hxxp://lendoracapital[.]africa

Analysis

user interaction
yes
max time kernel
299s
max time network
277s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 10:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://lendoracapital.africa
Sample261030-l626qaeb68

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2840	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{99689DF1-238C-4157-9848-724D2291180D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4320	msedge.exe
4320	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe

Suspicious use of WriteProcessMemory 47 IoCs

description	pid	Process	procid_target
PID 5804 wrote to memory of 4332	5804	msedge.exe	85
PID 5804 wrote to memory of 2840	5804	msedge.exe	86
PID 5804 wrote to memory of 2564	5804	msedge.exe	88
PID 5804 wrote to memory of 2564	5804	msedge.exe	88
PID 5804 wrote to memory of 2964	5804	msedge.exe	87
PID 5804 wrote to memory of 2964	5804	msedge.exe	87
PID 5804 wrote to memory of 2964	5804	msedge.exe	87
PID 5804 wrote to memory of 3428	5804	msedge.exe	89
PID 5804 wrote to memory of 3428	5804	msedge.exe	89
PID 5804 wrote to memory of 3428	5804	msedge.exe	89
PID 5804 wrote to memory of 6072	5804	msedge.exe	90
PID 5804 wrote to memory of 6072	5804	msedge.exe	90
PID 5804 wrote to memory of 6072	5804	msedge.exe	90
PID 5804 wrote to memory of 4048	5804	msedge.exe	94
PID 5804 wrote to memory of 4048	5804	msedge.exe	94
PID 5804 wrote to memory of 4048	5804	msedge.exe	94
PID 5804 wrote to memory of 1492	5804	msedge.exe	100
PID 5804 wrote to memory of 1492	5804	msedge.exe	100
PID 5804 wrote to memory of 3120	5804	msedge.exe	101
PID 5804 wrote to memory of 3120	5804	msedge.exe	101
PID 5804 wrote to memory of 4952	5804	msedge.exe	103
PID 5804 wrote to memory of 1576	5804	msedge.exe	112
PID 5804 wrote to memory of 3048	5804	msedge.exe	113
PID 5804 wrote to memory of 6076	5804	msedge.exe	114
PID 5804 wrote to memory of 1664	5804	msedge.exe	116
PID 5804 wrote to memory of 1664	5804	msedge.exe	116
PID 5804 wrote to memory of 3220	5804	msedge.exe	117
PID 5804 wrote to memory of 3220	5804	msedge.exe	117
PID 5804 wrote to memory of 404	5804	msedge.exe	118
PID 5804 wrote to memory of 404	5804	msedge.exe	118
PID 5804 wrote to memory of 4416	5804	msedge.exe	119
PID 5804 wrote to memory of 4416	5804	msedge.exe	119
PID 5804 wrote to memory of 3196	5804	msedge.exe	120
PID 5804 wrote to memory of 3196	5804	msedge.exe	120
PID 5804 wrote to memory of 3196	5804	msedge.exe	120
PID 5804 wrote to memory of 3416	5804	msedge.exe	121
PID 5804 wrote to memory of 3416	5804	msedge.exe	121
PID 5804 wrote to memory of 3416	5804	msedge.exe	121
PID 5804 wrote to memory of 4320	5804	msedge.exe	122
PID 5804 wrote to memory of 5000	5804	msedge.exe	123
PID 5804 wrote to memory of 5000	5804	msedge.exe	123
PID 5804 wrote to memory of 5976	5804	msedge.exe	124
PID 5804 wrote to memory of 5976	5804	msedge.exe	124
PID 5804 wrote to memory of 5976	5804	msedge.exe	124
PID 5804 wrote to memory of 4124	5804	msedge.exe	125
PID 5804 wrote to memory of 4124	5804	msedge.exe	125
PID 5804 wrote to memory of 4124	5804	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://lendoracapital.africa
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff8aec4c188,0x7ff8aec4c194,0x7ff8aec4c1a0
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,1869613776506532261,686017340513363898,524288 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,3024381731040361298,7652323893497438570,262144 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,13239578554475855308,10842977275868256222,524288 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:8
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3508,i,1407682694266621334,9036775312530720856,2097152 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3516,i,467730919374870711,4856102257712150197,2097152 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4956,i,3899601967427371290,5467947628764613804,2097152 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:1
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,15131980624009996820,15568553241616303740,524288 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:8
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3768,i,10862638615295700846,1829086779888905334,524288 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,8573827737094038228,114479633484069556,524288 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,8573827737094038228,114479633484069556,524288 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,9165793523912813396,13090723261154500355,524288 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,14503277264993172091,4398555198294046452,524288 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,11136105690454922253,15943346644803090217,524288 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3776,i,8243106681178579830,16374944887178638167,524288 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:8
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,18161732713642925049,7410649234775482128,524288 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,4155939015578124233,4378080151589695800,524288 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:8
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,8798150137499186032,1760518684802870089,524288 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6652,i,9733051417355793231,10758861557816811915,2097152 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6764,i,12188334781980014000,10882410203560586370,2097152 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:1
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6996,i,9038115573074005636,7769682333215741123,262144 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=7004 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,5873379074388430311,12002046844351431040,524288 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=1636 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6640,i,12256273311816286864,5388872271527095426,2097152 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:1
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4912,i,4460018213261756416,14497147582732501217,2097152 --field-trial-handle=2308,i,6053711888713574879,16127353534572501566,262144 --variations-seed-version --mojo-platform-channel-handle=1512 /prefetch:1
  2⤵
  PID:4124

