hxxp://apps[.]nypostsports[.]org

Analysis

user interaction
yes
max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 16:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://apps.nypostsports.org
Sample261002-tz9k8aec29

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2316	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{CA65CB1C-C09A-4574-908F-1CE65B3C20B8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3160	msedge.exe
3160	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 864 wrote to memory of 5016	864	msedge.exe	84
PID 864 wrote to memory of 2316	864	msedge.exe	85
PID 864 wrote to memory of 3380	864	msedge.exe	86
PID 864 wrote to memory of 3380	864	msedge.exe	86
PID 864 wrote to memory of 3380	864	msedge.exe	86
PID 864 wrote to memory of 4436	864	msedge.exe	87
PID 864 wrote to memory of 4436	864	msedge.exe	87
PID 864 wrote to memory of 996	864	msedge.exe	89
PID 864 wrote to memory of 4716	864	msedge.exe	90
PID 864 wrote to memory of 996	864	msedge.exe	89
PID 864 wrote to memory of 996	864	msedge.exe	89
PID 864 wrote to memory of 4716	864	msedge.exe	90
PID 864 wrote to memory of 4716	864	msedge.exe	90
PID 864 wrote to memory of 3568	864	msedge.exe	91
PID 864 wrote to memory of 3568	864	msedge.exe	91
PID 864 wrote to memory of 3568	864	msedge.exe	91
PID 864 wrote to memory of 1576	864	msedge.exe	92
PID 864 wrote to memory of 1576	864	msedge.exe	92
PID 864 wrote to memory of 1576	864	msedge.exe	92
PID 864 wrote to memory of 3796	864	msedge.exe	95
PID 864 wrote to memory of 3796	864	msedge.exe	95
PID 864 wrote to memory of 3796	864	msedge.exe	95
PID 864 wrote to memory of 3152	864	msedge.exe	97
PID 864 wrote to memory of 3152	864	msedge.exe	97
PID 864 wrote to memory of 1856	864	msedge.exe	98
PID 864 wrote to memory of 1856	864	msedge.exe	98
PID 864 wrote to memory of 4676	864	msedge.exe	100
PID 864 wrote to memory of 1480	864	msedge.exe	114
PID 864 wrote to memory of 1980	864	msedge.exe	115
PID 864 wrote to memory of 4396	864	msedge.exe	116
PID 864 wrote to memory of 2332	864	msedge.exe	125
PID 864 wrote to memory of 2332	864	msedge.exe	125
PID 864 wrote to memory of 3160	864	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://apps.nypostsports.org
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffac293c188,0x7ffac293c194,0x7ffac293c1a0
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,2740737020119282777,10327076633851488168,524288 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,7426752396164021423,15868236858876228667,262144 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,11985790996361472778,6513757669007399655,524288 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,3925878929652111214,15538894186382592717,2097152 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,5929777608536819289,1840024389077766763,2097152 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,14598828115948850443,16063392046202181965,2097152 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,13880479727952841079,12525720750440949982,2097152 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:2
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5056,i,1744154464953720096,3674144316992055043,2097152 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,5720186696690238388,7554954092715436569,524288 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,4508832400183085592,2933709653400022381,524288 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3420,i,13360703194156772474,916144835833981106,524288 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:8
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3420,i,13360703194156772474,916144835833981106,524288 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:8
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3500,i,11522686464041439773,3411280725827085110,524288 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4800,i,12886615674205143407,14718308432530348498,524288 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:8
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,5390380093831443287,2092923992743838964,524288 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,1106257630494251608,15829567816482702748,524288 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:8
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4764,i,235918228998207440,6350317513670499829,262144 --field-trial-handle=2356,i,4264684721097271533,2511102723440245332,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3160

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

34df2b92-78c5-4341-8ce3-6d8bcca7888c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\34df2b92-78c5-4341-8ce3-6d8bcca7888c.tmp
Size 8KB
SHA256 61c8ff70027294f47a4cc54f2a34b9c46ab5efbc2c65d7d5951fa366817b3aff
MD5 4e8a3ca799ba3ad1b2ed6314ae34a086
SHA1 203d7b73f0831d3f2573193e5b3b00b2e1ab6f77
SHA512 9674ca4d26c7e81db9448db9064839153e251bb55c54f7082fea39e7ddd07b1b01dd6e860763585903245d56e01757ff68984f4538be92835b66ee9725a4f324
SSDEEP 192:SONO6iDAQmiUyLS8uq5u88PpuhdJIDuZ0rq0U6:SONO6xD8uq5u8iArj6U6
TLSH
T135121B3668786C6B6DD3E951F88736175EA4422BE7C87F84D5EC162C01EF2AC230B513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

