hxxps://storeedgefd[.]dsx[.]mp[.]microsoft[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/10/2026, 15:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://storeedgefd.dsx.mp.microsoft.com
Sample261018-stps7abe77

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
688	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{3A4FED8E-C95E-42F1-B3BB-B262B54BEDD0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1980	msedge.exe
1980	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe
4964	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4964 wrote to memory of 3048	4964	msedge.exe	86
PID 4964 wrote to memory of 688	4964	msedge.exe	87
PID 4964 wrote to memory of 3440	4964	msedge.exe	88
PID 4964 wrote to memory of 3440	4964	msedge.exe	88
PID 4964 wrote to memory of 3440	4964	msedge.exe	88
PID 4964 wrote to memory of 5008	4964	msedge.exe	89
PID 4964 wrote to memory of 5008	4964	msedge.exe	89
PID 4964 wrote to memory of 1228	4964	msedge.exe	91
PID 4964 wrote to memory of 3596	4964	msedge.exe	92
PID 4964 wrote to memory of 1228	4964	msedge.exe	91
PID 4964 wrote to memory of 1228	4964	msedge.exe	91
PID 4964 wrote to memory of 3596	4964	msedge.exe	92
PID 4964 wrote to memory of 3596	4964	msedge.exe	92
PID 4964 wrote to memory of 3332	4964	msedge.exe	93
PID 4964 wrote to memory of 1020	4964	msedge.exe	94
PID 4964 wrote to memory of 3332	4964	msedge.exe	93
PID 4964 wrote to memory of 3332	4964	msedge.exe	93
PID 4964 wrote to memory of 1020	4964	msedge.exe	94
PID 4964 wrote to memory of 1020	4964	msedge.exe	94
PID 4964 wrote to memory of 1500	4964	msedge.exe	99
PID 4964 wrote to memory of 4400	4964	msedge.exe	100
PID 4964 wrote to memory of 1500	4964	msedge.exe	99
PID 4964 wrote to memory of 4400	4964	msedge.exe	100
PID 4964 wrote to memory of 4952	4964	msedge.exe	102
PID 4964 wrote to memory of 3932	4964	msedge.exe	112
PID 4964 wrote to memory of 3856	4964	msedge.exe	113
PID 4964 wrote to memory of 4340	4964	msedge.exe	114
PID 4964 wrote to memory of 4308	4964	msedge.exe	116
PID 4964 wrote to memory of 4308	4964	msedge.exe	116
PID 4964 wrote to memory of 1372	4964	msedge.exe	117
PID 4964 wrote to memory of 1372	4964	msedge.exe	117
PID 4964 wrote to memory of 1980	4964	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://storeedgefd.dsx.mp.microsoft.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffd5c69c188,0x7ffd5c69c194,0x7ffd5c69c1a0
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,10187598924982241733,7234473611742930026,524288 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,16325760909409832287,6805038190869510489,262144 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,8041185941476150401,5521698896739628792,524288 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,8991007151678308309,16390733876773777508,2097152 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,10952326046626436224,7360220449511383354,2097152 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,697291654594984555,13988082794343836853,2097152 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,16922700184434344799,16064314671750996124,2097152 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,11606439940169802296,2671953171482729353,524288 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,16930654895346598533,5546001190164725707,524288 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,9704128933338190272,12192874721619213231,524288 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,9704128933338190272,12192874721619213231,524288 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,12681401390449544510,11515989360079672736,524288 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,3581751419731750014,12084357656637268179,524288 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,9168229435758064722,63629244841110175,524288 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6444,i,12040916369945827197,12758021672330288081,524288 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,4703053011648680150,6475159972962099809,524288 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,2507747790711451693,1731209674393493742,262144 --field-trial-handle=2220,i,11833348028663694110,987055427899254483,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1980

