Analysis
- user interaction
yes - max time kernel
76s - max time network
77s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/11/2026, 15:43
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://u18873848.ct.sendgrid.net/ls/click?upn=u001.0m5g9hCBMfRy0s2NFkw3JhyuheWoIPje-2BFu0n-2BgddmdA7RKJw-2BJEhA4SIiOlb-2FL4wFI-2BByToXzCvfKpteubRTbt-2FBrAh6qFZLrs4-2FZBaKMYJO6syfpEOMhYo83mW2YETTu5CIgmpZ5gjxkhKj3ozGmfuBpnOG5cfs8-2BBllUA-2BCBfKfVJVUvG7GceHddou97pK0lt_EU-2Bs8Oq-2FSDJqnZxzI2DsQ9shxcC4J3ojXK8ai75k-2BN66ukPnIGV3eCPdfJldEGX6JMqKn4QFlMyeSPKxfexVejnx-2BskfBWHsd9uuVE01wO4ca4OhT0EJMe1nwaNYR3w0lFZ-2FdIkqzJFWAf-2BjMglidATnUKNoWu7pI76rBB5HaTswCrA3aQ1pPZCPhtMYjU9cEF-2BHeH-2F2FHFwGM9pbkNiCxmrn4y0f2HTMF0NWXS4aMc-3D
Resource
win10v2004-20260911-en
General
- Target https://u18873848.ct.sendgrid.net/ls/click?upn=u001.0m5g9hCBMfRy0s2NFkw3JhyuheWoIPje-2BFu0n-2BgddmdA7RKJw-2BJEhA4SIiOlb-2FL4wFI-2BByToXzCvfKpteubRTbt-2FBrAh6qFZLrs4-2FZBaKMYJO6syfpEOMhYo83mW2YETTu5CIgmpZ5gjxkhKj3ozGmfuBpnOG5cfs8-2BBllUA-2BCBfKfVJVUvG7GceHddou97pK0lt_EU-2Bs8Oq-2FSDJqnZxzI2DsQ9shxcC4J3ojXK8ai75k-2BN66ukPnIGV3eCPdfJldEGX6JMqKn4QFlMyeSPKxfexVejnx-2BskfBWHsd9uuVE01wO4ca4OhT0EJMe1nwaNYR3w0lFZ-2FdIkqzJFWAf-2BjMglidATnUKNoWu7pI76rBB5HaTswCrA3aQ1pPZCPhtMYjU9cEF-2BHeH-2F2FHFwGM9pbkNiCxmrn4y0f2HTMF0NWXS4aMc-3D
- Sample261104-s6b3vsdh35
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 1984 msedge.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 msedge.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{96078EDF-B5A0-45E9-ABFC-7B4781E667BA} msedge.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
pid Process 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe - Suspicious use of SendNotifyMessage 32 IoCs
pid Process 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe 1292 msedge.exe - Suspicious use of WriteProcessMemory 34 IoCs
description pid Process procid_target PID 1292 wrote to memory of 2084 1292 msedge.exe 85 PID 1292 wrote to memory of 1984 1292 msedge.exe 86 PID 1292 wrote to memory of 4644 1292 msedge.exe 87 PID 1292 wrote to memory of 3796 1292 msedge.exe 88 PID 1292 wrote to memory of 4644 1292 msedge.exe 87 PID 1292 wrote to memory of 4644 1292 msedge.exe 87 PID 1292 wrote to memory of 3796 1292 msedge.exe 88 PID 1292 wrote to memory of 980 1292 msedge.exe 89 PID 1292 wrote to memory of 4396 1292 msedge.exe 90 PID 1292 wrote to memory of 980 1292 msedge.exe 89 PID 1292 wrote to memory of 980 1292 msedge.exe 89 PID 1292 wrote to memory of 4396 1292 msedge.exe 90 PID 1292 wrote to memory of 4396 1292 msedge.exe 90 PID 1292 wrote to memory of 4212 1292 msedge.exe 92 PID 1292 wrote to memory of 208 1292 msedge.exe 93 PID 1292 wrote to memory of 4212 1292 msedge.exe 92 PID 1292 wrote to memory of 4212 1292 msedge.exe 92 PID 1292 wrote to memory of 208 1292 msedge.exe 93 PID 1292 wrote to memory of 208 1292 msedge.exe 93 PID 1292 wrote to memory of 2096 1292 msedge.exe 97 PID 1292 wrote to memory of 2096 1292 msedge.exe 