hxxps://tinyurl[.]com/nexdam1?d=Mjk1NDA0MQ==

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 17:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://tinyurl.com/nexdam1?d=Mjk1NDA0MQ==
Sample261102-v7f5bafg39

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2860	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{A0DF1689-76A2-44E2-AEE1-EF14F7CD0D39}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2000	msedge.exe
2000	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4384 wrote to memory of 3936	4384	msedge.exe	83
PID 4384 wrote to memory of 2860	4384	msedge.exe	85
PID 4384 wrote to memory of 2656	4384	msedge.exe	86
PID 4384 wrote to memory of 1076	4384	msedge.exe	87
PID 4384 wrote to memory of 2656	4384	msedge.exe	86
PID 4384 wrote to memory of 2656	4384	msedge.exe	86
PID 4384 wrote to memory of 1076	4384	msedge.exe	87
PID 4384 wrote to memory of 4840	4384	msedge.exe	88
PID 4384 wrote to memory of 4300	4384	msedge.exe	89
PID 4384 wrote to memory of 4840	4384	msedge.exe	88
PID 4384 wrote to memory of 4840	4384	msedge.exe	88
PID 4384 wrote to memory of 4300	4384	msedge.exe	89
PID 4384 wrote to memory of 4300	4384	msedge.exe	89
PID 4384 wrote to memory of 944	4384	msedge.exe	90
PID 4384 wrote to memory of 4996	4384	msedge.exe	91
PID 4384 wrote to memory of 944	4384	msedge.exe	90
PID 4384 wrote to memory of 944	4384	msedge.exe	90
PID 4384 wrote to memory of 4996	4384	msedge.exe	91
PID 4384 wrote to memory of 4996	4384	msedge.exe	91
PID 4384 wrote to memory of 4648	4384	msedge.exe	94
PID 4384 wrote to memory of 4648	4384	msedge.exe	94
PID 4384 wrote to memory of 4648	4384	msedge.exe	94
PID 4384 wrote to memory of 2696	4384	msedge.exe	96
PID 4384 wrote to memory of 2696	4384	msedge.exe	96
PID 4384 wrote to memory of 4000	4384	msedge.exe	97
PID 4384 wrote to memory of 4000	4384	msedge.exe	97
PID 4384 wrote to memory of 3796	4384	msedge.exe	100
PID 4384 wrote to memory of 4160	4384	msedge.exe	114
PID 4384 wrote to memory of 1692	4384	msedge.exe	115
PID 4384 wrote to memory of 560	4384	msedge.exe	116
PID 4384 wrote to memory of 3284	4384	msedge.exe	124
PID 4384 wrote to memory of 3284	4384	msedge.exe	124
PID 4384 wrote to memory of 5080	4384	msedge.exe	126
PID 4384 wrote to memory of 5080	4384	msedge.exe	126
PID 4384 wrote to memory of 2000	4384	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://tinyurl.com/nexdam1?d=Mjk1NDA0MQ==
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff82aedc188,0x7ff82aedc194,0x7ff82aedc1a0
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,15678388186023311525,12857236841774090797,524288 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=2796 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1776,i,17070021709708132026,10239237080408467132,262144 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:2
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,1999627582612225214,3612812044489112399,524288 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=2812 /prefetch:8
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,15374294196301299551,15372568928471933462,2097152 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,13997341834662562956,7214452236604157722,2097152 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,9701569423386042125,17484984297230727635,2097152 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4168,i,7117619230783054460,3777598405540493991,2097152 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5008,i,3978535183408199165,17457362063605435597,2097152 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3556,i,14411091823761154308,6179873147387025905,524288 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:8
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,11356974298262776453,13575457107146001011,524288 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,4238724886769295442,13641599578728442819,524288 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,4238724886769295442,13641599578728442819,524288 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,10370365219562817773,1844856725338253175,524288 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:8
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,9798109318999794760,4465479128294466633,524288 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:8
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,8915344523663178797,1838506869546966744,524288 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,14700196772069560488,6374301332242345789,524288 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,2236834378996534128,15494479054632769815,524288 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,14084844568982177696,15473487755669261547,262144 --field-trial-handle=2768,i,8363584721085262700,17463436455269161918,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4820

