hxxps://www[.]bee-art[.]it/favicon[.]ico

Analysis

geolocation tags

eueuropelondonukunited-kingdom
user interaction
yes
max time kernel
149s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/10/2026, 13:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.bee-art.it/favicon.ico
Sample261026-qec5qsd16w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4556	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{830D7A46-746C-4B6F-8A20-7F69A1A71A2E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4044	msedge.exe
4044	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe
856	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 856 wrote to memory of 456	856	msedge.exe	84
PID 856 wrote to memory of 4556	856	msedge.exe	85
PID 856 wrote to memory of 3936	856	msedge.exe	86
PID 856 wrote to memory of 3936	856	msedge.exe	86
PID 856 wrote to memory of 3936	856	msedge.exe	86
PID 856 wrote to memory of 4476	856	msedge.exe	87
PID 856 wrote to memory of 4476	856	msedge.exe	87
PID 856 wrote to memory of 4748	856	msedge.exe	88
PID 856 wrote to memory of 2860	856	msedge.exe	89
PID 856 wrote to memory of 4748	856	msedge.exe	88
PID 856 wrote to memory of 4748	856	msedge.exe	88
PID 856 wrote to memory of 2860	856	msedge.exe	89
PID 856 wrote to memory of 2860	856	msedge.exe	89
PID 856 wrote to memory of 1908	856	msedge.exe	91
PID 856 wrote to memory of 4880	856	msedge.exe	92
PID 856 wrote to memory of 1908	856	msedge.exe	91
PID 856 wrote to memory of 1908	856	msedge.exe	91
PID 856 wrote to memory of 4880	856	msedge.exe	92
PID 856 wrote to memory of 4880	856	msedge.exe	92
PID 856 wrote to memory of 3144	856	msedge.exe	98
PID 856 wrote to memory of 3244	856	msedge.exe	99
PID 856 wrote to memory of 3144	856	msedge.exe	98
PID 856 wrote to memory of 3244	856	msedge.exe	99
PID 856 wrote to memory of 3064	856	msedge.exe	102
PID 856 wrote to memory of 2936	856	msedge.exe	109
PID 856 wrote to memory of 1048	856	msedge.exe	110
PID 856 wrote to memory of 4920	856	msedge.exe	111
PID 856 wrote to memory of 3988	856	msedge.exe	113
PID 856 wrote to memory of 3988	856	msedge.exe	113
PID 856 wrote to memory of 3912	856	msedge.exe	114
PID 856 wrote to memory of 3912	856	msedge.exe	114
PID 856 wrote to memory of 2712	856	msedge.exe	115
PID 856 wrote to memory of 2712	856	msedge.exe	115
PID 856 wrote to memory of 4044	856	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.bee-art.it/favicon.ico
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0xe4,0x248,0x7ffa4f2cc188,0x7ffa4f2cc194,0x7ffa4f2cc1a0
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,7120742011912138993,9924075713517856386,524288 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,6225986603644830482,18362419821810466498,262144 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,13922901337284482643,8948106867877055156,524288 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,18008582057664203828,14247383616739748537,2097152 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,5866000385337912272,7175782481240227435,2097152 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,4914165194368810402,427938892465813517,2097152 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,11263539149571028827,4761455844506481107,2097152 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,17957582820111757444,16552121182851011058,524288 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,2865482816182584366,5618497946416063187,524288 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,2934213401385055419,9821992792274969059,524288 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,2934213401385055419,9821992792274969059,524288 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,6057701020531162928,15894843156176526007,524288 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,13633055763766012405,1370006048519831741,524288 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,192099628335602478,150751096105848658,524288 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,711445929995901619,6513692709567150887,524288 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:8
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6428,i,11581307711864030640,12371330175161897627,524288 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,15085652296448469307,6058270980039873285,524288 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,14705641316185656643,6761171733831820346,262144 --field-trial-handle=2252,i,8995411808166709064,5844617335537941082,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4044

