hxxps://security[.]microsoft[.]com/quarantine

Analysis

user interaction
yes
max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/10/2026, 18:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://security.microsoft.com/quarantine
Sample261007-wpsaasts8j

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3696	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{96A163EE-C928-48D4-AF71-DEB5A604C519}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5944	msedge.exe
5944	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1592 wrote to memory of 3940	1592	msedge.exe	88
PID 1592 wrote to memory of 3696	1592	msedge.exe	89
PID 1592 wrote to memory of 3616	1592	msedge.exe	90
PID 1592 wrote to memory of 3616	1592	msedge.exe	90
PID 1592 wrote to memory of 3616	1592	msedge.exe	90
PID 1592 wrote to memory of 4536	1592	msedge.exe	91
PID 1592 wrote to memory of 4536	1592	msedge.exe	91
PID 1592 wrote to memory of 5064	1592	msedge.exe	93
PID 1592 wrote to memory of 5064	1592	msedge.exe	93
PID 1592 wrote to memory of 5064	1592	msedge.exe	93
PID 1592 wrote to memory of 2912	1592	msedge.exe	94
PID 1592 wrote to memory of 2912	1592	msedge.exe	94
PID 1592 wrote to memory of 2912	1592	msedge.exe	94
PID 1592 wrote to memory of 4180	1592	msedge.exe	95
PID 1592 wrote to memory of 4180	1592	msedge.exe	95
PID 1592 wrote to memory of 4180	1592	msedge.exe	95
PID 1592 wrote to memory of 1928	1592	msedge.exe	96
PID 1592 wrote to memory of 1928	1592	msedge.exe	96
PID 1592 wrote to memory of 1928	1592	msedge.exe	96
PID 1592 wrote to memory of 1552	1592	msedge.exe	99
PID 1592 wrote to memory of 1552	1592	msedge.exe	99
PID 1592 wrote to memory of 1552	1592	msedge.exe	99
PID 1592 wrote to memory of 3948	1592	msedge.exe	100
PID 1592 wrote to memory of 3948	1592	msedge.exe	100
PID 1592 wrote to memory of 2428	1592	msedge.exe	101
PID 1592 wrote to memory of 2428	1592	msedge.exe	101
PID 1592 wrote to memory of 2268	1592	msedge.exe	105
PID 1592 wrote to memory of 5904	1592	msedge.exe	122
PID 1592 wrote to memory of 5912	1592	msedge.exe	123
PID 1592 wrote to memory of 5920	1592	msedge.exe	124
PID 1592 wrote to memory of 5124	1592	msedge.exe	127
PID 1592 wrote to memory of 5124	1592	msedge.exe	127
PID 1592 wrote to memory of 5944	1592	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://security.microsoft.com/quarantine
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffab85ac188,0x7ffab85ac194,0x7ffab85ac1a0
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,8615381832941855490,4175308968596091422,524288 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,15435949474950002510,5539068101412253245,262144 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:2
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2224,i,10753599480124437755,15795730935308440028,524288 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,15320249021279224355,11361002378940123594,2097152 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,11461610886724946688,7536328498764313639,2097152 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,244429643878453604,6969109542274556514,2097152 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,5166876130933428754,255455395278529596,2097152 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3636,i,13419711289059050062,1188724317673418946,2097152 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,18076117594750185336,3717190029244958775,524288 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,6880203149707634434,9995309335929022520,524288 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,2555074201659656307,10596028622292765314,524288 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,2555074201659656307,10596028622292765314,524288 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,13402965132171012888,9483349333115241134,524288 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:8
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6560,i,4154429526070825033,7079149013133831452,524288 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:8
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6540,i,1733540363850071710,6488295921805497249,524288 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,16337422990151956450,7670452062102127826,524288 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:8
  2⤵
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6464,i,10538832836139853948,16660480809598624349,262144 --field-trial-handle=2476,i,16590480187073498582,4846754217377201949,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5944

