hxxp://merchant[.]758034126[.]sbs

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 22:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://merchant.758034126.sbs
Sample261001-15e25a1bpg

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4472	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{CB45BC53-14D2-4155-97E9-FBE4F12A84CB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3460	msedge.exe
3460	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe
2792	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 2792 wrote to memory of 764	2792	msedge.exe	86
PID 2792 wrote to memory of 4436	2792	msedge.exe	88
PID 2792 wrote to memory of 4472	2792	msedge.exe	87
PID 2792 wrote to memory of 4436	2792	msedge.exe	88
PID 2792 wrote to memory of 4436	2792	msedge.exe	88
PID 2792 wrote to memory of 3696	2792	msedge.exe	89
PID 2792 wrote to memory of 3696	2792	msedge.exe	89
PID 2792 wrote to memory of 1388	2792	msedge.exe	90
PID 2792 wrote to memory of 4748	2792	msedge.exe	91
PID 2792 wrote to memory of 1388	2792	msedge.exe	90
PID 2792 wrote to memory of 1388	2792	msedge.exe	90
PID 2792 wrote to memory of 4748	2792	msedge.exe	91
PID 2792 wrote to memory of 4748	2792	msedge.exe	91
PID 2792 wrote to memory of 696	2792	msedge.exe	92
PID 2792 wrote to memory of 1128	2792	msedge.exe	93
PID 2792 wrote to memory of 696	2792	msedge.exe	92
PID 2792 wrote to memory of 696	2792	msedge.exe	92
PID 2792 wrote to memory of 1128	2792	msedge.exe	93
PID 2792 wrote to memory of 1128	2792	msedge.exe	93
PID 2792 wrote to memory of 4476	2792	msedge.exe	97
PID 2792 wrote to memory of 4476	2792	msedge.exe	97
PID 2792 wrote to memory of 4476	2792	msedge.exe	97
PID 2792 wrote to memory of 4500	2792	msedge.exe	100
PID 2792 wrote to memory of 4500	2792	msedge.exe	100
PID 2792 wrote to memory of 2992	2792	msedge.exe	99
PID 2792 wrote to memory of 2992	2792	msedge.exe	99
PID 2792 wrote to memory of 2456	2792	msedge.exe	102
PID 2792 wrote to memory of 1176	2792	msedge.exe	116
PID 2792 wrote to memory of 4496	2792	msedge.exe	117
PID 2792 wrote to memory of 1948	2792	msedge.exe	118
PID 2792 wrote to memory of 2704	2792	msedge.exe	121
PID 2792 wrote to memory of 2704	2792	msedge.exe	121
PID 2792 wrote to memory of 2248	2792	msedge.exe	122
PID 2792 wrote to memory of 2248	2792	msedge.exe	122
PID 2792 wrote to memory of 3460	2792	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://merchant.758034126.sbs
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x284,0x7ff92f11c188,0x7ff92f11c194,0x7ff92f11c1a0
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,2483251242936468964,1788779422691179156,524288 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,14425814267815901043,14551198632796479657,262144 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:2
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,5117236562300529341,2251127943202103713,524288 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=3136 /prefetch:8
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,17440202103085862039,7591376508694879960,2097152 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,7823126951707533711,16829189012228458648,2097152 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,7235353640668933506,13489787239067189158,2097152 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,7727433130911815006,12700359566069391353,2097152 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5068,i,14081433500524682667,10489279707774753316,2097152 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,5701857152457082260,16870267913228631168,524288 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:8
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,4643692661322533733,9987692678179293145,524288 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,2883849958401035795,16601923767214105156,524288 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,2883849958401035795,16601923767214105156,524288 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,4580374395208576497,9133743967250211282,524288 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,15914562614832074740,4289149709743991751,524288 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,10333363127298229343,2591950570339987224,524288 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2152,i,10910876628726658543,11781039799776896986,524288 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,2511690084326525076,971901371014388521,524288 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:8
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6288,i,8979186423813941302,7374409349289680666,262144 --field-trial-handle=2796,i,8282728288030687528,10174250942890641180,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3460