49c59588-9932-4cb6-b55d-2d0f553e0167.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\49c59588-9932-4cb6-b55d-2d0f553e0167.tmp
Size 26KB
SHA256 bc735d49da8544ea1916dd82369150f6ef14b07999273a61b1679399e1a9a6b8
MD5 57529c6f7436072c4fc58ef05cd887be
SHA1 0b24bd85e4bcb7eefa03efc9208990aeca7c97fb
SHA512 fce2c88eecb28e8d8a762f8dcbd8f004e1acf111505efbd5fedacc6d53aa15406a91f7163c5bfb524c8f88661888b5fa4574f9edd11fb1f08e461d3d8d6321a4
SSDEEP 384:htiFiZcIFqzsNl8TUNTUlIl7XQoFyp5u8iArR6VZh6DKhHKoh:+FQIcwghFwkAt6fYGHK+
TLSH
T19DC23BF248D7587AE9AE9743A77E3E138DBCC153B6846A80B3C8561CCC961BFD306911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8ccb8dda-33ed-4b82-9755-3c79a112a8c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8ccb8dda-33ed-4b82-9755-3c79a112a8c9.tmp
Size 18KB
SHA256 52c8ca0bd05a1f6a9c0a97904809eda9f8dba436f79a526a3685948dc6ce5878
MD5 cd914976a6e213c9cfda3d04d01768ac
SHA1 87f16820d60875b05aba63b1ba539b08c01bedfa
SHA512 0d706b907b93e51fe475437ebab0f2fea0106885added361f2f7595b389adafa44ff1f884207e918d1bd3823689fef8dfcd449d68817a61a8638d15680e32582
SSDEEP 384:03ZcIhsNbyXQjFyp5u8iAr46VZh6DKhHKoh:ahiFwkA06fYGHK+
TLSH
T13F828D325C786C7A6DFAE552F8473B179EB48157E3C82B84C4ECA71D01EB6982307A17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

03a9e4b3-0a63-49b0-855b-a45c2fc07587.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\03a9e4b3-0a63-49b0-855b-a45c2fc07587.tmp
Size 10KB
SHA256 a750e73958ebdeceb549c094b3570cd17ce968cf781a59c006a42c50aeda94ec
MD5 df6591839f0931a3557c4f4af7a6704f
SHA1 e5904df6ef0582e53abe2dfc0d037cde84cdb26c
SHA512 967b54577831a6a5d9d4917605919baf4894933a8d128ee9efb88d6f82938f01dd6be2a2a459a9ab2775c8f36ad0c79f376631ad2ef6672275f0105f5dee8a1f
SSDEEP 192:sxZ1RrWK/f7sIXFXIdp5XHW6+WNIti/YamTWUIg5FJ:sxZ14K/f7sIXF4FHbx/w1
TLSH
T11022B9526E68A97B8CCBD20DBA15BF53E6F9513251911E48AAFC861C05E7BCD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1c847964-5617-462a-9f4f-0450263adfc4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1c847964-5617-462a-9f4f-0450263adfc4.tmp
Size 27KB
SHA256 9c08a7cd66cd7695a2b33e9d1546fbc802e227258976c2d8da81edc1b212165d
MD5 4b0cdb0fbc13217017a64659ccef17a4
SHA1 572249fa44ffef58cd8c1e0c6c0755abb595a2c3
SHA512 2c488b7505833b1dc0382e58ea0c59a6452b22225e58d616c81f654aeb855484b99b848d5fc42655c616fb813e4aec7ea4f1dcdda60fd4d22c5d89def71b763f
SSDEEP 768:rYyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3sro8Zj4:rYyQRbrWvvlpZu1jaXKLf3338Zj4
TLSH
T1A3C2F93B640CCB7E4FC01E9DDC6A6F976EA802C766588D4447FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2feb7ef1-4f81-4e51-9e8b-f666e1fd3d60.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2feb7ef1-4f81-4e51-9e8b-f666e1fd3d60.tmp
Size 10KB
SHA256 6e27c071c154666ab1d9a3e246156ace41a06efde87b35bdb8a1903320aeb65c
MD5 4f469948aa60a6813307f91e808670fb
SHA1 69b84d979cfa9a10ea0f63f07915803a20119b4b
SHA512 880ed37ce61dd62f57a387a8861e0deab4aec89eaa8ff52d3be9a56adbfc073a4831a2d9ff4443f80a318972991dddd001a43b7e15d07afc5105ba83290b902a
SSDEEP 192:sxZ1RrWK/f7sIXFXIdpzXHW6+WNIti/YavTWUIg5FJ:sxZ14K/f7sIXF4bHbx/v1
TLSH
T17822C8516E68A97B8CCBE20DBB15BF53E6F9513251911E48AAFC861C05E7BCD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