97 PID 1292 wrote to memory of 2096 1292 msedge.exe 97 PID 1292 wrote to memory of 2932 1292 msedge.exe 98 PID 1292 wrote to memory of 2932 1292 msedge.exe 98 PID 1292 wrote to memory of 3224 1292 msedge.exe 99 PID 1292 wrote to memory of 3224 1292 msedge.exe 99 PID 1292 wrote to memory of 3216 1292 msedge.exe 101 PID 1292 wrote to memory of 1676 1292 msedge.exe 110 PID 1292 wrote to memory of 3780 1292 msedge.exe 111 PID 1292 wrote to memory of 3776 1292 msedge.exe 112 PID 1292 wrote to memory of 3916 1292 msedge.exe 114 PID 1292 wrote to memory of 3916 1292 msedge.exe 114 PID 1292 wrote to memory of 4144 1292 msedge.exe 115 PID 1292 wrote to memory of 4144 1292 msedge.exe 115
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://u18873848.ct.sendgrid.net/ls/click?upn=u001.0m5g9hCBMfRy0s2NFkw3JhyuheWoIPje-2BFu0n-2BgddmdA7RKJw-2BJEhA4SIiOlb-2FL4wFI-2BByToXzCvfKpteubRTbt-2FBrAh6qFZLrs4-2FZBaKMYJO6syfpEOMhYo83mW2YETTu5CIgmpZ5gjxkhKj3ozGmfuBpnOG5cfs8-2BBllUA-2BCBfKfVJVUvG7GceHddou97pK0lt_EU-2Bs8Oq-2FSDJqnZxzI2DsQ9shxcC4J3ojXK8ai75k-2BN66ukPnIGV3eCPdfJldEGX6JMqKn4QFlMyeSPKxfexVejnx-2BskfBWHsd9uuVE01wO4ca4OhT0EJMe1nwaNYR3w0lFZ-2FdIkqzJFWAf-2BjMglidATnUKNoWu7pI76rBB5HaTswCrA3aQ1pPZCPhtMYjU9cEF-2BHeH-2F2FHFwGM9pbkNiCxmrn4y0f2HTMF0NWXS4aMc-3D1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1292 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x21c,0x24c,0x7ffadf9ec188,0x7ffadf9ec194,0x7ffadf9ec1a02⤵PID:2084
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,5414566826490723886,4462083959767477973,524288 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:32⤵
- System Time Discovery
PID:1984
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,18349362794683093538,162359568973252488,262144 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:22⤵PID:4644
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,4326785041138108413,8361714311327697777,524288 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:82⤵PID:3796
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,14034408687649862544,9417171094369430696,2097152 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:12⤵PID:980
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,7882873128410102011,2827843408275094647,2097152 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:12⤵PID:4396
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,1144792949067704480,4182341548088758375,2097152 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:12⤵PID:4212
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,16787805023422529255,6095266042183202130,2097152 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:22⤵PID:208
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5088,i,13311876663785609650,1669016021987097827,2097152 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:12⤵PID:2096
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,16192833521885213710,5264184401878841987,524288 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:82⤵PID:2932