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

07eb500f-d4f2-43a7-b9ef-bc437b7e67db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\07eb500f-d4f2-43a7-b9ef-bc437b7e67db.tmp
Size 8KB
SHA256 104852602e236aca7a067cd661c5418806cb900f0f42bf08ba07fdb74ca55fec
MD5 e384b27a00363dbb6142f6a465d3135a
SHA1 2ded8f990a7d95462e9f765e0aabfbd37b896722
SHA512 bfac7bb2efaf8f1b71353f5619f3e33f8d2e83ca412bcdce248aea7d86fc11a2a314c82bfe9ec12a4d832bd7adff16e0912ade33bf3da1165039bbb81191816c
SSDEEP 192:EONY6nnHGQmiUygMQYcX5hQDP17jzor4reMcQw0U6:EONY6nCEQNX5+DtL84rOQRU6
TLSH
T1A502DB35BCB87C6B8FF76D45B48633139FA4213BE6956B80DAE85A1C009769C2306D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

291b4c29-59a0-46c9-9a74-dabd833cff20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\291b4c29-59a0-46c9-9a74-dabd833cff20.tmp
Size 18KB
SHA256 7833df7bf24f9d994d8eb9d342a676e0105b44035966d898904472402b4520a0
MD5 577120d59c1e5479ad348f829019b690
SHA1 e656d9bdad419955b8fd00927f02a68d93e0e002
SHA512 dfee260d4733f4ef696e241b9bebfce7b492c5f9f935b0209f889feb4b00621d9d1fd15850366890bd07e6922ee060660fa518821c2129d31d6380a47b8a4f3d
SSDEEP 384:3QkUSv0sN9pwi0IJQX5+DtL84r9X6+2OQlXMTdIIlK:J0vsOkDtx6lOQlXMTdLU
TLSH
T1E9826E36A8B46C674AE7A651B44F32439F74A127EAC41B80DADD5B1C01CE79D231BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b0ca543-3dd2-44bf-aba0-b2ec24372395.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7b0ca543-3dd2-44bf-aba0-b2ec24372395.tmp
Size 18KB
SHA256 29ad28add2cac59fd7348123390e5a36de5b5048b27d14f29d0d875890b12490
MD5 0301ba39ed5761db4fa54b0a983a3cd8
SHA1 d1c4736df406e39066572178292ddc651aa854e3
SHA512 1d98b47a46bacd748d8b555591512869dcfb22be6ec801d11b79386badd39ff8d633e83bc6f48afb2c9cc6a04c958ac9d3f42bf42929b38c6f251e1ec7304194
SSDEEP 384:xMQkUSv0sN9kwi0IJQX5+DtL84r9X6+2OQlXMTdIIlK:xM0gsOkDtx6lOQlXMTdLU
TLSH
T184826E36A8B46C674AE7A651B48F32039FB4A127EBC41B80DADD5B1C01CE79D231BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8dc27589-569e-4ab4-88bb-073dd511457e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8dc27589-569e-4ab4-88bb-073dd511457e.tmp
Size 8KB
SHA256 ef5fcd29c0234959cb810925ae93edf5f5ffab3695baf4f429d4e5234f5fa353
MD5 373d1db505ccdb5a49da7d21f97f07bf
SHA1 78b800d160aeebbf3def66167be966cfd3a82545
SHA512 d65b6ae02cd159caf1f7a0f26caba2560cef736c8511538a8e43126c4c6dfa0eec0d5a1a2c9d74e5d0505c204b8b791feb21757cd78a89a897dfbfa3a1999b1e
SSDEEP 192:wONw6nnH+QmiUyqMrYcX5hQDP17jzor4r9X4x+2ylg3Quq5XU6:wONw6naErNX5+DtL84r9X6+2JQlXU6
TLSH
T1F212EA35F878BC275EE6A555B08731139FA56127EB897BC0D6EC1A1C01DF6AC630AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d20a96f-7119-452b-a292-39789af0bad7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\9d20a96f-7119-452b-a292-39789af0bad7.tmp
Size 105KB
SHA256 4ee1e0056f41a046e8efbfc68a394a9993e9e1572e402e58600b2c2d27cdbad0
MD5 cbb9f3725f3320854f02b5fb7d1eee93
SHA1 9c687195aa5a8f617023a505ab65229bb9a04596
SHA512 a8e728ca1dd3f2320d59c0244f1a4c82c5213ac624c22798462d831fa8936055eccd554951d7106079089867cda6e052f87a3bef24aa908224fd8e90caa6ebfc
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7Z:fwUQC5VwBIiElEd2K57P7Z
TLSH
T13DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c1d24032e322bda4aa4f943eeee5c1be2eee903b8fa00c6e40c3ae3aab1d6e57
MD5 cf18b86051311e5d4cb3435637b32441
SHA1 81808c10d3ea99d837ac73ca978bbac4af2b14c3
SHA512 d8f6d4f7cc0a9a322acccdf645cd0eaf7d236c68d82f2fd25c2d01e1e6ce323c3d584edd204b1c68ced260f3cf67a5be22a62de64511401735df9213129ac8f0
TLSH
T1EFD02B02FE898A6CD4921C34012E811D36CDF40049027041C0B023974C04701102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ba460c9f5a00478279781ba3317975fb747ea7519f30b24bac67a94df77c22d
MD5 be02dc26a22f37196d8a2ed1f90604b5
SHA1 0d4f49e0f6b152530b0ff133dac678914194c470
SHA512 74fcddf19d34dc2b1dc8ec59c0f57f326e68c7c9b62fb89494b07e2bd52522d6f7662a05f91a2d0787fba43ac2646fc3214bc591a45f14862aa715bcd9206f88
TLSH
T1EBD02B02FEC98E6CD8921C34012D811D36CDF4004902B142C0B023974C05741102CC64
MD5 SHA1 SHA512 TLSH