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4768

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

10a4a67d-8da9-4429-8c99-c33684554621.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\10a4a67d-8da9-4429-8c99-c33684554621.tmp
Size 8KB
SHA256 4f2ff1fb99df9801a68e6c900c94957f3cac99ee332166e23d80a3d098da3436
MD5 8990633becfec7382cea4aeeb065b8b2
SHA1 05c7f2ad15940ebad52898e22579f010f004112c
SHA512 5839a49f91b5f4237ba993416bedf13f12963d90db63627d64efb946c8d8aa7fc45c473263229aee019fa79f8f6dd7b13a95f0d032d4f18e6c5e1e97b133e7ad
SSDEEP 192:SONL6iDCQmiUy3NHq5u88P7gOwSqnWeU6:SONL6/wHq5u8i7G5U6
TLSH
T1BE02F939AC783CABAEF3AD05B58737175F95112FE6842F84D9E8162C00D729C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22c75466-30c2-4fb9-a003-7e2d3c7e225f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\22c75466-30c2-4fb9-a003-7e2d3c7e225f.tmp
Size 18KB
SHA256 b97aaf474b3f8c34d5cf5515b69878514410142500e625e17eb5c0822c6bd756
MD5 b3d454b7c7cbd778a7c79d257b3ddd07
SHA1 0894bd21dff77396a88f2b15da923510c76de1ec
SHA512 8e3567318ba1662a367bd5e3a1ab2dfdd24450bed72634717ba3385a11629f423620824f50e1813e522edc648539d1d67cdc38be3fbec07a6f1365d6424a4faa
SSDEEP 384:qZcIhsNr31BBbPhp5u8i7NGotVZh6DKhH85pof:IhQdk7PtfYGH85pI
TLSH
T143827C366CB86C766CE7E546F9873A175EB88117D3C82F84C5ECA71D01EB2981307A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

63ecc967-c5bd-4b5c-af87-2cd17a5b0434.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\63ecc967-c5bd-4b5c-af87-2cd17a5b0434.tmp
Size 21KB
SHA256 7eca5df3c34c91826d93ad911b091a30da7debb16d01e1206267f27d436dabbc
MD5 687121a3af4ff502515769c69bd24d49
SHA1 990aae35877e306446b485aed9286e27c5f1ff78
SHA512 ab20f8bfd2cba92182aa572ceeaebb3ede25bf08cdeb943cc6cd481f63982961e402735426189a6115206e135a81df864031668424fe997a75de4ee070be290c
SSDEEP 384:WiFiZcIAzsN18TUNTUlIl31BBbPhp5u8i7NG3tVZh6DKhH85pof:9FQcUwg3dk7ytfYGH85pI
TLSH
T182A27C335CA8987BBDF7AA46F98B36138EB44157C6C5AF84D2DC961D00EB1D81307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b3efcf3-3ccf-4cbc-b972-ea381271563c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8b3efcf3-3ccf-4cbc-b972-ea381271563c.tmp
Size 8KB
SHA256 17096b69dc77776a427298e44457984b729024062ceaeccc9efd0e8b15c97cfc
MD5 22a1c32783881ddd61ee19ed403f8508
SHA1 83c6185846a3541c63a0f7550d2d7c207ba2da95
SHA512 5ebf966d92a70797db7a477aefa11b8aeb6d967a485615237244da438ca9d5e697385821732cfd10593b123d87bba6e4da87b130d4dc475dc3c730ae36550107
SSDEEP 192:SONG6iDkQmiUyRNTq5u88P7gOTzKLuZwq3U6:SONG6BwTq5u8i7NG2tU6
TLSH
T1CB12293A78787C6B6DE3A951B5C736175EA5421BEB887F84C5DC162C01EF29C130B623
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

08b88e67-03a8-4581-af38-4e7266630a7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\08b88e67-03a8-4581-af38-4e7266630a7a.tmp
Size 10KB
SHA256 3ebad2c1bdf7a01e5842877c6ceb6b1a683e4492c02242b540d5f51d51c1b3dd
MD5 42efbc930dbfd4867b84f290c8fa458e
SHA1 cb438dc0662359d020ec91c59f38e985ab59c4f5
SHA512 0a4b8e2c9ad0049cd755bc8a9f58e2998ecd215ca7478c45b8e7ff77d6872154b82bca34f3ae90a408a5ae9c08fb2136265c7254dfce3c9e5806a585c347b56a
SSDEEP 192:sxZARFWZ/fAsY7sIdp/FHW6+WNQmE/YaoPeIg59J:sxZA2Z/fAsY71tHb+//5
TLSH
T1E422C7516E28697B8CC7D209BB56BF53E2F9503291911E48EAFC9A1C04E6ACD130781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12f42d53-f700-498f-b2b8-e1a39545e6a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\12f42d53-f700-498f-b2b8-e1a39545e6a6.tmp
Size 10KB
SHA256 ec6d6aea351d596fdadd1f0a3bd533cacef70e5b2678e163d4d755f3ff488a44
MD5 c0482eb0f5a512eee583e5b779b410a2
SHA1 dea503a5c3cdb34cd7704a5e9d2b95da72b8bc34
SHA512 05bbedb1391251df6bcb0e4ab93086bc8ac3e6ea0a89cb80e9a891fb6f4603f0e65e3de9c495b5e3e85049020bc965cdb3bf3cccb249f1407758db26c4390fff
SSDEEP 192:sxZARFWZ/fAsM7sIdpJFHW6+WNQmE/YaePeIg5fJ:sxZA2Z/fAsM71bHb+/pH
TLSH
T1AA22B751AE28A97B8CC7D219BB55BF53E6F9103291D11E48EAFC961C04E6ACD230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32875b2b-431a-4cc0-94c0-8c6b17dd9b86.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\32875b2b-431a-4cc0-94c0-8c6b17dd9b86.tmp
Size 27KB
SHA256 15b8e27d88162603857dfc0417b650994b496afea800e958aa99897bd4311e8a
MD5 d6a89c69af8a2fd997248c6c406874df
SHA1 1f117707b75130e03885096774fc4beb5539d34a
SHA512 38ab9ce8b827e4dbe096b2bf1be6a44e62a7eef89ec34f69cd8f3427e4436e5c93e7dd510c45e8fe576c0fa9f171b99fbfbe8319dac15db7f706ca2bca4cab0d
SSDEEP 768:iHyQRbrWvvlRZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3proKZwA:iHyQRbrWvvlRZu1jaXKLf33CKZwA
TLSH
T1C5C2EA3B640CCB7E4FC01E9DDC666F976EA802C766688D4447FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

