hxxp://insecam[.]org

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 18:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://insecam.org
Sample261107-xe2xes1shv

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1824	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{A9B7FE31-0772-423D-9CFA-B58123B55AF8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2500	msedge.exe
2500	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 3524 wrote to memory of 4776	3524	msedge.exe	84
PID 3524 wrote to memory of 1824	3524	msedge.exe	85
PID 3524 wrote to memory of 3708	3524	msedge.exe	86
PID 3524 wrote to memory of 3708	3524	msedge.exe	86
PID 3524 wrote to memory of 3708	3524	msedge.exe	86
PID 3524 wrote to memory of 4680	3524	msedge.exe	87
PID 3524 wrote to memory of 4680	3524	msedge.exe	87
PID 3524 wrote to memory of 1188	3524	msedge.exe	89
PID 3524 wrote to memory of 1188	3524	msedge.exe	89
PID 3524 wrote to memory of 1188	3524	msedge.exe	89
PID 3524 wrote to memory of 1264	3524	msedge.exe	90
PID 3524 wrote to memory of 1264	3524	msedge.exe	90
PID 3524 wrote to memory of 1264	3524	msedge.exe	90
PID 3524 wrote to memory of 2464	3524	msedge.exe	91
PID 3524 wrote to memory of 2464	3524	msedge.exe	91
PID 3524 wrote to memory of 2464	3524	msedge.exe	91
PID 3524 wrote to memory of 464	3524	msedge.exe	92
PID 3524 wrote to memory of 464	3524	msedge.exe	92
PID 3524 wrote to memory of 464	3524	msedge.exe	92
PID 3524 wrote to memory of 4516	3524	msedge.exe	96
PID 3524 wrote to memory of 4516	3524	msedge.exe	96
PID 3524 wrote to memory of 4516	3524	msedge.exe	96
PID 3524 wrote to memory of 1580	3524	msedge.exe	97
PID 3524 wrote to memory of 1580	3524	msedge.exe	97
PID 3524 wrote to memory of 3612	3524	msedge.exe	98
PID 3524 wrote to memory of 3612	3524	msedge.exe	98
PID 3524 wrote to memory of 4336	3524	msedge.exe	100
PID 3524 wrote to memory of 1908	3524	msedge.exe	109
PID 3524 wrote to memory of 1432	3524	msedge.exe	110
PID 3524 wrote to memory of 1948	3524	msedge.exe	111
PID 3524 wrote to memory of 3504	3524	msedge.exe	113
PID 3524 wrote to memory of 3504	3524	msedge.exe	113
PID 3524 wrote to memory of 3316	3524	msedge.exe	114
PID 3524 wrote to memory of 3316	3524	msedge.exe	114
PID 3524 wrote to memory of 2500	3524	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://insecam.org
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a0,0x7ff8b66fc188,0x7ff8b66fc194,0x7ff8b66fc1a0
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,15732699571325028555,6273347938209999987,524288 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,8954354878680857592,17134148108874470298,262144 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,9869994416879446689,11626588790504464855,524288 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,15892651751235523685,3724391819506686403,2097152 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,15125906378829123385,10704352923015005014,2097152 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,8603800126940101538,3206540908037545984,2097152 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,14002239719962379250,12776418410777522871,2097152 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:2
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3820,i,1860962387671843022,15838640932713381580,2097152 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,10101569501213859683,16073194411798625050,524288 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,4242132869696890338,9655315285638070414,524288 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,16403574228912866145,4398957986146672385,524288 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,16403574228912866145,4398957986146672385,524288 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,3557354879995348742,441771960085555568,524288 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:8
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4792,i,13645490240737401073,2705922628307129832,524288 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:8
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,12806245235088401221,17958053600484420954,524288 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:8
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,13771770132485801071,7600420577003267638,524288 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,17953278118109589256,1802886153631768666,524288 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=752,i,2361342904768227929,11301878905705625394,262144 --field-trial-handle=2260,i,2206113065036819179,632114642172591543,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2500

