hxxps://bit[.]ly/49D3Doz

Analysis

user interaction
yes
max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 12:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://bit.ly/49D3Doz
Sample261002-pvr36axtcw

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2340	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{DADDA7BC-5D3F-4C02-840C-0460F428B973}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6116	msedge.exe
6116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe
1404	msedge.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 1404 wrote to memory of 2800	1404	msedge.exe	85
PID 1404 wrote to memory of 2340	1404	msedge.exe	86
PID 1404 wrote to memory of 2044	1404	msedge.exe	87
PID 1404 wrote to memory of 2044	1404	msedge.exe	87
PID 1404 wrote to memory of 2044	1404	msedge.exe	87
PID 1404 wrote to memory of 4412	1404	msedge.exe	88
PID 1404 wrote to memory of 4412	1404	msedge.exe	88
PID 1404 wrote to memory of 4060	1404	msedge.exe	89
PID 1404 wrote to memory of 3260	1404	msedge.exe	90
PID 1404 wrote to memory of 4060	1404	msedge.exe	89
PID 1404 wrote to memory of 4060	1404	msedge.exe	89
PID 1404 wrote to memory of 3260	1404	msedge.exe	90
PID 1404 wrote to memory of 3260	1404	msedge.exe	90
PID 1404 wrote to memory of 2128	1404	msedge.exe	91
PID 1404 wrote to memory of 2128	1404	msedge.exe	91
PID 1404 wrote to memory of 2128	1404	msedge.exe	91
PID 1404 wrote to memory of 2156	1404	msedge.exe	92
PID 1404 wrote to memory of 2156	1404	msedge.exe	92
PID 1404 wrote to memory of 2156	1404	msedge.exe	92
PID 1404 wrote to memory of 2768	1404	msedge.exe	99
PID 1404 wrote to memory of 2768	1404	msedge.exe	99
PID 1404 wrote to memory of 2768	1404	msedge.exe	99
PID 1404 wrote to memory of 1952	1404	msedge.exe	100
PID 1404 wrote to memory of 1952	1404	msedge.exe	100
PID 1404 wrote to memory of 1952	1404	msedge.exe	100
PID 1404 wrote to memory of 4972	1404	msedge.exe	101
PID 1404 wrote to memory of 4972	1404	msedge.exe	101
PID 1404 wrote to memory of 4972	1404	msedge.exe	101
PID 1404 wrote to memory of 3424	1404	msedge.exe	102
PID 1404 wrote to memory of 4856	1404	msedge.exe	103
PID 1404 wrote to memory of 3424	1404	msedge.exe	102
PID 1404 wrote to memory of 4856	1404	msedge.exe	103
PID 1404 wrote to memory of 4500	1404	msedge.exe	105
PID 1404 wrote to memory of 5688	1404	msedge.exe	117
PID 1404 wrote to memory of 5696	1404	msedge.exe	118
PID 1404 wrote to memory of 5704	1404	msedge.exe	119
PID 1404 wrote to memory of 5504	1404	msedge.exe	127
PID 1404 wrote to memory of 5504	1404	msedge.exe	127
PID 1404 wrote to memory of 6116	1404	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://bit.ly/49D3Doz
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa8aedc188,0x7ffa8aedc194,0x7ffa8aedc1a0
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2024,i,14173847486880050657,7997635825507303076,524288 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1712,i,3027083737894895764,18396865395307499287,262144 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,9164063227215663661,2850043085285628653,524288 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,13207315239714793844,2033430682887253784,2097152 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,15911777328659281717,15984365311439046071,2097152 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,8012892258033299010,256101519788803158,2097152 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,2818882829474910220,16904236560634084090,2097152 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5092,i,16471687850220666404,5145035682997977542,2097152 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --init-isolate-as-foreground --pdf-shared-library --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5284,i,11381951512564073265,13798082509502118406,2097152 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:2
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --renderer-sub-type=pdf-renderer --pdf-renderer --pdf-shared-library --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags="--ms-user-locale= --jitless" --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5436,i,8715046887872160441,10372754469111220835,2097152 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,9759351610188416223,13545441716388406888,524288 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,8740236392647599944,2930179275840870030,524288 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:8
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6192,i,1035731748514587807,2603060774661799833,524288 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6192,i,1035731748514587807,2603060774661799833,524288 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1708,i,11971873617756924890,17038701258703825540,524288 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:8
  2⤵
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,8971169051708176789,15270730368482436088,524288 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,8287359043960695890,2968537958074947650,524288 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,17579247501269034601,16256651744049194994,524288 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:8
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3668,i,15642410853060336745,7734919062518188213,262144 --field-trial-handle=2096,i,7649546553298469255,17968055818003981651,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6116