82039d6c-8ef5-4a7d-9b22-d9c45698f74c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\82039d6c-8ef5-4a7d-9b22-d9c45698f74c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9678dfec-1f24-48f4-91f8-d2f4526150cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9678dfec-1f24-48f4-91f8-d2f4526150cc.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 6f67bc51cd65e6ce19113eebbc598dc4fa3ca1670ed2ec26f4397483db4ee4ad
MD5 310ce405a999e5e491057712e90d3129
SHA1 aa9decb16da91324af42e6cf66c982ffff02c640
SHA512 28ba1a50d145cae032deae51322dbad4bfd2e6cfd6666a4c3b4208be1025464c0aa8c0206d145b3f3904256635a47c2975a27298d9d533ccdd0d9614e49bb4f1
TLSH
T10DE026E464CAC32EB358B6879278D70CC381375B93C06A0E1B08C98974460C4A3C27B0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 69e1077e347847fdbdeca305da9bfd86ed64f2364615fc78e9ae54de459c151f
MD5 70efc369ec2cefea7a1474a51e00fb7e
SHA1 80a672bdffe8246667f1f35cc5d55ca8cbd9cd66
SHA512 7eb95a33509230219367400d5dbd70539d23280954f452839f79e197fb927e1229fd33d023112ae2b32d47a884e0283068632636deaf199ef8a80e8e529639b3
TLSH
T140619485F7C05411FB580E728DDDD69B3335628F598B2E9230A4D4F9D886B552C27DCC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6d3866cae34f21887926087fa207b06b6ebdecd043bd2afb325c06a8a4d73fe1
MD5 b3960722d0fdb02b6d229247fb088e17
SHA1 00ee1118cdf4304fb6401b9f351bbe72bf591fc1
SHA512 6dc8a4df8f6a690333a9b2df398433d404fe07e3437c26d4b9c0ed75948f856025aeef4adfcabbb538baeb54976a0c17abe7bf1d1885448fc35e0f1b057ea1bb
TLSH
T1CB619184F7C00050FB580E728DDD969B3339628F598B2E9330A8C8F9D886B512C27DCC
MD5 SHA1 SHA512 TLSH

Submit Download

d3044003-db2a-41ec-ad07-67000bea57b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d3044003-db2a-41ec-ad07-67000bea57b6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4d245323-6d56-468d-9f3b-8e7d12f357ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4d245323-6d56-468d-9f3b-8e7d12f357ab.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

56ff7324-def6-46ec-8d81-5cd553ce22e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\56ff7324-def6-46ec-8d81-5cd553ce22e8.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

