hxxps://www[.]scribd[.]com/document/779686003/3q23-Isg-Index-Presentation

Analysis

user interaction
yes
max time kernel
899s
max time network
883s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 15:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.scribd.com/document/779686003/3q23-Isg-Index-Presentation
Sample261102-svd33sa13s

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4852	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{1EEB7727-0C2F-49F2-AF62-9ECB7DE596B3}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3852	msedge.exe
3852	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4396 wrote to memory of 4720	4396	msedge.exe	84
PID 4396 wrote to memory of 4368	4396	msedge.exe	86
PID 4396 wrote to memory of 4852	4396	msedge.exe	85
PID 4396 wrote to memory of 4368	4396	msedge.exe	86
PID 4396 wrote to memory of 4368	4396	msedge.exe	86
PID 4396 wrote to memory of 4432	4396	msedge.exe	87
PID 4396 wrote to memory of 4432	4396	msedge.exe	87
PID 4396 wrote to memory of 1388	4396	msedge.exe	89
PID 4396 wrote to memory of 2088	4396	msedge.exe	88
PID 4396 wrote to memory of 1388	4396	msedge.exe	89
PID 4396 wrote to memory of 1388	4396	msedge.exe	89
PID 4396 wrote to memory of 2088	4396	msedge.exe	88
PID 4396 wrote to memory of 2088	4396	msedge.exe	88
PID 4396 wrote to memory of 2424	4396	msedge.exe	91
PID 4396 wrote to memory of 1120	4396	msedge.exe	92
PID 4396 wrote to memory of 2424	4396	msedge.exe	91
PID 4396 wrote to memory of 2424	4396	msedge.exe	91
PID 4396 wrote to memory of 1120	4396	msedge.exe	92
PID 4396 wrote to memory of 1120	4396	msedge.exe	92
PID 4396 wrote to memory of 3120	4396	msedge.exe	96
PID 4396 wrote to memory of 4324	4396	msedge.exe	97
PID 4396 wrote to memory of 3120	4396	msedge.exe	96
PID 4396 wrote to memory of 4324	4396	msedge.exe	97
PID 4396 wrote to memory of 4648	4396	msedge.exe	98
PID 4396 wrote to memory of 4648	4396	msedge.exe	98
PID 4396 wrote to memory of 4648	4396	msedge.exe	98
PID 4396 wrote to memory of 4144	4396	msedge.exe	99
PID 4396 wrote to memory of 4144	4396	msedge.exe	99
PID 4396 wrote to memory of 4144	4396	msedge.exe	99
PID 4396 wrote to memory of 4728	4396	msedge.exe	100
PID 4396 wrote to memory of 4728	4396	msedge.exe	100
PID 4396 wrote to memory of 4728	4396	msedge.exe	100
PID 4396 wrote to memory of 736	4396	msedge.exe	101
PID 4396 wrote to memory of 736	4396	msedge.exe	101
PID 4396 wrote to memory of 736	4396	msedge.exe	101
PID 4396 wrote to memory of 3284	4396	msedge.exe	106
PID 4396 wrote to memory of 880	4396	msedge.exe	110
PID 4396 wrote to memory of 880	4396	msedge.exe	110
PID 4396 wrote to memory of 880	4396	msedge.exe	110
PID 4396 wrote to memory of 3036	4396	msedge.exe	114
PID 4396 wrote to memory of 1140	4396	msedge.exe	115
PID 4396 wrote to memory of 3892	4396	msedge.exe	116
PID 4396 wrote to memory of 5068	4396	msedge.exe	118
PID 4396 wrote to memory of 5068	4396	msedge.exe	118
PID 4396 wrote to memory of 5068	4396	msedge.exe	118
PID 4396 wrote to memory of 4504	4396	msedge.exe	119
PID 4396 wrote to memory of 4504	4396	msedge.exe	119
PID 4396 wrote to memory of 3104	4396	msedge.exe	120
PID 4396 wrote to memory of 3104	4396	msedge.exe	120
PID 4396 wrote to memory of 3104	4396	msedge.exe	120
PID 4396 wrote to memory of 4208	4396	msedge.exe	121
PID 4396 wrote to memory of 4208	4396	msedge.exe	121
PID 4396 wrote to memory of 4208	4396	msedge.exe	121
