hxxp://administracantabria[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 08:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://administracantabria.com
Sample261002-km5basec22

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
396	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{F6443993-C8D8-4B17-A0AC-6CC8FA74A7FE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe
4656	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4656 wrote to memory of 4872	4656	msedge.exe	87
PID 4656 wrote to memory of 396	4656	msedge.exe	88
PID 4656 wrote to memory of 4376	4656	msedge.exe	89
PID 4656 wrote to memory of 456	4656	msedge.exe	90
PID 4656 wrote to memory of 4376	4656	msedge.exe	89
PID 4656 wrote to memory of 4376	4656	msedge.exe	89
PID 4656 wrote to memory of 456	4656	msedge.exe	90
PID 4656 wrote to memory of 4208	4656	msedge.exe	91
PID 4656 wrote to memory of 4608	4656	msedge.exe	92
PID 4656 wrote to memory of 4208	4656	msedge.exe	91
PID 4656 wrote to memory of 4208	4656	msedge.exe	91
PID 4656 wrote to memory of 4608	4656	msedge.exe	92
PID 4656 wrote to memory of 4608	4656	msedge.exe	92
PID 4656 wrote to memory of 5100	4656	msedge.exe	94
PID 4656 wrote to memory of 5100	4656	msedge.exe	94
PID 4656 wrote to memory of 5100	4656	msedge.exe	94
PID 4656 wrote to memory of 1244	4656	msedge.exe	95
PID 4656 wrote to memory of 1244	4656	msedge.exe	95
PID 4656 wrote to memory of 1244	4656	msedge.exe	95
PID 4656 wrote to memory of 3052	4656	msedge.exe	98
PID 4656 wrote to memory of 3052	4656	msedge.exe	98
PID 4656 wrote to memory of 3052	4656	msedge.exe	98
PID 4656 wrote to memory of 5020	4656	msedge.exe	100
PID 4656 wrote to memory of 4488	4656	msedge.exe	101
PID 4656 wrote to memory of 5020	4656	msedge.exe	100
PID 4656 wrote to memory of 4488	4656	msedge.exe	101
PID 4656 wrote to memory of 2992	4656	msedge.exe	104
PID 4656 wrote to memory of 992	4656	msedge.exe	115
PID 4656 wrote to memory of 900	4656	msedge.exe	116
PID 4656 wrote to memory of 3968	4656	msedge.exe	117
PID 4656 wrote to memory of 876	4656	msedge.exe	126
PID 4656 wrote to memory of 876	4656	msedge.exe	126
PID 4656 wrote to memory of 1400	4656	msedge.exe	127
PID 4656 wrote to memory of 1400	4656	msedge.exe	127
PID 4656 wrote to memory of 1148	4656	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://administracantabria.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x21c,0x264,0x7ffbe641c188,0x7ffbe641c194,0x7ffbe641c1a0
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,17428183024286555736,2073431446967540833,524288 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:3
  2⤵
  - System Time Discovery
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,17784575557431777799,13185606038437048584,262144 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:2
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,18364896443020365389,16989153738342342491,524288 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:8
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,12405772923325210072,3579541376756933907,2097152 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,11050887428312217827,12698235429116551428,2097152 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,12837564847857563880,2320043859255623021,2097152 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,11372055390630148210,4510584538103975108,2097152 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3608,i,5165935217524199071,17356883149144057925,2097152 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,14983876341036840539,12941286099270837305,524288 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,12906695552837205495,8340898981010980566,524288 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,9663755417984535523,181606546822825301,524288 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,9663755417984535523,181606546822825301,524288 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:8
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,5659552012717030472,16438193134972955000,524288 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,4340849350742059480,9455683080958144345,524288 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,1418399336989063716,9140210499748450989,524288 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,8733563300939679284,494894694396186631,524288 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,15579762456015098894,6492898335059007337,524288 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2600,i,18030527191234618627,6274330610758994737,262144 --field-trial-handle=2880,i,10879592047565515784,4876505955865761854,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1148

