hxxps://ebn[.]mcdvmgmt[.]com/PPioCCvsvlBUa

Analysis

user interaction
yes
max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 10:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://ebn.mcdvmgmt.com/PPioCCvsvlBUa
Sample261002-macfvsxs2k

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4904	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{62E55B74-22BC-4BAC-A92F-CB2C91A9DB01}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
680	msedge.exe
680	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 1156 wrote to memory of 5116	1156	msedge.exe	87
PID 1156 wrote to memory of 4904	1156	msedge.exe	89
PID 1156 wrote to memory of 2848	1156	msedge.exe	90
PID 1156 wrote to memory of 2848	1156	msedge.exe	90
PID 1156 wrote to memory of 2848	1156	msedge.exe	90
PID 1156 wrote to memory of 4928	1156	msedge.exe	91
PID 1156 wrote to memory of 4928	1156	msedge.exe	91
PID 1156 wrote to memory of 1660	1156	msedge.exe	93
PID 1156 wrote to memory of 1660	1156	msedge.exe	93
PID 1156 wrote to memory of 1660	1156	msedge.exe	93
PID 1156 wrote to memory of 4176	1156	msedge.exe	94
PID 1156 wrote to memory of 4176	1156	msedge.exe	94
PID 1156 wrote to memory of 4176	1156	msedge.exe	94
PID 1156 wrote to memory of 116	1156	msedge.exe	95
PID 1156 wrote to memory of 116	1156	msedge.exe	95
PID 1156 wrote to memory of 116	1156	msedge.exe	95
PID 1156 wrote to memory of 212	1156	msedge.exe	96
PID 1156 wrote to memory of 212	1156	msedge.exe	96
PID 1156 wrote to memory of 212	1156	msedge.exe	96
PID 1156 wrote to memory of 1844	1156	msedge.exe	100
PID 1156 wrote to memory of 1844	1156	msedge.exe	100
PID 1156 wrote to memory of 1844	1156	msedge.exe	100
PID 1156 wrote to memory of 5096	1156	msedge.exe	101
PID 1156 wrote to memory of 5096	1156	msedge.exe	101
PID 1156 wrote to memory of 5096	1156	msedge.exe	101
PID 1156 wrote to memory of 3096	1156	msedge.exe	104
PID 1156 wrote to memory of 3096	1156	msedge.exe	104
PID 1156 wrote to memory of 3872	1156	msedge.exe	103
PID 1156 wrote to memory of 3872	1156	msedge.exe	103
PID 1156 wrote to memory of 2952	1156	msedge.exe	106
PID 1156 wrote to memory of 4352	1156	msedge.exe	115
PID 1156 wrote to memory of 3380	1156	msedge.exe	116
PID 1156 wrote to memory of 2768	1156	msedge.exe	117
PID 1156 wrote to memory of 2292	1156	msedge.exe	126
PID 1156 wrote to memory of 2292	1156	msedge.exe	126
PID 1156 wrote to memory of 680	1156	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://ebn.mcdvmgmt.com/PPioCCvsvlBUa
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb680cc188,0x7ffb680cc194,0x7ffb680cc1a0
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,4348669630545756172,3137486010684464092,524288 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,6584146122476806678,16700192318019023197,262144 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,10646099131596281448,8571774072859837724,524288 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,3477008922087582009,7574874462244797907,2097152 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,7556003279012968696,4230095108515679112,2097152 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,6674931609472861402,9808682932803493110,2097152 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,2423136485431746294,7469518436475846104,2097152 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:2
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5072,i,12392914742143314787,8468910532227547633,2097152 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4948,i,8102080638497379191,17573869121894782175,2097152 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3536,i,9940244109142219315,2035112112973091989,524288 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3524,i,7607692852014326840,6219238932069870148,524288 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:8
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,10991269419306238612,10946157074506875973,524288 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,10991269419306238612,10946157074506875973,524288 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4920,i,7771625032562001261,14982703553452944460,524288 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,11680693338497132329,18056792207232164196,524288 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,17702399824020338676,6944365111136900332,524288 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,3630547534116542799,4159445825354089764,524288 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:8
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6104,i,16123389025859400472,5641502599294463289,262144 --field-trial-handle=2292,i,11488123127055405460,1025527525185496830,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:680