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3776

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

04de412c-eeaa-4190-ac68-e6169c99d8b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\04de412c-eeaa-4190-ac68-e6169c99d8b7.tmp
Size 8KB
SHA256 6f24d508657f55c03e1c541b58cf0ace72b7d80e74040e9aaf51ab3dee45b80d
MD5 b2337a640130bdbe5a9c7e68123c9a8d
SHA1 750a273ae8df5eb8aed259adf2ac41f268000fe1
SHA512 85ea84b05201533c78304bc3b88b5ff7e947251f36bb6a2da69fe191518dcf234b009c9cc34193caae95349ef57a011b7c68a79d2a8832fbbabcfc1f17cfb4f8
SSDEEP 96:KqONkNQsjpfbUmjH5ih/cIPURHl8h4otop52aD0BKP4v+Y1xf//ojdMxMY+XhBjw:BONl6JUm0QmiUyL4so//ihBjU5BCZGU6
TLSH
T12702D835BC68BC7B9EE39E45F44777239FA4107B9A911F84DAD92E2C02D715C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0c603abe-feac-4b09-a59d-3259e330ac0e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0c603abe-feac-4b09-a59d-3259e330ac0e.tmp
Size 26KB
SHA256 9fc29b054dfc029d080dd46d326445b6b631d4493ce92e5e53c1052f9e7c926a
MD5 e71c00534f0e071441ee6730ade6ac0a
SHA1 3c44df3da5766eb6e86cfc1dc5a82eb734dcadb9
SHA512 b0f4dcf463d7dd02faaefa7573e08db7dbf70b492041f3f910112a84b58b0a88b3b6f74e86df764f687d59c0c632dca81e91a4c3aba05873af89a8017d3be11b
SSDEEP 384:H2qiFzQkUSvKzsNJ8TUNTUlIl3YfbXJRh//iDkEYozGt2IW4IIly:UFdC4wgu9//aDpbGt5JL8
TLSH
T130C2F7F258D79836D96E8B43A33E3D038E7CC0A7F9855A50B7885A1CCE961BFD306911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