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3548

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5c2056c9-6307-4b84-b730-49b88b731bfa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5c2056c9-6307-4b84-b730-49b88b731bfa.tmp
Size 18KB
SHA256 a27239b55ed1d707dab3dc6f2ea6d3fdf3a916718383c5b96d2fbc7ed4438ff9
MD5 6f38cb2642d7927b0b4f4cc99e64f2ee
SHA1 67876f1946471a520c9b280c3b3e69a5c69eb597
SHA512 a9885cce7f2d8f432f1f28397b652bac8f02c5e8bf644dd4d400358db42224beee381e513e34faa3ff292237efd1d24f86e4d7cd2c3ea8a489ea7423d83e272c
SSDEEP 384:CZcIhsNkLwNSkUYOjTVKjO7GzhjUOJtgOIwZOyBo1oE:whQUrnmOajUOJXsn1H
TLSH
T1C9828E315C386C7B6DEBB145F5CA36038FB88167E685AB90D4DD1B0C01DA6EC230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5cc71eb7-c096-43fb-a1a2-df896cda208b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5cc71eb7-c096-43fb-a1a2-df896cda208b.tmp
Size 18KB
SHA256 459cf792619f268577fcce9214f1dee76011926580a7fa818e64ab668ae38bf1
MD5 53bc084993966b6b9ddc898abe840b21
SHA1 88a155401dbdf41a4eafef7be9f812050c991d37
SHA512 98aa5e133fceb02aaa61ffcd9ea31c2254253bcfe3fdf1dbb95877f69d52f18ced0e8bc0fc70c103f66e815798180942c8249e6fd1ddb7feab5747cd5a3cce24
SSDEEP 384:PZcIhsNkgwNSkUYOjTVKjO7GzhjUOJtgOIwZOyBo1oE:HhLUrnmOajUOJXsn1H
TLSH
T1A5828D315C386C7B6DEBB145F5CA36038FB89167E689AB90D5ED5B0C01DA6EC230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6d88fa90-b808-486b-9c88-a20f57e3dd22.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6d88fa90-b808-486b-9c88-a20f57e3dd22.tmp
Size 8KB
SHA256 875550625d29a5b8561f3d36fda01f27c5c63dc7519680a2414b734fa3c5fd33
MD5 ee6e03135f9b89295ed22261ec91787f
SHA1 b260c9be2942fe60cddcc29235bc1f59f375ed63
SHA512 6ace5ef3c5885a781541ca1c8f388a9cd4d15126fd2473c9f3a1741ff92c6b5ffb804b5d0aa7196a9a1504408ccd45e7629e5845e3716eca4eed42192057d414
SSDEEP 192:SONl6ygpQmiUyP8tOCTVg1jO7R0JzPPYEaU6:SONl6lHdtOCTVKjO7Glw/U6
TLSH
T10A02C734BC687CB79EF3BE06F48737139FA4116BE9512B84DAD81A1C01D76AC2306C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8639162f-ac32-4b80-83be-0ad35f024a0a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8639162f-ac32-4b80-83be-0ad35f024a0a.tmp
