hxxps://szh2r[.]mjt[.]lu/lnk/CAAACaK8OoIAAAAAAAAABEn1gDMAAAAABJMAAAAAACscdwBq3u2CGSINwnnDSDewC3e1Dl_o3gAn2n0/1/mUhU7f6sXF8uJYfH_dwCnQ/aHR0cHM6Ly9odWIuYnJvbnplLnZpc2lvbg

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 07:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://szh2r.mjt.lu/lnk/CAAACaK8OoIAAAAAAAAABEn1gDMAAAAABJMAAAAAACscdwBq3u2CGSINwnnDSDewC3e1Dl_o3gAn2n0/1/mUhU7f6sXF8uJYfH_dwCnQ/aHR0cHM6Ly9odWIuYnJvbnplLnZpc2lvbg
Sample261102-h7c2faed76

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
720	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{77B0D926-9F3F-494A-A408-AD3124D52668}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
676	msedge.exe
676	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 2028 wrote to memory of 3236	2028	msedge.exe	84
PID 2028 wrote to memory of 720	2028	msedge.exe	85
PID 2028 wrote to memory of 4372	2028	msedge.exe	86
PID 2028 wrote to memory of 4372	2028	msedge.exe	86
PID 2028 wrote to memory of 4372	2028	msedge.exe	86
PID 2028 wrote to memory of 5084	2028	msedge.exe	87
PID 2028 wrote to memory of 5084	2028	msedge.exe	87
PID 2028 wrote to memory of 2148	2028	msedge.exe	88
PID 2028 wrote to memory of 2148	2028	msedge.exe	88
PID 2028 wrote to memory of 2148	2028	msedge.exe	88
PID 2028 wrote to memory of 860	2028	msedge.exe	89
PID 2028 wrote to memory of 860	2028	msedge.exe	89
PID 2028 wrote to memory of 860	2028	msedge.exe	89
PID 2028 wrote to memory of 3820	2028	msedge.exe	91
PID 2028 wrote to memory of 4468	2028	msedge.exe	92
PID 2028 wrote to memory of 3820	2028	msedge.exe	91
PID 2028 wrote to memory of 3820	2028	msedge.exe	91
PID 2028 wrote to memory of 4468	2028	msedge.exe	92
PID 2028 wrote to memory of 4468	2028	msedge.exe	92
PID 2028 wrote to memory of 4404	2028	msedge.exe	96
PID 2028 wrote to memory of 4404	2028	msedge.exe	96
PID 2028 wrote to memory of 4404	2028	msedge.exe	96
PID 2028 wrote to memory of 1532	2028	msedge.exe	97
PID 2028 wrote to memory of 4324	2028	msedge.exe	98
PID 2028 wrote to memory of 1532	2028	msedge.exe	97
PID 2028 wrote to memory of 4324	2028	msedge.exe	98
PID 2028 wrote to memory of 4828	2028	msedge.exe	100
PID 2028 wrote to memory of 3172	2028	msedge.exe	109
PID 2028 wrote to memory of 3736	2028	msedge.exe	110
PID 2028 wrote to memory of 3796	2028	msedge.exe	111
PID 2028 wrote to memory of 224	2028	msedge.exe	113
PID 2028 wrote to memory of 224	2028	msedge.exe	113
PID 2028 wrote to memory of 2368	2028	msedge.exe	114
PID 2028 wrote to memory of 2368	2028	msedge.exe	114
PID 2028 wrote to memory of 676	2028	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://szh2r.mjt.lu/lnk/CAAACaK8OoIAAAAAAAAABEn1gDMAAAAABJMAAAAAACscdwBq3u2CGSINwnnDSDewC3e1Dl_o3gAn2n0/1/mUhU7f6sXF8uJYfH_dwCnQ/aHR0cHM6Ly9odWIuYnJvbnplLnZpc2lvbg
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffb6934c188,0x7ffb6934c194,0x7ffb6934c1a0
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,13662242604957313779,846562097025637307,524288 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - System Time Discovery
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,16059581950132273425,2751124070710913779,262144 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2392,i,9794528468645731860,12190452874781885407,524288 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,8444921253795087599,2369485895255034792,2097152 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,10597087170593231414,60892972375812437,2097152 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,11396770093090747175,8351658566765436779,2097152 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,12133680711826714840,6184410986457158787,2097152 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:2
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5060,i,8422132581860016925,6969243114619483670,2097152 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,16643621324231376184,12915065817909564072,524288 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,13224600011079791706,8955923969321885253,524288 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,1609918525534614556,9550112162477344311,524288 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,1609918525534614556,9550112162477344311,524288 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,12768003919673596588,10884865560288491438,524288 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:8
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,12921600951520256066,6134543481312324950,524288 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3564,i,10347147263201696015,2780262001133582763,524288 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,8275794213315865062,4723290734563449488,524288 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,4181483106955911030,4583732116193697478,524288 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6276,i,1709805945248393424,5786684470548086019,262144 --field-trial-handle=2248,i,6842021491860857003,2530916635481250874,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:676