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1160

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1036

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6942dd94-1747-40fc-b07b-d41ad6e014e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6942dd94-1747-40fc-b07b-d41ad6e014e0.tmp
Size 26KB
SHA256 bf240c2557e076ecdaae61d91d784383e345f7f99c0f47c1ed692565d1a64a52
MD5 6694f8bc409503a064f8e43cbef16c56
SHA1 f9420a0d26fb468cb017a937134111d45b17cf84
SHA512 ab65ca792ece7dbd513671a402b3fd7b6a1ea6e83038ac8f42712c85c8b20edcf459059c4c8ad4d7ec1b7522560dd521cbef62295dcc37481773d61c348654f8
SSDEEP 384:n7iFzQkUSv43sNY8TUNTUlI4+aKMAe1w2fLBCc8ibqRKQl/sqctPWixxNFskZCgo:WFd439wgq/jBCcX8KQl/nNixzFsPLl
TLSH
T163C23A32E899DEABEDEB4F95A30A3603EEE04253CA8C5AD4D9D95D1C00C71DD534BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

792697d2-b1d9-493f-bbb0-406c5263cf15.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\792697d2-b1d9-493f-bbb0-406c5263cf15.tmp
Size 26KB
SHA256 fa767265fb79f1d5abef94c4644fc206947b94356cb1a930a0d556cef840a89d
MD5 17a3c1cec15f1b930eec9561eb3678d2
SHA1 e64366ca7c2d49b24415e5b9b6da836594038768
SHA512 f7aba45766cc0c6ee17dd4373bbf9d05f9fbaa6965340e89b597a5c0359e26ed5da998f040081a174b8ceaf8d22824838a4e6a98f70eeba255b649290e268214
SSDEEP 384:n+iFzQkUSvW3sNY8TUNTUlI4+aKMee1w2fLBCc8ibqRKQl/sqctPWixxNFskZCgo:VFdW39wgqdjBCcX8KQl/nNixzFsPLl
TLSH
T16FC22932E899DEABEDEA4F95A30A3603EEE04253CA8C5AD4D9D95D1C00C71DD534BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