764c47ad-b3d2-4a82-bc69-cf2cbf391581.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\764c47ad-b3d2-4a82-bc69-cf2cbf391581.tmp
Size 1KB
SHA256 1c7c93f0069334cf47bb04d218a33005e24a87f3b8fae5e2111cd51ef4084019
MD5 1ed5509b0cc119f62d685aa7e68dccf7
SHA1 ed4986197dd63a9d6dd4eff87d50354b5b196c9c
SHA512 d429bb9e3230ab86b693c4d1d0eb757a402bff416d933cf8dddd7654ab4f999d29dbf88a272565902dd0b3915d01670dfaec61faafd9babe84340853ab1ff83d
TLSH
T1823180B3C7D88A9ED90116F09B28BE2BCE5D091942283C19DDD5EF6BA3E3471E50164F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 edd6952fff5833bad40769207d5451c01002f9567e20037cd6d2763a80b0d106
MD5 7c9fb67fe83763ee5c648bb420af0520
SHA1 73534161319187177833b6a185f94226437eb869
SHA512 90d889d06e61a40052f3a7e5e2014fcf6004ed561a2558e33d91bcc39674ec9a5a7bc0cfcbec567969b86c584ba97696406ff8b6a2396a3f86eaa00342755f73
SSDEEP 192:sxZARFWZ/fAsc7sIdpJFHW6+WNQmE/YaePeIgrJ:sxZA2Z/fAsc71bHb+/p9
TLSH
T18222B7516E28A97B8CC7D219BB56BF53E6FD103291D11E48EAFC961C04E6ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a5ffce3142d1601fc5a9c51b5127e5a5c520b8d939b0cfc865a86ed53c80ac20
MD5 d36d66b63225e9e474312026ab1229a7
SHA1 cbd184b83f23a8a1a643d08400cafb281fba40ea
SHA512 64a2e838aa292bacf509965cf1910bf71bdf590dc2ce697ff7eb58dbfb53a2e5062fb528822690cd93e356c42d7054ef660b12553bf27fa73b9c358fab9cf01c
SSDEEP 48:K0kTSeMOirbShaIS2rK9S1grxk7YpKiYyLs5sIsVspszs3sLskbs3sSsPISsBskx:K4DyKI4iuRiKKI5/6KAced
TLSH
T15C91699271A74200387D294C4164A6BA4A8276F73424EE6FBFBC40F2DD6EE144EFD4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dcb1bb46-171d-4b7a-a6e5-ac35a943f596.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dcb1bb46-171d-4b7a-a6e5-ac35a943f596.tmp
Size 10KB
SHA256 009bad27faa17c4c7057a67efd9055066cb06e496e851afd0c4dbc1606702275
MD5 2e9271fd8461a0d60788b6a201e7df66
SHA1 c7762ebf6910eabc45d8581c75f09729ac9237e5
SHA512 1220727c08640ebf6e6f5d7dbfb4a0edb5b830c1efcff843d045ef3e5269d7f5cffa02777c3e38e8c0b94769a7f0367ff40401741c03f8c51dd130d1576e3ccc
SSDEEP 192:sxZARFWZ/fAsY7sIdpJFHW6+WNQmE/YaPPeIg59J:sxZA2Z/fAsY71bHb+/+5
TLSH
T17822C8516E28697B8CC7D209BB55BF53E6F95032D1D11E48EAFC9A1C04E6ACD230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3987a368-8f3f-4ffd-95ad-88d2a360d30b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3987a368-8f3f-4ffd-95ad-88d2a360d30b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a25a2eb2-9b41-4769-8f57-ca1101d3b3b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a25a2eb2-9b41-4769-8f57-ca1101d3b3b9.tmp
Size 18KB
SHA256 4f3bd1ad16b5f2292a6aae1a5f8fb2e6840a33d2403cad0882c65fb693c36783
MD5 d0b7a668839797948ac140b412a7c35c
SHA1 f00ed8d705bdc0cb5967289a741979fef98959db
SHA512 74955f7ddc7598ec4e7348ae00dfeb05ee3923f6855083f246fd6215734bcd6d55dd33e867c9a4fdcf72519095d4afd4443335205aad6c997026f37eaa1a09a9
SSDEEP 384:/ZcIhsNrK1BBbPhp5u8i7NGotVZh6DKhH85pof:XhLdk7PtfYGH85pI
TLSH
T154827B366CB86C766CE7E546F9873A174EB88117E3C86F84C5DCA71D01EB2981307A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b60402ee-12b8-400e-8d5a-617ea4391234.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b60402ee-12b8-400e-8d5a-617ea4391234.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 97f2a7505c60cb154fd4d56cfdcdfbff3acb5413f4c2ff5f3c3b3f45c131dbc0
MD5 ed0c67058600bae495465e095351b05b
SHA1 c6b1a75e07d48c3f6371efcd616e84848104a1b6
SHA512 98d29dca2369088f4e0f5b1fc2cf268dec0d8b0712483726bbe56b5b5a110753db677644e6921692bd7909fa096e7c0e38e67e070356d10e147bfe87f749d74f
TLSH
T19A41E658A6F91148B3B76F59AFF6996D847EBC772E06D45E00010D8F0A62B40C8B1777
MD5 SHA1 SHA512 TLSH

Submit Download