hxxps://_eshared_[.]jcr3dtalsk[.]com

Analysis

user interaction
yes
max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/11/2026, 01:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://_eshared_.jcr3dtalsk.com
Sample261113-bxap1aev3z

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2828	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{05627E23-0FE6-47DF-B2C2-F10FFC2924BE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3468	msedge.exe
3468	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe

Suspicious use of WriteProcessMemory 28 IoCs

description	pid	Process	procid_target
PID 4880 wrote to memory of 3988	4880	msedge.exe	84
PID 4880 wrote to memory of 2828	4880	msedge.exe	85
PID 4880 wrote to memory of 5280	4880	msedge.exe	86
PID 4880 wrote to memory of 5280	4880	msedge.exe	86
PID 4880 wrote to memory of 5280	4880	msedge.exe	86
PID 4880 wrote to memory of 5456	4880	msedge.exe	87
PID 4880 wrote to memory of 5456	4880	msedge.exe	87
PID 4880 wrote to memory of 4568	4880	msedge.exe	88
PID 4880 wrote to memory of 4568	4880	msedge.exe	88
PID 4880 wrote to memory of 4568	4880	msedge.exe	88
PID 4880 wrote to memory of 5868	4880	msedge.exe	89
PID 4880 wrote to memory of 5868	4880	msedge.exe	89
PID 4880 wrote to memory of 5868	4880	msedge.exe	89
PID 4880 wrote to memory of 4088	4880	msedge.exe	96
PID 4880 wrote to memory of 4088	4880	msedge.exe	96
PID 4880 wrote to memory of 5016	4880	msedge.exe	97
PID 4880 wrote to memory of 5016	4880	msedge.exe	97
PID 4880 wrote to memory of 2404	4880	msedge.exe	99
PID 4880 wrote to memory of 4876	4880	msedge.exe	110
PID 4880 wrote to memory of 4436	4880	msedge.exe	111
PID 4880 wrote to memory of 4484	4880	msedge.exe	112
PID 4880 wrote to memory of 5556	4880	msedge.exe	114
PID 4880 wrote to memory of 5556	4880	msedge.exe	114
PID 4880 wrote to memory of 2264	4880	msedge.exe	115
PID 4880 wrote to memory of 2264	4880	msedge.exe	115
PID 4880 wrote to memory of 5772	4880	msedge.exe	117
PID 4880 wrote to memory of 5772	4880	msedge.exe	117
PID 4880 wrote to memory of 3468	4880	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://_eshared_.jcr3dtalsk.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2b0,0x7ff93093c188,0x7ff93093c194,0x7ff93093c1a0
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,9106017675444550969,9524373885034634464,524288 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,15368101137012230139,15024692840708735692,262144 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:2
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,18307381070631588337,11893294885053119641,524288 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,13526203996336719367,5836772913165383543,2097152 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,16112345447210579830,7461068540586800598,2097152 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,10682110083121650900,2397941680586970736,524288 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:8
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,59856181632450316,7135730545585225435,524288 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,17433333587391624866,10649079638188366473,524288 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,17433333587391624866,10649079638188366473,524288 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,13432726114233240888,157910067678653820,524288 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,14388986929651853938,9198850847083232169,524288 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,12737844497271522731,2472978273201304449,524288 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3036,i,517078947953009510,1252200966950722683,524288 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:8
  2⤵
  PID:5556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,10354055790518503484,14818494690067666026,524288 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,12929507200157346694,7433892476193720049,524288 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:5772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6400,i,17918722001267785908,3536075496529494973,262144 --field-trial-handle=2364,i,15512141606631615048,4745262939227229371,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3468