Submit Download

4db03cef-1672-4be7-9980-d9811d1efbc1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4db03cef-1672-4be7-9980-d9811d1efbc1.tmp
Size 10KB
SHA256 7132fc808094144e759e587243636846c7e479a342435237511f6e0657ab2717
MD5 e46bf4289177b175889605a502e671ca
SHA1 1e99559707aadac7bb65c0417cac097debfc55a3
SHA512 3c692b30110547c337c5e55e8fb3030ab050cc99a86fb1994940e43bfeec157dae9f3113f07caae6f73ab1cc6c430ccbba25067ef33155bbca4fbccd0adaba67
SSDEEP 192:sxZCR3PWE/f3sXWIdpwEHW6+WN59ix/YYBd0GVkIg57OJ:sxZCkE/f3sXXxHb5q/f0Ja
TLSH
T1FE22A8116E386A7B8CCBD209BA55BF53D6F95072A1D41E88B6FC861C04EB7DD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5220fd55-3a69-47f6-961a-5bd064c42ca6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5220fd55-3a69-47f6-961a-5bd064c42ca6.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

69cb2165-5095-4713-836d-56c388c15a16.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\69cb2165-5095-4713-836d-56c388c15a16.tmp
Size 10KB
SHA256 3a4cdc871d3c07b87e2e7119244e154f4d9f8848e2bc0de252a334c350b8aed5
MD5 29eb4e7475f2fa73db2a8358d3ee5d45
SHA1 b2bfcfa6e2f7dd68d4b9f624c1c933f286a5a236
SHA512 44c8527b783f4d123809ebdf020963bca246fe7d66b00b0eb02e442a68f273d264961fcc0f4d67b57d7b90266dbe3397fd71132ee349338a154ab86c4968b0cd
SSDEEP 192:sxZCR3PWE/f3sYWIdpwEHW6+WN59ix/YYBEGGVkIg57kJ:sxZCkE/f3sYXxHb5q/ftJo
TLSH
T19E22C8116E386A7B8CCBE209BA55BF13E6F9507261D01E88B6FCC61C05E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d07729238eae5e848dc6f417faec3a814f1cfe245c867c89b1ccfc2a91e1f826
MD5 ecca3666f8834b7eb9ac5e154bae3ceb
SHA1 14764c0c55eaa207e1d730fc06bcba66285b3543
SHA512 d6d8434bc2e3258cab809868bd94ea3f9db85f0b7f05e481180c57b58e83e013f45b30f6885bd763a5f5c3823de81ab3d9d42456634c96c1770fed5ea2853587
TLSH
T159E07DC51DCBC22EA30CAACB436CA34CC382369AD2C0699E7700DD84B086344F6C7B90
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 ba5993d53aae24e6dbd75a98a77d88bc663d91f9be2bedd0ece0d3f83e99ea58
MD5 886598dde29c30b0211946148821f9d0
SHA1 5fe520d1ddae48c9939df6553ee2b2495ff284d0
SHA512 dd75735051255a0ebeaa3fbe706f1b9f559da74aa8a4c0831e7392fb313f06938413c674e091fea3e7b28b8cc936fea96b91b1e1d594f5e3f13b26a61f5d1418
TLSH
T168616D9CD45CC5E4DBA543BC54F2D183B230D8B5718B3F611AA6E879AB2FF07B020868
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e93349178fe5e46b1830424c9bcf4e9c7d7fa3bdc86ac7a77d4a3a1dee6a9c6b
MD5 fe238b535f89f7051ed4f80721bb7747
SHA1 bd40068828b81676f7aba7668ab288fa1eb7dfad
SHA512 605a4652198475a77f546636bb5f0e3a5b7313932048fc2f27d2318d72e2e7b002d9fbc61a1630a21c3b0d58debbf2c5fa6520eda508389a2142961487d281fa
TLSH
T1A5615F9CD45CC5D4DB6542BC54F2D143B230D8B5718B3F6219A5D8796B2FF477021868
MD5 SHA1 SHA512 TLSH