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1d2653af-e02c-4385-932d-0e12b62342df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1d2653af-e02c-4385-932d-0e12b62342df.tmp
Size 8KB
SHA256 563381a6a03221ed6971ead1f332b066ee9523e6b798025a57bb42ae923e9706
MD5 6c8b7eee6b59a55140cf609ff6844b60
SHA1 afcd322ea1c92cb9da73e0aa8912384f67ccce44
SHA512 2342bef5855fc1568230ed23d6a7d7bfc5dff7dc21e1c8a99f307ba90ec1f4672d6fb9ab75469b2bb37bff6f50c5aa58b3bf38472eb50fda5ebed77627b23666
SSDEEP 192:dONC6Amwp+QmiUySs7fsiX5FzjzorosyoXZlR/qbtxU6:dONC6ip6JAfsiX5Fj8okXR6TU6
TLSH
T14512F936B8786C6F5DD2B555B48B35139EB5412BEF886F40DDEC2B2C01EA65C530A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c16b0e1-3ccc-4baf-bd77-d37cd4007fc4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2c16b0e1-3ccc-4baf-bd77-d37cd4007fc4.tmp
Size 18KB
SHA256 3e26bd0caf23161734331687cff885f36aaad63f9a6022a37618cea4b1ed3430
MD5 1fe6c19f21b079d9cf65c73d88100c38
SHA1 119d996571f374484a4c0b3ebcee45fe9b474819
SHA512 30ce97e8cb5423ed5b6546010fdd59db545bebcdf70b1141514990c61484175e7b37ad499aa749675c99679727b9b7d66f5174ee671adc08592dde1112357ffe
SSDEEP 384:eQkUSv0sNwUCsEIvpuROS99iX5Fj8okXY6TH7vBEjUIIl+:O07IvJSjaCYsH75EYLw
TLSH
T1AC827D31A8785D3B06E2F611F14E3913EEB4901BDBD82F54DDEDA72C01DA29D234B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

355a2c73-0988-475e-b7ae-d0058e7185b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\355a2c73-0988-475e-b7ae-d0058e7185b3.tmp
Size 27KB
SHA256 67e70ea6f351acf394f7c0359ef56ae0c4243b033cc3f3e04d7db1e346133faa
MD5 cbd9a239d94238bcf64517d97d99d1e1
SHA1 0e3fd40e8b6d3a61898a55896265675f3a834053
SHA512 9c1a462917d1a75ae90f9d64401a2e5977dcb55b46e59b69fd5f028e12df7700b52e2d786253344871664ab2ac4495f90f2387a858036fbdf8638d155385b9c9
SSDEEP 768:KO30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72lrolZMy:KO30AbSWvS2l9u1jaLmLZ12ep
TLSH
T106C2EB3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796648D4047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38a1b596-902b-402e-8838-ee16c2b54e3e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\38a1b596-902b-402e-8838-ee16c2b54e3e.tmp
Size 10KB
SHA256 509665b1020307608fa260286b970cd4c90fd76d7ffae2114a9cd779ccc7a128
MD5 baf46dfa9db177f3568f369434a86f29
SHA1 174cd91174fb908a71a21695ea0ce8294b2e4fc0
SHA512 7505de7f6f88f80a367e454dbcbd03e76a71c31efb6fe308b60aabd3975070d7272c068eda17ff7fa7209b2f7a7467addf7394369aaef2229d713f9e7836b217
SSDEEP 192:sxZBR7WQ/fSs++IdpnXHW6+WNN0d/Y3PBUR+MIg5cJ:sxZBQQ/fSs+vXHbe/Vf2
TLSH
T1AB22D8526E28A97B9CC7D21DBA15BF13E6F9503255D01E48AEFC8A1C05F76CD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87fb7cda-846b-48f8-95d6-4c868c708894.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\87fb7cda-846b-48f8-95d6-4c868c708894.tmp
Size 9KB
SHA256 223a0e9a8ebbe31aaf0e3249b7f31375877cd6310f76a7455b8aa62aa8ee62e6
MD5 9ad230e29fa44272f8a742e258bfe7ed
SHA1 ccfb3848fce9d3a0b7fd1cc86f877529a611775c
SHA512 3ac3b328af07d2aab9ef772237a199bbb7733c1c95a693da1fde5c78fbc2d04d58d435d3950554a2be1e8b532c0c8264479be7f06b49b892da8fa7418bc46fed
SSDEEP 192:sxZBR7WQ/fSsK+Idp5XHW6+WNN0d/Y3mB7R+MIgrJ:sxZBQQ/fSsKvpHbe/ff9
TLSH
T19D22B7126E28A97B8CC7D21DBA15BF13E6F9503295D41E48AEFD851C05F66DD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 186620bbcb6663cf9f2596f8be4ce56c90a30f26a44c04e8777bd3149b6f57d9
MD5 35ea5b9cccbd8ee584bf702f9d6e727a
SHA1 b3cdc092a3a4b80153d6bdbb81d1a7744a58ec81
SHA512 7bbec8a46eb4827df35941682aecbde6fb939484904a32fc1c7181802e7ea386ddf933db7e4d76e8a541d29e44a56acdccacd796bc3d15e40f4ec78577d7be5f
TLSH
T108E026C916CAC23EA20CB54B01F9A70CC280361BA7C4AE2E1B04C4C4B042C40E38FAA4
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 016e29ba9bdd45bc2b58073babb3747238b13a92ae23a200eb99687864bc1fbb
MD5 51893a56cae630bdbf57b01786ca253a
SHA1 c2be4f2dcf4126d6d7ea0f646305dbac8112af7b
SHA512 125dffdeb4b5acc5346cd1a35abf065864a3719ef712c967c09733f1cbd2d91c7e5cd25bdf4fbbc1cdba4aca3fd81c1d62c5875880c4a80b45dddfa416ad1584
TLSH
T14F718342CB9083F1FB9E4271F8F9046BB23E2D8565831E831258D575E4CE7EC22DD84A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 35ad1ec27b1ada1ea43c882f332503875b6a62b4750f6be885843ee96aac4ead
MD5 57be0e47ccdcd771fec0b18f96b17510
SHA1 aa114365c17074527e1d61338dd199b74528025a
SHA512 a903f610aa81cbc9c8e7bdde603cd4423ee2ba9e9503fb7dbbcb48d92b12bfc95aa3192388b49a7523f3885b3f0accf10a5f449192feb3741a647e25abd62968
TLSH
T115617041DB9183F1FB6E4072F9F800ABB23E6D89A5931E831248C575E4CE7EC61DD84A
MD5 SHA1 SHA512 TLSH