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5776

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1e057fef-7555-4e31-86ef-f77ed5b0bf23.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1e057fef-7555-4e31-86ef-f77ed5b0bf23.tmp
Size 26KB
SHA256 1a83dccaef2e7532384d6135ab36f8e069541a77b1c824521fcce6427b7990d4
MD5 faaa593e1bfaf523a0caeb9f4f9eb308
SHA1 4ecc1e17019c7bac6b513abd3186795596d7985f
SHA512 6070e1df837e30dca6ed220d21ed528e6007b6c59fd91fa5f748353407b0f28118bd36b3250fb281f159aa40004528a45305434bf9d2a7098bff95839f4f44c4
SSDEEP 384:nAiFiZcI63sNwm8TUNTUlIm2aKMq7Rw2f0BCpBxvhToJzcuziECc7O6R2FeoUt+A:bFQ63bmwgcewBCpzhoieiECc7TR8k
TLSH
T1D9C24B36EC94CEABECEA8FD9A74A3A03DEF44153D58C96C4D9D82D1D009B5AD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7c653944-1cf0-4c9f-ae6d-cde77c00d6b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7c653944-1cf0-4c9f-ae6d-cde77c00d6b8.tmp
Size 26KB
SHA256 48b318f55955066ab758ccec3392a022512718eafa43b05d0199592a6089795e
MD5 bae6d86239e2bfcc87e1891abc204706
SHA1 17315a4aff669044a490b7e7870651eb61bf75e1
SHA512 23edbf57e490a5834ee8c7eb9e5760315a934e8528e15fde8c14e7736288832cc5861acef237c25c595c0b70f51f1efe232ae6d76c1b1196372a7162d6cc45a4
SSDEEP 768:dFdP3rmwgAo9BCpzhoiEiECcH75E1hoLc:5P3rZHzS3dbuoI
TLSH
T1B1C23936ECA4DEBBEDE64F95A71A3A43EEE04253D89C9AD4D9C91C1C00D71ED130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

858b79df-a6b7-4c6d-886b-af78a179d724.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\858b79df-a6b7-4c6d-886b-af78a179d724.tmp
Size 26KB
SHA256 34e11fbbaddef9d05c54789b8daf8440120a57630ca661e91baee4179616a463
MD5 7f55e2aeda4487ed6ceafccbaa59a33e
SHA1 f2395ed948dbac4f540075bd4c08b6e3523f6feb
SHA512 f066f278445b3fda4f082f57da2dc989f44a48a95553974996c72587214ff92e474e6c8490094643836d993528e92f7d05fa4633079df2fe7554ea9cf6986e0a
SSDEEP 384:nEiFiZcIoR3sN8m8TUNTUlI4/aKMck9kw2f0BCpBxvhToJzcuXiECcH7vBE1hHgH:fFQs3rmwg1x9BCpzhoiEiECcH75E1h3c
TLSH
T1CAC24B32ECA4CEBBECE64BD9A74A3A03DEF44153999C96C4D9D91D1D00975ED030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2f67a665126f0d437497b394b50cc87ce72773b6abd85385bb78adf0ad326302
MD5 a98f4348736e1c7c5e70799864c15774
SHA1 fa2e3725e970aab935f77d155b649177f50be7d6
SHA512 c1dd68c743d45af6f713c7d8fade4a675abe4d224e86b956c5aaf959ccda0a92b9824b0e784a0ee9992843bfc2a7a73f85267479d6e5ffa0aa5827760492419d
TLSH
T19ED02B20B6A87654E006343C0114428C31CE5570140BB400809413A40FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

30972016-53b8-4eac-9c98-0ee61818c15f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\30972016-53b8-4eac-9c98-0ee61818c15f.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ab6951d-79d0-4189-bddb-fcf270549900.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6ab6951d-79d0-4189-bddb-fcf270549900.tmp
Size 12KB
SHA256 b0d19f7d25ab9d47076e85045e7f48f011245af58b626b9528fdd5def2d66e2f
MD5 0891e0cdf6826b5cdf010a4ff356c542
SHA1 f8148aa8e513772c9ceac5fffc91db5e40773beb
SHA512 fe811f5a12a009961ce5388bc3951fd612b2503c0a74824ec058050b094ae1ccb90078649ff0d2bbf2f2878825cb99fd4031fa554b0a9ece19ee5708858314b0
SSDEEP 192:sxZ+Rqkm/fLsqaQZL+C8EzodpxIHW6+WNwxp/YokDbSxlIgjtuJ:sxZ+/m/fLsTOCZ3CHbY/QS7jt6
TLSH
T15B42E7156D28A97B8CC7D20DBA15BF53E3FA103294811E48AAFC8E2C14E76DD230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b30db11-6d2c-4fd9-ac3d-c26d3c75a99a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6b30db11-6d2c-4fd9-ac3d-c26d3c75a99a.tmp
Size 414B
SHA256 f93e81b7839611b87b68ee6098424e23d46dde750117747baeaf805f842fb342
MD5 ad259a54c8ab680454485bdd7cbfd7c9
SHA1 d922894be862b97c182b0715ce39a4c9f7a57479
SHA512 b5f79846cc705cfef666d5a700c67ec3a6bff0bdf02c1ae1bc885aba285c9931138241497fafceb56b794d23647739210256984037c8234a4f5449196c6ccc0d
TLSH
T130E02B6AC921FC3B08FD0B7C54540645EB1023672A50EC4B7B3D85188FB0636568686C
MD5 SHA1 SHA512 TLSH