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:524

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

26b36711-8b57-417c-8c7d-ac58e77a3a96.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\26b36711-8b57-417c-8c7d-ac58e77a3a96.tmp
Size 8KB
SHA256 9565ff230d345a3890a156f2a80a589fa5134e548094387dbb60c59ea6c0b5d6
MD5 f904588fd1848417b69534552faebbf3
SHA1 6afe06d19ee9100d1d12cd6c53a5c008717590b3
SHA512 b246e67f9b52639a8508f50f0e4f2114a38d8abdf0bb9733a318b1dc951f32f2f3d70e1a7b1eb4d5ade97f38b587f2786e2efdb0b16298a08eb0acf3d39e999e
SSDEEP 192:LJONI6DphmqQmiUyjuq8wGYX59ezWC+m4Mkk7xZU6:lONI6199RwGYX5EfMqbU6
TLSH
T16B02FB35EC787C7B8DE3AE45B58B2A175FD8212BAA952F44C6D81A1C01D765C2307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90e0381d-e59d-4a53-a966-38e4a9e7d4cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\90e0381d-e59d-4a53-a966-38e4a9e7d4cf.tmp
Size 18KB
SHA256 5c5b4e6dbc463a0d6c98612b71674a77bca137b63c84f7b7472e04c4b6859292
MD5 730c113eadd24e14007e62557109a276
SHA1 af33423b5f95eb503d090fde4e99cd29c6a2e534
SHA512 626947ac54f9a0a4845125bc41429258327f0be0353af5c4a5a4351dc1f704a50efdf232ea2652ee986e38356799ebd0102a29c4f35c955494d09fe377d1ba64
SSDEEP 384:/QkUSv0sNibbL5ilpBGYX5EfMgxLJH7vBEzKyIIls:B0hLoLGYufMgFJH75EWyLq
TLSH
T12C827C72A8B5BC3B4DF39155F10A3A179FB4912BDBC82F50D6DD5B1C00CA28C230BA26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

