39dca6c7bebb254e6fe8dd99a7871a6
- SHA512 1ef8a5c27dd1dd56b9adc4d719adb35939029e6bcc0b8729d9a4be96f2db1f9d0d472c123e188d7f3f48cf8a66c0c3b9c526a3f6a4ccdee839e822e086b31b19
- SSDEEP 192:nON16ycQmiUyYmHOCTVghDOV2JjXEh3UxkqvU6:nON16vSHOCTViDOV2Jj0SxpU6
- TLSH T18012193578786C774ED2A545F48B32079EA95167DA467F80D5EC2E0C02DFAAC230BC26
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9806dae2-88b0-4c1b-be8f-1e10176e3c05.tmp
- Size 26KB
- SHA256 e9a3e93654e29b8dce37bbbd7aca1e37ac797ae96aee3ede9259846c1fa4e8b0
- MD5 6359723627d7351e698b1231463f7a61
- SHA1 7179035c59e44ee469c4998b1ecaabb07a76a699
- SHA512 d48cdfad8f1f90ef98b722571f769e23e9e6334636d62f0b04b388ab0187510b9761ef45e7127be074b414e6d12e0cbfe6a8e545f5f22ff309a0588d69a9c6d1
- SSDEEP 384:PiFzQkUSvSqzsN88TUNTUlIl7wEGQqLCW1OjTViDOV2Jj0ixp2IKu/IIlG:aFdhVwg2oneOAj0ixp5Ku/Lw
- TLSH T19EC207F658E75936C9AE9B43A37D2D038E7CC067F8816A90B3885A0CCD861BFD347915
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
- MD5 71592819d06ab9dfd94505cef3db0b85
- SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
- SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
- TLSH T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
- MD5 8f79499bd1d234dc030ef99e2f850e0e
- SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
- SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
- TLSH T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\61120f7b-72ae-400d-8b13-f6e32383e90d.tmp
- Size 10KB
- SHA256 06c92a202f47e6c1c1fbd7edf5c2763fd4db63e68bb57c8a319053b25c0bd918
- MD5 5c47d18775f15c70fb14cd62f8c01bad
- SHA1 05041283d38632f6f925322592a9af5af556f5ee
- SHA512 4dcc61a870d454b2a7e20efe7e5132a72e9d5a342a3c78622852a6524c5b3c7cf30198a3608b085f7c2ed9ab262b72d24b18b1e7965e0c0d273bb314279ab5e9
- SSDEEP 192:sxZxRxWL/fdsm3ZUIdpx6HW6+WNwlT/YRPMzt+gIg5mJ:sxZxOL/fdsmJNAHbG/mezA
- TLSH T10F22C8527E38A97B8CC7E219BA15BF53E6F9503291911E48ABFCC61C05E76CE620740B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6f18cc1f-cc58-4504-9432-8f44b2bc186d.tmp
- Size 27KB
- SHA256 c0632baacef1adead868b4c46248738d2b7bd3da0b86ed5d9c5f48a38b797174
- MD5 b03df986d88fde0349e8db9deb891475
- SHA1 3a07416d365f115e1fdde69bdafd5bc104ae427d
- SHA512 89405e0911cfc3452473189bf4ed5af795a47a85dfc12a85617b3abb802f6f2612ed298c01961858a478e15a439157a0630f94eb7a2638d1a80b33a892968449
- SSDEEP 768:ewK9uzYWvcQus8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3lroJ+6w:ewK9uzYWvcQusu1ja0HL7Q3eJ+6w
- TLSH T10BC2FA3F640DCB7E4FC01A9DDC5A6F973E9802D796588D4047FA984C02C77EA622A4DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\82907e90-a602-40a6-a337-c5fa1c38c9b1.tmp
- Size 10KB
- SHA256 d5ace322dfb23fc58c7cdb632827aea70a1aed299ac42c64ebc1c380b2a58dcb
- MD5 22cc2c9896758625f4394ee5685e2632
- SHA1 84509547bd22b2ac40fdd5f67891f38cfee7b153
- SHA512 6b18ffae8c425f3e43b7474d98d2dfb28791360d4fc5819dcadbdccbe601de55f0996b8df34882160757965b63cea78dcf1f244a23077e5cdf197167f36086ad
- SSDEEP 192:sxZxRxWL/fdsE3ZUIdpr6HW6+WNwlT/YRPg8t+gIg5EJ:sxZxOL/fdsEJNmHbG/mTzC
- TLSH T12022C8127E38A97B8CCBE219BA15BF53D6F95031A1951E48EBFC861C05E76CE220740F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
- Size 334B
- SHA256 2e9a7302b6e7016d0a0755d91eb125a6d9428ce2050ae7202345a5c4ed00c442
- MD5 44ef3ec0a354777f1bc2349e24ee3a63
- SHA1 2d367d474779159618d46eb278ec4c0831b8859d
- SHA512 2b63d39b0dcb0209b9fc0c360eaace3ac1bcda1ddb47a984983f5dbda3e79e3f71c26436ce8944c09ae8963869d92c010bbe93cc235e499b1d68c73c180b8147