PID 4396 wrote to memory of 3880	4396	msedge.exe	122
PID 4396 wrote to memory of 3880	4396	msedge.exe	122
PID 4396 wrote to memory of 3880	4396	msedge.exe	122
PID 4396 wrote to memory of 3852	4396	msedge.exe	123
PID 4396 wrote to memory of 3908	4396	msedge.exe	124
PID 4396 wrote to memory of 3908	4396	msedge.exe	124
PID 4396 wrote to memory of 3908	4396	msedge.exe	124
PID 4396 wrote to memory of 4128	4396	msedge.exe	125
PID 4396 wrote to memory of 1536	4396	msedge.exe	126
PID 4396 wrote to memory of 4128	4396	msedge.exe	125
PID 4396 wrote to memory of 1536	4396	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.scribd.com/document/779686003/3q23-Isg-Index-Presentation
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffef294c188,0x7ffef294c194,0x7ffef294c1a0
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,3107308794113085678,3702471535280349584,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,3117303924113841547,8762570284206909689,262144 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:2
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2196,i,16908317843306084718,1493308554133220039,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,12633406750464832160,4958523178127292582,2097152 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,7453583482059230354,2029179804662628361,2097152 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4120,i,3263156629415297702,5807116569671553970,2097152 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4132,i,13372779808975495960,15069664490384265575,2097152 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3480,i,8249180145051178937,11779498348777085293,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,7704129481705425163,890114817969583986,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5672,i,15781974725368493428,10964534588948911210,2097152 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5684,i,12868385434389008178,15594192040422485585,2097152 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4968,i,7067688792379238607,18428335203569494983,2097152 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4120,i,10692535165023279695,18041678364555559218,2097152 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6648,i,9974241352608842239,5617162440320935389,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:8
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6648,i,9974241352608842239,5617162440320935389,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:8
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6516,i,11817099766596530809,11709055045253942012,2097152 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:1
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4744,i,14804408296220385640,8231150131864214788,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:8
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4760,i,9075238331592483319,8649659380919292662,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:8
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4772,i,16213767926315437055,15129734896480488730,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=2128,i,14177651628631994360,15794412542661104412,2097152 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4640,i,10218607484252862581,16779389582401487361,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5800,i,7090496899819552495,11938688523673391911,2097152 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:1