017f0bde-b9fc-4cbd-a220-ed62e58e373c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\017f0bde-b9fc-4cbd-a220-ed62e58e373c.tmp
Size 10KB
SHA256 3b3ad67279421b02c68f0fb831c957556ca3c7ea45d5563162f6d31a791512db
MD5 fd6b81a66cb0131271bcd5775116f271
SHA1 f72801c52df7c94ad3d9e13205e76732e05165d6
SHA512 5fc792ffc8ecdc0536f0ba4e351f21e252abe1b7bf9224d9882c19f196333e3fc5f1497b10064aec5893a8e71443484bae8a5612043f3355677df433fcc79d33
SSDEEP 192:sxZDERjW4/fVs3CIdpkfiuHW6+WNziluu/Yg05bfXSIg5iJ:sxZgg4/fVs3rluHbGUu/qwE
TLSH
T1C122C8527D38A97B8CC7D20DBA19BF57E6F9103295901E58ABFC861C04E67DD224B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27e17ddf-46d0-4d06-8dee-4a45d8df4fce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\27e17ddf-46d0-4d06-8dee-4a45d8df4fce.tmp
Size 10KB
SHA256 277b13a49b1dcbd3e272d01914d308f348e3eac7dafa46986f753cb64ea62511
MD5 ca9ea6f910318fb60ea0f1215076a757
SHA1 2fe97d70aaae5255cb0ac48750c3caaa0ad8be2d
SHA512 fdbf62e14e0dad8845c54d7c0cdbc77080a316ad9380e12824abaecd82ecbac632679d704130b09006ef0a210dab49d8403558ad4a878f6770a2de8382ee377f
SSDEEP 192:sxZDERjW4/fVs5CIdpkfiuHW6+WNziluu/Yg0yZfXSIgrJ:sxZgg4/fVs5rluHbGUu/qh9
TLSH
T1BF22A7527D38A97B8CC7D21DBA19BF53D6F91032A5D41E58AAFC861C04E67DD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33b0a799-93bc-4177-8da1-5ec3e877f078.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\33b0a799-93bc-4177-8da1-5ec3e877f078.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

879be095-da6f-4ee5-a951-34c02bf7ac7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\879be095-da6f-4ee5-a951-34c02bf7ac7a.tmp
Size 10KB
SHA256 2dd82a4c62f8cd50e8fec8b0f5f486e0b52d80e6e3d4e809bc284f23a19e7e79
MD5 088a5e3cf45f1f142e4bac6faedc6ef5
SHA1 43668fe4bbe8d81c367a2fd2069032eb5610a3f3
SHA512 56846305202a1835ee68d89f33c5af6702c27b239f95654b8b0349df4c2de129548360b8912874849f4a73edb1ae15450eab796f8ed8ad6603168fd2ae115646
SSDEEP 192:sxZDERjW4/fVs3CIdpWfiuHW6+WNziluu/Yg0TIHXSIg5iJ:sxZgg4/fVs3r7uHbGUu/qLE
TLSH
T13132D9527D38A97B8CC7D21DBA19BF57E6F91032A5901E48ABFC861C04E67DD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

981eb927-5100-4865-9bc3-798fc581156b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\981eb927-5100-4865-9bc3-798fc581156b.tmp
Size 10KB
SHA256 ea62a587688bb586ffb15e5e3c07fa4fc673a9a72fecc2d6ffa7798ec20e3a95
MD5 d494dee78a8d38128e16c9d62855a5c8
SHA1 e93ffec64b28712fbd8fb259d2a6acef56953694
SHA512 6b1a5a371d792dc6de4c0eba485aef089924c3fc078a89bd3f3241bf2b9556dd346357927b96e4312b3217afcb134bd5d3a8edf0b7107a45d019c4da46462635
SSDEEP 192:sxZDERjW4/fVsXCIdpkfiuHW6+WNziluu/Yg0yZfXSIg5wJ:sxZgg4/fVsXrluHbGUu/qhG
TLSH
T12D22C7527D38A97B8CC7D20DBA19BF57D6F91032A5D41E58AAFC861C04E67DD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 395d737936de4820b0d849443b54c649b5dc1ce2a6706bfcdff027174713102f
MD5 8b2b6ae7e9a7f03838d6fd9a70f5d122
SHA1 d8a4e7bc0fae28e161af9b718da53433a7ab0b96
SHA512 da6946548032b522f3ac9c95787e8dd81278e8d964a6aa35dfd34fbe1df0125901e725d1a2d408d340c883e2f1ce47559ac6f1213f8eac7a93e86c7f08ba430d
TLSH
T1D6E020D545C5C31D731C65C703FC730C8191361BD3C17DBE1704C5887041140B695B75
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 409e1da6244b98e4d2de6a21a76e7b547b075d367dca2cf0f869f926a9f92de4
MD5 5b77e12b42966f2d8c0916cfa9d9f6c0
SHA1 817ca9a73e5f3c6801a0129655f2c3719a7a0e35
SHA512 7751141050cadc7323063382f0677dd3134d25f66f75714496485bcd430dcbfe8a243a0dafa6daec74c4ae2ada3da2ee30f7214c92b13ec27fa7104896b5d4bb
TLSH
T12B7170C4558894A7F7D8753086EAF18B71329CA694A7FE6E00B2D73D0CC6B9BC30824C
MD5 SHA1 SHA512 TLSH