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2d6b8839-7f17-4aca-9e12-dc366f81fadf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2d6b8839-7f17-4aca-9e12-dc366f81fadf.tmp
Size 21KB
SHA256 5662dac84561aee0518bf09d1964f0fd35f99442baec9738cda1919783582870
MD5 930157b727109afce216f5d291665060
SHA1 92e05fef241f68b8d347e96693d40f1a460fcb1d
SHA512 a9cff1a0a77846de24b27947ca5ce01f6d8e4af16e67aee3aaf887256e29f4d0ea6b906f00fe52a4f3324e1b3e7c10bc09880c696a8c3b90249baaa2a0cd678a
SSDEEP 384:9iFiZcIfzsNg8TUNTUlIlHZLwZy4JHX58Ek8TJrXtS0tgOIwZOy8kog:0FQbVwgvwVdack0Xs+L
TLSH
T1B4A27D3389A8DD7FADFB9645F58A32039FB54067D6C5AB90E7EC4A2C019A19C030FD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3bef7d00-146e-47d2-90c9-f27bb1bd0eaf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3bef7d00-146e-47d2-90c9-f27bb1bd0eaf.tmp
Size 18KB
SHA256 4fec834b6732a7336831323e8c0fa2e5125cc4cb903992c95aae4d46853d7fb1
MD5 ceaf978544a2ead45797937e068b2638
SHA1 42a75f5d9869a1f785ba5696ea4064e81aa49dde
SHA512 4bc7192f1be9760f3a371a61686702ee5c66bc22fcfb2681d49bf38be3cafff33852899a56100f4499a3ec6c22f067725a4be1539eb544d754eb1eccfe3f854a
SSDEEP 384:4ZcIhsNgGZLwZy4JHX58Ek8TJrXtp0tgOIwZOy8kog:GhewVdacD0Xs+L
TLSH
T193827C3299B8AD7B59FBA145F18632036FB58027E6C96F84D6FC5B2D01DA298030FD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

540ab682-8dcb-4724-8f82-f9f7cef1ce42.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\540ab682-8dcb-4724-8f82-f9f7cef1ce42.tmp
Size 8KB
SHA256 cb549ed22f5ef59c083175371ed806a8d71d2d4d619a5e1b893d035af074e6ff
MD5 173899fbabec1d0fd7f299d4d0276be1
SHA1 09d4522cb0fe714f73ff19d7152d9f7742e5c85f
SHA512 016e1c2e3fe91033f15cfdc22e6004c342b8f4962884f248257f7b4581591a606f3db9ee87672a8825ec30c5727d6d07d1438961d733f1af1bb21000ea8b3b68
SSDEEP 192:1ONx6wlDAQmiUyeRsr4X58gZ0jzorTJrXHNaveHq7U6:1ONx6kAwr4X58Ek8TJrXtt0U6
TLSH
T12A121936E5B8BC6B5DE2A545B08636036FE54127DA8A7F90D6EC1B2C01EF25C530EC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91653203-5dd2-459e-85b2-afc581798282.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\91653203-5dd2-459e-85b2-afc581798282.tmp
Size 8KB
SHA256 fe0ac88a3301cb7b2a66c98d82b47be0d94cfba98667f01aefad150b7175396d
MD5 4fd59e9173c1ca55db840510df992130
SHA1 51697f7eaab83ec41b13b3576a7934c13927ed5c
SHA512 ed2b1b1d394fc7566ac77de23ee676ed9ea81146ded94234ba650e7c9c8b5a23b7eb965048dac3b13b3a4fda962def14c0d47ebb48aea06c9aa1a724ed8537a6
SSDEEP 192:1ONE6wlDgQmiUyksW4X58gZ0jzorTJfDlYjU6:1ONE6kgUW4X58Ek8TJJiU6
TLSH
T11602E935E9687C6B8EF2AE09F48737139FE5116BD6952F44CAE81B2D00D765C230A933
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9bb00692-e729-4f9d-ad49-e94e29122bb3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9bb00692-e729-4f9d-ad49-e94e29122bb3.tmp
Size 18KB
SHA256 3af086413cae8339c3adf5a55f34586cfd849049f597e9bb01747b737d19edf1
MD5 2a264aa51bdee556076f0b11487475c6
SHA1 55d9fa48b4226b2b472a03dc3ca5cd6c5cc16c00
SHA512 11f5bb7c2e2fbe70ece6776d66e7c9ba91ea03685c0492aef628937dd9d18f5f221cd0ed372c6819d7224a9576dc84f11800c2bee65ec815f43e90408d4009b8
SSDEEP 384:2ZcIhsNgHZLwZy4JHX58Ek8TJrXtp0tgOIwZOy8kog:kh5wVdacD0Xs+L
TLSH
T1FD827C3299B8AD7B59FBA145B18632036FB48027E6C96F84D6FC5B2D01DA298030FD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db998f2ab3bc4e87d03b65e45c5cbb178df73d3cf3485b0f37651dcc2814f3c4
MD5 5f5f54c76a35e981894cc5fb6daba05e
SHA1 f502dcb8644de3724c621965a3a911c911ca900d
SHA512 5b35d9868c8c7bc14be58b8d1c82589ffa8c6d4d639a122de36a7603d6e1fdaa95347b26ba4692476227aad23f224b54f96b3ed88d347aa1c403e5ce05da56b9
TLSH
T16FD080B5D9756AF4E465253C02230604714C95425D433105D55145960D9D7C354D7DE9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