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6192,i,641391543214982935,18355042374577284111,2097152 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:1
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6496,i,10320207416471264025,5971023658407692950,2097152 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:1
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5072,i,4965612498686041424,2517675674929192713,262144 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5144,i,17724683045910298689,6827740933059752254,2097152 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3756,i,12260145722699059007,11980344735252315634,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3964,i,11169753192330497965,10970878620491972570,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:8
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,9979452172027881238,9926203633178687347,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,16219903290095007912,5851654185022990666,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=772 /prefetch:8
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,10948891374016398922,3118870299622415094,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=1512 /prefetch:8
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3564,i,3785892235729931188,300667908255639481,524288 --field-trial-handle=2872,i,6457388190075820547,9546773594298533518,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:8
  2⤵
  PID:4768

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4760

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1b22315b-0aa0-47e0-9ced-952c9417ee5a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1b22315b-0aa0-47e0-9ced-952c9417ee5a.tmp
Size 18KB
SHA256 6425631352ffe0be234b3b35f0bad3c87ffc980c8cd3a0ee52a64fb7897b44b0
MD5 ff96de62a0cf1059ea6a985432692576
SHA1 941a0c377b3e1cdcad3218c01c556354e22d059e
SHA512 005c5ffcf0dc7a3448860ffbd8c1a946311a1881d09e422d023dbe37011d2d16a7ba85cf04e2357f257d7e66275f1a3d645d177167c5d2437896b8565341dcec
SSDEEP 384:0QkUSv0sNeWhSOZM0hHX58EC8xJgXw+2WdQH7vBEyUIIlM:k0tO31aHwlWdQH75ETLK
TLSH
T131827C71A868AD3B4EF2A505F14A3603DFF4911BD6C91B90DAED5B2C01CA299234FD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e1ff5a7-d644-4174-a79e-19afc5ba33b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1e1ff5a7-d644-4174-a79e-19afc5ba33b8.tmp
Size 18KB
SHA256 2a27d1dedd01a537a7ec274f6075f0316ab0afe734cce689035f04577cec6362
MD5 7605fdc42d4357e816fe8885aeda53a6
SHA1 84dab27c620f7d64f4fa86e589c60f8b89a6b659
SHA512 c79ffe8b033ef7c3209ff6295885aeee9387d257fc564f80c53b6f63fa57cd718f657c1187b18c9b6e41c9d1b84e49989f53796bb193edc4253e7ac5ec6edddc
SSDEEP 384:TQkUSv0sNe5hSOZM0hHX58EC8xJgXw+2WdQH7vBEyUIIlM:90MO31aHwlWdQH75ETLK
TLSH
T1B4827C71A868AD3B5EF3A505F14A3603DFF4911BD6C91B90DAED5B2C01CA299234FD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

49d1f1a9-f0a7-4f40-ab7a-1e9a805556fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\49d1f1a9-f0a7-4f40-ab7a-1e9a805556fc.tmp
Size 8KB
SHA256 258101a7ded671e82b6dec145c900d8426cfc4df1dfb4fe60eb7d21a31c6c849
MD5 f3c6b0fa62fa1185cb1503a2b1aa8ed9
SHA1 feca575706cd07e9be49bf086fbdfecc361857ee
SHA512 b41e304ad7d3f55e598d1d36a7ee610bd640154cd666b47e29e0cf51a3ae6ff35039420a330954988a83f2d5c171d4c635e43c86d55e434bd8d501a257c57424
SSDEEP 192:1ONO6wlDgQmiUylPW4X58gZejzorxJlDlsFU6:1ONO6kgyW4X58EC8xJL4U6