02efc1d6-5d86-4983-b4df-627bd502d203.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\02efc1d6-5d86-4983-b4df-627bd502d203.tmp
Size 27KB
SHA256 010872e5c63d04cec71146b501080429e83a6b5bd193ba4b57fb9c3d0e0ae9d7
MD5 dd768197baa4a78e2c9f549f2917c412
SHA1 f534b91fc42448e145eb253eecb74cb8277bd1ff
SHA512 65a0713cc8120956fbb94ec43507df662dd29c278d70c6f8fce685484fb0b11e4bc6e6c0bca619bc1ce51781b9e4e3d7f869111dcf68a2c9d9d43d25ab32d648
SSDEEP 768:jPKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/EroxJV:jPKlm7QWvUYe0u1ja8/L/E/PxJV
TLSH
T1BEC2FA2B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D404BFA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45610bd8-7ebf-4e07-8c8a-f57ff7104cc1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\45610bd8-7ebf-4e07-8c8a-f57ff7104cc1.tmp
Size 10KB
SHA256 65d98485201d6e6156386380ba6006c32344f7366b8a26a8f8fa00ad4b894e22
MD5 e5f9d0e1896b33acfbf3a3c602697944
SHA1 dd9de53ccd19c8f43be562dbfc18a13a59fc06a3
SHA512 3609a829f6c9258c0e704e4e42a3a846779c621c325b4bbabaa25cc5e07ec73919ceb1b3a36a09c4957d80e8bb0caa3406ca7541be0ba3bd6d667bf269fcbd43
SSDEEP 192:sxZuRWWx/fWsgwlIdpImHW6+WNo4k/Y36/IOLIg5RJ:sxZujx/fWsjWDHbA/Xpt
TLSH
T18F22D9526E24697B8CC7E20DBB15BF53E6F9517291D01E48A6FC861C05F6ACE230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4854ea75-6985-49f6-a657-ea66e20673a1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4854ea75-6985-49f6-a657-ea66e20673a1.tmp
Size 9KB
SHA256 9f41c36d92e2b51fe2fa4a32bac967d07bf76078a49ee6db7c0ae582f78af327
MD5 c03871ac815ccea8db89082fef2f05c6
SHA1 33ffb5edd37cb44ef970d3173982ab21cd49717c
SHA512 c0f34f5c9366ae777fcae659e4ae0b362c66704fd29ab97a821c400629243fa08bcb9b2d1a497fc17e5f4e1add63bbd096e5f1aeeb36deeddfd72b450a759a3d
SSDEEP 192:sxZuRWWx/fWsb7lIdpIsHW6+WNo4k/Y36MqOLIgrJ:sxZujx/fWsHWhHbA/XY9
TLSH
T1A522D9526E28A97B4CC7D20DBB25BF53E6F9517291D01E48E6FC861C05F6ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97af357d-cf7b-472b-ac61-2cee36e45541.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\97af357d-cf7b-472b-ac61-2cee36e45541.tmp
Size 10KB
SHA256 6ad93f863e0600e9b4696fbd0b5fb49ec7d4518e6839b9399b656a8b0baeea7b
MD5 b0885d8b82f8edb10c669784b285af28
SHA1 410f286a67d95ba644405e5f6f4409b64e9968fc
SHA512 16388dd0b17ec2eea96004e0ac4b9b6f1df819427d2b4c5620d5b212d964e6a6ac0f8eda04ca87fbf22cdafd19730039d98c04076c79dd066bac610df2283276
SSDEEP 192:sxZuRWWx/fWsgwlIdpWmHW6+WNo4k/Y36T7OLIg5RJ:sxZujx/fWsjWlHbA/XAt
TLSH
T1F722C8526E28697B8CC7E20DBB15BF53E6F9507291D01E48A6FC8A1C05F6ACE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e6451a9-a2c0-40b1-aca0-efb043f114c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9e6451a9-a2c0-40b1-aca0-efb043f114c4.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 33B
SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
MD5 f27314dd366903bbc6141eae524b0fde
SHA1 4714d4a11c53cf4258c3a0246b98e5f5a01fbc12
SHA512 07a0d529d9458de5e46385f2a9d77e0987567ba908b53ddb1f83d40d99a72e6b2e3586b9f79c2264a83422c4e7fc6559cac029a6f969f793f7407212bb3ecd51
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 55301020a05a2303d19972db4b7ecb7a3db8cb633ff0273d2b30f0be17597ac4
MD5 85f31051e20e3424871f26eb6c451715
SHA1 e13f5987cd2dc9d4acfe22409bf2a63828fb7268
SHA512 d334953bbd1b26d823f1b958bc1762f4c461b0070088fa9bbc68ead3d67674958815359e44b36e00d56574e64aa1b9064c085b6725332a81da3b5ee98637b54e
TLSH
T13CE07DC406CDC22FA6CA644B027CEB0C9B9036DED2C0AD1E1F00D68EB097058F7E7690
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 293B
SHA256 6d2a6e25fd1ba76745c2144215f5debf18c3a8afe1020d2a89e8b9b2a025174f
MD5 c25cb61439871fd02ce9aabd4fbc50c8
SHA1 425749aedd32c46c99615f8aec3df2bfb5c836be
SHA512 c393c7743a1861131a603bcaef5a6a0a2358ae88cbf00c6437adf572bdc521d2093b0f3208be450fec77b2ec2ac38d3ae14ddc9c0055d294283e0e5b7f24877b
TLSH
T1F4E0C20A44D8C22A6748B4C70239938DCE9433DE97D06E0E4F04C94CB08A588AA966D2
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 8c60a282b9d82d0a37c7185192856cb2db3afea041ba2e22345f70c8928081af
MD5 32668c9058060a18a05e3da5a2ffa5e1
SHA1 319fa4931744c3b5fb465a0a9af0c96e6fbfc631
SHA512 1d23b714ef0810b10b0e6274bf865e23ad55d05bc2222f82a9bb694d96823f3e57232e4b305808a01f680cc52aa6cfe9e5e90bc3bb7ab481fd87790239bed764
TLSH
T1625168C751524CA1F796C3B7A3F699E7BA34CAC75D9F1E510484ECFA8846FD4C18014A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a5dfc3b878ab1a39cc13c88a04c63d2fa88c9f304381c18f14245ebd0282014d
MD5 5dce00887f25b92f06f571e4ca572eca
SHA1 b29ae6189f62a74001ba0f3c7457767abc47ec85
SHA512 f535b7af9e49bef98486781e8fc40ecfa3728fc96a7a03369f6152ea4329df066ca80cf66448f6380ad32548c84aea2619fdebbcda665ca7ab1f07edcf464438
TLSH
T1A05177C741564C60F796C3B7A3F689E7BA34CAC71D9F2E520484ECFA884AFD4C58014A
MD5 SHA1 SHA512 TLSH