Size 8KB
SHA256 b13a1db1a89b16d1b713b40420a4e6bf911850c28b546097a664d35d053bfcd9
MD5 7b554b67054cb4cc14b17582d6888fc7
SHA1 708908abd8d617678b2bd32ac5b5e48cf9d96317
SHA512 81fead93ccedf52976027e07819efb0204f8b79ad0b915905f076490d2b11e3d3921d156ace276c1499ea408fa5ff97ab675131ed65190fdf4ffb010ba6cc595
SSDEEP 192:SONN6yDQmiUyP8oOCTVg1jO7R0zhj3ERG3UKqxU6:SONN6S/oOCTVKjO7GzhjU9JU6
TLSH
T1CD12183578386C775DE2B545F48732139FA45267EA466F81D5EC2E0C01EFAAC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a381588-b059-41d4-b3a0-1e6a2bd117ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8a381588-b059-41d4-b3a0-1e6a2bd117ec.tmp
Size 26KB
SHA256 34adb0bb711f011133ae908d0da6e23e9873e47142aa93c5980b2d14aa30b426
MD5 71056f6fb7ff692ac51453587a63b54e
SHA1 4edc03bb0f6c4bc55fa29235e86d617fbec26e53
SHA512 768bc453a9f7ddc871c813234ee51206f0357188bb84e439e94e3c0b11ad7e76b3a5c913a2f0b73367f3a50478a41f1b78dc34aa9be4034cc8475d290b03e1f8
SSDEEP 384:yiFiZcI1zsNs8TUNTUlIlgwNSPUYOjTVKjO7GzhjU0JtgOIwZOyBo1oE:5FQNZwguUrnmOajU0JXsn1H
TLSH
T13EC22AF248E7587AE9AE5747A77D3E038EBCC063B545A650B3891A0CCC961BFD30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38ff3989-fc28-4088-bd2c-214847a3191d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\38ff3989-fc28-4088-bd2c-214847a3191d.tmp
Size 105KB
SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
MD5 ca6c08209c2d38cddd20d85d8c5dc47a
SHA1 cec1cabd103f18062e7cb4e4d6f0d8b419a6c0bd
SHA512 21049ac949a133b2d3655a743fa48fb77fd023763be431c403808d8b8cc86ade7133ad2fd2407bc2f19378bde77d294fb858d77ccfdd369434389ccbd4e515c6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c02af0b53b7fa79987f046aeee8ae8328d6e30eec401b85fb659fff3686e22d9
MD5 60b4515826d1c9f4b017a7d286115708
SHA1 91a906bd437f5276b450fa960823a1d8884f5b5c
SHA512 49ec0ba508a1c4d76e366cceb731579d594d5a8727c9089704a8f0f492164a13db6579377d36e91cd39359f1ee2ac85e2aa9a737f1640db34a67d8a1c0d408df
TLSH
T176D080B49D685AE4D0A5307D1335454173DD97529603210D65D10A150D743D31551CE5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