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4912

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6fce6fbc-8965-4649-8cfa-edd83eadc0df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6fce6fbc-8965-4649-8cfa-edd83eadc0df.tmp
Size 8KB
SHA256 874fa218c395bb167630645d47ecb46e4d6ee02b4b48d6afbab77b1a9c60ed8a
MD5 27a24caf0e7b82eec74d52cab2d5db99
SHA1 0b020c787ba5da0d7a9c54e37c57e5995c4f8cb5
SHA512 35a0499f813944bb0343b131adc4f6bf4c16fee033f73e9340c83438424579f7ebb06df9e5d62e63a134fe0ed516b89f9a65265ec0dc6d5ce89ef17888297af7
SSDEEP 192:qONT6wlDbQmiUyZIb4X58gZvOKNJyqwSJrjveUqNmU6:qONT6kNfb4X58EvOeJB3JriXmU6
TLSH
T188122A36F568AC375DE2A545F48736139FB55127E6896F84C2EC2E2C01DF6AC230AC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a121c0b-bc91-4830-b11e-f48acfc1660b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7a121c0b-bc91-4830-b11e-f48acfc1660b.tmp
Size 18KB
SHA256 d80b894e06f7f9ba520ead0f88dfa6fb915675c805e6f2f4ab5458d695aa7f84
MD5 a1e31476b84d7798925083a4c5b0e15f
SHA1 1556974df9795a92c778a558fa6f77d63b23f83b
SHA512 99f36c9aa63d7a957e766e2c81f3bf39f095e6c9262756a7d2349bc4d3795068c37e73174c3767792cccf6644960c94622bc432c9c1e619fd2dea0573289ee93
SSDEEP 384:GQkUSv0sNq7JNUZfH2iaZHX58EvOeJB3JrMXmH7vBEnskvIIlM:m0GRH2hta8OY3hMXmH75E5LG
TLSH
T192828C32B868AD3B49F2E604F14A3A13DFB4D017D6C91F94C6DD6B2D01CA69D234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

927fb0fb-cb14-43e3-a57b-a283042d5026.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\927fb0fb-cb14-43e3-a57b-a283042d5026.tmp
Size 26KB
SHA256 850315395cd41287e3a2c60bd9a37f2c919388b9b4dd5b53eba23e6f62d57ff9
MD5 f86ed51e4c3f78f6064a817067ea0f1c
SHA1 dea2f33f51b85c87c7fcfa9e5f9604632a9dde06
SHA512 2a57ec5976fbf436a37ef8a129bb3e0820a0ca9e20b8e049aba0448351c10e28ccc12e96a7dded2da30a4b5736b521a5939d4d8e6d73e6d67ee57c776ef91830
SSDEEP 384:BXiFzQkUSv8zsNy8TUNTUlIl4JNUZfH2i3ZHX58EvOeJB3JrHXmH7vBEnskvIIlM:BSFdALwgLRH2kta8OY3hHXmH75E5LG
TLSH
T149C207F294D7893AD9AE9B03E37D2E139EBCD057F4855A90B388591CCC861BFD34A901
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

22c14c39-6e9a-4cbb-9389-db7165941074.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\22c14c39-6e9a-4cbb-9389-db7165941074.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

5160603c-2ebc-4d5a-8d47-d8e4f1c24dc8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5160603c-2ebc-4d5a-8d47-d8e4f1c24dc8.tmp
Size 10KB
SHA256 715964800cb669be56e562b6927db51f1c05ad1cf5dd00a9b9c132157ede7fcc
MD5 d9da58d837b8a564118e2d4bbf1a51a0
SHA1 5c7919639292482ef430057dc851968e10d863e8
SHA512 73612480ea788e5208f4c7874d91f65b9f11344fdaabc2af083bb96fc936e7c755f48707f845269fb928c186e71204d482db0af2d2dbef8e1fdd9a56c71f5154
SSDEEP 192:sxZbRLWK/f6sfPSgIdp6mHSw6+WNKXc/YrcGMJCJyIg5gJ:sxZb4K/f6snShpHM1/DJRu
TLSH
T1B132A9566E38A97BDCC7D20DBA15BF13E6F5503295941E48EAFC952C08E76CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

926c2590-b3ae-4849-9242-1ef4a6d756ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\926c2590-b3ae-4849-9242-1ef4a6d756ea.tmp
Size 10KB
SHA256 4366ed7e8cd27bd7e6d64622ae1ee2627e8a46bad31a2794103e1c7ee396d84b
MD5 67056f564b87145d706b6b1081c831a5
SHA1 67b266771e9eadc31810a54248620944a6a4c366
SHA512 a30831b66c13dd24e614dd7cfdf72177b571a0dcbafe80626434d7c08e914e512f9938442e552e23691294b631bae74a442594ba0ba15bd957b83731f801254c
SSDEEP 192:sxZbRLWK/f6snPSgIdp6mHSw6+WNKXc/YrGMJSJyIgrJ:sxZb4K/f6sPShpHM1/0Jh9
TLSH
T19322A8526E38A97B8CC7D209BA15BF53E6F9503295D41E48EAFC952C08E66DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