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3928,i,4835657072407502847,5826650406381619105,524288 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:82⤵PID:3224
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,14794465880762011281,4119598547745557827,524288 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:82⤵PID:1272
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,14794465880762011281,4119598547745557827,524288 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:82⤵PID:3216
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,16960096138267476142,9784134079858892348,524288 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:82⤵PID:1676
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,2826213654794241323,5797795399105317373,524288 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:82⤵PID:3780
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,6898489263780966599,3309076254792599485,524288 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:82⤵PID:3776
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,12765362284136635566,9284378098332550637,524288 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=4020 /prefetch:82⤵PID:3916
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,16431705947670540221,17623653209497807458,524288 --field-trial-handle=2472,i,1385360748140341315,17442664583831210339,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:82⤵PID:4144
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:1672
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\06c66634-0f79-418c-87d5-8fbf559eef04.tmp
- Size 8KB
- SHA256 761300f5286947a43d0edf6e000f4c242d7a4bab3e582ec15770acff85361cb4
- MD5 55942f72359a8a2cedb4bb080113c9d1
- SHA1 0d843a9ffd32cf1f22a5726be98ae06edc53ba89
- SHA512 c5953114fb328664396b701f5bfcc7d9ab90ff1ee779c552fd10bd93af70d22cbbd3551d2d46dcdda7d4c1e4e8aa30d01bfbf571aae249ff03ce469a13da7c37
- SSDEEP 192:tONB6wlDoQmiUyHKR4X58gZdjzorkJsXh7R+2lveJqjBU6:tONB6kIjR4X58Ex8kJsXb+20AU6
- TLSH T13412E736E478BC2B6DE2A545F08735139FE69127E689AF90D6EC1B1C01DF26C534E823
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\512b9e98-c14e-4bf0-8135-eb21d1fdd754.tmp
- Size 8KB
- SHA256 bce14828fb8af7bb764e1b24848943ddbecdcc8624d5ffdeb8711c4907a14fc4
- MD5 49e6e9882b07a1394284d85c4801684e
- SHA1 9d4bfed099dde8335493853642bf8d9030c8a657
- SHA512 56208e38511fe8e45fe45020c61041b9fbb9539902b6a8d421677a948e53456c5306618be30097ddd86c3378f5b2c45d55992151c4153d9a2ebbd5c097b66e5a
- SSDEEP 192:1ONg6wlDgQmiUyiKW4X58gZdjzorkJIDlcIeU6:1ONg6kgcW4X58Ex8kJsOU6
- TLSH T1DB02E735E9787C6B8EF2AE09F58727139FE5112BE6552F44DAE80A1D00D739C134A933
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5888dfc6-fd75-4306-b8b0-d6de204a0d83.tmp
- Size 26KB
- SHA256 7284bfec0d4c75e39f04f5ed6fe7157945f2915603ea34d1d7bc5d59bea3cd8b
- MD5 42bc3756ad3f4ece9830817a1f9bc931
- SHA1 cb818f15928fd7672c90ce6308c767e7d81e86b0