2c1e5869-7083-4de0-ab49-b715dac6aae8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2c1e5869-7083-4de0-ab49-b715dac6aae8.tmp
Size 27KB
SHA256 3a197ed7b1d628f1140a0384cabcc63fb4b83df94758bebbfabbec3b81c39e98
MD5 06931b0e98a24f60063dfb5ce9d332c1
SHA1 d722fba9a2243d126baefce90e02706e255e91fa
SHA512 aa0ddc159aea7aa03e92d88df1046845800fbe2ec7380ce10a2107be22d9b1981c87e7b2a9702c4a59f331e46fe643f479e8316a6d2c1fa27b460d348872fa82
SSDEEP 768:Viy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TblroRNQ:Viy4J/DWvbtBhu1jajiLm0benQ
TLSH
T1B7C20B3B644CCA7E4FC00A9DED5E6FDB7E9802C796948D4047FA954C02C77EA91264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f040f68-bb27-4aa9-bdc6-1f78ef434396.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4f040f68-bb27-4aa9-bdc6-1f78ef434396.tmp
Size 10KB
SHA256 8460f2be5ad63e42aacf51cf0cae3ef4a1a302dac2b06f92d8d09aaeeb117941
MD5 113ced052c173f573dd037d0b37ae145
SHA1 186f871a3c91e4615beae54399e74610077013b5
SHA512 fabe4228001b19f222674a7b4e0244695e64c291b2a42a8c4d378da5d782f6a1be5e58e8f88797f34c769cb018293c2c384a072bf7f5e355b66b11778b2b1e74
SSDEEP 192:sxZiRBWM/fZsugIdpAYHW6+WNGYrHdWIg59J:sxZiWM/fZsuhJHbGrp
TLSH
T19422B9526E28A9BB8CCBE20DBB157F13D6F9503251D51E48EAFC862C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

684452df-8991-4e37-bc91-c33ad1c25ad5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\684452df-8991-4e37-bc91-c33ad1c25ad5.tmp
Size 9KB
SHA256 5fdf1fc12d2993a929f798c99838cba7dd2cbc2adad2f967dd538751f0c88773
MD5 292201d7e8d9e2016d05867138b4a375
SHA1 be5a5d4faae7b11c501a7f8578dfa8d10f4eaf67
SHA512 f228de57fa5e4343f5a30998eb3f9391fc4db63ccb31fcb7b3a6416c9e9c3ea728cfae8eb876ea32ec1f2f2a2edbce110b8500a6ecd1b23f2b1f81c01ed7d819
SSDEEP 192:sxZiRBWM/fZsxgIdpOYHW6+WNGYrbdWIgrJ:sxZiWM/fZsxhvHbGF9
TLSH
T1F812A8526E28A97B8CCBE20DBB25BF13D6F9503251D51E58EAFC862C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8f370f4f-437b-40a8-90c6-ddd57a2c4145.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8f370f4f-437b-40a8-90c6-ddd57a2c4145.tmp
Size 9KB
SHA256 d632dc1adcf3f5e211624d80fd0f7791da9d619bf7def2645b663499b58d97a9
MD5 a48a578fde1303516b6cbed4c38445c4
SHA1 367fcfcd614334b3dbd9a508e8ddc926804022ec
SHA512 d2e90782e3806040756f5183121c5cc1e723844780c72279f246da2568aa2e13a6f41367a5c2f5472b991a543a818b42bc379ca2e66f52e60b917b61aea05c4e
SSDEEP 192:sxZiRBWM/fZsJgIdpOYHW6+WNGYrbdWIg5fJ:sxZiWM/fZsJhvHbGF3
TLSH
T17D22B7526E38A9BB8CCBD20DBB15BF13D6F9503291D51E58EAFC862C05E66CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 41d6064dedf344bfe9b17040cb5014310ceffaa51a2c0c3a74a946ae0085b484
MD5 fd31f0a77da30d194c51bf32ddf05257
SHA1 4dd38f2dd6366e64abbfe3ebc7a1a79767846233
SHA512 d5bf9f78387e0908a48d67ff2bfba63938fcb9c162f922ac04d7931674d9ad9f1855b76fd6f3b4ce34792f2baae5ea119cb5df9ed10e4652e9b1c5ecc14dfde7
TLSH
T1AD518485D3924598F7E6A470D2ECD5A7B6BC4483E983DE4AC5F5F6FEDA0A380A025340
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 c8a55e37d14def15358bec477cf5ce3047d964145101d0e2555fcdacf92fc631
MD5 d3b5f419a5b0e99439f63caa884eaa90
SHA1 a417c39a7e3fe3e17dc090125db703d9078653e0
SHA512 d207a51f99bb10040e40b980d7bf97ac81c2d415c057a9174735ff372717face48183d924a3a9076a219851f523916460694371513b23318e63bf050dff39cbc
TLSH
T198519481D3924598F7E6A470D2ECD1A7B6BC44C3E983DE5AC5F4F6BEDA0A3806024340
MD5 SHA1 SHA512 TLSH