626d7458-2673-4479-b6ca-38d2c008a9b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\626d7458-2673-4479-b6ca-38d2c008a9b8.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7686e6fc-482e-4d64-b35f-ef3092a03ac2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7686e6fc-482e-4d64-b35f-ef3092a03ac2.tmp
Size 10KB
SHA256 7c0a4af5d82eacf08d1e214979dbcea8ef94db468e7c7992c9f1e1cea5cdad21
MD5 73610156d7de982d36004ee57167d9d4
SHA1 e89107025f7c1b428bd332a6b0e1c1fb61ce2089
SHA512 4dd83da7ed20afc88e71585d07b7712d7d631b61bfdcf1c4eb234ce773a2c79a8cdae9be795afba0ee75857a2a2a78294141d43f3e685cbdd5380bfbb3d0c472
SSDEEP 192:sxZ1RrWK/f7sIsFXIdpzXHW6+WNIti/YaLTWUIg53J:sxZ14K/f7sIsF4bHbx/LD
TLSH
T16822B6516E38A97B8CCBD209BB15BF53E6F9513291D51E48AAFC961C04E6BCD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f_00005a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005a
Size 33KB
SHA256 169455fa5d768756ed7833f64b5789d23867e9d2142f65d24016712b1e92d2f3
MD5 baca07d4272cffa96aaf94fd8801887a
SHA1 f304e05658924195b9b07f4ee7035b0ce199d501
SHA512 7abf6a29032511e510d271b0939bedcf916f8e8aaf5d44bcd6f3002f5e7f330ed91d5855ecaddb9363df45ad6987e10f077f2e91ededf3d39e9354e837e77e25
SSDEEP 768:cpdvhc2aijMyUl4sRJhCe/Z9OKqjM4h0JNqSCex6:WhhYijMysxhDZ9Ijf0JNqOI
TLSH
T14BE201717B576D27A95C99E1A0733386CB81290EECFB1F2CBF4D87AACF687608459500
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 5182b04aedee50f3251a8f209cd5dc264b7e79c606bf25f882b6bf0c2ebcbb68
MD5 45bf7cf42ff3527d470aaa64b379d906
SHA1 92f767bfb7bb245b800caf2b796e97beb5166fe9
SHA512 a8df42b10628df68c1891f7de3c9b7b70eff117964964b660975e7ab243af26fa92f1118b3ab291de0fde226ffb441dfa669aeda869a2a8aa91ea1f1c57a23f3
TLSH
T166614154DAA0445AFFB803BA89CC3D5B353675B054739F26187CD6FBE87A3C498892C4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 159593869f4e93ac2b2da1a505e488c4aea814e250ab8c08e90cf975df3c6834
MD5 e30a13be8786efb1c95a5efd6e56765f
SHA1 baf8b5d35eee8d767e2bbecc7d9e352992f7a699
SHA512 ff56907e7e48ebeac38c586c622be1c03ea0280e16b8f9a084d481979413699817e34136a1ee48fd57c1d6b41b47b86c6edcbb389972492043295575b3329bfd
TLSH
T1A1618464CE604459FFB403B689CC3D8B353779E054739F2A087CD6FAD83638498890C4
MD5 SHA1 SHA512 TLSH

Submit Download

28038b18-8e2b-48df-aaf0-1cdc563ebcb8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\28038b18-8e2b-48df-aaf0-1cdc563ebcb8.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

477d9e06-1156-4cda-be40-56484c9cf17a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\477d9e06-1156-4cda-be40-56484c9cf17a.tmp
Size 4KB
SHA256 b1fa1757d762df4c6ade11057fa7abf79fc2ddcc9065429a8409a8b4935899df
MD5 25eaba9d7710f23271bf3eb0e1e10aa5
SHA1 d57111ff084329eb41a03aa8a3d301464d1333d8
SHA512 26fa3f1685005878d8e561f46c72a82add1d489ac08580265709573bd6095c6c16cf71aa8880b04ee1a389b261f03e6474e927fdd6c268154eb530ba621f0b0b
SSDEEP 96:DwO0e0N0p0O0A06zr02010Y0gB/0b010r030gI1GwQ:DL0e0N0p0O0A06v02010Y0U/0b010r0p
TLSH
T1C991BCFBC2D9CA6DC80252F1AB146E5BCE5D0A29422D3C0AC8D5DF4F93E3871D29164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

