hxxps://www[.]google[.]com/search?q=tria[.]ge+usage&ie=UTF-8

Analysis

user interaction
yes
max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 23:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.google.com/search?q=tria.ge+usage&ie=UTF-8
Sample261030-27f8msg12k

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
996	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{37C3A5D3-108B-4260-998A-45F7B6C25E59}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1124	msedge.exe
1124	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 3668 wrote to memory of 3736	3668	msedge.exe	84
PID 3668 wrote to memory of 996	3668	msedge.exe	86
PID 3668 wrote to memory of 3388	3668	msedge.exe	87
PID 3668 wrote to memory of 3388	3668	msedge.exe	87
PID 3668 wrote to memory of 2876	3668	msedge.exe	88
PID 3668 wrote to memory of 2876	3668	msedge.exe	88
PID 3668 wrote to memory of 2876	3668	msedge.exe	88
PID 3668 wrote to memory of 5076	3668	msedge.exe	89
PID 3668 wrote to memory of 5108	3668	msedge.exe	90
PID 3668 wrote to memory of 5076	3668	msedge.exe	89
PID 3668 wrote to memory of 5076	3668	msedge.exe	89
PID 3668 wrote to memory of 5108	3668	msedge.exe	90
PID 3668 wrote to memory of 5108	3668	msedge.exe	90
PID 3668 wrote to memory of 5052	3668	msedge.exe	91
PID 3668 wrote to memory of 5052	3668	msedge.exe	91
PID 3668 wrote to memory of 5052	3668	msedge.exe	91
PID 3668 wrote to memory of 3912	3668	msedge.exe	92
PID 3668 wrote to memory of 3912	3668	msedge.exe	92
PID 3668 wrote to memory of 3912	3668	msedge.exe	92
PID 3668 wrote to memory of 1464	3668	msedge.exe	96
PID 3668 wrote to memory of 1464	3668	msedge.exe	96
PID 3668 wrote to memory of 1464	3668	msedge.exe	96
PID 3668 wrote to memory of 440	3668	msedge.exe	97
PID 3668 wrote to memory of 1956	3668	msedge.exe	98
PID 3668 wrote to memory of 440	3668	msedge.exe	97
PID 3668 wrote to memory of 1956	3668	msedge.exe	98
PID 3668 wrote to memory of 2904	3668	msedge.exe	100
PID 3668 wrote to memory of 2056	3668	msedge.exe	109
PID 3668 wrote to memory of 3628	3668	msedge.exe	110
PID 3668 wrote to memory of 4596	3668	msedge.exe	111
PID 3668 wrote to memory of 3364	3668	msedge.exe	112
PID 3668 wrote to memory of 3364	3668	msedge.exe	112
PID 3668 wrote to memory of 3236	3668	msedge.exe	114
PID 3668 wrote to memory of 3236	3668	msedge.exe	114
PID 3668 wrote to memory of 1124	3668	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.google.com/search?q=tria.ge+usage&ie=UTF-8
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x290,0x7ff85b01c188,0x7ff85b01c194,0x7ff85b01c1a0
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,13351479309334376206,18302618430763254618,524288 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:3
  2⤵
  - System Time Discovery
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,17026836232195875663,14460278601907595781,524288 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:8
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,9085220786293921219,3373248456450898840,262144 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:2
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,3874462663660658596,4694375168963910375,2097152 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,17753644486188570488,10224355261007070036,2097152 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,8787535366760803620,4018068662167967743,2097152 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,16535521054364282126,15513548186832237190,2097152 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3508,i,14086231805602015453,18026375026518495651,2097152 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:1
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,3191677861669225123,12105895495705394498,524288 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:8
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,7616401678509209002,7172724380153232189,524288 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,10726521566913802766,4960705949279156078,524288 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,10726521566913802766,4960705949279156078,524288 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,1055467229081485225,17706813393379396280,524288 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,13988365920995792016,2345035516098658416,524288 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:8
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,6437210211717525115,14898395627017273993,524288 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3476,i,3319386585281517843,13135305102967018630,524288 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:8
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,15121407743085670851,78868363917492870,524288 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:8
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6076,i,667335260338106407,15851565909719375120,262144 --field-trial-handle=2528,i,13988141703737368479,12936860833158701505,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1124

