hxxp://goodstoknowfr-portal[.]cloud-storage-id0347[.]workers[.]dev

Analysis

user interaction
yes
max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 06:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://goodstoknowfr-portal.cloud-storage-id0347.workers.dev
Sample261102-hr84yah14p

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2216	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{F6CE26EB-190C-4CEF-895C-A95E8812450D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe
792	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 792 wrote to memory of 4900	792	msedge.exe	85
PID 792 wrote to memory of 2216	792	msedge.exe	86
PID 792 wrote to memory of 2140	792	msedge.exe	87
PID 792 wrote to memory of 2140	792	msedge.exe	87
PID 792 wrote to memory of 2140	792	msedge.exe	87
PID 792 wrote to memory of 2104	792	msedge.exe	88
PID 792 wrote to memory of 2104	792	msedge.exe	88
PID 792 wrote to memory of 2380	792	msedge.exe	89
PID 792 wrote to memory of 2380	792	msedge.exe	89
PID 792 wrote to memory of 2380	792	msedge.exe	89
PID 792 wrote to memory of 5108	792	msedge.exe	90
PID 792 wrote to memory of 5108	792	msedge.exe	90
PID 792 wrote to memory of 5108	792	msedge.exe	90
PID 792 wrote to memory of 3884	792	msedge.exe	92
PID 792 wrote to memory of 3884	792	msedge.exe	92
PID 792 wrote to memory of 3416	792	msedge.exe	93
PID 792 wrote to memory of 3884	792	msedge.exe	92
PID 792 wrote to memory of 3416	792	msedge.exe	93
PID 792 wrote to memory of 3416	792	msedge.exe	93
PID 792 wrote to memory of 4640	792	msedge.exe	96
PID 792 wrote to memory of 4640	792	msedge.exe	96
PID 792 wrote to memory of 4640	792	msedge.exe	96
PID 792 wrote to memory of 4752	792	msedge.exe	98
PID 792 wrote to memory of 5028	792	msedge.exe	99
PID 792 wrote to memory of 4752	792	msedge.exe	98
PID 792 wrote to memory of 5028	792	msedge.exe	99
PID 792 wrote to memory of 3920	792	msedge.exe	101
PID 792 wrote to memory of 3064	792	msedge.exe	113
PID 792 wrote to memory of 5100	792	msedge.exe	114
PID 792 wrote to memory of 4688	792	msedge.exe	115
PID 792 wrote to memory of 2396	792	msedge.exe	117
PID 792 wrote to memory of 2396	792	msedge.exe	117
PID 792 wrote to memory of 884	792	msedge.exe	118
PID 792 wrote to memory of 884	792	msedge.exe	118
PID 792 wrote to memory of 5000	792	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://goodstoknowfr-portal.cloud-storage-id0347.workers.dev
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ffb7bc5c188,0x7ffb7bc5c194,0x7ffb7bc5c1a0
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,4979455399883345654,7897183586324413904,524288 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,7221538268801053049,4866267229322894237,262144 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,14268198406002866383,2672232288517153320,524288 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,5161416559618594211,2239427418392122333,2097152 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,17928174736277390506,4516319616540921294,2097152 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,7528577840744084439,13585332047705120605,2097152 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,3612039914686469641,8856902948454286851,2097152 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5036,i,3995276253622030691,16693848394653075252,2097152 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,12113973700918713733,6298990782149755960,524288 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,12846240852890545226,17274628866347286164,524288 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,13535964335223240059,17477338498029083606,524288 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,13535964335223240059,17477338498029083606,524288 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,15720556183394156014,14416340417239049166,524288 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,4179460895606212907,12825754915164430194,524288 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,16983503812736495969,13054526256612862437,524288 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=3408 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2880,i,6913289934135209531,9978603438323737598,524288 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:8
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,6786656242594107499,2088702163594784265,524288 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,9989513922326118944,15838098224247466202,262144 --field-trial-handle=2248,i,9885883099715270189,1796368966253642411,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1064

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0115153f-baef-4a3d-8be4-432fc5b1fe6b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0115153f-baef-4a3d-8be4-432fc5b1fe6b.tmp
Size 26KB
SHA256 d6125c8296a8aadea35ff6fc29fefed00526707eb64bb77df36a4d593255661c
MD5 02d50a7acd1fb3526010ea663ed5ae77
SHA1 3a9c05d098170ed4b07e1314de2b00bd966271f6
SHA512 65342fe3ca084ded0b5ada8dc8df8fcf83aaeac92ea1e27a920475e274836a1435496a6381efbd891f1e5895b70918e77bcd1f08823ba39056fa32666d49fc46
SSDEEP 384:piFzQkUSv9zsNn8TUNTUlIlUwLJqvnOjTV+cO+nFCjl+2lNRH7vBEYxmIIl4:AFdFGwgjoOnhOsIjllnRH75EY0L6
TLSH
T111C218F258D7983AD9AE5703E37E2E078EBCC057F8956650B389591CCC861BFE34A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