Submit Download

925da3ba-9fa6-4d9f-b505-70d9faa4e1d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\925da3ba-9fa6-4d9f-b505-70d9faa4e1d4.tmp
Size 12KB
SHA256 2560153493bb851f076db1e42c25b4ff71eaf1cd1404efe8d5442c149b156622
MD5 759a890270cfacc320daa42f6ad3a0a2
SHA1 dcb990bc2ce7c2abf943e084a30c52120946f291
SHA512 73a8dce093355e8365a190a12308818b06f4a5e524f85a58f5be929ca9652219ac293aa6c4679d0d42c6088542c30b06724c93dba1842f6759385ea899a667ed
SSDEEP 192:sxZ+Rqkm/fLsTQZL+C8EzodpxIHW6+WNwxp/Yo6DbSxlIg5mtuJ:sxZ+/m/fLsTOCZ3CHbY/6S7ct6
TLSH
T17542E8196D28A97B8CC7D20DBA59BF53E3FA103294811E54AAFC8E2C14E76CD230741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 7b457771865fce72ee561a090becbce658d83f7ad2630526b1e83e7b20c5fa4a
MD5 80142b3dffcabf19e0a6f48ac517676e
SHA1 e5fdd33d5a390c122e84880e6ab3860cc2c040cb
SHA512 883dc5d291c0d91c67b73c3d4d06536c3f930c4c286ee2594e0f8c99c49fd5cce9922867ebe7c31799e014c8a22c67602b172fdc87333dad05b1cb09f09fb6e7
TLSH
T1F5E0268C04CAC22EA34BE64B11ACAB8C82C0275EB3C0A91E1F40CCCD70411C0F6C77A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 54fe411c6f057b494dd293f7199893bd22bc52d242ddd347453e79a92f3a9f6d
MD5 59cce27c68227c0add2175b93feae0c9
SHA1 33d93828ba5981bd3d8c4eadf124b2fb404a4559
SHA512 92a53d9464ae725a82b88423f9d1d6b28ca5a4c46a7a7a4e2402fe039114df48edcf57448fc652ce6892e8c35a6c33b42c9991463a8c4219d5cadfdc99afad49
TLSH
T19DE0208C08C5C21D530469C701BCB34CD1C0275FA7C4AA4D5B90C4C974C24847EC5960
MD5 SHA1 SHA512 TLSH

Submit Download

481d611d-2c2c-4cd2-a664-9e0bff5062d0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\481d611d-2c2c-4cd2-a664-9e0bff5062d0.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0e84a8d9-ca88-43b6-9873-7af68f59eb64.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0e84a8d9-ca88-43b6-9873-7af68f59eb64.tmp
Size 2KB
SHA256 4567318f5b978b4191673d02de91e552271b15874221dc57e70c8c63eea086bd
MD5 c2c06c4a268f66c69b8e02d6b38f9650
SHA1 c622975209631811d4f1f9507aa702d901b5b326
SHA512 7240ef31aea2343621bb45fdce78aa78615a01d7c206b43c0e02e98e33904b9daa1379296243dda13a9d3b68ba9e83a85b78beb95baa7322e1ea4e71a3b52dac
TLSH
T119417BF7C6E8866EC91156F0AA147E2BCE6D0524432C3D6AC8E4EF5B93E2472E14164F
MD5 SHA1 SHA512 TLSH

Submit Download

eca4c75b-c2ba-4923-915b-aa7f266b460c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eca4c75b-c2ba-4923-915b-aa7f266b460c.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

f866290d-545e-4932-ab2b-086d61e654b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f866290d-545e-4932-ab2b-086d61e654b4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 8159559955e4e31c0a5294edad57ad9d8a3df661be344bec24f2b7850626fceb
MD5 3773906fd8340c616dc57861b90122db
SHA1 73e3111ca9f2c49edc030356b18ae98546ad3a03
SHA512 643184e5450ff8ac191a3b87fe6f7565d5a8a6e2e896a55778d99adb17be16cabb959db6c0830c1a32540e9763d141854cef7051166d21be4dfabf10debba0b8
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgZ:ST/2dXOJhJlpfnpp3tNXVrN3gXhy
TLSH
T183B2215571BB021039FE390891B6972E168231B33119E66B7FBD44B68E2BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b0d4235e-0e8d-458e-b98c-b2e362aba300.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b0d4235e-0e8d-458e-b98c-b2e362aba300.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