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:724

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3729a08f-61db-4d89-b511-beac0e49ff48.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3729a08f-61db-4d89-b511-beac0e49ff48.tmp
Size 8KB
SHA256 a3a101ec7dc4d12a1fc7ddb1c5ebae17ec64895d1b59f26dbd80c6de0e893270
MD5 059180aa2c8896a25d79a9369d307add
SHA1 ec3e345d5ce80253797efa478eecd523d08c4088
SHA512 267b1655aaf625e8ca751cdc7ddd14cb01fd1c5043b5b56920cfff13b62bb93ece138abe7944a1181734f2f6ee162ae441f4067a4673e2749402cc9f7cd60a22
SSDEEP 192:BONy6JUm0QmiUyXoXdso//2ywlBC28NU6:BONy6+mEtso//SKJU6
TLSH
T11502F938BC697C7B9EF3AE45B48777139FA4106BAA901F84DAD81E1D01D715C1303D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

0dd7a811-8eff-4d22-853d-4d646a3b68a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0dd7a811-8eff-4d22-853d-4d646a3b68a0.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

3c61df28-50cf-4fb1-8c67-2e8aa0927e09.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3c61df28-50cf-4fb1-8c67-2e8aa0927e09.tmp
Size 10KB
SHA256 4bf73b379bf73b6e2867171289f5d205da0ff22be871a89de138b0ce2aae47a1
MD5 570b0a63cb44a5fa4019387fdc082971
SHA1 6f192f9f23c39fcb9f08ee046ba00077a4a32587
SHA512 1a9f06a8bc4f49801a42fb447b2004a207bfd64aaf51bca2f8f335d03948f42f38c18dea3c5cc70db796ba9eba797a5c6010dd5fd4986eb318c7899b18f7eb61
SSDEEP 192:sxZvRjWV/ftsNXWIdpq6+HW6+WNrnz4/Y36tsHzDIgrJ:sxZvMV/ftsNHEHbX4/X09
TLSH
T18722B8526D38A97B8CCBD30ABA25BF53E6FE503291D41D58A6FCD61C04E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48546688-0e47-4b3c-8007-e15b63ae8214.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\48546688-0e47-4b3c-8007-e15b63ae8214.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75291a33-c95e-4465-9a60-1ae13467c9d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\75291a33-c95e-4465-9a60-1ae13467c9d6.tmp
Size 10KB
SHA256 5c4e3e12260c709efe8199731ea6839929d3aa4fb3073acf4c90290a9d63fd65
MD5 e74d7d14aaafd857ba34a9a1bc3ebf89
SHA1 34b68ee7bfad61171033d4df9e33aa8734ab50bf
SHA512 fe21fb6fd4d4f0aecda457f0a955aeb0c3e89765cc96ae1c51b001f3f836aa3fa2b36c9ab8f42b1f2e8ed831a6748f7cc9f29cddfb87434e17768459284525d3
SSDEEP 192:sxZvRjWV/ftsaXWIdpq6+HW6+WNrnz4/Y36/OHzDIg5oJ:sxZvMV/ftsaHEHbX4/XAO
TLSH
T12922C8526D38A97B8CCBE309BA25BF53E6FD503291D01E48A6FCD61C05E6BCD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

