hxxps://info[.]blub0x[.]com/e3t/Ctc/T4+113/c2MMb04/VVzg2l7prK_JVqY4jp5_zznmW6fpr4J5W8sCzN6J4pYg3prCCW6N1vHY6lZ3pYW59cYf84Z0p9zW3tyLQs2Y66nGW89bYMs2hY_7vW6ZJjDH3LylsfW30L6Qp8Hfwb2W7dg_Xj97fC_vVJD1Pj7T0gNZW7sGbkP6fmPJhW3H630-7zpbQ5N1L00kLL6fZxW1fXb6t1YzxwCW59ptdc2TmnFLW7p1T1D6llx2GW5rGQKs5DdLy_W2LBVpL64vKk8W2z5rKL40lxBzVj3yFJ8mdg2pW6rCCRp6mNKx_W3hVR5L7Vlh8PW1sWvPl7r7ChLW95VlRY8c4hQVW3v9Bwl55MHyJf74n6fP04

Analysis

user interaction
yes
max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/10/2026, 14:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://info.blub0x.com/e3t/Ctc/T4+113/c2MMb04/VVzg2l7prK_JVqY4jp5_zznmW6fpr4J5W8sCzN6J4pYg3prCCW6N1vHY6lZ3pYW59cYf84Z0p9zW3tyLQs2Y66nGW89bYMs2hY_7vW6ZJjDH3LylsfW30L6Qp8Hfwb2W7dg_Xj97fC_vVJD1Pj7T0gNZW7sGbkP6fmPJhW3H630-7zpbQ5N1L00kLL6fZxW1fXb6t1YzxwCW59ptdc2TmnFLW7p1T1D6llx2GW5rGQKs5DdLy_W2LBVpL64vKk8W2z5rKL40lxBzVj3yFJ8mdg2pW6rCCRp6mNKx_W3hVR5L7Vlh8PW1sWvPl7r7ChLW95VlRY8c4hQVW3v9Bwl55MHyJf74n6fP04
Sample261015-rax5saxtbt