- SHA512 d46d7ee7d4de24ad341f271cb8cce76e80bd28c574ec01c1904d9126138a8e7b1d0f3290740f865ce6d7b6e58274aec46f631c9343a921901032137d234c6c56
- SSDEEP 384:xiFzQkUSv7zsNY8TUNTUlIlEvqZPsDHX58Ex8kJsXb+2hAH7vBEzLIIlx:YFdv5wg7uraBblhAH75EzLLH
- TLSH T13BC208F294D7993AD9AE8703E37D2D028EBCC057F5859650F798491CCC8A2BFD34A911
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6a113f91-1b6d-41f7-9985-9880fa7c175b.tmp
- Size 18KB
- SHA256 c95995155b43b768f5d669996b40e48e35dae626e321b5b56417376ffa06e04e
- MD5 c52b4afa522b25814079f338a3d41c25
- SHA1 9a6d8108bae311f4bd2ef513729b3430852b02a5
- SHA512 fa67af64d3042ee4abc884e5725aae3ddb4eb4a6b65a2a82d49ad676e4503cfef7ffd2dacbb7e99984119a55b8f711b0d175402a5b7bc7d6db39d8d14bbfdaa7
- SSDEEP 384:pQkUSv0sNoEvqZPvDHX58Ex8kJsXb+20AH7vBEzLIIlx:L0JRraBbl0AH75EzLLH
- TLSH T12C827D32A468BD2B5DF2D101F24A36139FB4D127D6C96B90D6ED5B2D00CA39C234FD26
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6e9b0834-37e0-45a9-8a15-37729c019b88.tmp
- Size 18KB
- SHA256 83d000647c4f850885114eb88e9b92905b22a70574db03357a4af8b6a7509ad1
- MD5 7924c022fb6ca03c34e9882dbbaa3b9c
- SHA1 bb8e76cba138de60514f10f3de724ff2a299b5a6
- SHA512 cceb40cd4320a353f8ba6e041cb9eb25a28d0d95dc3af86e64bc199051dff6c3e6d2946cd59adf4bacb9a7ddd674a9342cb728c75a619ed2d80607962214a9f9
- SSDEEP 384:VQkUSv0sNoFvqZPvDHX58Ex8kJsXb+20AH7vBEzLIIlx:v0cRraBbl0AH75EzLLH
- TLSH T157827D32A478BD2B5EF2D101F14A36139FB4D127D6C96B90DAED5B2D00CA29D234FD26
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\82177d36-0bd5-4264-8063-c269bb6d338f.tmp
- Size 105KB
- SHA256 73d0e97f18eabd66ced5f78af8d0ee3a36d197f120279f6fe22862877514d939
- MD5 48ffe64f366166704c21161efe0b504f
- SHA1 a6403dde2edbd6b341ad301811396e7d3aea1af5
- SHA512 ad78beb367abbdbb0a58e28566138180a03a9826f30f2dc412a05e0ca179742f6e123202adf44a50da1f4b71145ff6cb0cde66f326d4e9b116ce56b2281ea253
- SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
- TLSH T1B3B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
- MD5 6ce50f5d79ab86d6489a63e08ead9ec4
- SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
- SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
- TLSH T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
- MD5 eec56aca3717cde66f2f4d578de1d4d9
- SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
- SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
- TLSH T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\31852a5b-9364-4496-9d39-4d52ba543267.tmp
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5a89ae36-cf07-44f6-ae27-79be1948edc3.tmp
- Size 9KB
- SHA256 a7708ddd8b5862f7030d6a2f650cba416523410e22bbb94f028127912e63ed30
- MD5 cfd0b54539af64ddd051067679b44419
- SHA1 b9c9bd73a2942d3a8c1e4adfc8a05c459adae837
- SHA512 7198cee9351df049107d0155c474b4de681a27abb22871d1fc3a35ff99c60f73acdfd15a3bab0012d0a0bcf30d0bb9a508313d66bbc020906bc81dfa12397ef7
- SSDEEP 192:sxZ+RRWX/fksrfIdpBDHW6+WN9Vq/YrUWydPIgrJ:sxZ+uX/fksrQ9HbC/99