145cb63d-4e01-4ef2-acc8-a533b6e9cbb0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\145cb63d-4e01-4ef2-acc8-a533b6e9cbb0.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

22774ab7-8e2d-463c-983e-442688a0a8ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\22774ab7-8e2d-463c-983e-442688a0a8ea.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b3db829-3082-43b6-970a-83539c9462c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6b3db829-3082-43b6-970a-83539c9462c7.tmp
Size 10KB
SHA256 2892451381d5a848c6b5d08c2c1ea742b0c51839cb63a00db1f1ac8b2d4b7a43
MD5 8a58833ef9f6fd42cc09d1a7441b81e1
SHA1 41de97c7bb7e45146ee7a774633bcd24d963445e
SHA512 239ac1b67d7c10d0abbbd2e5e9f136243d017383d32a1374400d447b4af32b0882ce0616a43becc253fa454a591834ad4d28cffa334e7365513f33b1d8953c00
SSDEEP 192:sxZP/RgWR/fPsZFIdpxfHW6+WNQ83k/YRPfOwtaUIg5sJ:sxZP/5R/fPsZ2VHbQ//mHOYW
TLSH
T1D322C8526E28B97B8CCBE20DBA55BF53E6F9503291D15E48AAFC861C04E66DD330740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9eb1c323-33a3-469c-a2c2-eb6dae34466c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9eb1c323-33a3-469c-a2c2-eb6dae34466c.tmp
Size 10KB
SHA256 2c52b9f777b59d358a6412304fbce3a8cd8595dbac2fa5d15cdde1157cc106c1
MD5 15d94749d12e6a35301bff8e0f31f169
SHA1 34d9d83c22b325168a071871cf22ad02910e9cd4
SHA512 f2b6c17e4b530de8eb4d5b645f2bc1d734749caec8942166eebff3216e525ce0d706d3730d628b3d0982600af4d8ed11f66edc23361003c1909e9e3b7d2793f0
SSDEEP 192:sxZP/RgWR/fPspFIdpxfHW6+WNQ83k/YRP8OwtaUIg5GJ:sxZP/5R/fPsp2VHbQ//mUOYc
TLSH
T18C22DA526E38B87B8CCBE20DBA55BF53D6F95032A1D15E48AAFC861C04E66DD330740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 7a09febd69f1b5c50007556b51f0a890c708bcbd3dc6efe943c39aec09061555
MD5 70a4899c5877e9b7e214d0ad96472b0c
SHA1 1b59a8c20b5142ee47e926c5651be038f3c5a149
SHA512 f6d4bb68a72876a01862f880940f86f0f366564e002728c281c478563a6d91cae030b6543ba30dfc171a6e33b94d917b11a0dd00b70f0a1b13e2b488cf0d14b8
TLSH
T1066194855DD34C6EFBD943F084D73A4FBDF8158E58873E8691AAD939EC0674E8090354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0c51d6d04cb45448649354e119fcee56eb32e2b26f8f3a3f7b3b7db3c67d3213
MD5 f01f65cdffd0ea802d3ebbf95383cd63
SHA1 b59b583aa3075b21c8bf22b9257783ebf754eae0
SHA512 4dc4fe2678a2fb34356908bd01bcb352bc8e64bb64735222c78162a5fe5656c2789160e650946e06c73ace6c716537d95afed6d2788bc2cfb991c39171995a4d
TLSH
T1895171845ED35C6DFBD883F085E7369FBDF5448C68837E4591AAE939EC0A74E8090324
MD5 SHA1 SHA512 TLSH

Submit Download

31c2db73-57fd-4335-a801-277956e89c6d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\31c2db73-57fd-4335-a801-277956e89c6d.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

d3df0e51-ee53-4ed9-9904-a0ac8ca84a89.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d3df0e51-ee53-4ed9-9904-a0ac8ca84a89.tmp
Size 1KB
SHA256 eb1356d233d3501e921fc4815102ecb465715f3ce70671d3e5c3d9628d5143b0
MD5 78e2db593baeb98fa7436bab7e2f1601
SHA1 3cf9b811750e9901a7115e1244bb5b4a5e6fd076
SHA512 7d2c57e5d0f0196d2dac4cbdc33c8551d36e15b11007a003fd3e8aca02d96fca8739d3d60155da13d4d228078a058d1cba9efee07490c7aa233c9ed358fc3b2f
TLSH
T11821AFF3C3E4966DCD1116F06A246E2BCE1D091583283C1AC9E4AF2B93E2471E50198F
MD5 SHA1 SHA512 TLSH

Submit Download

e3109b13-a0a4-4cfa-8e33-374575eec2ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e3109b13-a0a4-4cfa-8e33-374575eec2ce.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