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3060

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0f544a48-d660-448c-a7c9-ee5383be22a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0f544a48-d660-448c-a7c9-ee5383be22a0.tmp
Size 8KB
SHA256 f367936e35d444f07c82c633669541df36f1512489cd7542ee311074f550872d
MD5 edbe58590415c3c3fb162f8bdbf1c0c3
SHA1 db04a64e396d4545cecafa411096a7d34d84dc85
SHA512 2d7c0d24763a428edb38417d6fda072c99488c1ae45cd116786457a74b0fe8601bedb4137cd519677e5bd287f400b9ccbcda644dce71f3ac52deabd51d7c5784
SSDEEP 192:LONt6AmwptQmiUyoMysiX5FXmEVr60lRnqxU6:LONt6iprWysiX5FDVKU6
TLSH
T174121936A878AC3F4DD2A951F04735035EA8526BDB897F84C5DC272C06EB298470B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f42dc5a-f388-4545-a65f-f68be2000b7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1f42dc5a-f388-4545-a65f-f68be2000b7d.tmp
Size 18KB
SHA256 a0c556d8a000eb5ebc371b9da7fd47caa7d9f9fbcc7389199a29e8b25c120a99
MD5 1c755ad83f06aeb119a6c8e96c047763
SHA1 d8bba1d139291ec8456d05c85c772b0f8daf8ac4
SHA512 ffa5896cc5a9b504ca3fff3633b427a4988d8a5118601b4e45b64a12a281c76fa75ffb43f0feb77ce29201555d9657965ece347f26a87b6cec3ca1c9569ea378
SSDEEP 384:bZcIhsNMEu/MDHpuvTm9iX5FDSKtgOIwZOyTo6ox:DhVkb6SaKKXsR6a
TLSH
T1C6827D32AC786C7F59E7E145F14B36035FB84567E789AF84C8EDA72D02DA1E4030B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6c9f0366-2ef7-438d-990a-edd16897c8d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6c9f0366-2ef7-438d-990a-edd16897c8d7.tmp
Size 18KB
SHA256 445a9c6ad3760ff00e261b8a870a639a01f80ee6b2d77e09b077c4b20ff70a33
MD5 ad8d35d5e3eedf532b3b3d7777774feb
SHA1 7efcd74b95690d85ead3923197368175c15364a6
SHA512 849d15ca03c305a0e7d68a58b54c3feae87ab92274c61eee91e7db5b24b2fd361ae0360ea25c5b5c0686d2ed485ff5ef23f44f2c630bab1e3c6d1b0beebab2d7
SSDEEP 384:bZcIhsNM1u/MDHpuvTm9iX5FDSKtgOIwZOyTo6ox:DhAkb6SaKKXsR6a
TLSH
T1AD828D32A8786C7F59E7E145F14B36035FB84567E7C9AF94C8EDA72D02DA1E4030B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

0aa91902-a9da-4eb8-9846-a6b302c1f83e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0aa91902-a9da-4eb8-9846-a6b302c1f83e.tmp
Size 27KB
SHA256 c8f92805f4ba75377ac20529f761b4e6789c3daa93cff987f112fdf79fdf03c1
MD5 25bb704b2307d12d3957e806661b26a4
SHA1 516da2bccaa7546ffa27c7290d9d3a45a1318852
SHA512 32fa4937045a316dad4be9d997f066c82f96e7e1be6167430047f51acb842037b4af825c4987139db0d338232b68603bdf2cffaacf85d3dae7688448d03d3d91
SSDEEP 768:rJ30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72grolZMa:rJ30AbSWvS2l9u1jaLmLZ12rR
TLSH
T11AC2DA3B640CCB7E4FC05A9DDC6AAF9B6E9802C796648D4047FA944C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