0ad228c6-0db3-4117-b545-e050e43f31f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0ad228c6-0db3-4117-b545-e050e43f31f9.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4a6783db-4c0c-4afb-a150-e4a329c412f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4a6783db-4c0c-4afb-a150-e4a329c412f0.tmp
Size 12KB
SHA256 e3c73e07a5b43a1f6811f299370996c9a219b4df260d5f4e90330bb043af3fd9
MD5 bdb4224842983730c87cc29e91e12f7a
SHA1 2acce0dec57fd834d3225f3c867834831fabefb2
SHA512 f2b6d787189352730758bf120e899db72034b4cf2a572ceededea97d7a2680851d34271731b8ad44974bf8a9dd080725388ce699937189eec94faa25c94f0662
SSDEEP 192:sxZ5R3kK/ffsHQZLZ8EzodpczYHW6+WNWIzgXYo6TZSVVIg5DhtWJ:sxZ5CK/ffsHOq3c0HbWrXUSznti
TLSH
T11142D7556D38A93B9CCBD21DFA59BF53E2FD103291910E84AAFC8A1C14EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5ba38a58-8d8c-4be8-bb52-1c00523644d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5ba38a58-8d8c-4be8-bb52-1c00523644d2.tmp
Size 12KB
SHA256 0a7da9863063a8b6f993cee0a6658cb9398375f611f775fc7c9b452387b0935f
MD5 ecf6e5d0b810cd67380258b3571ad45a
SHA1 fa5decc248ff52803967a6173e5277df1e4719db
SHA512 8e8611ba9a28fd709ac2e284b1bc0f3a20f7988e77ef1322ff7ddeb4a3b782cb3e00f2d8b0f0f56537cdc57346c610fbc297af57362e64eda61a0083fdf6dd60
SSDEEP 192:sxZuBR3kK/ffsHQZLZ8EzodpczYHW6+WNWIWfdYoDTZSVVIg5DhtWJ:sxZaCK/ffsHOq3c0HbW1dTSznti
TLSH
T13542C7556D38A93B8CCBD219FA59BF53E2FD103291911E84AAFC8A1C14EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f5ce169-2e76-45d2-bf7e-125afc85d550.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9f5ce169-2e76-45d2-bf7e-125afc85d550.tmp
Size 12KB
SHA256 67b190d3396b9b8dece400921ec2d3e8b14b407a783766de6b7310db43e0d7e5
MD5 281c8a363ccdbee61613637b3c401c7b
SHA1 8a63b0e907c8053e926e42aeeddc5c58120bb70d
SHA512 27dc35ac7ad699966d0cef12408a34968bbb63e356367e206b40fd493baf3a0335ebee06dc0c036f372104cc2fd6324565d8d76242d9e14c471d1618849ac91a
SSDEEP 192:sxZNR3kK/ffsSaQZLZ8EzodpczYHW6+WNWIZp1/YoeT1SVVIglhtWJ:sxZNCK/ffsbOq3c0HbWa/ISznti
TLSH
T1F342C6556D38A93B8CCBD219FB59BF53E2FD103291910E84AAFC8A1C14EB6DD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 c65e53e91f04ceed9d0ead1d4995ed59602953e15932e49f1f5d8d565f7e9a74
MD5 49472dcf19a11ff512588614081680d3
SHA1 2d6f5a28a920dc686cd950e5d1aac9949e63e505
SHA512 47a0e723a0f583af6f558ec4fc817bb4497d41bc9b323c182d9faedfc273802ac13e02178bd159b9f9ce8625423433a6c8aa6c7e5f2d46f49162f09f400e78d9
TLSH
T17BE0D8C8C4C8C31EE348648B0168A70C96C02A9BD3D0694D3700C98D704D6447B81D98
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 e175551c736ae600002c20320a24b79db892101483a458ea228907c83621897a
MD5 4de323d6c2cdab97b4eea111294b0cba
SHA1 a952412f0cdeaab99032949f33f913be9e172906
SHA512 d96574fa44c1d8aa45797b062a1a0fc2ea1193f79e9833b3f182d6e35b4839a65bab3c46bb23b11aab4c0b7622935a5ad8f30a825f959cfc3d9b09cd0be40b25
TLSH
T1C7E0DFC884C8C32EA28864470378A78CFB80275FDAC06DAE3708C5CD7405AC0B382690
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 c78337878161d1592f2ef74cc68cfb6a15011656ac45793f47b312a59e263ddd
MD5 8a335f8f1e52590bf1ea18005fed1350
SHA1 1cc586deb2dd6e12fef4da5e498f2b0a7fb84927
SHA512 d1d4ceb1ce247d1206a578da34dd371e95770ee904a97d51581aff3b68e82546393cdccb320ce3e4482af79e46ac15a71b42094d3dfd523651e337cb2fcc3969
TLSH
T1D9E0DFD8D8C9C32EA34C64870278B34CDAD0265BDAC0EA0E3704C9C87205B84A7CEAD4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d0a08df3c45a94bfcf2e1d115da54d782d02e69bf8825e2deddf2c25f0c3b0b4
MD5 3900f585602cd470d8ec84ea945fdeda
SHA1 9bf600f9c2eec0ab314f88d358bc1863237bf6a2
SHA512 cb43b0e1fb429467c005e4431db9d2a069f15f8eb43760f7e88474cce31f25126e53f8785fb2946a1dab29b8788f15bff6d4d10199861ba2f824550929dd0e3c
TLSH
T1DDE026C854C8C3AEE2CC648782BC930CDB88265ED2C06A1E3708C5CC7689B40B382BD1
MD5 SHA1 SHA512 TLSH