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4732	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{ABD655FC-AA04-45B2-8259-5ABEB00F4235}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5064	msedge.exe
5064	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe
2088	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 2088 wrote to memory of 2948	2088	msedge.exe	89
PID 2088 wrote to memory of 4732	2088	msedge.exe	91
PID 2088 wrote to memory of 2624	2088	msedge.exe	92
PID 2088 wrote to memory of 2624	2088	msedge.exe	92
PID 2088 wrote to memory of 216	2088	msedge.exe	93
PID 2088 wrote to memory of 216	2088	msedge.exe	93
PID 2088 wrote to memory of 216	2088	msedge.exe	93
PID 2088 wrote to memory of 3156	2088	msedge.exe	94
PID 2088 wrote to memory of 3156	2088	msedge.exe	94
PID 2088 wrote to memory of 3156	2088	msedge.exe	94
PID 2088 wrote to memory of 5004	2088	msedge.exe	95
PID 2088 wrote to memory of 5004	2088	msedge.exe	95
PID 2088 wrote to memory of 5004	2088	msedge.exe	95
PID 2088 wrote to memory of 3184	2088	msedge.exe	96
PID 2088 wrote to memory of 3184	2088	msedge.exe	96
PID 2088 wrote to memory of 3184	2088	msedge.exe	96
PID 2088 wrote to memory of 4628	2088	msedge.exe	97
PID 2088 wrote to memory of 4628	2088	msedge.exe	97
PID 2088 wrote to memory of 4628	2088	msedge.exe	97
PID 2088 wrote to memory of 2732	2088	msedge.exe	100
PID 2088 wrote to memory of 2612	2088	msedge.exe	101
PID 2088 wrote to memory of 2732	2088	msedge.exe	100
PID 2088 wrote to memory of 2612	2088	msedge.exe	101
PID 2088 wrote to memory of 2456	2088	msedge.exe	103
PID 2088 wrote to memory of 2032	2088	msedge.exe	109
PID 2088 wrote to memory of 2032	2088	msedge.exe	109
PID 2088 wrote to memory of 2032	2088	msedge.exe	109
PID 2088 wrote to memory of 3608	2088	msedge.exe	115
PID 2088 wrote to memory of 3524	2088	msedge.exe	116
PID 2088 wrote to memory of 4792	2088	msedge.exe	117
PID 2088 wrote to memory of 1792	2088	msedge.exe	125
PID 2088 wrote to memory of 1792	2088	msedge.exe	125
PID 2088 wrote to memory of 3604	2088	msedge.exe	128
PID 2088 wrote to memory of 3604	2088	msedge.exe	128
PID 2088 wrote to memory of 5064	2088	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://info.blub0x.com/e3t/Ctc/T4+113/c2MMb04/VVzg2l7prK_JVqY4jp5_zznmW6fpr4J5W8sCzN6J4pYg3prCCW6N1vHY6lZ3pYW59cYf84Z0p9zW3tyLQs2Y66nGW89bYMs2hY_7vW6ZJjDH3LylsfW30L6Qp8Hfwb2W7dg_Xj97fC_vVJD1Pj7T0gNZW7sGbkP6fmPJhW3H630-7zpbQ5N1L00kLL6fZxW1fXb6t1YzxwCW59ptdc2TmnFLW7p1T1D6llx2GW5rGQKs5DdLy_W2LBVpL64vKk8W2z5rKL40lxBzVj3yFJ8mdg2pW6rCCRp6mNKx_W3hVR5L7Vlh8PW1sWvPl7r7ChLW95VlRY8c4hQVW3v9Bwl55MHyJf74n6fP04
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffeec68c188,0x7ffeec68c194,0x7ffeec68c1a0
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,2525113676280295595,5133202166035196731,524288 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,5819321997672736287,15189965125092894872,524288 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:8
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,13006430914051628633,281080785033901626,262144 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:2
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,1393802083521465322,16769655110731013447,2097152 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,11342342757769065868,4843205148533274567,2097152 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,6433897500987482140,10316098855313539106,2097152 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,14394850264747743651,14947656965897666834,2097152 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,16431120988912926282,3977481838557123666,524288 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,6456045817400838046,13030031968287744590,524288 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,5347029010987925538,12971370844283135047,524288 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,5347029010987925538,12971370844283135047,524288 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6364,i,10938651706133409339,2588570884517375839,2097152 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:1
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,16317167923100255035,15806489996197271763,524288 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,6515460117489762852,17458258594185295232,524288 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:8
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,2284871982464138357,11035698705950464504,524288 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,16100562110313837634,9403355158258373854,524288 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,8502025621976926565,10857034590296050381,524288 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6108,i,7097405308844029616,8526446221375178313,262144 --field-trial-handle=2452,i,17552426766969046890,11631924371257509959,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5064

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4484

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1e3949f0-90d9-4623-9da1-b76c1f901174.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1e3949f0-90d9-4623-9da1-b76c1f901174.tmp
Size 18KB
SHA256 c5348c88de41c7502d41e10481c1947fa41703c25b1b2ecb814e4cda7713095b
MD5 dca9b49da82e16c670cd8a84f0eb4e6a
SHA1 37803585797e154f9cc32773712757d053cb3da2
SHA512 8abb94f73d2be8729f318ad291e336f2ba532abd80a066267675c12ac787c57001755430afe3970f6a41696d830d67fda1de78298f46850fdd0aa38b24745688
SSDEEP 384:EQkUSv0sN467jZpucUb19iX5FgT+/IIl0:00IVKba++/LK
TLSH
T1F5828E3268787D3B4EE3A611F18E36439EB4911BDAC96F64D9CC6B2C01DA1DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