292105d6-6b07-45f7-964c-06eb5c865db3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\292105d6-6b07-45f7-964c-06eb5c865db3.tmp
Size 10KB
SHA256 08956b973c270cea3759d61739677e49186d1540963a33a7297e8722e94058b5
MD5 f9b301207a1d5998a5d6395eaf716fce
SHA1 583f708003525657d3366e8043444cd1f1879c33
SHA512 129728e0b63ee6179f91a45c30bb4319386cd4adef9d76c3d3292b29e898e8bfcd2ad9094ef52c84d9da0ac32581fe5a89d0cc1cacd15aeeb022a756c2684135
SSDEEP 192:sxZsRgWi/f3s6VIdpzyHW6+WNIU0/Y3t3QIg5nBJ:sxZsJi/f3s6mWHbQ/VpL
TLSH
T16022B6127E38A57B8CCAE21ABA15BF13E6F9503291D51E58E6FC862C05E67DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f967fc7-9122-4e63-b0c4-7ddf9f9bc658.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5f967fc7-9122-4e63-b0c4-7ddf9f9bc658.tmp
Size 10KB
SHA256 18913d96664c0b8233f390caf95ed3480a447ca489e0f42d282bacd12e65d8b5
MD5 26f03af4a530c61b80df7d844dbbd8d3
SHA1 646ba339467db2450c5f40add9d28186a1f1b0bd
SHA512 838d204152663c850f0f0368fa75f8b16ce091dc7dbfd7ae92a8da9a61716f94e28eb8abc1fbc01325b1efcc690bf1b52184905cc48bc95df96dc4ede97fa13d
SSDEEP 192:sxZsRgWi/f3sSVIdp5yHW6+WNIU0/Y3s3QIg5pBJ:sxZsJi/f3sSmAHbQ/2fL
TLSH
T1B022B7127E38A97B8CCBE21DBA15BF53E6F9503291911E58E6FC8A2C05E67DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 7d1cff09ef883fc87584aedab1f8db1265c59b6ad51c2a5c941a870a10796e28
MD5 213c5452321e2295a4302fc618de3203
SHA1 2c8ae93e39a664646b935b7d8d53b46836ba877c
SHA512 17334b8c3225c66f33a933755f230161eb0c5ac38e7976680fe7b85737e8e2e4a5c3a4688d5273a4476b35611e17616a613e90640a3bababc4294b5bde1fbdff
TLSH
T100E026F846CCC22EE22C645701EC534C8FE1361F96C06A1E6704C5887A05444A2C6AA0
MD5 SHA1 SHA512 TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 18KB
SHA256 fbd4d7d7e4e4b9a21f30b8ee80e6816cb0657ced46b5175476d1db9a8fe9b7b9
MD5 467d33c7a19451bed7b8be3143fb92d8
SHA1 1f14f8d403620b5fc1b8de3d37451a35b65fb1ed
SHA512 fde95c7a7e7c3b6aeab88eb405141caea791f71c8f5385d87cf2837a65082517a5c477f87a878827d8ab30724be5b824b68b97267fcb6c034115dac184034872
SSDEEP 384:G+ER7aLeATxpVJvs80+ne4JjnWwZG7YYtSeVkZtYvPljdFr03IopFBpslnR7:G+KOaALVuv4JjnzsYY0KkqlH03xQlnR7
TLSH
T1DE82E023F0A25725CEC29304573694FE38D8E7977E26F1F5A5DB0B5061887898ECCE91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 29KB
SHA256 521f1aa84dacf998911e1874ece5d240f4d2cbd71fb7d6eb3ef9b805b2a91aee
MD5 506765c5708d241a89dfe7b139731e42
SHA1 150e865914568a0f2deca646fb2670b210435563
SHA512 04d0a03bda24792c584be4c87fc35c5877f832356335cb399448ecb6a5171daaee2f5c6d2f3ca41fab87f4d41831aa3dd843bdfdbe6d4eb39db6bc58541aae7b
SSDEEP 768:dF7gRXy0duCQup2NvVlLVDk7JVGwpDbse44S:7gRXjuUyVs/tpHse44S
TLSH
T104D2F1525B6F909528CC8FC584D04A5460A8C361EF2FDB5BCABBF95CCF6CF056A2642C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 2fad21966b82f84574d61a475303b316a0cdb46c0c674f897e16b4648d34096e
MD5 f42de8a43ae6f71d5d4900a610100eff
SHA1 80d3a1e32ce0aa21fd234e7fd0f29cd21d7ec10c
SHA512 6ab26aa3e9091414a21f119749245ebb9bb755f332af4d924bfe4c346417bfc7748b496f0054c228d294b2dc81cf7ebc3e7ebf9cc337521f1bf0be5815321480
TLSH
T15271955AA4404851FF7F817D66902BDAB63D71B03D432E131FA3D9BD7C063A488582AF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 895b85851e9c5d2f993985fdaab068303217ef0889de988bf00743614117beb1
MD5 4d397f585d5ca0b879debab6931068e9
SHA1 466c9ca78ff7b05089350db886ab3f4e3f349bd3
SHA512 5531c0d47d3a55e5c50c34172ffecd99f80cf800217d4a018269f40009f2083009057a1d542a14d81bcc08a21dedf1d9f1a9b117e0d5da875420aece802f70ed
TLSH
T17A61518AA8004861FF7F4279A6D4328FB63C95A03D431D032E73DDBE6C06724891C26F
MD5 SHA1 SHA512 TLSH