Submit Download

f_00004d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004d
Size 176KB
SHA256 fa17b7889f5bd229ea0edbd50d5abebab90c77c73dff1db273597cf043038fca
MD5 ea98ce45edc70160a2e38735e592a76b
SHA1 0aad21fb733e4db6900098aadcf972aabf34a1fc
SHA512 558e06c02491c22e4f39cbfaa8e64fe839ac40448730f9d0fa60bf199dd530b9c7501b2e43f4de4e5f0c242cda3c14eafd80b8e5bc82ba77b1aa835ec1b02beb
SSDEEP 3072:jhiYfCWcdoe9mYwHTgiXMEwKuJjpuLvUfldFkiRnXGkUHx8Fj9ZmjoMXlnKwB3AP:jjQ0BzzcEwKmuLvUHFkKGkMx8Resyl/G
TLSH
T1790412CE84540E34A97BD22A7C3BF4BDE71E98D59410D134879BE7F0441B8D2AE662EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 1d46260f9e326b088becdeeb99787828209d411afa95823e1115b30b7c749895
MD5 18763ba34bf50197a10e01f2284bfa05
SHA1 cf5003af24d98c86cc0d359cf33014e0ce4778fa
SHA512 1fa9f457dbddd312d1f2e553b6868c571ddc10ec2f0ebfd8b5b700c15e6944faeb939bc9b562fc79c6a195b538433e25666e3ddd2268e00dbded0ea6dc8bc554
TLSH
T17951944896ACD393D7E9EFB18CD166C33A30F6B295735D1307A8D5B85FA2755B302044
MD5 SHA1 SHA512 TLSH

Submit Download

af2035a1-fbeb-4512-a238-75bcee6c2500.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\af2035a1-fbeb-4512-a238-75bcee6c2500.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

104ebc18-eb36-4773-8e82-a385f92226b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\104ebc18-eb36-4773-8e82-a385f92226b6.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

3a755dea-513f-4e24-88b3-e964e6b7c0ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3a755dea-513f-4e24-88b3-e964e6b7c0ef.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

a3768a9c-56aa-49e6-9440-190cbb647d82.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a3768a9c-56aa-49e6-9440-190cbb647d82.tmp
Size 2KB
SHA256 32d72fd3c6f9b971f5c911e0be25f0707e648688e249042b61c21ae1cb17dd01
MD5 883a9b1a9eab5b185931ba840cff8eed
SHA1 94c23a2a81962b4c898b8e76ca56d5fb7e1b69b2
SHA512 c9e20148c9f765b86fa619775d61cceb47772082ae7397d13ecdc664c4ac8e2a6db1eaad9ae16c4c3d79494dad87e6c2e34924cc08226039dd0e263c08d444a2
TLSH
T1715189F792E486ADCA1156F0EA18BE6BCE2D0525432C7CAAC8E49E17D3F2471E14065F
MD5 SHA1 SHA512 TLSH