192ef23b-706e-4555-a745-3b53912805c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\192ef23b-706e-4555-a745-3b53912805c1.tmp
Size 18KB
SHA256 868d965cc96056ac1b8fd678842458c38896e0e2814efa64aa4bbbf098ffe42d
MD5 3de217226d6fb13388eb99ff087f0a49
SHA1 4af37001fde3844a47ab9bb94141fe050c2d8a39
SHA512 6ac13b7f057be4f68eb8820b224c49fcca6c7b1209dcc9b5a790f3d00f9f89db020d412af63340b1863862d773990ad138c21b4fb564d46bc1c9529e009ea3d5
SSDEEP 384:QQkUSv0sNdxwLJq+nOjTV+cO+nFCjl+2lxRH7vBEYxmIIl4:4019OnhOsIjllHRH75EY0L6
TLSH
T157828D72A8646C7B49E3A204F18B3647DFB8D05BD9992B90D5DDAF1C00CA6EC334BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ffb17ac-4f79-4804-a9ec-b63411272b76.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1ffb17ac-4f79-4804-a9ec-b63411272b76.tmp
Size 8KB
SHA256 af9c9522ecc3ca7e3d081f2499ba01f3686baf2bc5749dd4882633ff1b268fbf
MD5 f6d97bab09d3ec17437a3f9a66f800f5
SHA1 06c6f266b6c4fc6ae7299f8a60b266d43effcd4c
SHA512 cd9f8d88fe0b580b3ea5d2e226da78802ab47aade4a05840b789aa7f0e570da6a27b4d135e05a701b5e0f3ac72057970abf21b34b1680a2c3505fa94b143b1eb
SSDEEP 192:mONQ6y5QmiUywKVOCTVghcO+nFCjl+2lX3Udq0U6:mONQ60uVOCTV+cO+nFCjl+2lURU6
TLSH
T1E7121936B8786C775DD2A544F48B32179FA95167EA467B80D5DC2F0C01DBAAC234B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2593fc67-db77-43af-964b-09b1055b28db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2593fc67-db77-43af-964b-09b1055b28db.tmp
Size 8KB
SHA256 a70f09219def3179cf159d417668fc162501a19a180551004d7ebd45f207b70d
MD5 133b6ac2aad6b57d68c20023a1dcea0b
SHA1 8b540bbf23843b559308990d2e977147bdc8c9c4
SHA512 505cca85b97d151a4dd24c8c6492a5dab164f8fe150ae360cf3f4837ac5dce45ba5f3960c15f244936842e31c8f0190530c9cdbe698db2c344f25f15095a4983
SSDEEP 192:SONJ6ygpQmiUyFKtOCTVghcO+njzPrsU6:SONJ6lH1tOCTV+cO+n3oU6
TLSH
T10202D635BC687CB78EF26E45F58B27179FA4116BE9512B80DAE85E1C01D76AC2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38dd903d-b0cd-4167-8145-7fc696fe804c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\38dd903d-b0cd-4167-8145-7fc696fe804c.tmp
Size 18KB
SHA256 1f6565e14aa611c5f5b75adb36f7d81f8b086c275b324c8b9462faadfb33f7a6
MD5 15fd2d9d91345920f4b4f573b1e8a538
SHA1 9261d206c607d8f6e289185e1465b2641459f4e8
SHA512 0c4810b6d1b6c24463e4536ac6136e2b01ea569ef1c259f8c5f6c26d5b9b51f578b562287f1d7ddcebcef21995e67342b2cca5cdd651bded13316f5c35b39f45
SSDEEP 384:8QkUSv0sNdUwLJq+nOjTV+cO+nFCjl+2lxRH7vBEYxmIIl4:80m9OnhOsIjllHRH75EY0L6
TLSH
T136828D72A8646C7B49E3A204F18B3647DFB4D05BD9992B90D5DDAF1C00CA6EC334BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f5e7903-0b37-473b-8881-b5a27bf52786.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\4f5e7903-0b37-473b-8881-b5a27bf52786.tmp
Size 105KB
SHA256 1d62e22dec5c299be491cb2f809a917a5b2650bcf6f26d1655b204a91c995427
MD5 a1423f7d471bb13fff5ecfcdaea6454c
SHA1 7ded49e29e2ee4ecada313702dc82cddf87e8600
SHA512 6e90c834830dc60cf4e69d47a842a672355eeac4f32e8a0122d66df5ce75da4ac71274dc3cb208dbb06f3cd4f506485158442b7832ede2cf24ef8c5b26c1705b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7N:fwUQC5VwBIiElEd2K57P7N
TLSH
T119B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