- TLSH T16B2295526E38B93B8CC7D20DFA19BF13D6F9503295955E48AAFC861C04E7BDD220780B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\744c5d9a-fb03-4e4b-a76c-43f0a6448c9f.tmp
- Size 10KB
- SHA256 999cd927bae5c0720d6d6f16375f6d494464fb389c66ee81c6dc8c6ed5e658fa
- MD5 f8a9e5bfad62f60dc8272d6490ad2ed5
- SHA1 c4600b34cbe44863ae35164d5fc5a80a560edd2e
- SHA512 2465cff3daaa5f6da0ae8f6c17fb771d706c69430ac8996c4e4c1163db9f423124abfb7182f58b680e2094f75a675dc66f28185af74ce9fbabb8898f49b6fd0c
- SSDEEP 192:sxZ+RRWX/fkswNfIdpBDHW6+WN9Vq/YrjWidPIg5iJ:sxZ+uX/fkswNQ9HbC/cI
- TLSH T13E22B7526E38B93B9CC7D20DFA55BF13E6F9503291951E44AAFC861C05E7BDD220780B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7870d92e-0a42-49bc-b394-65bea760492b.tmp
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7cca58aa-e64e-4cb9-bbd5-ba2ab727833c.tmp
- Size 10KB
- SHA256 f6cf418f353a0d6d1fcfecc19f84ccf163f44ba75cd5f39a10ab5538c6b5acb4
- MD5 121b258b9a497a565632d9ebafabfa2c
- SHA1 95553c27303f4a9de35e7236081447c250a83a51
- SHA512 cc49167085cfc97ebb65ceb8d02c3126468f6d173c8e7196b99800baf6a3dae81194f2616104cebfa774712131d47ad17ccd8a541f5fc72a440d55091ecd77a1
- SSDEEP 192:sxZ+RRWX/fkswNfIdp7DHW6+WN9Vq/YrdWpdPIg5iJ:sxZ+uX/fkswNQ/HbC/NI
- TLSH T12E22B7526E38B93B9CC7D20DFA55BF13E6F9503291951E48AAFC861C05E7BDD220780B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\84282b6d-0d79-465e-8eb1-991f3a3916fd.tmp
- Size 10KB
- SHA256 a9891364f4d48a5152559ec4cda4ac07394b5344153520cf29399f1ab343f73e
- MD5 3666990f882637a1a9ca7dfa716ecbf1
- SHA1 8173d230ac8bcaadb54330ea85bbe55b464d73e9
- SHA512 40d8db0fa978c459b58d152b33c1622f5489fbe6d5eba08bb00cd85330a7e842073bd95770ed21bea567dedba4938f3fb016b693c125c2ce2b101a734e17b599
- SSDEEP 192:sxZ+RRWX/fksw0fIdpBDHW6+WN9Vq/YrUWydPIg5wJ:sxZ+uX/fksw0Q9HbC/96
- TLSH T17022A6526E38B97B8CCBD20DFA55BF13D6F9503291955E48AAFC861C04E7BDD220780B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
- Size 331B
- SHA256 5ffa2be6d30e358219885d2faeab9c059273e0cc129f19f1e88be2140c083b94
- MD5 3aa007a54a2c72f64c2e1aefc9f9ee54
- SHA1 9999e746677d7866cdf26ec5c6faffd5a76b2fc3
- SHA512 2d57c59ae0df884b39a7d6639dacaf9d5c362f15e49f7cfebc81999b495a29f9726bf7f5260adaff978067f3f3141441af6c3923f3d9354ed1681706a02cb04a
- TLSH T1F2E0869425C9C63EA31CB88711FA6B6CD2E03E2B97C46DCE1B04C4897141554ABDA6A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 2KB
- SHA256 10e2a4786af7ce5a33810852fb7f75368468d5756850125e61d807f1f98af7a6
- MD5 8fcd93bcb98998362cad719e8b7fcec4
- SHA1 5d4e9e779a8ac19fc14e15f1a1b4e6474fd41c72
- SHA512 3157bf6a9f9b3b237af944897a24aa12631d43de9d1b84be67ac80814b45a6a99b265206a4668fb24342ccd00b0b0e76fe6572a51f515e82b3a373aee921dbb1
- TLSH T13E516F402590627CF7EC307090FAE2A736B5CEB2619F8E75E394F47A5942384F15102C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 2KB
- SHA256 7176c7d82e1ee242785fd923446e0f455530bd34948fe2189831627e875e6fb6
- MD5 a16c9ec6bbe24130db178e52d9057057
- SHA1 3d469d3a0fe9628d0b0a228fdcda7e9cc9eb1281