TLSH
T1D802F934F9687C6B8EF3AE09F58727139FE5112BE6552F84CAE80A1D00DB65C134AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

1fc8d88c-8417-4b68-9cc0-4386f39cd81f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1fc8d88c-8417-4b68-9cc0-4386f39cd81f.tmp
Size 10KB
SHA256 d4569594dff0d4c48b902b8980b6230d02e75539d8a9a884037c719ca2839d9a
MD5 43653a9729c638138f05b8983032545a
SHA1 6759a07f4dc28ad6df64f456bfbc810dd7da6419
SHA512 d085ada4865d5700bad9c5c8ec308aba1651d6990361773cf579d27d8450a0ce703ef5aac703a2b8d4348cb579ca8cdf7b14a267e7485789bcbcbb47b88321ce
SSDEEP 192:sxZ6RRW5/f+s5PIdpdyHW6+WNtO9XYrj6SfGIg58J:sxZ6e5/f+s5gAHbOXptm
TLSH
T1A522A7526F28B97B8CC7D209BA59BF13D6F9503251D51E48AAFC851C05F7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ab69c1a-ab3c-4005-8287-47db08ea4321.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2ab69c1a-ab3c-4005-8287-47db08ea4321.tmp
Size 24KB
SHA256 d98c9cc3224d8291b3fbd3524886579844f9362040a1cab3ab7c46e2f1029225
MD5 c2981d5923c10af72364ab61e092964e
SHA1 ec8194c6b9b43527ae1cb24b7f542da590ac380e
SHA512 406233b72b4dce2c4f78b29c390e5202b00ed7b7888008250074e4b7d3c07257a64d4db08fb3d894a1f7aa76c13af389b254c0fb0ced63e1455b7a42962ff5cf
SSDEEP 384:sxZ6B5/f+sp66s8qMpRiYnazAW8pZS15posJWeT+TgOHb/NzBk:sSB5/fP4Mnc7WeT+TdHbVy
TLSH
T138B208419924D83B9EC35D1C693D7E33EAEC506212C5CEDA5AECCA1C01AD1FDAB47417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7605bb8d-878a-43fb-81da-a5f6667fdb7e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7605bb8d-878a-43fb-81da-a5f6667fdb7e.tmp
Size 10KB
SHA256 031ab97e2f374e9f81f1745cf181e692aaf3f7670be80fd458b812b03202245b
MD5 3a0a67478046edb367d681cd2ea3f1fa
SHA1 2ae97b2bccd12fc05171bfe4673d261b1f5b45fa
SHA512 51b777a3965a333a43a96d2b86531f3b466e551c8bee4a4e7296a95831035896ec2d0ec01bd8ea35efaac7781d2904e6bf85ff0fbec9c1e9d42d2b7aca32ff64
SSDEEP 192:sxZ6R4W5/f+sXPIdpzyHW6+WNtTvdYrw6JfGIg5uJ:sxZ6B5/f+sXgOHb9dgUk
TLSH
T19422C7926E28797B9CC7D20DBE55BF13E6F9507251D11E48AAFC8A1C05F7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

85c98797-9c9d-4aa7-aba7-bba1e426d50b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\85c98797-9c9d-4aa7-aba7-bba1e426d50b.tmp
Size 9KB
SHA256 f053b10e851d47139796951b8f6807ca990dd2befc4dd946cd498d436327921d
MD5 e64f8ea829cfe0dfd36e983fd1f6d85c
SHA1 14b162c31d88938448bd36adf576bff6baaaff4d
SHA512 a8c13d1bea287fc282c825871e4c0107e361800a26e621c6390908a04376643901e51b7dfb909202fc3e6bc908f8464f700e2fef35d15165d86cf1af92c67383
SSDEEP 192:sxZ6RRW5/f+spPIdpdyHW6+WNtFWI/YrQ6SfGIgrJ:sxZ6e5/f+spgAHbSI/4t9
TLSH
T1A822A8526F28B93B8CC7D20DBE15BF13E6F9503251D51E48AAFC851C05E7ADD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 7bc5448ed33a49777a280ba00d9d560968fcf8da3b483d853e10d468be03b0c5
MD5 0c1a464f8e5f2129c94ab64de9e8fe4d
SHA1 8f0a7dfb9908edad3f8f4e5e4540c84537e02722
SHA512 fd62f2ec1b54914ea562771e9da7c4f4f902e8347414de77f7f6bc93d8ba3a3ad07277d97ef244d3e057c75a0dadbe7c1990f53b1a4da5677d73b38f5872f389
TLSH
T153E026CA46CAC32EA209648F01E86B4C92B13B1B93C86ACE2740C8C4F545096F7E66A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 a925e829e74a9b0d342fbb6f61870ee39fc487fa27cc8d4f6d1dd18ec10ff8dc
MD5 447a3c435f82627c1009a4dc5bac165a
SHA1 4e9b967ee14cfb2f7ec3488ee19739530555d564
SHA512 42a01c9d600f151703827e1c8d03deafba6bfd752ffca48fdbb6a4813d9961d545c9cac3ad42c54c1f7c3da2b86dfaf27527154692b6e248ee9d4bca52e51e73
TLSH