Submit Download

9382a0a9-4f5e-4334-9ed5-0893a98adb4f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\9382a0a9-4f5e-4334-9ed5-0893a98adb4f.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

8dcae59a-9ea0-4e19-a283-0f0c2ff1d698.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8dcae59a-9ea0-4e19-a283-0f0c2ff1d698.tmp
Size 2KB
SHA256 93172e28c83ddd4599aba26268d141feb8618ccd75eb16b09516e08a7ef33c71
MD5 6784caf0adcf1030d4870f00dc6b7d04
SHA1 1f84a91afbdaef92d6b8e500d34cd75e9c0bd17e
SHA512 9cd2019ddf1dc0fec59d74be7a2bc0259269c30bfbf527e885e2e5954bbb0e232fe7e2444e8249fa6d074a00463a93e6ffe675f5701bf7fd3b0f5ed4110cefcf
TLSH
T134416CB3C7E5826DC82556F09A14AE1BCE5D091453183D29C9D5EF5BD3E2071E202A4F
MD5 SHA1 SHA512 TLSH

Submit Download

c9596d91-c1fa-463d-895b-dd9ae8df5a10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c9596d91-c1fa-463d-895b-dd9ae8df5a10.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

f50728de-4675-4461-978b-6e937b16a0c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f50728de-4675-4461-978b-6e937b16a0c0.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e990ec1a812e7340d045647e881bb9b07168140dd6ac9595a780d33ad0fdd33f
MD5 173124385052b4fa6e40a713ebf8094c
SHA1 f4a754c36b8e8afd1bfc2301b7c1a678e93b1f6b
SHA512 7e85838f1d6ca7059fad2eb74438ee21562ac6f09414b97186039c3321973a8efd53567c407bec17ce2d67e8f423a0c871762bbbe703cecd06fa10a5292ba265
SSDEEP 192:sxZiRBWM/fZsugIdpOYHW6+WNGYrZdWIg59J:sxZiWM/fZsuhvHbGRp
TLSH
T10122B9526E28A9BB8CCBE20DBB557F13E6F9503251D51E58EAFC862C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f39f58fdfaab70f4f6276aaf24a3a64e53a934cfa0f4e38e14d14fbefcc43877
MD5 a0ae753e07b0a59f2824eba892fe79f4
SHA1 9b4daa3ad7a3184e62b0759c31cfd178295cb554
SHA512 afb163d59c9fedf5decf9eb60064e7ff1920e3d8c97d05f60dabdeba79b573e51d2f4b99d2f6d65196db93ab24ffdf7786556251ed2e1a2d0c8dcc05de8ed989
SSDEEP 48:KIDI1Ks04jyLaFoUaYoZbED0ISMZK9w1qZxCJY7coqyLQ5QIQVQpQzQ3QLQkbQ37:KIDCKs0+eZeKCMKGn2KY/b
TLSH
T19191E04472BF020139BD2A889175C71B024136B7715DEA2B7FBD40A59E6FE086EFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a896412b-03c2-4ddb-8b13-2f913d85387c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a896412b-03c2-4ddb-8b13-2f913d85387c.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f80b8da8-9910-48bc-8c82-4432c7432ce3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f80b8da8-9910-48bc-8c82-4432c7432ce3.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

57e316e1-35e6-483b-a4df-9ade5604a817.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\57e316e1-35e6-483b-a4df-9ade5604a817.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ad02d5e-2a96-4609-9467-d88f05333bc0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2ad02d5e-2a96-4609-9467-d88f05333bc0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b713a60261bea1f202565feab77f187f38b47cd12adbabf2a77cd0658c06494b
MD5 e250294cbf1f9a598da2bf7bcfcd6f61
SHA1 9d48729cc3b9697cd5389ffaecbc45f791f3b489
SHA512 198610c13ff28bc7fd569e7d4ab1ae41e9abe2a62d175504c7d6df2b9000de10aa0c1d0f873044c2becb4e319e2febbd36a96c22e89a8b1464f2054a99804251
TLSH
T181412D58AAFA1148B3B76F5A6BF6686D48BBBD771F06D45D00010E4F0B26A40C971737
MD5 SHA1 SHA512 TLSH

Submit Download