Submit Download

219fb1f6-413c-480f-9a34-f7dd1d7887d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\219fb1f6-413c-480f-9a34-f7dd1d7887d6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

621f8b14-2a7a-4642-829f-dd44f6f51cc3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\621f8b14-2a7a-4642-829f-dd44f6f51cc3.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

97dcc154-7a06-4c23-a8c4-2911d5a56327.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\97dcc154-7a06-4c23-a8c4-2911d5a56327.tmp
Size 949B
SHA256 6979946f4fd4955f3e1fbab90af8466ddd9ae71e8b8b494b12ca002f68a0e864
MD5 2309cef8ab691876e1926d71c355398a
SHA1 067e2d6cd8f39dd1df4167e5557e22ae08d775f0
SHA512 9a3a4ee10d52f7dd075bcad6f3d98266358bd6df8f7b9a178c0a05d3acee63afc81fb20b914cd1ed2d6fef84ccd3b102970d6cb72a699b0c6f0baa020710ccd6
TLSH
T122117DB3C3E5C6AE8A0116F06A24AE2BCE1D0515421C7D1989D4EF2797F34B5E10195B
MD5 SHA1 SHA512 TLSH

Submit Download

b76a043f-6995-4512-8700-58add5075060.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b76a043f-6995-4512-8700-58add5075060.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c319553b4ece92fcbd86ef582b5485e2dbf9a50864ea37e0ead2fce09938edb0
MD5 7203c494896086b9fb60ed6de7eeee48
SHA1 2cc71018ac696c4a4dd97e0f840b3bff8eb58443
SHA512 aeaf5e0ebefbff2b21c6408a29c32b1acbed209532585106dfffa9a91320247d523344137b8afa2030dd5b857a88ec7df4af4a4c86923605335c59774277e565
SSDEEP 48:KgTW3Td1FGbV4tISTGK9D1xGxbWYgBzXyLbef7F99ebtAFISbeK9r1pexzOYo5tE:KYggKtW6SMYKJqab6KAgid
TLSH
T15E910F1035AB430638BD2A58A365C73A624175B3305AFA6FBFB854D64E6EF044CFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a0b49a6c-b242-4d95-96ed-6c0f1b3c0160.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a0b49a6c-b242-4d95-96ed-6c0f1b3c0160.tmp
Size 27KB
SHA256 670e0e5a5272b2311c204005f7a103d327c873a383cf691aef31fe912bd9f8cb
MD5 0ed14ca85721894acf44e54765fc0565
SHA1 0d51d8ea45d4190db23b6167a3e34fa9edbd092f
SHA512 9fec1a3421dc9782fed1e0f7fb21cb9bec605f22e9648be6739f71f852f55da483e2d4a769098e884b716c95d79c30da3d2704a5b7913cdb00acabf132750cf8
SSDEEP 768:ePyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXJrop66m:ePyYR7jWv3NpBu1ja/CL8OXi0
TLSH
T1A2C2E93B640DCB7E4FC01A9DDC5A6F9B3E9802C7A6548D4047FA954C02C77EEA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a8033cec-5475-413e-8b34-ca100a053ec2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a8033cec-5475-413e-8b34-ca100a053ec2.tmp
Size 10KB
SHA256 42fb59c30e8754dc50ceddf07856a76fa1cff9258548bc738d5540767d9db8be
MD5 05e22c889ef5d468c3c66513d139bc7f
SHA1 30522d901681c427071ee64c77c6c0896b1ab03d
SHA512 753aec525d7097840000a37952dec1a14fe8a4d909f7384ee12de29c11908bee44f25bdbead7d85f610fb6ccd2e7cc3162df9b991b5bc250ba4ed89d0bb0b69d
SSDEEP 192:sxZCR3PWE/f3sdWIdpwEHW6+WN59ix/YYBd0GVkIgrJ:sxZCkE/f3sdXxHb5q/f09
TLSH
T1D522A8116E38697B8CCBE209BA55BF53D6F95072A5D41E88B6FC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