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0b156ad2-2511-4bf2-be4b-1939df708513.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0b156ad2-2511-4bf2-be4b-1939df708513.tmp
Size 26KB
SHA256 e502088f893a59f42e622209f1cba294dced05dcbdcf00d40f762d41c8876a89
MD5 2c5455e674bcc844d0bad777edc35d86
SHA1 6d9d6ceb12f42bd52afff6db03ad559afd3cba3f
SHA512 47a0d51b5c4ba026bb24afca623e0d51303d55fcf5399fb5e7f7449134f5f00d3dce4d0a79af4bd282a7ce2fa668810353f20766cf24f6519be949b350ff3c6a
SSDEEP 384:+iFPZcIEVsN18TUNTUlIl3utpud3M0Rdu9iX5Fk+EIYYPJAxJ+DChUoR:VFHOMwgigR8aQ4YYPkJ+DCSW
TLSH
T1E1C22AF288D7587AD9AE8703A73E2D034EBCC167F6846A94B7D8561CCD861BFC306911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48b053ea-8195-43cc-ae37-2fcd359336f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\48b053ea-8195-43cc-ae37-2fcd359336f1.tmp
Size 8KB
SHA256 4459c3c59b11dfe196dc497dff6966e2d23097c6e76b9ff91c783f56ed547017
MD5 c9888412a23d96ee41d4b8ee2e7a6349
SHA1 fffa4244c9fc08bbc1ce9afc7443dc8cb9092784
SHA512 26cd6861dafea05b1192f510410fef4866e1899b7ea0516c5a59a306ca9b1e1ab79242396ed408a41df1ee15f34ce1143e11dc92221573f4434a9479f4875c82
SSDEEP 192:LON16AmwprQmiUy2i6siX5FJxY+MJikYU6:LON16ipd46siX5Fk+5RU6
TLSH
T12602EB35EC781C7B9EF36E05B54B36239FD5112BEA942F84D9E81B1C01D769C1306932
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

72602f4f-2b17-41ca-a367-49c86a6cbdbe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\72602f4f-2b17-41ca-a367-49c86a6cbdbe.tmp
Size 18KB
SHA256 7f87fdde0773016f67ec93bacab7bdeee3aacc5bd3348ea1a978f596868f7d3c
MD5 ed433c9b2db8ddcf0748d482abb3eda6
SHA1 1d5b710dd6d6f1d348b1c9286accd38c4041f812
SHA512 7a2c298f8fc96495c3a60e0e407836d416873f77feb5f8379dd366df6883d232a151b4d42dfc9551f18370f99be21ea8b3bd096c24ab3606404742ec458a44dd
SSDEEP 384:8ZcInsNr3utpud3MxRdu9iX5Fk+EoYPJAxJ+DChUoR:qnnFR8aQYYPkJ+DCSW
TLSH
T109827D729CB86CB669F6D501F5473A034FB89127E7C86F94D5FC6B2C01C6698131B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8f0498e6-c999-480f-b338-02f8de6babe4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8f0498e6-c999-480f-b338-02f8de6babe4.tmp
Size 18KB
SHA256 dfb9d308a438432982ae7561de9a17116273d215dd4cf5332b7991bad3505df4
MD5 087f52ce76cd8de33af28e966d23fab9
SHA1 9470fb9ee3fb5899f95928a300e034703705d90e
SHA512 2764604b461521ed321a65a5ad2e60870aff127dd532431051876081d0bc5962cc87f8f71a048aa107957cae83d42b0713c0127f3d7c5e240f24bca1c4c85fde
SSDEEP 384:yZcInsNruutpud3MxRdu9iX5Fk+EoYPJAxJ+DChUoR:AnKFR8aQYYPkJ+DCSW
TLSH
T17F827D729CB86CB669F6D501F5473A034FB89127E7C86FD4D5FC6B2C01C6698131A922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