- TLSH T123E026E486ECC36EF308648B027E530DA384362AD7C0A90E3B04C6C87286154E282ED0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
- Size 23KB
- SHA256 47ecc57a70e243404266b91ec8976981475d650d7a3be42584cfe745429e889c
- MD5 3bafe042669b9fe77a3072b6d3782272
- SHA1 f65a1c82c174cd54d0c1e31f5ff1a82c6fa1a814
- SHA512 34f9f885e4914387232a6e14b84aa435c5087c3e36d5769fc06f2e017547e5ab6196acbcc822dc07fea781ed638815ff95aff9e31eeebffbf9e427e82a4e5686
- SSDEEP 384:ziVYWKM3eeJ+6pETAl+dQvY7uujsb1Gm78Sjp03F10jYYdzU9ncEz7VRw5OVX5D4:ziVbKM3eeJpETAl+Jpsh5p01eAnH7Vqf
- TLSH T169B2E18FE544D67CEBAE0B47632CC195018F403450888B6F8F6CD964A99789BCDDF261
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
- Size 23KB
- SHA256 f83e9d454488c43da75fe3764665a9efac69c80f7f02fab22449ecbaa15c2b30
- MD5 9b169fe7c76415934d16d6f57d602ffc
- SHA1 c5c02d78c12ba25e82aa09f7f7f9ca3ac381e98d
- SHA512 7868215c57c1a2d5c707baa3d79c2897109fb3c4cfdc20a02dc82480bbee6758c04654dc818f3669931109f59cede7e0dd566dcbe309fba00ae72877a827c7e6
- SSDEEP 384:AFNtcIsokMlxeeOVk9g9gOFwoQRSlgzUMtaDRDskxoVb10KkAAqSW:Atc+h9ayfx3t+5210KHSW
- TLSH T121B2E05B40CA4E87B8838A2749E63E034580931DA5DAC2BD056F5F30D6E5EC39697DCA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 3KB
- SHA256 94ef9d8a6846872c54146dd57e244ed34f45d53630553f829f2e69f12ae4fc73
- MD5 70419d1bc603614dff58c0414f45fccd
- SHA1 97b1ecc616c2ea665685c40c270eb7966d3e7216
- SHA512 ec12138843d42fb0bc139f188cb44fba83fb2f630d1f6fefa417617d8867a7844b3d90f98910567c0c54c7a55d2be19e89d2c666baf1735d7f24b36afbc6ed6b
- TLSH T1B971B9CA959383A1FF9A91F286C9CDCB3B384B54A5D32EF2E695D674702BBD13184020
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 3KB
- SHA256 777fa6debe26c6bdaf92949150b3c34499d2ca3f40eb4a6b785451b0459e53c9
- MD5 7639e12a11f2e940a638309b69fca648
- SHA1 7e439ccc40e097bb2918e66b860586321756b422
- SHA512 21b7d5aab4b595188e1e801d55d80f1f90724903099f973ed4e4c4e2720e5d8cb994321ed35ec5aae620e44cdc64c1725179c7e163526caa9491dee0fb9d9a60
- TLSH T14861B7C2965383A4FFAA90F28AC2C8CB373C8780F4C32EF2E696D77974267953084041
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ae79bb70-0eaa-46a2-8cd0-152859a33f3b.tmp
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0def4daa-638b-409f-ad6f-1114ba845c6a.tmp
- Size 6KB
- SHA256 46c67d0e0d183a49a112f2f3dacbbba229dc19e370cbd8ce9896ad9977547100
- MD5 8f755571271e5d13a6b6874276cb079c
- SHA1 975bee3775bb1ce6d78178db55307b1f22af98d8
- SHA512 5d760e94c991f9a87c908d192b8aee80cdc1b3cc889bbca2334b73acfffc76dd5077ceb3a82671204715303d69e321ed6c6331964d58aa013c7b42076919d6b1
- SSDEEP 192:DIItIgJIAJILIrIyJIcJIX1oIkIKIwIQI3IsIIfI0IsIGJIwPkIqPkIdPamIxRIO:DIItIsIMILIrIyJIcJIX1oIkIKIwIQI3
- TLSH T17CD17DB7C2E8C96E885152F1A72C3E1ECF2E0528427C3D1BC5E99F8B93E1465D39158E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\63cbebc8-b0c8-4a42-acd4-aa9e8acd9bc8.tmp
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8922ab73-dd33-4466-a3ff-ef8fa3d98f4c.tmp
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
- Size 4KB
- SHA256 2e7e4a92ac1092bfede084c691c7f7ccc8f02ee4d90a2dce60a3090fc46c1f65
- MD5 1011f848920f0ff6c4f4d6e38b267b1d
- SHA1 c787378bb156c1d1a5db4a152dddbad7db1dac91
- SHA512 2f02fcd19149519db6825020851b900d59173595d342bc466e85ea74409b059af7ab1e5158fac7f492c93fc149f1a7937e5e0caadb511c11eef1953a50b63724
- SSDEEP 48:K0mImOpEIGM81bAHIISg1K9E1W1xulY/A8OyLuqu1uYuEuyQIPK5eUvyFI:K0mdtaKu4iVQAK5eG+I
- TLSH T18A912851727B5200787E694841B5C62B224235B33468E96F7FB891E2CFAAE04CDFD9C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8d35981-20f6-4fa7-a61a-c78858c9701e.tmp