Submit Download

473ee845-1b85-4d18-a6c3-6abb19ce9b19.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\473ee845-1b85-4d18-a6c3-6abb19ce9b19.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

2e8dad12-eac5-4bc9-9ce7-6d6aef699419.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2e8dad12-eac5-4bc9-9ce7-6d6aef699419.tmp
Size 1KB
SHA256 3cf1e95bb845f75ef156e374ad5863431b1ea5fda131f391741932feb2a73c64
MD5 2d7e182b417129302a082aeac90110cc
SHA1 7b3e00376867ce46b789ecae0cae9cad9b154d6b
SHA512 f32dbb6c06d7f64e2e0c593eee2d74084453be74c9b44c74e57c5de3b27bc871cac499cc5d4f2c7bd1ceba18fa15b57a8122a8862fc358d2a35bb260026aa022
TLSH
T1F9319BF3C3D5866DC90526F0AB24AE2BDF1D0A05822C3C59C9D4EF1BD7E2471E101A5B
MD5 SHA1 SHA512 TLSH

Submit Download

81ddee1c-3be3-49a9-81dd-6dab32b16893.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\81ddee1c-3be3-49a9-81dd-6dab32b16893.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

94b96bd7-aa06-4c58-a9a1-2c23966819e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\94b96bd7-aa06-4c58-a9a1-2c23966819e7.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

e95aa628-e474-4c82-b32c-32959632c00b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e95aa628-e474-4c82-b32c-32959632c00b.tmp
Size 10KB
SHA256 9edca9b5c1367c484a9161823d3be522869b01161d730012715cba6d4df5fe00
MD5 4eee07ef6646f80bc50fb0624474bfc5
SHA1 2362b89694b88c02b8a05489424b46fe6187a0d7
SHA512 288244b60ca683d01410a9065a8a945338b3dadbed859e3f96b2bca0595a9cb9fea8aeff33aa38bd52a375113dfcb1433f319d02677896c29dc04f9ccb4e2c88
SSDEEP 192:sxZuRWWx/fWsg7lIdpImHW6+WNo4k/Y36MqOLIg5DJ:sxZujx/fWsIWDHbA/XYr
TLSH
T17322D9526E28A97B4CC7D20DBB25BF53E6F9507291D01E48E6FC861C05F66CE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 854B
SHA256 b3481295fd49b9a3d195dcb8c92cba50fc33e714ed4a5a7960071349f668f7b3
MD5 f3dbe0fb7dc6f3b48f08aac0195f4ad0
SHA1 d3fbce978d081ccec0b97260dd696228fab8321c
SHA512 2fdf19c5ee0cae478a62525b50e2accb591f26b9fb896414b8961e50da402383fd1ff6c22d8510f52c18e0ccd8a86da2ed1ff4f0462e1aa79a9906bd82366b58
TLSH
T1C9013380B2F650845E49B682C22D4053F4B13DF5220D5CBA131EC1F21FCCE180F2EBA5
MD5 SHA1 SHA512 TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 1849a234afe5a1a009b1bde4553fe1a71eae9742cd3fd143fd56f6811bbfec3f
MD5 2ba3b742f91a77cd8fd057c72ae0d500
SHA1 e46619254cd52b98ff05b49ae287b6fc74fb5f49
SHA512 2b3ebcca74758550ddfbbe44bb8a0d0f1d9a5f10b80ffb9ad0b06b69bb6f2e37d4b16c3cb017bdb7bcafbbb450d44cff44fcfa6c93aee7a080fb7018fda48a3f
TLSH
T110113380B2F650845E49B682C22D4053F4B13DF5220D5CBA131EC1F21FCCE180F2EBA5
MD5 SHA1 SHA512 TLSH