167831f4-2540-47b4-a92d-dc3e753c327c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\167831f4-2540-47b4-a92d-dc3e753c327c.tmp
Size 10KB
SHA256 dc3c4b0ff699a4a1ddf5d1917a66410937c23475d6a916ec60e01f217829bf8b
MD5 3ebf94a4fce8363fee3e0b9f76c807f1
SHA1 d4253f0d08f7b98e92c6ec4ac93c64115d6e02c5
SHA512 6f78f4b16eb2b17241a37b5874cde2c8a6ad0250c57492fbebc81b8cf03ebe11146aab4092343f9f2e548b1f901be0f55a264ac7777bd02bf34c743e3094da10
SSDEEP 192:sxZQRw47/fosvSNUKIdpLyHW6+WNfC4/Y38dFZIg5JAJ:sxZQD7/foseMeHbl/Ho
TLSH
T1EE22B751AE24697B9CCBE209BB15BF53E7F9503291901E98A6FC8A1C05E76CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46c4644b-a34c-4113-8b3b-2693caebf3f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\46c4644b-a34c-4113-8b3b-2693caebf3f1.tmp
Size 10KB
SHA256 b948436fb1dd80cfa69bed01e96ab5db0e5448c22e46faf31e9ced6f32c63d77
MD5 d0638904a1c51087061e9a0bedb785bc
SHA1 5dfa589a6e6a34eee84c47315e38dc6af7654596
SHA512 6cc79c489391ec73f4fe37e19f02bbf9613c1156fd1b134ad2ece43f98dcf6f6be87d8908604fe5538e0c4529b0eae2c06ca2764378fe1a65e224b7c15ff87e4
SSDEEP 192:sxZQRwM7/fosvSNUKIdpLyHW6+WNfC4/Y38dFZIg5JAJ:sxZQx7/foseMeHbl/Ho
TLSH
T1BD22B751AE24697B9CCBE209BA15BF53E7F9503291901E98A6FC8A1C05E76CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6277724a-c43f-4402-8b89-690f999e8618.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6277724a-c43f-4402-8b89-690f999e8618.tmp
Size 10KB
SHA256 af51f82e85522f600d14bd4fd0dbd1f9e05b01f71524b46e3c80d233d9cb2a78
MD5 d17dd824337852e2d5d085a24dead7ec
SHA1 5fb3ab1212ae68a095d952dc31dcfe312138376d
SHA512 dad50e2128f74951ec4be163d4eb7d8a372a6a2d8374049282cfefe9956fe569159f85448cf63af5c3fed64ca68ba9fb37c693aeacb5bbdbac03b34e758c10f4
SSDEEP 192:sxZQRwt7/fosvBNUKIdpLyHW6+WNfC4/Y3LdFZIg5JqJ:sxZQm7/fosvMeHbl/Wa
TLSH
T13722A751AE24697B8DCBD209BB15BF53E6F9503291D01E98E6FC851C05E66CD231780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

710acbd5-5187-4783-9c76-61c7b525e525.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\710acbd5-5187-4783-9c76-61c7b525e525.tmp
Size 27KB
SHA256 5babef81998a0b91bc18f4bcb816ca0492dd70e9250f0d287a54821224d649da
MD5 b2bbd243bc2a8fe5644a25536e14fe87
SHA1 7e3b1792acab4de257ff2c6663226a286563eb29
SHA512 9c6fb7398243444d610c83d5599fbfee41f8cb5c8d98ed0e723c56ec336db90ddaf6db257d69e249d42458b90f8390f282ac3f6102388260ee3b15c4420195b2
SSDEEP 768:6C30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72xrolZMRc:6C30AbSWvS2l9u1jaLmLZ12KN
TLSH
T13DC2EA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796548D4047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76359728-141a-4e58-9592-30ca0fc53ec0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\76359728-141a-4e58-9592-30ca0fc53ec0.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