Submit Download

f7335ac8-1687-44d4-9acd-77b5d9ddfabc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f7335ac8-1687-44d4-9acd-77b5d9ddfabc.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

0ce2ff4c-5854-4d13-9183-f63438b58859.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0ce2ff4c-5854-4d13-9183-f63438b58859.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

8ec7e41e-4744-4d55-bc15-d24a0688a6eb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8ec7e41e-4744-4d55-bc15-d24a0688a6eb.tmp
Size 1KB
SHA256 18027a78a38e7e9256139165e0aef27c7165155fb2be2ce2e90c2500870e83fb
MD5 9ee5e9c7bdf521bfcb21e937160ed167
SHA1 88414f0a494991d0a6d0dc12f639ec3c3d858161
SHA512 e9f9578675b8c7953350aaccd73132c454c2199763a1ff0bf5cdf34042d695d0e9e7339c9cff8222e2057e5b6cc2658163fbabd026c904376bd3982d502b4a80
TLSH
T12E21CAB3C3E8866DCD0146F46A24BE1BCE2D0A1553287C1D9AE4AF2B93E2532D11195F
MD5 SHA1 SHA512 TLSH

Submit Download

c24137f5-5d31-419d-abb5-2457581e962b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c24137f5-5d31-419d-abb5-2457581e962b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 3e7ff98fc1dfc3f6cb31e6cee8de49bf867709bac29f61ebccb606c9779d7b10
MD5 fdd3f2676a699cceaf96bdd807f052d5
SHA1 c54e78822cad8ff9f48878efccaebac011f9060d
SHA512 940ed1282b1591307ffbf0d36b3dadd1bc74052ae24628f4e11d6ed42d740322d40d38a6e017c4d6c881af449ad59224bc3b67c9b8e19f5f319a5980715989d9
TLSH
T116119D60373AC1102ABD362C51D8F417667730B53624F66FB6A9A1660DEAEA08DBC4CD
MD5 SHA1 SHA512 TLSH