872510ac-cc80-47ff-960f-2cd7fe59640b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\872510ac-cc80-47ff-960f-2cd7fe59640b.tmp
Size 10KB
SHA256 fd0e507e6697a4584fb609ecd0ba0a00bf4bd72a6b6731d8e81b26d5f323b8f6
MD5 64bcdb9d4f54beb83f78fde05770576e
SHA1 eea82dc62cc4bdddaca481bb81bb7ccc0b54e8b3
SHA512 930d5d1b8c30f5d58c41da0f592407ba222f27da07a68d4b8bb3c9a4a089849169eb3db66e00082e5382fb608c73bcf6684cfe35dc6844fb82dfd448f24aadb7
SSDEEP 192:sxZvRjWV/fts6XWIdpq6+HW6+WNrnz4/Y36tsHzDIg5CJ:sxZvMV/fts6HEHbX4/X0k
TLSH
T1E722B8526D38A97B8CCBD30ABA25BF53E6FD503291D41D58A6FCD61C04E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 929cac9b75e114a8e61f13fa5ce3433600a60cac8307c7ecb73857c053951d3d
MD5 64620e36006c43ceed4a7aec941f02be
SHA1 a6b1ded876a6fa21af61ea287bfc5ee439f68187
SHA512 f0194b8a66f96b60a6255575f14109cf571075672cf0a5dc23cece5a2e28d90808fa91cab55aa127d09026b7534d2a0b1f8fb5d59d57bdaac00ccd5c534cfa59
TLSH
T19AE0DFE54ECAC36EE24C644703B9A30C8388265AD2C1691B3B00E5C8B205054A782690
MD5 SHA1 SHA512 TLSH

Submit Download

f_000049

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000049
Size 350KB
SHA256 7cf60efe182c0c85b02ff13cbad26b1836c1798bd9a5f3a0b85bf89ff047c5aa
MD5 334b0fa1adf3ccf225d87afcef3894d5
SHA1 5e9af360ce30f803a1df1bc027ef68d5cd8dfa37
SHA512 680bfc7646e1a57eddd441c64fee3d50cb8aa47bf1eb68660bccc3ce7b92bc51824a3c0c6f9f0c6a36cb9fde842167a980f103e5b59bc484d645999af9f1ac18
SSDEEP 6144:wZpDEwRnuLHBNUjtt7heEW7eSh21T5TKK2lSu1raoZYlbo:wZdEwRuHsh17SmNTKKLo5
TLSH
T1D574237905C189E0804F12F6F6646E5F629E318E5F23FC0EFB66E587A16F1922F21748
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 ebc4a517a3f7198b1b473561a0b2d53f494f6b3a6066bbb4a3120be97e1fb10a
MD5 e6af50beab4aabbfe7e5673bdc3fb52a
SHA1 434e1d1f07fe61e35038ab628bd82cbee7d2665b
SHA512 9eae4f97fcd452ddc36318627ad1f14a7474a836a5c487be5f62000ca8965fa9f1cbfdeaa91121d3c266b61ec87025c75e7973e05c92c64d366267ffe535768a
TLSH
T10E5186C016A447D1FFA890F449C4118B3A3D6CB15A432D323ADBDEB6E786759702C044
MD5 SHA1 SHA512 TLSH

Submit Download

4d637070-6bd9-4cac-bebd-0eab7257ac3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\4d637070-6bd9-4cac-bebd-0eab7257ac3f.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

6c9a360f-2b3f-4a6a-81d7-76c4d9a10a3e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6c9a360f-2b3f-4a6a-81d7-76c4d9a10a3e.tmp
Size 2KB
SHA256 982f6e411fa822f926506319f630519f3c5dd952fc6521186f80e5bf02da1b93
MD5 5629e6604e04e6c6b5a1e64d90ad7a0b
SHA1 0f1298decc168d7f59e6a2b920283cb230124127
SHA512 7ef352348923bb5c47124f66c6c64533affde4a3d10c5ddf733be87cf62317c28196e3510b250adf27c6fda51b0f01a219bcb8f7e946e73f0a254f1acf2fba08
TLSH
T1A9418AB7C3D9C62DC90156F4AB25AF1ECE1D0618432C3C6AC8D8AE5BD3F2471E10565E
MD5 SHA1 SHA512 TLSH