863a8dc7-84da-4f6c-b60e-07aba50ff644.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\863a8dc7-84da-4f6c-b60e-07aba50ff644.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

e431101b-d7d4-4d30-a55b-570ba7386f72.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e431101b-d7d4-4d30-a55b-570ba7386f72.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

de493a67-1419-4023-8320-97a8191d56ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\de493a67-1419-4023-8320-97a8191d56ad.tmp
Size 9KB
SHA256 d9496a859f4905243d85cb25909d0ac26e1c0bad3f2fc51d23aaaf052d051964
MD5 9f5714a0dc29f22f236d722fa4a268e2
SHA1 e22bb560bfd7f7b74efc4813e833b73ca6f11bb5
SHA512 949419fa754d65fea478557fc9e322919e13ee5424cbae02aa238c4d2dde73a3832027f9b7cdefcbd16884d92230fbbadddde906b0c1751c21d367aa462d1ab1
SSDEEP 192:sxZ1RrWK/f7sIsFXIdpzXHW6+WNIti/YaLTWUIgrJ:sxZ14K/f7sIsF4bHbx/L9
TLSH
T12322A7516E28A97B8CCBD20DBB15BF53E6F9513291D51E48AAFC951C04E6ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 69cb77721638de1b251ed46decc7a5192bc9893f2bec3b6d6b69480e3802d410
MD5 3719338d194894004be35b7588874e14
SHA1 da3e185c3acadebb3a1a27a8f07a83c697504db4
SHA512 43e683a9fd3c96a444a74879d36482df4308da085e1885562eba96eb053f82b1f8f8cfc6af78f831b012a76ad202fe69466542e8ab8747bc72af35f05aae833e
TLSH
T1AF215685D78A90F55E49ABC2910E541350F12DB5131D9DB5271FC1F40F8CC188E6FEA9
MD5 SHA1 SHA512 TLSH

Submit Download

497768cf-c962-4651-b706-5482cfac7897.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\497768cf-c962-4651-b706-5482cfac7897.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

e0ee2d6f-48f7-4908-ba06-b3901702f91c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e0ee2d6f-48f7-4908-ba06-b3901702f91c.tmp
Size 8KB
SHA256 b400d5e55d0bdc0a9bf368d1ab7e6c8ee920aac8fe503efb049fbdb7e6082c4c
MD5 03fd90d7fcb176b0f5322e06e9b69d4f
SHA1 2cc8647ffb957c1539934102b005ac30f0d67846
SHA512 16320242731259036e682d692dab86b50f53d6c9027ea7aebb0dcd85829bfb43e63f8bc6874d0023af0e3e9e2e1e8bd0c0e217758c919a207a4688dcaf9383b9
SSDEEP 192:SONa6iDCQmiUy4S8Hq5u88Ppuh3SqjTx9bU6:SONa6/g8Hq5u8iAvjrbU6
TLSH
T1D302E839AC683C7B9EF3AD15B58737175FA4013BE6942F84D9E81A1C41E729C1307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ecdf86b7-0b28-42f3-a12e-553415fbd884.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ecdf86b7-0b28-42f3-a12e-553415fbd884.tmp
Size 18KB
SHA256 3bbccfbbd6b205555e3fe33181c618ebcfa92a65f186320a1824a8927eb75572
MD5 b8658995a5f5fac67a2e86fdecca8242
SHA1 ce97cd62915e347438d7d229d14a8537e2f1b150
SHA512 f8c1aca3db06730621177ee9756d5f49762d4c2d76a8d9416f030b8ea1dfb0eda35046f2912c4a719ea66f9128d2a6bbcc15b8aecfcc05c02d07cd25be6cff6e
SSDEEP 384:p3ZcIhsNb7XQjFyp5u8iAr46VZh6DKhHKoh:9hvFwkA06fYGHK+
TLSH
T102828D3258786C7A6DFAE552F8473B179EB48157E3C82F84C4ECA71D01EB6982307A17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6eb2f273-5a31-49db-8e86-bacb93e42e2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6eb2f273-5a31-49db-8e86-bacb93e42e2d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 94432d8333c29489818bdf6be788066a6e82821b983a66a51dabebb39d4131ff
MD5 eb9043d92b5849a27bb553b1bb4ef9ad
SHA1 c62019edc9e7a02aabb29baa22a384da2724bd55
SHA512 a1c93e002d6b30fad5b9341dbb21ad67437847989ec1ab59021becf88ec6bb218fa7e113aa038f72c364d30697d4a10ac02b80e9886d5d5aa754e0bb125c738a
TLSH
T183411AACA6F91148B3776F5AABF6A45D447AB9772E46D49E00010E4F0A62B00C872733
MD5 SHA1 SHA512 TLSH

Submit Download