39790916-a39a-4a3d-8df5-fc48e6e29fef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\39790916-a39a-4a3d-8df5-fc48e6e29fef.tmp
Size 10KB
SHA256 af2383e7ab140a018f0e0d31fd78985bdb472bdba4e2414f0d72de878da80a6f
MD5 5ad8bed627ecb9eecb7612aa7af976ff
SHA1 a1b8ad6b9696fc1c23b0d8c21ec96c4c31540687
SHA512 3a147e40b568995d840e83b8f487c95c873d6bdad110670d59896d92bc1bdf8afed014003290901f5484c39a23846bea6d7afc7ebffa0bb4341442f991504b3d
SSDEEP 192:sxZkwRtWY/fZs13Idp2mHW6+WNgsr/YRPV0A7Ig5SJ:sxZkwOY/fZs1YxHb//m7k
TLSH
T12B22C8526E34A97B8CCBD20DBA55BF53D6F9503291951E48ABFC961C04E66CE230B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

740f5a04-06ca-48de-8def-a1d3ed350dc9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\740f5a04-06ca-48de-8def-a1d3ed350dc9.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

9e0b9d59-c69e-4c4e-84c2-223219b68d65.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9e0b9d59-c69e-4c4e-84c2-223219b68d65.tmp
Size 10KB
SHA256 ac01d620b36b23d264556ac64d41400f00d1ffeed86ab385d2e7c7344a4f5964
MD5 5bcfd8659b522d4702a703e405884287
SHA1 c1e963b44d13cefabe4ebdd60309249e8df3bc20
SHA512 825284980c3974b8cd77db0a6afa51fa0dcc11df592d7ce2ce14de573b95e07faa8b3ad0dba6801d320f396fb6c9575f4298932199949d86a835c84966530c56
SSDEEP 192:sxZkwRtWY/fZsA3Idp2mHW6+WNgsr/YRPq8A7Ig54J:sxZkwOY/fZsAYxHb//m2O
TLSH
T10D22D9526E34A97B8CCBE20DBA55BF53D6F9503291951E48ABFC961C04E7BCE230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 686b99b8e05a97bf3892947c5979900e3bdc3d7eaf75a267a6d40fa22827a5bf
MD5 700ec00a7af91a1f48d7f88ed6937c96
SHA1 f358e89bea9e55f0f4fc988229e26d6476d304b4
SHA512 be98081c7e898f0c65e11ae95b50583b9dd38df81932088b05497e27ba8b5a00e7f1c874ff4bbb4ea80d771ead03174f76440f8ec6e6372f990fd7e4367ab7b1
TLSH
T1E9E026AF08CBC22EB248644701FA9BCCC2C13A1BDBC27A8E1B00C5CD7406050A7E6AE0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 186a6e258f9334cb7badd4bb88c0e0df52928d07a48ef26907fc38a53cf13a0d
MD5 e5b3806efdaa40bf204efa8d2baf395d
SHA1 2a25c0a5eff50f71b1925743322986dcedde6625
SHA512 3489ab0ff3f0f258bb15321803c25e7f7270605229c0ec33b6b9a6bb5e4bf9865426e08fff9d419a54d0cf334d8844bff08756dbd1a3250150d5ec86212f2779
TLSH
T17E518288BD8144AEF7A8097189D73D877E75818B59B30D7624B8F8BE44CBB95FD2C050
MD5 SHA1 SHA512 TLSH

Submit Download

d2ca5a41-8319-45c3-95e4-16a941d095b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d2ca5a41-8319-45c3-95e4-16a941d095b1.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

7935c0e3-4058-4956-8cc8-3baa2a6c2c2f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7935c0e3-4058-4956-8cc8-3baa2a6c2c2f.tmp
Size 2KB
SHA256 1bc403a78279a1f632861e16aeed06633b8a631523c00d0a2dafd6495a24a6d2
MD5 77d8839d6d53441f64d9fdc12c4a2efa
SHA1 ff828ab6cba932fb57f0a460c916552b4d554e2b
SHA512 f0b47cc52684420e9b8a990ceba9a2a96a64fe13bb1fff69df02b3365fa57838af20c03441aadd58b6b4fb8457516e6224521324c5c212336b00e1fa3544ca3e
TLSH
T1FA51CFB2C6D886ADDA4206F15A103F3BCE6D061852247D5ACDC9FF5BA3D1070D246A6E
MD5 SHA1 SHA512 TLSH