314aca8a-302a-4fd4-a1a7-b9f87d840fbd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\314aca8a-302a-4fd4-a1a7-b9f87d840fbd.tmp
Size 8KB
SHA256 9419833b7e081163199d73d7e7a23df9dcff35294058b76cd73fac5499e834c1
MD5 1caad02c3cd7247e5695bdb74327b34f
SHA1 5531f1b0905ba417310db7c7f152968e3efaf25b
SHA512 670660e8597fb3614fbacb7feb34c1c3ce905628a5d1c2c4b877dfb985cc15e4abc63bfb82effb20f65e23bdb7a06f0df7d41ad1ebcb053dff860e6e58c5da02
SSDEEP 192:LONP6AmwprQmiUyW2V26siX5F1RgJibCU6:LONP6ipddx6siX5FNmU6
TLSH
T17702F935AC787C7B8DE3AE15B48B36136FA5116BEA952F44CAE81B2C01D768C1306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46ecf26f-5aed-446b-b7e7-38b628597a9f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\46ecf26f-5aed-446b-b7e7-38b628597a9f.tmp
Size 25KB
SHA256 c355b9b600d7bfeb55e34e8b3570833e370f7ec4d22f8f595f4f2624b9cb0837
MD5 1e0c87906cd77eab23a1cd9f8d7f6054
SHA1 2b2c386a92b5a1ddad84ea1815f545caa4f60903
SHA512 b33b0b13e233a4051b62e9990ad89e395b1c09d598b5400528b2e980a23a3070f641eae741b804ef828b8e55d3058a2722fc11fcfc7271f352ba1f1777d9f773
SSDEEP 384:jiFzQkUSvEzsNo8TUNTUlIl57jZpucU819iX5FgE+/IIl0:OFd45wg/Vtba7+/LK
TLSH
T1E3C206F258E7993AC9AE9703A3BD3D038EBCC057F9855A54B788591CCC860BFC306912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8562408e-da86-4c5d-af6b-6f5bfec5b6c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8562408e-da86-4c5d-af6b-6f5bfec5b6c6.tmp
Size 18KB
SHA256 f95e6739ae1af689bdddce82ac95dee4805e357ac9c98e32a4e98c0db19099ee
MD5 0448aa6ddd753c4a9a5595599595d127
SHA1 88804f357adc6a2bdb9e06979d75d8b2865e9adc
SHA512 063a202fff71869e0fb972600ff40491871756954b9f163c7816366dcf4c87bbd10516fdce517015da4a0c2a85155a6b0fc18b88d89e6667360d6ff7d5804c91
SSDEEP 384:iQkUSv0sN457jZpucUb19iX5FgT+/IIl0:a0FVKba++/LK
TLSH
T19D827D3268787D3B4AE3A611F18E36439EB4D11BDAC96F64D9DC6B2C01DA1DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

331350aa-ddb6-4d56-9280-4eed4a965e97.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\331350aa-ddb6-4d56-9280-4eed4a965e97.tmp
Size 11KB
SHA256 0ed134dabc29888968887121c9f6dbcfa2b67c1623cf36a57027387f10f80122
MD5 c453fb754e154f700409ab28400932aa
SHA1 8c915f006ff4de59e4d1cc706b9f713c468208a4
SHA512 d494ed4e9fc840ba4e126073d44eccb536b99392309c54e85d40a3027cb125381e1d95f7342ca7fa81b1c307ff7650bf43f40eaf7daa5f82ebc77771b0165ea9
SSDEEP 192:sxZ2RvW4/f4sE1cIdp7RHW6+WN4r0l/Y3ZvqnIg5qJ:sxZ2k4/f4s2FVHbd/b0
TLSH
T17D32B8126A34797B8CC7D20DBA55BF53E6F59032A1911E48A6FC8A1C05E77DE530740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4b9b2963-d08e-4b22-959a-a008a55c40cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4b9b2963-d08e-4b22-959a-a008a55c40cf.tmp
Size 10KB
SHA256 9eec396c1541530a5fdcdd206fc0f30bdd7a2b151023481dee17b11071c1c7a5
MD5 8842871a9af7cb7c3265b94d054925dc
SHA1 620a2e32f29d555b2aa94c464b6ad7ff448e5a5c
SHA512 06c14752a4f9d11fb4fd39e38f0098e551b365333671188c184f2f8c18ed9fe4ac169643a6817cc7cf6b01b607eb1ccab4654a0c8ab81ed25b13a4cea0112e55
SSDEEP 192:sxZ2RvW4/f4sE+cIdpNRHW6+WN4r0l/Y3my8nIg5IJ:sxZ2k4/f4s9FTHbd//2
TLSH
T13922B7126E38797B8CC7D209BA65BF53E6F99032A1D11E88A6FC891C05E67DD630740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