Submit Download

c98419d2-c337-4ce4-a318-2bd64bc420d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c98419d2-c337-4ce4-a318-2bd64bc420d7.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

e3cf369e-b2bf-417d-94db-ed39074fd385.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e3cf369e-b2bf-417d-94db-ed39074fd385.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f52c40e9565415162a5aca4c8feb8ce37ac84059ae2154bf18ca5cf52a21f429
MD5 21dc1472ca5956ab9fadaba18b29e46b
SHA1 7a01668b6a8521079a4c245e55ad13e847f9de58
SHA512 ba507238e050ec40461b90e52018fc37fc8fef1fe0b5dbd74f3c2c4a9f82a9f18010dd93de1cc6a399310d48c7506553579d7891478a5ba49ef304d2307429b7
SSDEEP 48:K0BQ9xbfj8bP6nISJ8K9p1D8xhsYarhhyL6lI064I5bkjUISs5K9Q1K5xipYb8Eg:KUuQKTS2OJWKK05l+KO0qR
TLSH
T19C91250331BB0241397F658942B49A1F459531B63064E92FBFBC41E2DDAEE085DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8f083e4-d2c4-4742-ba44-3dd20bad1d56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8f083e4-d2c4-4742-ba44-3dd20bad1d56.tmp
Size 27KB
SHA256 b12d061343e6eb889f41de0904248ec08f89326e536bf24a61092c409ac11d39
MD5 ad3ea250fb6648081e65a769f997e3b1
SHA1 bc03dc81ca4127d2ad7436cc93800a4ff9f7e9d2
SHA512 b0a8047de7942d87b917dac9e7ecb48eeb5a01a3401698494d99d72b5799f9b57336d952d13ae3cd2b2bc549132568f7e35014ba9becdf20ca03b9f13054cb30
SSDEEP 768:kGKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/jroct:kGKlm7QWvUYe0u1ja8/L/E/Qct
TLSH
T1B9C20A3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca7f6fd6-e9d9-42e1-a6b6-cf756a875896.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ca7f6fd6-e9d9-42e1-a6b6-cf756a875896.tmp
Size 10KB
SHA256 147e0c9e6082fbae7662449321c3f0da2dd5ab370430e6659ec87da14fdbeaa1
MD5 5faf21ad6106929c0936922a090d98c4
SHA1 5acccd583b97b6a5f9f8b330b9bab39c4ea37d32
SHA512 7ee5f6f537f87d7f25527f6bebae83bfc73df893d099875d1954f7841ccff375afbd00a17912de21a10229fbffcaf5e0ca20c409fa81a5c47910f351ba231d54
SSDEEP 192:sxZvRjWV/ftsaXWIdpo6+HW6+WNrnz4/Y36QRdzDIg5oJ:sxZvMV/ftsaHKHbX4/XGO
TLSH
T16832B8526D38A97B8CCBD319BA25BF53E6FD503291D01E48AAFCD61C05E7ADD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