- Size 10KB
- SHA256 21d7166abca122aa6c563782199206f13662583a361fe859fc7b62641ceb7c63
- MD5 8a0518810aaad9a2dddd42e7b0da1673
- SHA1 74c8176207f4ec8a9cc06f3742612930b38ece1c
- SHA512 c1075114daf8c5ccf59286ba53be2cf590bd9f4e9ce9c5d13d06a9e6d8449ed60bc1fc8d61b45fdaba03b7decc0adc891bb468bd5916107be5a9c5ea536746bc
- SSDEEP 192:sxZxRxWL/fdsm3ZUIdpr6HW6+WNwlT/YRPaUt+gIg5mJ:sxZxOL/fdsmJNmHbG/mfzA
- TLSH T1AC22C9527E38A97B8CC7E209BA15BF53E6F9503291951E48EBFCC61C05E76CE620740B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d92eed25-386b-4978-9ac2-a1397be84301.tmp
- Size 10KB
- SHA256 10533551ca8233ab4578d72639cfaee041df8c6eae68f3c6f30e69bd14bf73a0
- MD5 dee3cdc708dd469a6361b290365da1a9
- SHA1 2722fe833ce01290f71e60bc8b985d720afc6e75
- SHA512 b9451f5df9dd016031e362aa28b060f8d105beba756c83193b73f2f0d777e78df83de3c87bfbee2a5515faa3f73e36f4477b1d0e84d9ba6cf456be01335fda41
- SSDEEP 192:sxZxRxWL/fdst3ZUIdpr6HW6+WNwlT/YRPg8t+gIgrJ:sxZxOL/fdstJNmHbG/mTz9
- TLSH T1F722B8127E38A97B8CC7E219BA15BF53D6F95032A1951E48EBFC861C05E76CE220740B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f2889e2b-5773-4c41-8472-ccc484670c30.tmp
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9289ebe6-af75-46d2-9ed4-86cdb37b9266.tmp
- Size 22KB
- SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
- MD5 f768bcb451a187c18099961c484eef8b
- SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
- SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
- SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
- TLSH T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
- Size 3KB
- SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
- MD5 904e6e94a1d46374c8630cfd86cc729f
- SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
- SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
- TLSH T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a05742ce-7546-4d5e-9eb3-be32fba4c94e.tmp
- Size 18KB
- SHA256 732ee13b6618d73348b0f132a26684cd988794a60015af3736b1224f418c07ad
- MD5 ee55e80e2ba204acf1d776c809ea3439
- SHA1 2a81ff348b7d0d5ab9481fda6163a0ac212c7a30
- SHA512 8047ccb1e7184a567b4246a0268a796f7ca41b926fe0273744ffeceeb6abe01803ce95f682e4da95310012d53c893bfae04815324849f934c3dd081f8b6ff795
- SSDEEP 384:JQkUSv0sNHU6wEGQqLCp1OjTViDOV2Jj0yxp2IKu/IIlG:r0IoneOAj0yxp5Ku/Lw
- TLSH T193826B367C786C738EA3A640F18A3243DE749067D9852B94E5DD6F1C06CB2DC234BA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\df0303f9-f740-44db-b8e1-2d67bf75bef7.tmp
- Size 8KB
- SHA256 3d01c24fa41186e45e058df2e4c54f126dec259a46d9cb2f268459875454689c
- MD5 d0ca770fe8a922dbf7c399cef3bf5669
- SHA1 f58c3381773e9f24b59e9f44c55966682f3273a4
- SHA512 6b56b75a2b90a62978c361ecf091be546b01c1e9d417b2ed7ba3cab4143ff5f86e1d0c0b263ae65e12b297ce702872fdbe80219184c2991772bb1f7fbdb1f8b6
- SSDEEP 192:SONK6ygpQmiUycmtOCTVghDOVSzPxZnU6:SONK6lHAtOCTViDOVsx9U6
- TLSH T19F02D638BC682CB78EF26E45F58B27179FA4107BE9512B84D9E85E1C01D769C2307836
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\097b9b61-4f44-4b65-b5dd-5dd65d035245.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
- Size 2KB
- SHA256 0b82ccf057c291516abdb84da144785038b9a77926a60acecfcc77dac6284efa
- MD5 43e6341a08a95feec598a47db87a6798
- SHA1 3926f3027642cba3e20d52b5cc84e8d64d401ee4
- SHA512 82d47eb3464a2e9ea3cf0ed0315cc51ce4b8218d0d4b7777b2926261858a94c2d6d6461f4b222eafe8791d03a821835a804c464115ec3b1d916a3fea7743ff17
- TLSH T19F411D5DB6E91148B3B3AE1A6FF7686D487BB8772E06D49D00110E4F0522E40CCB1777
- MD5 SHA1 SHA512 TLSH