Submit Download

2c4ef52b-7537-49bd-bf55-200cd2491180.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2c4ef52b-7537-49bd-bf55-200cd2491180.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a543cdd7-05d0-4d9c-86e6-5fd4e0327e74.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a543cdd7-05d0-4d9c-86e6-5fd4e0327e74.tmp
Size 8KB
SHA256 727a512982319f417bc300ef3aa73b633ff8cc4fa603edcf73561d8e936881c6
MD5 c801a9bafc454390673a37925da8acd0
SHA1 5e293a40575890112b3e47b36cb8659f59ab0496
SHA512 9b715bba5900f681e2944cdf21c51c1cfe26b48e54013dc8e29897406d6406ff55b277cca3ffac54a8b37afcd97c31b71d42f52f77935cecd19b608b24dfa42d
SSDEEP 192:gONS6JURQmiUy44jo//ihBjkGnPwosDZNxcq4tU6:gONS6+vcjo//iDkEYo6GtU6
TLSH
T198121835B868AC3B5D93D580F08376139E6441B7DB856F94C9DC2E2C03EA1AC630BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b100aa22-cebe-4107-a9ce-3e4e2fcd8b5e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b100aa22-cebe-4107-a9ce-3e4e2fcd8b5e.tmp
Size 18KB
SHA256 4bed9a996aa68163161b9eb4345ba29374e5e8a84b2bbf4424e78b0bc0c6b3d9
MD5 cf92fc226218ffe1bb198db7ae37784e
SHA1 18c1a345b6752095541fd7845361111a5abf95cc
SHA512 8b62bcb92dd6c4b2610fc40b6bec6bb771be61de2244db3e6341cffd3e921f8eb3bee69df3bfa9331e23ce97da72d633a87e6c86c73e5c6d41fdd92fc61ff1b4
SSDEEP 384:PzQkUSv0sN33YfbX2Rh//iDkEYonGt2IW4IIly:F0TK//aDpPGt5JL8
TLSH
T13C826C35A868AC774EA3D590F14B76139E7080B7DBC54F94DACD6F2C03DA1AC6307A16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b89fe2a8-db5a-41b6-a387-0700647e3a82.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b89fe2a8-db5a-41b6-a387-0700647e3a82.tmp
Size 18KB
SHA256 eaba03e2098124eb8705f504f8dd9165857b76dc39cf7c867c52de672ed1da87
MD5 528ee5bcc20aa9fe865382304bad8b38
SHA1 0fdbe2eb900cf481df31ddc6ee8e5351f4f9033e
SHA512 2ce59723be06ca0ab186ac18ab93e765c97d337320d4922560d86a16bc4a9a4e94f1eda7ebcb59315e5b72fb2b8c4cd7d827be82b4d83a1584ecd85703f40d31
SSDEEP 384:PzQkUSv0sN3GYfbX2Rh//iDkEYonGt2IW4IIly:F02K//aDpPGt5JL8
TLSH
T146826C35A868AC778EA3D690F14B76039E7080B7DBC54F94DACD6B2C03DA1AC6307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ae83ce8c-f6fb-4a1b-b428-ca15897cb2f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ae83ce8c-f6fb-4a1b-b428-ca15897cb2f6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 26ebb1e38dccf3876b86ed8c265d0f2aeb8dfdbfa3785ce7a076aa3d017116ff
MD5 2e9678cbfc137353e2ed320ce66bef66
SHA1 b83e0589cec37f1d13e8f3a2498bb62ea0901a81
SHA512 5d2fd43459cfcc1eee994c3d752796ff3001f79e41182c752a02fe855e0099dbfdc6a1bc08599871dd323cd13576ddd23de03a26d712bada00b8c297c60f6e48
TLSH
T165412D5CA6EE1148F3B76E6AABF6686D487F7C772E0BD45D00110E4E0673A40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download