987041e8-c013-495d-9303-c1c55d16109e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\987041e8-c013-495d-9303-c1c55d16109e.tmp
Size 10KB
SHA256 ab2fe020032f28bb4f289f810d224e8188429943d23a65f8874904fd7acd9cf9
MD5 6801acd195b850738804101771ec71ee
SHA1 87206ae7afa426ff4680f7198cdb8fa23247b00c
SHA512 71f8f71168590d69a18f77a445e2426dcf63c71beb994f35df5c13c188813233c05a1d3f78689643dac0319e61e4c7c1a934afafee359a8eb2eb9c35339de7c8
SSDEEP 192:sxZbRLWK/f6sjPSgIdp6mHSw6+WNKXc/YrGMJSJyIg5KJ:sxZb4K/f6s7ShpHM1/0JhE
TLSH
T1BD22B7566E38A97B8CC7D20DBA15BF13E6F9503295D41E48FAFC952C08E66CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 5ee22bee2c846ae6589b12ded46823efd3e3ac21ed9be590a0df4827c8e6671d
MD5 d7431b976b9aa8a724cb34c4496da7bb
SHA1 86913d961aaf4796f490a4ba1d6175ac5e7c5121
SHA512 ce08039a32b9dde9dc19cdc812f4a9a4ece0ef98badf9f68a4ac82de4f1c6f99bab1aada2bc2514c654a43f5240a306436f19d4ed3b92d11922019c12d52020a
TLSH
T1A3E0268C04CCCA3EF618A48B02A8538CC2C0375FA3C07E9F1749CC89760B054A7AF6A0
MD5 SHA1 SHA512 TLSH

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 23KB
SHA256 506ffa41d65d7698b2d1c8bd8a5baf2cea99a9655a9a5ac98d2b3236f52863ad
MD5 586bd760948161ff9e0adf4621eaf7e3
SHA1 792ee26e170b7dcaa145d1b1fd610e0d33b34e9d
SHA512 10836592b7202413c95de93f77cd4f9fda4d30de3e49d2147744ea6dbba40bf8ff625f59d1dd25fefd6eb759acfc1a2f6b0ffa2cdc86edb1d1d1ad7c70017d56
SSDEEP 384:+u38N43x293e5o5akQa8lpF4cL251ingYEHmBgfNRMZcBm+jgJm4CoHfxBCZ6:+uVh293+obSYiy1AlCz4+jgJGKxBC0
TLSH
T124B2F129CB64E86194C82C2F49B478EB358DC3EF45D477AD08948431264E5DB3F36BB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 3e322a167b6b0968e996e26d5d0acde1f6c927837fbf46e30c901edfad40002c
MD5 5aad31e5cbf0772c85e45ed938b00b1b
SHA1 610dbb99e12931155cb9af7451dfd05d0aec97b9
SHA512 c67eb36b44cfdf76e9d909bf60ced7d03165b1b941685e6e9deaacaa9d1c708ccae4ed46ea19f8194ff6edd32f9cabae8acbce48a280f9b9dcc094a14123e0cd
TLSH
T10D716F4855FA7577FBE40176C1F326AB36319F2420833F038266F2B4B98BB84CB85051
MD5 SHA1 SHA512 TLSH

Submit Download

4b7865b4-904c-4dcf-a104-86bcca4032b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\4b7865b4-904c-4dcf-a104-86bcca4032b5.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

021240e1-5e81-4366-9a36-c65391442fcf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\021240e1-5e81-4366-9a36-c65391442fcf.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

301ff841-dc8d-4156-862b-33879833f0ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\301ff841-dc8d-4156-862b-33879833f0ec.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