eb78bb85-25a1-4699-9068-35bf1a001f7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eb78bb85-25a1-4699-9068-35bf1a001f7d.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 476a3359fbd9196df5ae7e068dfd42095497a09d4a54f03ff9bd182cb4eab146
MD5 1e5186fc40e6a5632ebce8530583b5ca
SHA1 dc66dad6a949a803f2d9a2d39dc1deee5fe451da
SHA512 386ac6ab7ab3a3ff0ab786ef20b109722bfcad374ab202e2880564b13320ca45bd48ce7fe698efcfdc8fcf6411ed961aa4ad879e8518376432a870a1b78e74f2
SSDEEP 48:K0mImVUplXD34brOrIS94K9d1P4x9oYePlVyL+5UY28slbQ3YISwlK9U1mlxe1YA:K0mp6YKvq2GRiKac6WvuKEcm
TLSH
T196A1E10132BB121178BE255C81B4872B528172B37118F62BFFBC14A68E6BE545CFF9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adacb72d-cdca-4482-b0a3-4b38c6ef3069.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\adacb72d-cdca-4482-b0a3-4b38c6ef3069.tmp
Size 10KB
SHA256 d5309d0d75f910045eb8dd1420c716c4baeba363c4918bf409a2dad44b6b3072
MD5 673f98c69dbfd54056711e9f05c928a7
SHA1 2a6391fc720c89578812844eae8bc227dddc0067
SHA512 e214d93a56508c7cb0a2fd717db294b7204d0ed886fdec16684df7b9763e25558af5768d820ab73d7d9803c13c9bc6bb0036779229bd290e5b9a3d24a6653746
SSDEEP 192:sxZP/RgWR/fPsZFIdprfHW6+WNQ83k/YRP+OwyaUIg5sJ:sxZP/5R/fPsZ2rHbQ//m2OhW
TLSH
T1B522C8526E28B9778CCBE21DBA55BF53E6F95032A1D11E48AAFC861C04E66DD330740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6449513-d1b4-475d-b0a9-d9ac58e957d0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e6449513-d1b4-475d-b0a9-d9ac58e957d0.tmp
Size 27KB
SHA256 970091c1887ec8701b0ed54b75709fd1b1db1b4bfbff35982ca28dd0de3a935e
MD5 eca23ac49cb3993273e5e038a3c4b3fc
SHA1 348816c6d56acaea92a292059526056ebfbf4e34
SHA512 3c679b728ebda16fb6afb774ee99897794bdc47ff915556497450d9b10b09b6ad885942427bff27a859a05b3229427499d291df5a36fc34fde34e760190604f2
SSDEEP 768:lJK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Wro0+am:lJK9uzYWvcQWsu1ja0HL7Q3t0+am
TLSH
T1E8C2FA3F640DCB7E4FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA62264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f943ad79-0993-494a-a9e6-29597fc46523.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f943ad79-0993-494a-a9e6-29597fc46523.tmp
Size 10KB
SHA256 cc5a936614fda38f39dbb5bcdcb8b607b2376201a35a9c599bb462761df90d99
MD5 264cb4ecc846692c2f55a5dd6d9c8fae
SHA1 b76f5150196688bf458d390d26d3995e782d302b
SHA512 d8962a6f828201d887c1fb1901e5fcd48055fd04cd974cc6a2afe95263a570f66b07b9ce263b20fb74dea518298ab672946e423387c2d6eaf54798d88ff46d10
SSDEEP 192:sxZP/RgWR/fPs9FIdpxfHW6+WNQ83k/YRP8OwtaUIgrJ:sxZP/5R/fPs92VHbQ//mUOY9
TLSH
T1A222C9526E38B87B8CCBE20DBA15BF53D6F95032A1D15E48AAFC861C04E66DD330740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd70d459-4ef9-4832-8f46-7a4cf0fce8a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\dd70d459-4ef9-4832-8f46-7a4cf0fce8a4.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a28be47-9424-4ec1-ac1b-1eb941374c56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8a28be47-9424-4ec1-ac1b-1eb941374c56.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2fab2d27df537a955e143f8387a1ad5277b214c6fa0272bd91b689d4c3a973a0
MD5 0ccadde7683e737f97b51643802c2008
SHA1 5c58b28a8a76a42c8bec9149d0ddf1e355a0f7a0
SHA512 ef130676b5a756e0135d1ab24fdda24885d78402a3e18d32d5502a623ac30508bb3eae03dffb009ab9535e058a78f303faa14db00b6327baab854ffa07f735a1
TLSH
T10641F948B6EA1148B3B76E5A9BF6A89E587F78772E07D45E00110E4F0A62A40CC71B37
MD5 SHA1 SHA512 TLSH

Submit Download