Submit Download

7b8b7af3-4a11-42ae-b049-95a36352cce1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7b8b7af3-4a11-42ae-b049-95a36352cce1.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

dcea154d-8f0b-43bb-8797-a103aeed36d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dcea154d-8f0b-43bb-8797-a103aeed36d9.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 08f804e5ea9c8ebac735effd1e06ae0330b60f795227d485ed146a026f170534
MD5 24413b10c52433fd6f898747615f5e10
SHA1 121117425bd5325f3cddf2d81c5bb50311a844c6
SHA512 66e73a41ac631537985aa68b43ca12ebe9a1783125d4ccc030f11709f6a282c4246431ed1541158aba296dc39eefa5f0c520ca98913488af936e73d4ff24bac4
SSDEEP 96:K0m79EZtr/jkz/qP5lkKhB5DkVNtKrN5WXyKMYKKQQKRyj:NH9hf4
TLSH
T146A1AF9530BB020178BD654981B5872A124235B3305CF7BAFFBD40A65EABE584DFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad5bcff1-874a-40a8-b3b2-e6550fd3fdda.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ad5bcff1-874a-40a8-b3b2-e6550fd3fdda.tmp
Size 10KB
SHA256 2b611e60f500ee8e450fa033fe84317dc581d3cc627df61db86bd02302c91e06
MD5 392d26980faf42377f5f5af8b501368e
SHA1 fc503e49a67c1f426d63663b3c024a2d50fa955c
SHA512 45316eacf14d3427dcae048e88148e35ad81cdce7ecfbfa1af4f8ba6b2ab20cf6d365e14b0097e5b8c225a43cc07212cfbf970c43223e4b460e24f6d5af70349
SSDEEP 192:sxZkwRtWY/fZsW3Idp2mHW6+WNgsr/YRPV0A7IgrJ:sxZkwOY/fZsWYxHb//m79
TLSH
T1D222C8526E34A97B8CCBD20DBA25BF53D6F9503291941E48ABFC961C04E66CE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cac0cc5b-b52a-48a2-9805-3c2ca83e4d50.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cac0cc5b-b52a-48a2-9805-3c2ca83e4d50.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d57c3765-75e5-49db-b666-2871d66d401e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d57c3765-75e5-49db-b666-2871d66d401e.tmp
Size 10KB
SHA256 67fe4180c4d8560642a8753e7364fd3e879859967ca6bdc7eb518974dd98a89b
MD5 0d82adfe64071933644179444e1c68b6
SHA1 7363dbe3e5c9102c7dabc99cde9a73c256854425
SHA512 5676d6e6ea765aa82274bde7d5b47b80cb2f565c36e70fc89d938460c8777c16f3c4cf2f3dcbefdd6f458639b51b627e31f026164d0977259af6113bbea037da
SSDEEP 192:sxZkwRtWY/fZsA3IdpUmHW6+WNgsr/YRPRrKQ7Ig54J:sxZkwOY/fZsAYLHb//mHO
TLSH
T1E132C8526E34A97B8CCBE21DBA55BF53D6F9503291901E48ABFC961C04E7BCE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e92ff618-585c-4c60-bb51-2c0eabfd3c90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e92ff618-585c-4c60-bb51-2c0eabfd3c90.tmp
Size 27KB
SHA256 734338ceb10ba2c9d8d7f25d62b796eb30536990e2ba396ce2a73d927f5a6f14
MD5 878724a22caa82b8d78bece87fddb508
SHA1 227753e7c717329c1fc50b91cf6818d97c539c15
SHA512 d0a0c6d6246b6dfa25923aae8f654f58ecad4a959ea5207c1c9f82636b7b2ab527e91fc4432895e61decb9cf861bc031a31cca5af2bdb810904165e9364148b6
SSDEEP 768:RpK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k32ro8+Q3:RpK9uzYWvcQWsu1ja0HL7Q3N8+Q3
TLSH
T14FC2F93F640CCB7E5FC01A9DDC5A6F972E9802D7A6688D4047FA944C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4cca183f-43ac-4718-afae-13fddcca3911.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4cca183f-43ac-4718-afae-13fddcca3911.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e263bae-1521-4468-821f-f612353ca2b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2e263bae-1521-4468-821f-f612353ca2b0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 69166f254c9345bc2c270604c2e3e2cd57cc139a3deb641cbe6ffa9a592f9b42
MD5 ad1a1cc5a4b2bfeed164834df96964a5
SHA1 d554840918242a47f1d1730f50f9f72967498f54
SHA512 350e02eff889cfefcb372b34e248395f0bcaf8f25c94bc802d3a202eb19a74e881702ac75920a062ad1875faa5d6440ccfdacedbc58eecafd1deafcc92f2026e
TLSH
T17A41F859B6FA1148B3B76E165BF6796D887A7D772E07D09E00110E4F0626A40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download