afacb983-34ef-4758-8131-4272d9a5db12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\afacb983-34ef-4758-8131-4272d9a5db12.tmp
Size 10KB
SHA256 7c507f7d0bf1f2a152c63a28ffdb9d9daad7debc500903b32374dc493a0283d0
MD5 1bd446c83d36472a4060b3817b508e46
SHA1 bf9b5f360513b577d19ada18329bbee73767ed1d
SHA512 f35c962c03569ec08871782b8778d689b3bf96d25f1ac9ba8e8cdadb5e1ba3281e3560589202a6ebd17307f9ba63ac4b3fbe56fd3bc9c2a5515afb2d5783db10
SSDEEP 192:sxZCR3PWE/f3sYWIdp6EHW6+WN59ix/YYBrFWVkIg57kJ:sxZCkE/f3sYXnHb5q/fZJo
TLSH
T11C32B951AE346A778CCBE20DBA55BF53D6F9507261901E88B6FCC61C05EB7DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c04f1b3e-6644-4fb9-852b-d493eee40a46.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c04f1b3e-6644-4fb9-852b-d493eee40a46.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23854c08-f8d5-49f9-89b2-c1d822824ff2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\23854c08-f8d5-49f9-89b2-c1d822824ff2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4015f2e-6b2d-4527-8fb3-c14c277e7766.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d4015f2e-6b2d-4527-8fb3-c14c277e7766.tmp
Size 21KB
SHA256 fe9bab1eccc1a52942def1fa42ded4b48d2092d3c2118e41d81c171bd2b3aff1
MD5 c5e79ec4ec9459afbd0041eb7b8fe6ae
SHA1 5bc28ad2ad363a9e9abb4428e7117cd41e460a24
SHA512 9b00b74563f4e0a22323ad7cf53e3deac63032c4f8f41ffed67812d3215c562e21e64b7e679a8ce6324a893cd039e9a3d4d6f16b75850463ebd0626c0cd43b05
SSDEEP 384:JdiFzQkUSvdzsNH8TUNTUlIlkwi0IJQX5+DtL84r9X6+2sQlXMTdIIlK:JUFdlGwg1sOkDtx6lsQlXMTdLU
TLSH
T142A25B3798A49D3B9EEA9B51F54E3203DFB45067DAD46B90E7CD9A1C01CA2DC230BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

08b404d0-5f1d-49a1-9fad-e67f182dd12e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\08b404d0-5f1d-49a1-9fad-e67f182dd12e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ac9813cdff6346363ca4ae02dc339afdcd31ad5842386e97c3bdc273b286f3d8
MD5 5d18272a62ccdf9d4d6568ca12f71cfd
SHA1 7a57a9da60d2f66a55a1bcb9e01a308eb83a7e4f
SHA512 19ab9fc7259eef27064aa33743be9e74290a7c86b498310478d94cd18b1104fa79d3d3ed1c8415810e110bfcf2d1e6cab0e3261f67595bfb290df75339eed9f2
TLSH
T1C3410658AAE91108B3B76E569BF6A87E587FB8773E06D06D00110E4F4B62B00C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download