T1A1E026CD04CBC22EB208649781AB578CC2A03F1BD3CC699F1700C8A57203858A6C66A8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 f43061fee32efea59491707b3f39af6dbd5d3f8e8bcd93bfda22047dacddaebe
MD5 62cfe4f49f5587da1d5dc8ca1ca462f7
SHA1 adf6e3d3a6bc4d2a1023776cd3e8693fabc94f0c
SHA512 d8b0be6de6c426a7f2b54423b170bd7cfda53a0097b7812675ef0435dde7310f6a2aca4d1a978dc79ed1c3d557d429882eee0586f8f8fd4b03799c6ec588fc25
TLSH
T159E07DD914CDCA2EA298A4C702FA630CC3A03F1FD3C8E98E9B00C4C47443480F6D66A0
MD5 SHA1 SHA512 TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 286KB
SHA256 d6846645329a9b134ec206364100fe74d4dddbd6ec69501e594e8c0f85b7378f
MD5 ba437f11a86d09d253f6c02528c48dd2
SHA1 f362201c6040b5ab8310199200aa212c3bf1bb25
SHA512 d26b01d2087ceea787e902fea03e04e57456b01d6d0cc82e9fdfe9fcdafb01bee96e15dd69d0c2ce510f3ad8741572fbf984b201c763e67c172f9cc08f090048
SSDEEP 6144:PGz07w+3q2v92MUKhUCrDkfDxJBoJHV1+ihF5UzcaG8+1U0SwQ1mD:PGo7Da7MU9CHkfDxJWxphF5+4hSwz
TLSH
T1FC54235030F0D666DB3DD14273164DE9234ED6AB07C020B3AE3B1875AA8FE6EFE46560
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 23KB
SHA256 fef03af284c4ac75322f9926d8dc782686010a25bbf2b06f6e603d42569dc3e8
MD5 e556583848a1631bdbc10f1eaff9d1f3
SHA1 396242dea52e4924e5a2351f5d687cc034ad6c3d
SHA512 d7e9a40d17ac20276b80b2a88485f474ca4a8e6d972adec76ed3d3f2ac4f2c893e0ba70807dffd129a855a14958bcc8498216f0d8a8284ee530fb571411edb77
SSDEEP 384:B45eKt+EJa0MV3FZPYC2NIGErI3pEUpmcjuZCWEcWJth3CJw7j19t5j/kHa1lK9j:B40C+EMZYClTr7ULTWFithyw7nH/k6D8
TLSH
T14AB2F15387332D535E92A96DF21033E46CBF449C468AD69E84FBE0DC062FD4AE183827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 188KB
SHA256 04ae3fc03e3cfc6f988eae67c9f5ba2fbc5995a1a9368cfab69b8612264c45b0
MD5 d98dabdcd6836470a1b35365b779e2f1
SHA1 6e28587c2054185c508879b579b1a18b1e12002e
SHA512 70def02a0c67e95e9931c7861543bc19d36164b0f53690b2203a3e64cebd111c63ade4beaf0323a3cf16f05fbed08cefa86c022aaf0abe402fbc9d6823a92649
SSDEEP 3072:3/HuxTXbKxTMIa3Xc1LCYE5bcRGEXSTimhG3OspKbWjKLgFZmHy8JwlaTHAr:32xTXPtmLpINECTimhG3nKbWeL6ZmHyV
TLSH
T1E0142242F748AB74B3CD426E9EAD928558966C44FD19741F944CF04322AE6BB03CAE2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 200KB
SHA256 a6ff2bb1dab854cc0661087c24aeff28dd87b99bfb06c46534eb36588bfca774
MD5 1d569536ee9be45301be58a311967056
SHA1 cd1d7e5acb68d9b49adfe03cebf1e0605371ef0b
SHA512 afd3f6c00a089f3c84e9ba179f87ffbe9a55419124d69e9d8b1ded705063703274c589e5dc66c98e77d7f38e1802665349f766136009ca698ce62d0d553ed13d
SSDEEP 6144:t1hUg7sl9ksTQsZ39VS3PTKz3wzqY0q13jJrZ//msfSR:hUg7Mk4A/ovC3VrdfSR
TLSH
T10E14135E2DD3EA224C115D7897F3A16EF5D82E069481A7ED0B6B809985C3814FD7E3C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 204KB
SHA256 757928cc6632f3972636cb345574e06433c7431a66a3803e34f2f638f4fab963
MD5 8dbe2562acb13f07ca508c3716d7b4fc
SHA1 ac6b55c786dedc759aefb3dba48e05450aba054f
SHA512 351fa5454623dbdbcb479131f6b1ffe5be3c63281a9e551d5fc1d854e628014eba9f8ff3c2031d339d041d984deb837e2f6e577943be3d16aab4321556dddfad
SSDEEP 3072:/jCh0y5EW0IbY1MIxaZGb6h4isLt+PcSR/t9JM57A36F43pBXOhgHyPF/:/2hIW0IbPIxaZu6+XOtAUzBOhgHyh
TLSH
T12C14230DBEB7655F5C3E79D493ED2A665D2806E2C0128877B30098DB843AFF8073A567
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 a63acfcc945472258644c128404a567bbfafeff6530f8913d52ce83ebf16c0be
MD5 2106da5d68552953925d04e9d1a525da
SHA1 bd4f1656d4c02b32ce047552ca013d0d13ec3991
SHA512 c16fb1873d41eeffdc816b20572d9086b90aa4f6e5e49f5b56f3bdc6a4c1effc2ec0db7ea526eb4b428f0aad52b35a39d4b0390089844e63b469f9ee815a01bb