Submit Download

c57e3d72-7970-4cc6-a193-a5bd436b612a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c57e3d72-7970-4cc6-a193-a5bd436b612a.tmp
Size 2KB
SHA256 ca598095a790f74d9c70185adc491606778e85de14d2ae2c07db706aed93b5dd
MD5 3e56b7795f76a22779518f22139214b2
SHA1 879d4204bf66d499e627c125142b71b2fae2f48e
SHA512 030881a1c5fcce249a683e55d1c27f9847c4d5896445ed9f7599024884d9ee46aeca891091d8b526382b4b117da76cf7871dcccf9fa8a759f967c1c1e5432600
TLSH
T1D0519BF792F486ADCA1156F0EA18BE6BCE2D0525432C7CAAC8E49E17D3F2471E14065F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 e4eae306beefb4efd6795de7fac88f31483ec0d8fd0c7e65e188ea0305a127b3
MD5 2bcb25a8732d6cc92c8775ff261879c8
SHA1 6611acff40ec146076a91c0fb95894cdeeb22f8f
SHA512 dd3c0ab9e3accf22f16b86126136f428fc7f91ea6e99dba38e81cbe168172fd515e2cc458b2dd58cd0f27f2dc7a4a666c69b7a32443a0257a687e938191d8257
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgb:ST/2dXOJhJlpfnpp3tNXVrN3gT1g
TLSH
T1EBB21F1571BB421039FE391892B59B6E068271733119E66B7FBD00B68E2BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a6208d84-0edb-45ec-98ce-8a701ed1c5ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a6208d84-0edb-45ec-98ce-8a701ed1c5ae.tmp
Size 12KB
SHA256 2aa64efe5c32800a67e1523d682bf9da8c486561bd837426623e7e3080acb185
MD5 1771a177f82e76ff0cde1412e817c53d
SHA1 d117f352234e10761e4bdb851eb11fffa34cba31
SHA512 39344e0bc92876cbcb58032afff585c2791420c9cc9c052e638db870fbcefc3481651776ae01de9e480d20820835d84e799c1705ec6d7705b3b65286432f71e8
SSDEEP 192:sxZNR3kK/ffs6aQZLZ8EzodpczYHW6+WNWIvHXYoWT1SVVIg5DhtWJ:sxZNCK/ffsjOq3c0HbWwXcSznti
TLSH
T1CA42D7556D38A93B8CCBD219FB59BF53E2FD103291911E84AAFC8A1C15EB6CD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bbdc26c9-2941-4b94-8323-c93faeb1123d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bbdc26c9-2941-4b94-8323-c93faeb1123d.tmp
Size 12KB
SHA256 6e1f10fb01835d99b07045fae53ad3fb70933de5e168e260de45c0841fd99a8e
MD5 118009ef671e8326a2d088b865e14a42
SHA1 3bdc5841f81a3a793e8e57823113c97e6f570959
SHA512 04d868013fcbde8a643ddd50e8ff7d6537bce17218f54709459572bab72ed2a734a9f1347f15e7cadadeea434c9267b10fe1fc7e2629aeeb9590276e4278d1b7
SSDEEP 192:sxZNR3kK/ffsHQZLZ8EzodpczYHW6+WNWI6iZYofT1SVVIg5DhtWJ:sxZNCK/ffsHOq3c0HbWAZ3Sznti
TLSH
T13742C6556D38A93B8CCBD219FB59BF53E2FD103291911E84AAFC8A1C14EB6CD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1e42ec7-e6be-4489-948c-f523274a9d05.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e1e42ec7-e6be-4489-948c-f523274a9d05.tmp
Size 414B
SHA256 1679c4a511b2fdb107f0dbca82e951545cf7bee780b67213952627c9f772addb
MD5 c3c2c75d3856be8d2929ac194b889031
SHA1 162026c3f2983702b6b6dd5007ea47dc1fea3c57
SHA512 9ff397cd6bf7832ce589e92835c805214514e0f005058da37c949e81fa0c2a6b4e6dc994933418edbf4cdc278138d61da6077f20ef433df22412ea79dc9061a8
TLSH
T129E02BAAC811EC3B08FD0B7860940249E75423672A40988B3B3D80088FB093B438686C
MD5 SHA1 SHA512 TLSH