- SHA512 4f6e9c426f3aa6a4f259f6129137ee0a9ab6334ae1760cf9c7105cc83161a7b7db9bb9f93514a7988c06cc9e7f6d11c2044f480c7ac1218ab538ce42566d081a
- TLSH T152511B4126A0636CF7EC307081FA93A736B48EB2619FDE76E794F47A9D46384F15502C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\6b7d5bfc-c501-4e74-bca4-38e1766f63b8.tmp
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\02966974-1ded-462b-b906-ffba0cb8d6a1.tmp
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\427566c2-7159-47be-9265-0fa8e2e3c300.tmp
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9545bc58-7356-4ea0-9764-4e16f71e045b.tmp
- Size 3KB
- SHA256 bd499cd9e6cf257684b25d0daffe37028954a23e8f1d7f831282937db828fdba
- MD5 792da6da717305a2947902b8caba2776
- SHA1 d0e29d55626a04e3536bc0eb8213514d3a57cf47
- SHA512 6d73d7a05dc767e2e8b78b733e16be1708268a9d7c91a3b859d9cf62cb13fa182951a50a1cab871044a214d6f65167fdd2ec3a9359a56ca9cda3ca9fee02de84
- TLSH T18F71BFF3C3E4822DDC151AF45A166D2BCE6D1924431C3C6A89E4AF1B97F24B1F24069F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
- Size 6KB
- SHA256 9ecfe2a15a9ed3d6ff6957cd84827f08efbb15f39eb3827567cac2a631ac83f6
- MD5 87b1562bfeec90399293dbb2ce113841
- SHA1 26abd2608874a6110b4db71c33d84afe0ecd9770
- SHA512 c60c0136de554abbb43eb730c7a8d6aae9662eb124d55ae49c5eca5a9d032935d76a0721348539e6530e5b982cbd7cb7bbbc375579f53198eb836435af9ca75f
- SSDEEP 96:KIDCKs0+aMgKdKO2T+K42BiKK86iGQKvK8s:E5PjxJV/U
- TLSH T149E1008530BF025439BE294881B49F1A628231B7751CE67BFFBC50659A2BE045DFECC9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ed6f7ee0-f9a8-4930-a9ad-db00d595ec0a.tmp
- Size 27KB
- SHA256 c9462d6510346ed5bb0c8fcfba6714f8475e7775b33c67857915cb093b06139b
- MD5 3ee8063fd9fd206b665816b2de725881
- SHA1 cf2bcca95c2e0d12d39e0422502397955505c899
- SHA512 f38554a5b42a0deea3fb7b4ad0a6c8ec42ff91a170d315f967ac219a95c6167c31b0422ce54078478bd4772dafaf67b048f0786fbfe9e64531230e4e7f7f9348
- SSDEEP 768:u3y4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbCroRoN:u3y4J/DWvbtBhu1jajiLm0bZmN
- TLSH T19AC2FB3B684CCA7E4FC00A9DED5E6F9B3E9802C796948D4047FA994C02C77EA51264DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0c3a00d6-2649-418a-9afa-00e62ad77082.tmp
- Size 22KB
- SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
- MD5 f768bcb451a187c18099961c484eef8b
- SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
- SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
- SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
- TLSH T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ff2e9a1a-5c6a-428e-ad5e-491510f30027.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
- Size 2KB
- SHA256 aa7d750b113d195bfe8c0b7fced49079e4a4c9e45af8ac16e5a2f98f68555e6b
- MD5 4821d496785d369806c89d5b53ef9b0c
- SHA1 b9bcd9623610da76e671e203d9735657e09e1bfe
- SHA512 da7ca4129b5a5595dfe46522d19230b5c3468b12707e21baf70dcdf4594d223be2eefd229a6a4a50b79703928e8ba70a3ff85ad08b433efe3b18984e40f1bbb1
- TLSH T119412B59B6F91048B3B76E569FF2A82E147FB8772E06C45D00110D4F0676B00C9B1B37
- MD5 SHA1 SHA512 TLSH