34abf433-16d2-4672-8ce2-d41cde2d4309.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\34abf433-16d2-4672-8ce2-d41cde2d4309.tmp
Size 6KB
SHA256 95f6ef076785a478011e2af7f7fcd83fa2784132968de443a312f4cda157363a
MD5 7125ba67bde54069632ad085ed8f3faa
SHA1 0bf86d1e0f2a728ccf33bf573e1449b34e77e266
SHA512 54ee763fef3b74366068dbeb9b29ab98f1e78dee909c291461646a1f05a452786bc61afde017a8752dc0424e009b9c321d35ea24bb28bf428efe3fcc676ea11c
SSDEEP 192:Dk6w6J5TJ7QudPz7gTIKT2ke+vfx0+W4a9qMbud:Dk6wS5l7QudPz7gTIKT2ke+vfxHW4ak/
TLSH
T1BBD1CCFBC3D4813D988617F0FB596A17CD1E156D83283D2B88E49E5A13F18B1E281A5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b619b0e50fc7934ab7786c71a50055c08164f7281c8d5d7dd5a10e037daee857
MD5 cc605a1ec8ac14cc76f139a67c9ddf8e
SHA1 2ae7bedae0b94549a8042c30b73e277b46223e19
SHA512 1eacbc3ee2adfa24bb24184566bb3c1cb20b285c5d615663cc2a1899bd97832380a4e4d69bf78afc043b05f46f69af4967119676d76614abec793ae7cb66d5c9
SSDEEP 48:KIDI1Ks04jyLEzy+suCLbyB6ISWLK9y1ALxEbYJqC4yLpBpQp9pxpbpfpjp8bpPD:KIDCKs0+uzeKEIOSc4KR28KloE6o
TLSH
T14091014570BB131538BD29888575D76E028136B37168EE6F7FBC44A68E6BE040DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df670043-1c03-421e-95da-8cff5dd99ff6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\df670043-1c03-421e-95da-8cff5dd99ff6.tmp
Size 10KB
SHA256 85e8b7fa20ee5e50f7d709f2a7873e047450c82344ff0a2af6083c951d5e2f35
MD5 ac0728e633211c2fd515a194325282e9
SHA1 7c491567a6a2a5038ec79ed023de61d2db495c48
SHA512 80d0fe671553ff75f68a63ad790113561965dae0f60348de9f6c091b792c883205b9a801d61a09d09e0874332e8d5426e738600232cfeffbfeb0459813221696
SSDEEP 192:sxZbRLWK/f6sfPSgIdp0mHSw6+WNKXc/YrKGMJJSyIg5gJ:sxZb4K/f6snShvHM1/fJHu
TLSH
T1EE32B8566E38A97BDCC7D20DBA15BF13E7F9503295941E48BAFC952C08E76CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa25873e-478e-46b7-bcd3-3fbf0e921a01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fa25873e-478e-46b7-bcd3-3fbf0e921a01.tmp
Size 27KB
SHA256 1b566ad654184240f2123f87874586a6bfea6d37fb99914d82bd810d6f19deea
MD5 4c114ea91875d3537df135eb1561d447
SHA1 d0fab5cef83a6e9395e270f6907838a91eec6dc8
SHA512 85272700cb1884facdaf68eae607abc2c649bfbf31de4c450fca548032ce56b00e5331fd78e67c057d7f22e360f6a4a9d14616b55de1ff34501fecef5e4ffb86
SSDEEP 768:D8y4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbkroRlq:D8y4J/DWvbtBhu1jajiLm0bvDq
TLSH
T1EEC20B3B684CCA7E4FC00B9DED5E6F9B3E9802C796948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

06cb619a-62d5-4602-a6f2-f6941313424c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\06cb619a-62d5-4602-a6f2-f6941313424c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c10baa78-68c6-422c-a6d0-3661043d7712.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c10baa78-68c6-422c-a6d0-3661043d7712.tmp
Size 8KB
SHA256 7af5cb0c368f72503ee4097f91cfb38cdbba728e9021c0eed04ec28a1930cdb8
MD5 c8c7616c79324cf8c3c62e647775866d
SHA1 91f8fea1756bdf50761556a94a83143df8178dfa
SHA512 9fbd25099368d820db6671509128bb274b9ad4258a9d3259620b8fcb8ba65175827325801b622d6c72e2b9bd7b675bc57c6c905ab6427772359265b0086b69ed
SSDEEP 192:1ONgV6wlDgQmiUyIIW4X58gZvOKNJ7DlG9U6:1ONu6kgsW4X58EvOeJd6U6
TLSH
T1E502E938F9687C7B9EF2AE09F58737139FA5106BE5552F84DAE81B2C00D769C1306923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e62289e8-027a-42db-a38d-1654bc5ef11f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e62289e8-027a-42db-a38d-1654bc5ef11f.tmp
Size 18KB
SHA256 ebe9f62eb0c2fb667fe98110655e83b54586a6558bf15c47e09c9a2f8745ba1a
MD5 e3c5bd823f98a5a55aff63330b8b463b
SHA1 44719329913c977bc4274efbb2edaa692525698c
SHA512 6a9bb29490a8a0324eae2099e7be34573523ea6997b0e3243c95f945e12d57713e6d17715cc254275f299d2915da081e1c333a977ddd30fa6a88045adf7b885c
SSDEEP 384:p4QkUSv0sNq4JNUZfH2iaZHX58EvOeJB3JrMXmH7vBEnskvIIlM:pw0fRH2hta8OY3hMXmH75E5LG
TLSH
T1F6828C32B868AD3B49F2E604F14A3A13EFB4D017D6C91F94C6DD6B2D01CA69D234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5c27e78f-68a0-4950-bc3f-8fffc4a4bd11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5c27e78f-68a0-4950-bc3f-8fffc4a4bd11.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ec39aa1127b136b9533a075b206b8dc6e1305810dbac4d099714a455af2be82c
MD5 b830430c5a14eb612a20a4fec4b6d21e
SHA1 62194477a66cbe78c8db71936a4eecac771b56d8
SHA512 5ffdb5105a33c3d3e400c823bae34af7500753f4d058e93e2335936767bace8ad4fcc35f247fe9d13576508cffe6665510d6c5a3cdb522b591ab4df70cdf0f6c
TLSH
T17541D659AAF91148B3B76E5A9BF6A46D487EB8772F06D45E10110E4E0723B40CC61B37
MD5 SHA1 SHA512 TLSH

Submit Download