Submit Download

fa21a43a-df4a-4dc1-a7b3-9354807b94d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fa21a43a-df4a-4dc1-a7b3-9354807b94d1.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

a2c43734-447d-4e3c-bf5c-d8ec36f272ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a2c43734-447d-4e3c-bf5c-d8ec36f272ad.tmp
Size 25KB
SHA256 013ddb03ee575d4e4c73d5560065426476c5f352f838a6b1ad302ef40aa7bc78
MD5 5cde22733fe43e53a0c09f70061da6c8
SHA1 3ad08830bef49b4afc4617b022671bf8fc575b41
SHA512 35836656503346dfbdff894e7e505859b04d374635d71e23418027f25f4d5eccfb1100a340ce191471e6194042666abf17ba81bd978647a11d9de5df5f419baf
SSDEEP 384:n8iFiZcI63sNk8TUNTUlIm2aKMiq4w2fLBCc8ibqRKQl/XFTsa+VYsTgL/7Iz3o4:nFQ635wgcvoBCcX8KQl/XFThgNr
TLSH
T167C24A32EC98DAABE8FB4FD6A74A7613DEF40263959C96C4CAD81D1C10D719D1307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1383880-f803-4d91-98af-a113836bbee5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d1383880-f803-4d91-98af-a113836bbee5.tmp
Size 32KB
SHA256 b86c43c4abd643cfa145feb659d9a21d092e1e00494987d9a075ce5283ee0c30
MD5 f0bde8b5f3ec9f4fdf31ce0b0f3b36f2
SHA1 00708bebf92d779c2ec008d1d94373023205487d
SHA512 81f9262d905e0219f24af92f71cdcebd799148c2bc63c0975fdb206abafb417985cb054a4cb198745d3523855df6b57b3a0cfe94c37c05467ab71791dac22611
SSDEEP 384:nMiFzQkUSvB73sNY8TUNTUlI4+aKMe81w2fLBCc8ibqRKQl/sqctP2mxxNFskZCD:3Fdl39wgq/jBCcX8KQl/nHmxzFsPLl
TLSH
T1D5E2A2F298D79977D9AE4B93633D2D0299BCC213B5885990FBD81D1CCC861BFD306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d40425cb-8682-472d-a00d-77dfdee8c406.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d40425cb-8682-472d-a00d-77dfdee8c406.tmp
Size 26KB
SHA256 528d6653a6b6bf534b52cdfa23628cde9f2538043473345ac26ca47058ad5295
MD5 139f7baf8f1ee1d2ebe1cacd2e40a8fd
SHA1 88b2fc34434e4c8d4ec22648637613f5f82a2483
SHA512 f2dc536ff8b040a3d4be21bcb4461846c976196a9af6bf79ad562a60ddfdf20d90d84c3fc1be2d20833c54021d945a9552c8526381d322ae3317c9450a7c8a60
SSDEEP 384:nbiFiZcI63sNs8TUNTUlIm2aKM8t2w2fLBCc8ibqRKQl/sqctP7ixsa+VYsTgL/i:2FQ63NwgcYWBCcX8KQl/nuixhgNr
TLSH
T199C24B32EC94D9ABECEA4BD5A74A3613DEF44263D68C9AD4D9D81D1C00DB1AD030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 18877a291f9c6345d4cef62a2522fd7cec71ee34791cd10bdaff9ae27d6b04f3
MD5 7d4fa6625e6b81bc1e1a94dfa31008a6
SHA1 66100dd5f2552500bebb6816a5a5d26aa88c3758
SHA512 98319c1e9c74987d777c5180c501ca34fad6b1096db5763976afbd4000314deb7ba5fd711ab8140b0866638336ed8d79b64e91e5f24890131ea8cb9b192a7c9a
TLSH
T16C41679CA6E91148B3B77F16ABF6A86D487BB9372F47D05D00110E0E0A32A04C871B37
MD5 SHA1 SHA512 TLSH

Submit Download