SSDEEP 96:yYi1lK/YBWqwViEpmRGFSiaNn1F+BgT9Tw9ulyBT:yYEKgrwVYiyl989ulgT
TLSH
T17F91A582F44E0466DBB4B5F98DE21CCB3979E6F8529B6D4903E4E8351F26F5232B106C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 aac06c97e4839a5f168328aca29ba48ade0d848546cdff53f4226f76d2e896a6
MD5 160d19ca545b639efa3ded560c844939
SHA1 8f02fbd11de764d99c0657dd2e9f8cb11700a6ec
SHA512 b80a1025bc79e2abef84e9522dcb17fa5524665d3ad8514a704119f14e0fadbc3697e9919813a68654fa9da1bebc6754e627dbfef06ba2325197dd2f704a4bd2
SSDEEP 96:AHYi1lK/YZWqgViEpmRGISGaN71/+BgT9TDfuulyBf:AHYEKgTgVYD+P9/Wulgf
TLSH
T1C4919642F48E0466DBB4B0F99DE22CCB3678D6FC929B6D450794E8341F26F9272B106C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 501aba46f48605cf1820aeadc5880167e51f33fe521eb156ab65313169947f28
MD5 6dfbf2dab686cd4fd770ec812d4530e3
SHA1 da4a09b01aa54253ed62a925228fbcdf9270e20d
SHA512 8d2a2371790b6b778c0bdaf1c5e88453de0a2a6d647712043a9d36b8ce5014e2789e943036fe06cd5030bf0392b67f116a919933e161f838c7041d46f43b47f0
TLSH
T108613E86E48E4463DBB491FD8DE12CCB3938C6F042AB1D5A0398D8785F27F5272B005C
MD5 SHA1 SHA512 TLSH

Submit Download

d307e4d5-605e-4d24-af46-a8b83df454ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d307e4d5-605e-4d24-af46-a8b83df454ab.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0eae7bf4-2a72-405c-aeec-4e0a083f7224.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0eae7bf4-2a72-405c-aeec-4e0a083f7224.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

7f58fac2-030f-4652-88d1-9885abd1c20f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7f58fac2-030f-4652-88d1-9885abd1c20f.tmp
Size 10KB
SHA256 d8abe0046772e76b985e5c29cf7f73e7f8bcd8f169b5dfbbad6ab8cd7c32c9a7
MD5 ff9c11cacf61bb3ce51315a38f02e002
SHA1 b097ae2309afa97aa6c0bd2e2f99ed2e997f8cda
SHA512 66fc27f079fbbcf9fbac8b948fbc3a2ea10d33b1b8ce495ffc6ce362fadf056184c0ea2c82cb90a0d339cea77c5474476c4b5ee4ef10fe66b5bd4d47fac1a424
SSDEEP 192:DWaOr3ml/Ls5J3fE9se4J9b8scbmIjQdbUzbhCbotb8tqU2jXqzoOdKjKEg5yURr:DWaOr3ml/4n3fE9sek9b8scbmIjQdbUS
TLSH
T1FF22BDF787F5827C9A2166F16A64AD2BCF6D0614871C3D7588D07E07A3F2171E202B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92338576-8221-427d-987a-c526cc1ee2cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\92338576-8221-427d-987a-c526cc1ee2cf.tmp
Size 10KB
SHA256 032197bfe4d7d9f9f0f4495840c2d7ae0a530ed2fcc6dadc4ac9bf7015860d5f
MD5 8ce9ca72aa6d98e54018c3cf6eb44ba6
SHA1 7d6aaddea01ff854edce17df6099f8ed83ceff95
SHA512 fd219ba6b649d88a5edb4d9dcde8d63d34122d1ecfeaee146a2d07ebc2dd19683a2f45104d9192ef4d3f2ad9b2e1bc08ec9a3bab68c07f7d294e5a6b22318453
SSDEEP 192:DWSaOr3ml/VgLs5J3fE9se4J9/bmIjQdbUzbhCbotb8tqU2jIvXqzoOdKjKEg5yB:DWSaOr3ml/Vg4n3fE9sek9/bmIjQdbUe
TLSH
T18322BCF787F1827C9A2166F1AA54AD2BCF6D0614871C397589D07E07A3F2171E202B6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

945a22f5-b34b-4bf5-b540-9a8e85b8152f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\945a22f5-b34b-4bf5-b540-9a8e85b8152f.tmp
Size 12KB
SHA256 48fbcdc0734b52cf333b1c2e4090376cb5d2c53ecfae5b4b58b2ea17ef1068ee
MD5 c58f4afdf02811fa6cdb0551423d77db
SHA1 113b34c4f9b97130ddbc9a20523ad453e6cf4c5c
SHA512 04d307c8f339c34da78522a0a5bb2c83e6bfdeee538feba424917f37372addd07a0f84aa3e7dda5aa66ae363496abc1a5d56032b08ba483fa959982a2bce5e17
SSDEEP 384:D7QWqQbGiOJvgKeY69GLeH1bmIjQdbU6bhCbotbFLKjqU2PRBaMpdKvatSKcURkX:w66tAwK3
TLSH