c2d06851-8f92-4abe-9fa1-b9129de1f090.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c2d06851-8f92-4abe-9fa1-b9129de1f090.tmp
Size 12KB
SHA256 c37a83ea4e4cd448ca3a2ff9238d74aba19a31e696cf5f511f0f16e3c70048e4
MD5 faac42b776bfa05f494178159fefd62a
SHA1 91c878e404c0b1dd2dcecfb78bf32e1ccebcc222
SHA512 30ff347ddee1aee3ece13c922ac189a26951fa2841080c0be0671a66c4729004839fb2e11760f1fc7d3e40ec1b18a984e32747465443de7a99a228fe8f1373da
SSDEEP 192:sxZ+Rqkm/fLs+aQZL+C8EzodpxIHW6+WNwxp/YokDbSxlIg5mtuJ:sxZ+/m/fLsXOCZ3CHbY/QS7ct6
TLSH
T1C642E8196D28A97B8CC7D20DBA55BF53E3FA103294811E58AAFC8E2C14E76DD230741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a09cee5a-7a37-40a7-8ac3-fde2c6f909c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a09cee5a-7a37-40a7-8ac3-fde2c6f909c1.tmp
Size 25KB
SHA256 a44945250c6274a421e148259d9ac1120be193b3f3d9b00f2e2cd54aebebc155
MD5 6b063630ed40cbec022a8d2e36a34515
SHA1 48fe8c4819fcaae3ac0a5acb12646c1507ec64c2
SHA512 0e1e42c968bd759bf419a9aa01aa85a1f18241cac6eafc9af691a09413a353e0e8784fde5d4b6ee6bd365d86fdbd3a33cc5f68d42a041092cf0f070669efb818
SSDEEP 384:nWiFiZcI63sN98TUNTUlIm2aKMiO4w2f0BCpBxvhToJzBFe7O6R2FeoUt+gL/7Is:9FQ63AwgcVZBCpzho7Fe7TR8k
TLSH
T179C23A36ECA5DABBECFB4FDAAB4A3A03DEF40153949885C4D9D91D1D00975AD0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8e1c824-86a7-4e38-bd9b-4bd6c34c3449.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b8e1c824-86a7-4e38-bd9b-4bd6c34c3449.tmp
Size 26KB
SHA256 f60e9d90d3f27950c58e5fd86d8f3d694bd7d1ecc87112f5c38e2b2aaad66c0f
MD5 22b8db430440691508b88c82177d5ed3
SHA1 14b1b2a054253703edde11e52fea67b66a9b92c5
SHA512 13fa778bbafe80db808dd4bd5910390f4bf2eac5d170dcdde39f53ba122bbed3d57e4d362e008cac0a6854d8edc520bf4f1435e0b7a827d1f75e3b0607e4a0d8
SSDEEP 768:fFdP3rmwgAo9BCpzhoiEiECcH75E1hoLc:nP3rZHzS3dbuoI
TLSH
T11AC23936ECA4DEBBEDE64F95A71A3A43EEE04153D89C9AD4D9C91C1C00D71ED130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ea19c4d0-52ba-46d1-9a72-7498403c3a24.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ea19c4d0-52ba-46d1-9a72-7498403c3a24.tmp
Size 31KB
SHA256 7ce2fa78ef5875f9629d2ebf97734d60644eb05ddba62cb2127f3835b8828dd1
MD5 a62eadbece87b317403a49f461e6532f
SHA1 60ba3f08ad9c0ad1831eaccc5381a206f836f2cb
SHA512 229666844b34b5c0f06aa267aaf9f1e7399464abce893a64536d46d81a155f183a33786db8b8e36d582f9b4130f99d309fed30b648a7d919bff530d97465b472
SSDEEP 768:xFdI3rmwgAY9BCpzhoitrmECcH75E1hoLc:tI3rZ3zSmrJbuoI
TLSH
T100E2A2F598D799B7D8AE4B97A73D2E429AFCC113B8884584B7C81C1CCC861BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 144b8ad292b90a804d64e540e21d56287dc8d10685a8b8da35470714bdd4d14b
MD5 4306b098a90d6ed044e670088637a83a
SHA1 716a3f7d408d553122bbdb348f847d3dae0aa9d5
SHA512 ddbde78e397854c5695a646dedb42aa178e95d444cae9648a36ae49bfe545a7c4eeb76b3da7dcdefac40cefdb46f046299b73769ab5b4c7c0cf6ab91d7beb44f
TLSH
T1FF41E998A6F91148B3B76F5AABF7B8AE447FB9772E06D49D10110E4F0922B40CC61733
MD5 SHA1 SHA512 TLSH

Submit Download