Submit Download

83359c4f-5513-45e5-ad39-7797ee1f8f90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\83359c4f-5513-45e5-ad39-7797ee1f8f90.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3eb4bc07-5a5a-480d-8e82-632640884c38.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3eb4bc07-5a5a-480d-8e82-632640884c38.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

79cfc7e7-d7ce-48e3-8fb2-a74de7c6f589.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\79cfc7e7-d7ce-48e3-8fb2-a74de7c6f589.tmp
Size 3KB
SHA256 7bc4b22506a70da03f136061e8ef2df190e93e6b8c3bba2f46a6513631ad05b3
MD5 c755c787a3dc7762f4b47c6632f84a82
SHA1 dec40ec00cfa5822259c203f7e343af2035720bd
SHA512 2dd0f254e2c55d2414d153a076a81d0ffc5b6c200bad33044aa3a202bafb2bda5944dabdbc12acdce095f671a3332272143e93c7c1113c810ec4ca11a4794092
TLSH
T1AE51A7B783E59A6ECD1166F49B146F1FCF1C0515822C3C29C9D4EE4BA3E3072E046A5E
MD5 SHA1 SHA512 TLSH

Submit Download

a91c339b-305d-4b39-adbb-2c842edb4e95.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a91c339b-305d-4b39-adbb-2c842edb4e95.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2fc9ff7e3e9da537b9f074d7e71f9b49b5167e47f83bf1e74a09efad17fc61a9
MD5 9b64c16d0d65fabdb2ec031cb71d9a71
SHA1 a4eb72a6cc2616a9cf7d6a881a7b5fc4758e40fb
SHA512 209b4db7925945b47c0d42c7a6b2c658556dd20a9b8185b3024be8c0a97e7fc06a96077ff2493e353eb8bb9732dfeea7e22d06df80e17adc778062c17602b7ef
SSDEEP 48:K0c5cIcVcpczc3cLckbc3cScPIScBckK9cB1crckxcJc0YcyczcJc5yLc0cDcCcN:KwvmKEsiyC8KXKk7GKI8ConA7H1V
TLSH
T1AB91439170A7120079BE255C41F8A65E12A231B2702DEDBBBFBC44718E2BE144CFEDD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad70677e-1753-45e7-b308-1861af9ab489.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ad70677e-1753-45e7-b308-1861af9ab489.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