T1B842A1E3C7E4863DDA2125F16B646D2BCE6D0A14471D3D66C8D4BE0BA3F2171E201B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eebdf0d2-3462-4512-a5d7-6aa3b7798416.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eebdf0d2-3462-4512-a5d7-6aa3b7798416.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f8836d7b-5cc1-4284-a81d-74c9dbcb16ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f8836d7b-5cc1-4284-a81d-74c9dbcb16ba.tmp
Size 10KB
SHA256 7bd39e55e11fca65d4bc0bb27b26d2dbf7458e28123983e9ca00c43424ffd04e
MD5 2a3a7172062378bf4071ab7b813d894b
SHA1 3b3d0014bc6accbdd94ca90c23bea59ed9a52e8d
SHA512 3fab08faf658b7fa46b8ee2b49a95218b0929a2bd285f2b378d21dd4a2aa29ef4acdc31be681afb481624616e831dadda543729830616b078fab8b9b112b31f1
SSDEEP 192:DWaOr3ml/Ls5J3f9se4J5b8sgbbmIjQdbUzbhCbotb8tqU2jXqzoOdKjKEFyURGI:DWaOr3ml/4n3f9sek5b8sgbbmIjQdbUH
TLSH
T14322BEF787F5827C9A2166F16A54AD2BCF6D0614871C3D7688D07E07A3F2171E202B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7d1b55da-eae7-4f21-95ec-38b7a6e45d1e\index-dir\temp-index
Size 648B
SHA256 5d165113df0ff4b77753d3d6529bc31b4be250af74b814baea541d65e3e6f240
MD5 e9a085fa6703229f21a719442f39f001
SHA1 a045b2f93976eb3c36fc1312291ccf879e62b17d
SHA512 3558f12389d997542c46b43087d2fc734854005217ff5288918511a294f9640622955de509beef293e45d7cda80dd5e2e5259fbaa9ef6d6a866c904f50caa88e
TLSH
T191F0D49A2F135E57FC550634747CB99669B041EC5360794FB1FD812B4C17740BE42664
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7d1b55da-eae7-4f21-95ec-38b7a6e45d1e\index-dir\the-real-index
Size 648B
SHA256 61c6e2b3716e3c54122ff02460332a168900915cd1d681d97558fda664b80466
MD5 b708bbbd22fb92451c0f2e4480155f83
SHA1 966d8291914536bbc9632c144a261ec89c238e5f
SHA512 5ab2845eb6338dea0adb4feafc664b98851ec64378ac52d23d57c7cab1bc5c9bf4af5cd5e8ffc37e1e98d25fb38064dc304fc203cd88c49f6a0da32c82d8936d
TLSH
T1D1F0DC9552039A46FC080271A97DA56A61658008A3607A4FE2E6916ACC12780A943B74
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 371B
SHA256 3d097b196db86e059d01bfdb4d67a9ebeb32272527ad28d96e54efe7aae96a07
MD5 4ab5c3886690b9669076d090b0731f79
SHA1 f7978126ea59209367053dc9e9d595f2498321ff
SHA512 ebdbf0ee5928ce4e8f23910427a22f4d2d1aa558104444451e107fefc2a26dea3b55c826d1cb05c6b043beeef8480825ef40bf79ecd90f016ff047d1b8be8362
TLSH
T185E0207B3DA31C31FCBFD3D9547144610152785DC954AD1E703AB5C728E2355380AC72
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 72B
SHA256 5b22a1826d6cf0ae410762e7f73e5678a38caaa22f9196dddd1315a9719cef9c
MD5 878c7905d768a7a398390fd528134ae4
SHA1 074e5780760826104a4fd165fb312c4c3c493db7
SHA512 886c4b8fe909834e5e48c7d589b6e86e0109b01a9344f8d0c073a627410b4a08c04ee57f12c258c6ccc465f994bf93f765cc7ab426e8af9ddd3aa90a1be6d220
TLSH
T178A002643B940011E0204BF410C107503350D89012D5470384A008D99C651F48E51141
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 15ed91b1df65391af416fd7ae32e96beb8f349d6e371e46293c69fad4e410852
MD5 571b8788fcc010a8e41784fe9bf71c93
SHA1 05141d8434eb4724000e34652f828edfaefd8b80
SHA512 29eaa696e985c0a63ca2b39eef5d70c00dd04050903ae8523436c1bdf6bf0b6d1ba937b5463b363afeb20d7be368a1b0ff92a34cca5d43977023fb97023e3b7a
SSDEEP 48:KIDI1Ks04jyL10JF3jXYbLuLIS/TIdK0cwLyVJIlKq6:KIDCKs0+iSxTKK0c2eJeKq6
TLSH
T12D91258470AB0645397D29584476CE5A62813EB3302CE5AF7FB884624F6BE254FFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ab0a0ea4-737f-4e45-aea7-be67737191d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ab0a0ea4-737f-4e45-aea7-be67737191d3.tmp