74670d54-a6c7-4811-8f3d-65e90d72c7ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\74670d54-a6c7-4811-8f3d-65e90d72c7ff.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 7b474f362a8cf26580b8545d638996267ca7738bb7fee3f34d12b5529ee5b0db
MD5 ee9cf9fc147a7cee8ca5f06783403de9
SHA1 a06251b60d7b2266100e1356b4a34b27e97b14db
SHA512 1a3124a0934e6ddd14c3c9fb208cd352f565ac6d3c63893adc55cea1082e89ce150c9de7c8dc8726dd2970169170efd6b127d985e2eaf97b74cc3667a2937c97
TLSH
T1FFE020C705C9C25DD34C64C702B4574FC3B1375BA2C4FD0D2714C64CF10AA4066C5951
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 0cd6a92c52b034052e020784ba0274fd018f99edae3daa3df6a57d5b78c745db
MD5 97d1d46ab7a88c6739589f916fb36f22
SHA1 84616abad8356e47437d091a8783c3ef4b7b0e06
SHA512 b2800adfa6c85f0b1adf1308f2425204cc10b02e22eb8b0c5638f707a17c0c2e9cfc604b3e09163005a2c75808777c6b844a44c20edf720f2f502b2a26c9415d
TLSH
T1EA81A68159B40090FBF711FB55D1F69337F8968B6FB32E76DA18E074CA1E3429326848
MD5 SHA1 SHA512 TLSH

Submit Download

bee9e2e5-befe-4e52-9832-483118412ac6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\bee9e2e5-befe-4e52-9832-483118412ac6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1a5fad73-9df0-4e97-a92f-78faeebbcce9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1a5fad73-9df0-4e97-a92f-78faeebbcce9.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

23e199da-0ff1-4cce-8cc0-0b28f922a540.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\23e199da-0ff1-4cce-8cc0-0b28f922a540.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

2dadff80-2d13-4d74-b464-13e2a38b418d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2dadff80-2d13-4d74-b464-13e2a38b418d.tmp
Size 8KB
SHA256 96bb364d9faedbdcd499e9510c75127b98a6fe20d6594b4ea718560db8a9ea29
MD5 275a5b2db41878b7fae9edbb6452e07b
SHA1 1b23936e54506e9df4321dc3d50de25c2ac4bf35
SHA512 414a596a4ed26e8817da8a62181d7b2f3f7806c4a4d6f7ce1ce46e771ac751675aa4ee2a468f27b945503ecf7e7654a0ddb6167d92988518fbc17b53f85e98b4
SSDEEP 192:D/FL7te1eqBeMaSt8UovriE8KcXuiVRzcHssn92dCMxo6rI9+vMT:D/FL7te1eqBeMaSt8UovriE8KauiVRzc
TLSH
T18B024AB787F5962D891516F09A14BF3ACF290A14831C3C2989E4EE5BD3E2471F113A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 66299f4beeaf00f9359a5e353d60694833086e7cfa97e96d681fbd1adcd9c165
MD5 ca1608dd8acf3a528652b94ee7333b94
SHA1 5e010dcb5510548dca5f6a84f153ececcd8cb0eb
SHA512 53c8ba436a4ea1344ded2e1cf7edf3a69793aaebbc837234d60f1b621db4ef9891707afce8ec09d577d2e993190654a69ebbd0611aa9a107eef815c9ed19c237
SSDEEP 192:sxZ2RvW4/f4sb+cIdpNRHW6+WN4r0l/Y3my8nIgrJ:sxZ2k4/f4sqFTHbd//9
TLSH
T14F22B8126E34B97B8CC7D209BA69BF53E6F99032A1D11E48B6FC891C05E66DD630740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a7985d65db1b3b377443496ef83c893b34b6afa7e0363d4721dd86719024570c
MD5 95b54cb78b87694af0328da3a2f7a0f6
SHA1 64c0096b3d7b4fed2974dba57b4bdfee7109c73a
SHA512 93a079e2b60004e4a8759d726e4abdff0fdda4ba26609320ae7a1fdb9b38798453941fa0241e548e1a829b2714e70b4b632780414f273c48bad5c2034b42e10d
SSDEEP 96:Kg/mKskqS0IKZemgDSuQeaXvi9Od2XKV2dcXR4A1SK82s/maEU:A1jDgDSuQeafi9+2o2dch4A1SK82s/mQ
TLSH
T1E291611175BB428678FD354950A4C72B469271F33118ED6BBFAC42A24EAFE040EFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5ba371e-f325-4462-a4bd-c3a932b85660.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b5ba371e-f325-4462-a4bd-c3a932b85660.tmp
Size 10KB
SHA256 66512f31f034d7a21916e6bd0830e83b109bc3f00ebe0daabc0a995d4d8f8e36
MD5 7c1bd86a4199919e95eb1903aea59824
SHA1 9b6d47088f4d0303e24cd663d326623f8f8b51e4
SHA512 39a790412c01b57c96e82137105c5842ced7cbefe456ac4331f76d8ba9208b3636bc9d4123c82f29fddfff38ed14a779ee3d80b4deea60f1cc492588b7e3cc53
SSDEEP 192:sxZ2RvW4/f4sE1cIdpNRHW6+WN4r0l/Y33Q8nIg5qJ:sxZ2k4/f4s2FTHbd/s0
TLSH
T17932B8126E34797B8CC7D209BA65BF53E6F99032A1D11E48A6FC8A1C05E67DE630740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d97e5d15-1bac-44aa-b201-5d08b8918962.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d97e5d15-1bac-44aa-b201-5d08b8918962.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dce13683-77e1-495e-90e8-acc9baaae0af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dce13683-77e1-495e-90e8-acc9baaae0af.tmp
Size 27KB
SHA256 ea089819190d6e8d83684aebf548050473ffe8d39641ac87aee6365966b1066b
MD5 2981170af2de481f5ee7b52ba4229b14
SHA1 7d0274a1ac51ae73b0cf540a219e8115226aa38f
SHA512 50b7e26d8191310f922fd876b4db22f915ec1006be88b8c290559ce4522b6132605900c64c63021bf747e7d466c8faf8a7f4bbc8bb16adb222a0490d6b14fdb7
SSDEEP 768:Mk30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72/rolZMx:Mk30AbSWvS2l9u1jaLmLZ12sa
TLSH
T1FCC2DA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796648D4047FA944C02C77EA512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