d371aedc-36f5-48d2-aa54-277085f0839c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d371aedc-36f5-48d2-aa54-277085f0839c.tmp
Size 27KB
SHA256 0c06d0d4f598f02cb4fafce5bb54b5d58a57129d415599afd132967534a08022
MD5 8f98128110b3b5f92bc96fbfbf8ffb09
SHA1 bcdb77c6729ab4ea98bb91a1bc0af6d20f3dc9e7
SHA512 d03fc57fc38de91979ac5d2d0f83673cd45b9a7bbc9f09c37b8f130271ab0ea98497ad18ab4de8252ba1760fdcb8cd122c17e33ae44ca8cdbac990ce3c902a44
SSDEEP 768:1yichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXz6roHCl:1yichfPWvPZplu1jan+LKgzxil
TLSH
T107C2FA7B640CCB7E4FC01A5DDD1A6F9B7EA802C7AA588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5cc58c9c-0909-41e0-ba76-3fc1a8ba2b10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5cc58c9c-0909-41e0-ba76-3fc1a8ba2b10.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c4b29fdb-b8a2-4e93-be25-fca3288297e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c4b29fdb-b8a2-4e93-be25-fca3288297e1.tmp
Size 8KB
SHA256 944eb0961aac0d798a61c84c69ede1fdeae526160bfc1e5fe0a67e6faefe1bb6
MD5 5dd7dbdc24d49ba6242fe0d48065d1d0
SHA1 4951dd7cb7d9fda802eedd947418f833ea67113e
SHA512 5dad335cb8a15bdf19d7fbddb30af75fa1608cef66f867ce68f9d56910430eea73aee3d4daf48b41f1fbb1cc85df5151f304f7398c0fb658138b0f7366ebdeb4
SSDEEP 192:EONr6DphhqQmiUyvuLwGYX59ezWC+m4gx+eHkIIMq5/NU6:EONr61KDLwGYX5EfMgx6JU6
TLSH
T141122B76A8B8BC3B5DD3A454F08B39079FA4522BEF857F50D6ED1A1C01DB19C230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e12b35f4-16c3-44ed-be55-7bf8d06764d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e12b35f4-16c3-44ed-be55-7bf8d06764d3.tmp
Size 18KB
SHA256 576e3cefe7adf8149e1561a3add3879f71265e1409d2fe973c856d2e13e2fa19
MD5 869e54af89b763c8a05356466c0f43fc
SHA1 bda1764b50efa0f9352d122cf5efd809c3797c9a
SHA512 3c512d01e18d5484ca70e9754a7203f287299daa60dde34127fbfe50f5dd35b837d6da134390b8187a3dc4c820bfae3a56606dbda2c6202af14a8fcafdd6a03d
SSDEEP 384:xQkUSv0sNi8bL5ilpBGYX5EfMgxLJH7vBEzKyIIls:j0YLoLGYufMgFJH75EWyLq
TLSH
T132827C72A8B4BC7B49B39155F10E3A039FB4912BDBC42B50D5DD5A1C01CA28C230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

017500c4-2687-4eb7-a30d-7448fbd7fc77.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\017500c4-2687-4eb7-a30d-7448fbd7fc77.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f0211f7b-875c-4a4e-90a6-02a5edcb21b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f0211f7b-875c-4a4e-90a6-02a5edcb21b0.tmp
Size 26KB
SHA256 492430f27fe6dd8d97ebe90415f5210cb9c8cfff74b356a1d0993b4579e8dfd3
MD5 ba3564bb7002821ef9e1a5a6fed20f9a
SHA1 528c3b139770c5e7f0b533470d5c4755d139726c
SHA512 f5143675124c37bd8f4ec993ef8fa4461bf8ca1061aee3230ce473ddc7adaeca181625be8a156c5ccdae68b9b8bd73c084bcb877092ecf15afd77956db68fcc8
SSDEEP 384:4iFzQkUSvozsN68TUNTUlIlbbL5impBGYX5EfMgxPJH7vBEzKyIIls:DFdUjwg9LnLGYufMgdJH75EWyLq
TLSH
T1FEC229F258E7983AD9AE4747A33D2E038EBCC117F9846A50B789591CCCC61BFD30A915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c715b1ea03d97d12e9535514c3a65dfb5b7f14678289930986e5fa0e7b1147b3
MD5 d73ce2da55851200ae2b5ed2bd2f660a
SHA1 1cf4e1c70dafd70c9a78dd4d24c8ddcd874e7c91
SHA512 a22eb43005942d219bdd2d7956cb1c55e5fd98cccd05150ed950140a8bda9686e90f7bae6ac1078ad18d555cb04704dfbb97296bf10f1086c203a2914caefa22
TLSH
T1D8410648A6E91148B3B76F4AABF6686E447BB8372F07D49E10120E4F0A66F40D861737
MD5 SHA1 SHA512 TLSH

Submit Download