Size 27KB
SHA256 996f5fa7a5bad070d51978c75f683e00d1f5a7c43a4da71c227b5668bc40fdfb
MD5 b2f91400b96affd7edb19c60d6e0e81e
SHA1 c441cff5858960dda16830af492875ca01684335
SHA512 cbe5bef72861b158e2117a4f0a32418f44aad29bb3e9b5fe37a40fd27ca0fc55f750a1e66d2ceae96dfeeca8a3b88c629e190a9a114f55a00be9da9c69dd9cab
SSDEEP 768:zwy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbQroRXa:zwy4J/DWvbtBhu1jajiLm0b7ha
TLSH
T1B6C20B3B644CCB7E4FC00A9DED5E6F973E9802C796948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c97562b3-c88b-4f81-aff2-94183b8fffbd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c97562b3-c88b-4f81-aff2-94183b8fffbd.tmp
Size 10KB
SHA256 508bb3857e1032f999f3a4a93da0bceff3ab0376c5488ee646912e18ec051723
MD5 870b853de0fbc9fb7e0b061ccbf918e7
SHA1 a877500929106d12818cc2c95e99d24ed9e68d5f
SHA512 1a7f7f4794097542d19fe06f82737206388e53109ab7f1a95791081a582f5d74c7b90a52305de8b1edca872ffceff4afdda46952f3308e1efe0a43271c6d4c2d
SSDEEP 192:sxZ6R4W5/f+sXPIdpdyHW6+WNtXlZYrj6CfGIg5uJ:sxZ6B5/f+sXgAHbDZ59k
TLSH
T17222A7526F28797B9CC7D209BB55BF13E6F9503251D51E48AAFC8A1C05F7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f9a4478c-4b4c-4b5e-9f0e-5f215f1e0d64.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f9a4478c-4b4c-4b5e-9f0e-5f215f1e0d64.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1004aef0-f4de-4a98-82d1-4625c169be3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1004aef0-f4de-4a98-82d1-4625c169be3c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d0c84f0a-63b1-476a-878c-d55c5d3d719f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d0c84f0a-63b1-476a-878c-d55c5d3d719f.tmp
Size 8KB
SHA256 94d4a5c6751fe44a35bdc39c00cce18fe0b52866959b561ba3d3b9f550c8f281
MD5 9e6745092a80632cc0bc6a0b3af1f0ee
SHA1 c95ac8a3a0bd38c037590dbc3a35ffd5e67a4c08
SHA512 a5b3d3a42d176eb2f4bced5406e7ee6083fe5be974830a81a208e457bd82e6b40828403957874434e6c6b4531d30b206b5fd91c208c3eb11ece0c414fd40b337
SSDEEP 192:1ON/6wlD+QmiUyzkPT4X58gZejzorxJgXA7R+2UvetqMQU6:1ON/6k6VT4X58EC8xJgXw+2/dQU6
TLSH
T116120835E568BC2B5DE2A545B08731039FA5522BEB896F90CAEC1E1C01EF65C134ED23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e07854f1-07b0-4d46-9d36-31ccaa825905.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e07854f1-07b0-4d46-9d36-31ccaa825905.tmp
Size 26KB
SHA256 e4b92608242b976363e1a04b6300020ebb6368f68177c914dd1c874b4bbcdcf3
MD5 edaf227311b0ef238d59c7fbb982bb28
SHA1 fbb48325e023839de10e01bca8be2650c6b538da
SHA512 0b0694b5f0fad1ccf481b6327854faddca426ca413d11d59e0d81a15f959df0760936b914e60df4466b8ce581d78b4c3a4fe497ad0562e0f7101760000b2fc7c
SSDEEP 384:DiFzQkUSvQzsNu8TUNTUlIlWhSOZM9hHX58EC8xJgXw+2ZdQH7vBEyUIIlM:uFdMXwg1OC1aHwlZdQH75ETLK
TLSH
T135C229F298D7993AD9AE9703A33D2D038EBCC157F5855650F7984A1CCC8A1BFD34A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0aee00c1-9daa-4157-a77f-56a89b509f70.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0aee00c1-9daa-4157-a77f-56a89b509f70.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b8f1f99f02c7bbcb5f8e0a4802768d9ea627c1f1c01c71374006de86cb876bf7
MD5 14c0496c1e1b328fd377ca8dbcfa96fc
SHA1 2c38ec19f04623511d88422f07016541e496ae55
SHA512 f6aee1052eb3b5494228597cbbf9ea9ad099533def2350e28236d44ee5a53b62f0fe55cc93200592405e074cec06632d493917e9f12106a78c3a74e2e413b664
TLSH
T19D411858A6ED1148B3B77E5AABF2A86D447BB8772F0BD45E00010D4F0A27B01C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download