8decf486-6b1d-4a09-b899-ed2b9d5866a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8decf486-6b1d-4a09-b899-ed2b9d5866a4.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96e95dba-a651-41c1-b26d-96c72c0ec183.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\96e95dba-a651-41c1-b26d-96c72c0ec183.tmp
Size 10KB
SHA256 194e55b41473fdf9e136723bab0a60f58db1e29342658a1407dbe9e7541e7fee
MD5 a8a639079de031b8b1b2e8353c7539f8
SHA1 7985df76fc887d3ca44f327b2d2604ee203aef83
SHA512 19a448fa4e994c0a6824bd7437b9c411d21b25bf65c7fc06ce8e9170ab5f0c156085dc87e53b8af62732def867070f85d5ac480ebc41b41e95db642b72cc0339
SSDEEP 192:sxZQRwv7/fos+BNUKIdpLyHW6+WNfC4/Y3LdFZIgrJ:sxZQk7/fosKMeHbl/W9
TLSH
T18F22A7116E24697B8DCBD209BB25BF53E6F9503291D01E98E6FC851C05E66DD231780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 dc5bdfb836cffdd1b80e1a7d44bde546a32366cf5f702ed1b69bc6383f5202bf
MD5 2f57bfa1fbf07af1cea1d5bdcaa1bef8
SHA1 9d6904317bca1502660e5cc37a5f8313aaf8de9a
SHA512 5db4aec496388aab19681c2d51aab988e2cfb92f25e5ecd7f98f0598f37371f0e9fc281aa211101bc2720b146596b98cd315f71f79ea4f824964828a1a50b9f2
TLSH
T17A612BB2329F4C52EFA4227C9CE1A0833E386DB424834D2B8D75F8FA1BAA7075155807
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a55d85e3a4a70ab6aa3f2df6753e7babda597e007c46edb2f361c31d0bd95c84
MD5 dae3067b5baa212b187b8d1626d9a13d
SHA1 ace8d7a051154e2255f06b1d069321a13de721b6
SHA512 824ff9b2c051ffefcd5fcff173d8c30ee4e84724b71a88b4325db88468b659663a81bf5a6bda515073046d184e778b5066d906d3b0157ec2e414e46a1e56c664
TLSH
T1296139B232AF4C92EFA4227C9CE0A0833E386DB424835D178D75F4F90BEA7079155807
MD5 SHA1 SHA512 TLSH

Submit Download

03444f39-b590-4bd7-b4e0-5a9de1b2c6fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\03444f39-b590-4bd7-b4e0-5a9de1b2c6fc.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

97e98ffb-1796-45fc-85df-c6e746d82e1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\97e98ffb-1796-45fc-85df-c6e746d82e1e.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f982b2f2-b8de-4ff1-a9a4-1b28941ef760.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f982b2f2-b8de-4ff1-a9a4-1b28941ef760.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