122da325-1849-4099-be32-d09d9c892465.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\122da325-1849-4099-be32-d09d9c892465.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bbce5784-2ecb-47c2-912d-92ef13802236.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bbce5784-2ecb-47c2-912d-92ef13802236.tmp
Size 25KB
SHA256 1931b1f56520cb5f3ea3a1e98aa7d46bc06207fb0f65e9244ea65efad6a619c3
MD5 46aab102608a4237ff223453226559af
SHA1 d83fd43c995f9effedf4779924436cbad642e25b
SHA512 f7f042d0e77ba2542e9d37264af6135ccfd6ecdb9b973a1471c54e0705893d32d33feeb2d664674b566407e8d45ca591c3b36715435cf7c7e4a84f0577858bb8
SSDEEP 384:8iFwvFwPasuozsNQ8TUNTUlIldUiRTbD1Wuh//S3NxmAk7f6Ubgy:nFwYpwgoSp9/ExmAkD61y
TLSH
T15CC208F248D3983AD99E9743E77D2E029E7CC067B6845A50B7C99A0DCC8A1BFD306911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6923412-7610-4e8f-8ac1-268a60821229.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d6923412-7610-4e8f-8ac1-268a60821229.tmp
Size 8KB
SHA256 b24717bcc9580607797cabc5c27295acef2ea55997260ea38cb6051d3114095a
MD5 69778dca2f4be0533fe15b7254159fed
SHA1 4bb00988f3bc26bcf5d4b045f9a5d369a3f2efb7
SHA512 fc60faace7a3782f3eac5f7a90624404f69a7e921ac98ad365aaca8a3dd5262f36c4842dc77cbd5e4d7ccac850726aa6fa254cf6a12beede598700fef38a9137
SSDEEP 192:h3ON9D6JUYeQmiUyXeXdh3o//2yw3wNx2Pq7U6:lONJ6+FvJo//S3axU6
TLSH
T171121835B868FC7B9EE3A591F08336139EA44127EB896F80DAEC2E1C01DB16C5307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e69753d2-4111-4725-bc1f-810fb5e756b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e69753d2-4111-4725-bc1f-810fb5e756b3.tmp
Size 18KB
SHA256 00d72db4212c27526fe5fa456c0a6b2b980c7ea008f578cf8a6246f10579fb7a
MD5 06cd5f2a9a1b51aebb5f19380a29969a
SHA1 fb1e460bace1278e93a173ebd39cc8629322e341
SHA512 2a4b4197e296cdbca88d268e4dd840f1c4ab377332f40e6889d1feac5e5418ec79f75172858155bee154ca65d74fcc1e1fa4dd7f28a46ad21a8093324589bf26
SSDEEP 384:RvFwPasu9sNQ0UiRTbDLWuh//S3RxmAk7f6Ubgy:R5ZS/9/ixmAkD61y
TLSH
T13F827C35AC64EC265DA3A290F89A3213EEB04577DBC82F54D5EEAB1D01CF2D85307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e84e1dcb-6de4-4e7b-b676-13601284501c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e84e1dcb-6de4-4e7b-b676-13601284501c.tmp
Size 18KB
SHA256 05f5ed1831f53cbe2c624bd32f44ca8f025274e9b42f54a5c50c72afa939a2ca
MD5 6967fa12482ca11d2a4c98c8698ab431
SHA1 bdc33fd9841bb9254c66bb29aabad014b1e2387f
SHA512 3d096daed92e01e345894037fa86e8934b3a6afd2f7e62985871b06af2a5913c5cd4d13983dc495db09959b2cffa4605db3b576eb080ebf59d5989a740c138e9
SSDEEP 384:vvFwPasu9sNQdUiRTbDLWuh//S3RxmAk7f6Ubgy:v5SS/9/ixmAkD61y
TLSH
T171827C35AC64EC265DA3A290F88A3213EEB04577DBC82F54D5EDAB0D01CF2C85307E26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a5d5ce42-a14e-4a10-bfd8-eb5e9f5414fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a5d5ce42-a14e-4a10-bfd8-eb5e9f5414fa.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f93e61abaada778be939a69808e6097ae049e8f55e9f9710474e9863996aa1de
MD5 8a4c6d7e92f88255c885e1d1bbc97a4a
SHA1 5291e4f4e64199b122b4f1acf9f2793aefc2986a
SHA512 490ee15d5abbf093a75c942815d255957920216ebce90aed4a108de784b4dc3ec1e9b5dc6bc544b56f4096ef0979ad1398e48e266d5732571a6eeef9bd374aae
TLSH
T191410759BAFA1148B3B76F1A9FF6A86E483F79632E06945E00110E4E0667B40C861B33
MD5 SHA1 SHA512 TLSH

Submit Download