364d26b7-6c6c-40cb-bd6d-23b41df8a4ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\364d26b7-6c6c-40cb-bd6d-23b41df8a4ae.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b4363fc8-686e-4321-b35c-9d6941216574.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b4363fc8-686e-4321-b35c-9d6941216574.tmp
Size 8KB
SHA256 1bb3d86221c9748608ffdf6ae472855fea268e2272bfc25b01f107dc17eae561
MD5 5cc5819701eaad9036a175395e8b119c
SHA1 9e443ba295d7a8b6e71d47e0e84cb270317eecec
SHA512 0ae445f4e203a5f8b11d977f13fe4c30b8c9fcd11157b5af3028d0d3453f861ac563d01cc38d0d6e1ac7980a1eb76dba5a719d1ac4852058507c4e7dac478216
SSDEEP 192:KONB6AmwpZQmiUyW09V2HsiX5F1RY36KLlRWqyU6:KONB6ip3dFHsiX5Fgh+U6
TLSH
T14A121B36A8B87C7F4DD2A950F08735135EB94227EB896F95C9EC2B2C01EB19C430A527
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3fa0ac57-05a4-45a5-a5fa-e67a703eaadc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3fa0ac57-05a4-45a5-a5fa-e67a703eaadc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 30e38d73978c23631ed4f5d7a6f7bff0ed127f0e7b1c82e8e97f6da2d98c3e64
MD5 c992989693651df4559fb1566cd71ff8
SHA1 bcc81f31338d8b0b75496d20c1f6aff90dc115ad
SHA512 2375bfa1c38716b8eab6add81e587b6c05f2ac3840b3886c091821c6afae2bab372f3607e21c8dcc68cf8f73dc6f49a60707cc2f7e14bb09ec52c74b66c7cb9f
TLSH
T10441F35CAAF91118B3B36E5AABF7A86E487A79772F06955D10110E4F0A62B00CC71B33
MD5 SHA1 SHA512 TLSH

Submit Download