fb0ab219-bac5-416b-84b2-1c29522097e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fb0ab219-bac5-416b-84b2-1c29522097e7.tmp
Size 1KB
SHA256 c2bdf6dd390325dfbcead954d310e75239ed17a952f84dff772438efdb81837c
MD5 1fa9a8cdf360b5ea2884ef0cee48cda5
SHA1 c79c4979fda70a9e711cea7e1cea446a73efca75
SHA512 04440f4696a8ed4269b4b4a464f81891ef5377b2dcaf301dd2cea010dcae4aba6682c2ffff3a11bc31dab3686270d3c4b629898d41020e982faacc4de588de04
TLSH
T18A318BF387B1856ECE1196F49914DE1BCE2C0512435C785985D4AE27D3F34B1E002A9B
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0402af8dba35c4eb9f6aea17dd73c9db4ba9fe4750c8998a00ee88db7fdb2a1f
MD5 b27f32db1a079a72c10c6a98f114258c
SHA1 b249f853c2245ca298ffc6310d3c7494dbc88a74
SHA512 0a739762a6fd8eb1cf42a6d445a9d83c0a9b67be92b62b8d1e3cc6f7017a2784f9b9b4a23be7a2f3301cff4712486eb343b71a64a9a415f8233796e3ccdb8e80
SSDEEP 48:K0rOPrVNNubdQ1ISLuK9b1ZuxD+YYp7vyL8rKfhBh6bZ0JISv6K9P1F6xfqYMNF8:KcYwKR6OB4gKRmKW8KXqKd
TLSH
T13D913315717B134039BE364D41A486AA829231B7315AEA2FBBEC40A74E6FE054DFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad56f540-eb9f-4916-bc5f-6afabcd179f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ad56f540-eb9f-4916-bc5f-6afabcd179f9.tmp
Size 10KB
SHA256 d261f882b62bc37f4e899b1a8ea3785e73a2f37f9ade27b1150e471459a55cde
MD5 0ccf1e3f7a269e4a5b2763792f4cc2f9
SHA1 2cb885d193ecc0c254db59f385a451b8e0c5325a
SHA512 19fbd9feb95d218f213d2f98f83943f35e37dce27424d5af404a5aa67d088299a4b78e6ebea295eaab696372abd99258f740a97c78594048e2885bd54637a2a9
SSDEEP 192:sxZQRw47/fosvSNUKIdpRyHW6+WNfd2IXY3ydFZIg5JAJ:sxZQD7/foseM8HbxXBo
TLSH
T13E32A852AE24697B9CCBE209BB15BF53E6F9503291911E98A6FCC61C05E77CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33a7f82d-b805-47ef-a678-cda63748535d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\33a7f82d-b805-47ef-a678-cda63748535d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bdeff9b7-45af-470b-b800-a4e38821be74.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bdeff9b7-45af-470b-b800-a4e38821be74.tmp
Size 8KB
SHA256 ed3f1c0e5e579c02e7ee1afcfd0c373e4d327f3028e3709368a4ad576ec1cf1a
MD5 d16226dcd09ea7ada8be0b0fb4d885fd
SHA1 6e3b7e3618fd12041c57ee63cc40cfc2f74a399d
SHA512 daee6c02bdbd47e7b7e2ee1e708dc834307b38ae49c5b66624d0eb188f4331e96520fd2ec00353302edde37ab532ba3bbbec939e3fb70a5a6116b802885c0fc5
SSDEEP 192:LONqh6AmwpRQmiUyWeiusiX5FJxY+eteeJlRNrqtU6:LONO6ipvVjusiX5Fk+E/YU6
TLSH
T17D123A36E8786C3B5EE3A951B48735135FA54227EBC87FD4D9EC1B2C01DB69C130A522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e44ada35-1e3d-4331-be9e-28003c9199ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e44ada35-1e3d-4331-be9e-28003c9199ae.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fda43182-7a20-4400-b392-0fcd766e34fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fda43182-7a20-4400-b392-0fcd766e34fa.tmp
Size 18KB
SHA256 5938d1e76f115bf744d6866dbf6ee85efc2814bc20f1daa5ae6b8068c07b2dba
MD5 e7e2f34daa13b251b9560e4685ca70ad
SHA1 8770ca811e33967e5ef079a84a8446ca24aa832a
SHA512 7be3902c8c81f4697fa631aa24e3c3fc7e324108f3652ff6cb095b4b1d4fa47a464f692ecb81a15d029e06fa2a6b99788b5f8bf6f1329e3a8b81d1a4ef406e38
SSDEEP 384:7ZcIhsNr6utpud4MxRdu9iX5Fk+ErYPJAxJ+DChUoR:jhWoR8aQbYPkJ+DCSW
TLSH
T1A5828D729CB86CB669F69501F54739034FF89127E7C87FD4D9FC6B2C01C6698131A922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 659647dcdcb152e3ba89e561aa7cfa8ca69c942deaebd8382918b164552c222e
MD5 7200938f3588f423e949c4b147a5a310
SHA1 05f2bebc3cec967a1a255ecd1025a8d96a259b48
SHA512 33b98cfc1369196253130f143e9db7cf905c283314818bcca2e8d9c692f7fd1eb9c511ba22b1f9948da976dbef5f273f9fb84d653a3a4510b8683554860e49cb
TLSH
T15541FA4DB6E91148B3B76E5A9BF6A86D887EB8732E06C05D10110E4F0B63A00C871B7B
MD5 SHA1 SHA512 TLSH

Submit Download