Submit Download

ccfec6c8-ecec-405c-9dc6-a4dce28db31a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ccfec6c8-ecec-405c-9dc6-a4dce28db31a.tmp
Size 9KB
SHA256 d689a08ad324a1b7e9a4c778365b5d653b55d98ff615f533622e102d5a1f44ae
MD5 ff2eb32454eb1a45d892ae1c505d7356
SHA1 ae04ede4e6bd109cf0d4f74d40c167b8b7f0dbfd
SHA512 543161029bce3a5f6a2277950b4014963219edc61c7a270a3ac63e54cda77406b4b5c57ad7ad283573a7702cb802d6b8b2c128222a2e423de1ba8079b28d67b2
SSDEEP 192:sxZsRgWi/f3smVIdpzyHW6+WNIU0/Y3t3QIgUBJ:sxZsJi/f3smmWHbQ/VUL
TLSH
T17422B7127E38A57B8CCBE219BA15BF13E6F9503291D51E58E6FC862C05E67DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d27ecd9e-df1f-4a69-8e69-fd83c0edde7e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d27ecd9e-df1f-4a69-8e69-fd83c0edde7e.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3a528b7-605a-4aa7-a2b0-03d56eddb0df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d3a528b7-605a-4aa7-a2b0-03d56eddb0df.tmp
Size 10KB
SHA256 9a74143c9e4b67fa73a1cf3b82fe27b9e71aa4e914010e9a06ca5f9b89872218
MD5 272859c690f2c97aa27ee9da911203dd
SHA1 be54817212ac82bc04ab27a9840ec07f910395c0
SHA512 be5685dc4e77b5a1b735f1dc3fc2d9c91bbdedc0b65443d3eba6a3ae6a274989c7cac5f6f9d03cb3f37dee83143e2d14034ca70bd2baeca3772ce63f95cd127e
SSDEEP 192:sxZsRgWi/f3sSVIdpzyHW6+WNIU0/Y3e3QIg5pBJ:sxZsJi/f3sSmWHbQ/CfL
TLSH
T1F222B7127E38A97B8CCBE209BA15BF53E6F9503291D51E58E6FC8A2C05E67CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6eb0c7ee-e4ec-47e3-9f0e-97246a892066.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6eb0c7ee-e4ec-47e3-9f0e-97246a892066.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

b05101dc-09fa-49d6-971e-799da64e8d9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b05101dc-09fa-49d6-971e-799da64e8d9c.tmp
Size 26KB
SHA256 d96a4b646d7967be94a936755a4444dd55c5f4198996e56f0d2300cdb5810602
MD5 ace9612115855e0ea0b5e89b8a59c293
SHA1 badff01624f38453c305fdb29fd0fd854eff0d21
SHA512 2019b743de87e1669e9dc100b1c8407c11751810456422b428d54e8791a9ca35a14f223ce5ca3431c2ad55b25475e1d2386c653bd6d5a2d2b831104c2680f165
SSDEEP 384:HiFiZcITzsNE8TUNTUlIl1u/MDHpuvym9iX5FD/KtgOIwZOyTo6ox:CFQ31wgikbXSaXKXsR6a
TLSH
T1BAC229F258D7887AD9AE9703B33E3E034E7CC167B6859A44B798561CCD961BFC30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c82a70d7-fc3b-4322-b5a1-65c21837dacb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c82a70d7-fc3b-4322-b5a1-65c21837dacb.tmp
Size 8KB
SHA256 2c846487307c56559e6170c2b6f582f9978537728ed0264cb85249c89581da90
MD5 7c99698627a38e4df8da1aad2da52f54
SHA1 65289ff61471846a4e2919dc8554ee8272c974bc
SHA512 3ea81387162042c952774fdcedd6342abaa039e5d6ad112597e33e9faa2148e385c82ac511c90412a50866061ad89c22d2b81d285fb417a322994916fd52d77b
SSDEEP 192:LONa6AmwprQmiUyoM6siX5FXmEPJibcU6:LONa6ipdM6siX5FKQU6
TLSH
T13D02FA35BC687C7B8DF2AE05B1477B13AFA9116BD7942F84CAE4172C01D769C1307426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d301018-5625-4a0a-86b9-acc5592748d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9d301018-5625-4a0a-86b9-acc5592748d1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 65f26f6bb922e7d3326f9b2cbed23b8fd91e764bc1accb61dbc55e9677ed1a3b
MD5 5ded6fd252bb5a8b211b43372aae2441
SHA1 d7b5f6b9aad927e3dcf8a7c02fb42f0a1f619de8
SHA512 67c3e47a76bae745e801a5c4c044c7303248cb4c8a49d80d598fcb61a85452ce65a1bfa512e7fa70dac5e8b994fe8f5b010990f83790f65582405126544a779d
TLSH
T1F3411758A6E92148B3B77E5AABF6A87E487B78772E07C45D00010D4F0A67A41C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download