Submit Download

99e6ec39-45f8-4ed8-8b4e-56da35ce9f2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\99e6ec39-45f8-4ed8-8b4e-56da35ce9f2d.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

17c38593-263e-4692-9fb6-a83acaac0065.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\17c38593-263e-4692-9fb6-a83acaac0065.tmp
Size 3KB
SHA256 e668cbd1dc20aa27d9a2cc2e3555e137bc332bde261c02e133a953fbea13ab0d
MD5 de0482dadac4279bcc4e44f34bf01745
SHA1 a3bd119d7d4f280155cd17adb2d20350b2c9eab7
SHA512 097512dd7bc8ae125e0dd095df4b4d2bce9c62606968de29b44f2a6c9794e2e8d991aed287a54c0451450f15994c80559c7d85f7b8d199fc95cb7d1ff2b5a735
TLSH
T1CC71A0F283E4837DC915D2F1A62C2E2BDE2D0615436C3D1AD6D8AE9BA3F2061D18164E
MD5 SHA1 SHA512 TLSH

Submit Download

7846faa8-c522-4549-a38e-93a3a44f1e56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7846faa8-c522-4549-a38e-93a3a44f1e56.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

9d800c1d-f424-4843-95c5-9a1367ce6609.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9d800c1d-f424-4843-95c5-9a1367ce6609.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

b01db53c-21db-4975-9851-7541f547f4c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b01db53c-21db-4975-9851-7541f547f4c8.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba11fc74-1d4d-47b8-b7d0-eae8f1d9207c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ba11fc74-1d4d-47b8-b7d0-eae8f1d9207c.tmp
Size 10KB
SHA256 a8ce6c66d190ad21a5bf6e48aed8f54c93ba3980d0db15e6bdda66692d991956
MD5 51fcbf3fc85916769a527be19e88a4c6
SHA1 105fdc9e3519728aba2d19677b8d8d9a3a99e0f3
SHA512 40814640fa7ec048c9555197466a41044c8bb1fbae5ff68c3ce831d4f922e57284462e414025d2e17762c6da5c41d8efeb998a55f0dcd7fb36e84d0282fcaf20
SSDEEP 192:sxZBR7WQ/fSs++Idp5XHW6+WNN0d/Y3hBfR+MIg5cJ:sxZBQQ/fSs+vpHbe/8f2
TLSH
T19922C8526E28A97B9CC7D20DBA15BF13E6F9503255D11E48AEFC8A1C05F76CD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c86158f4-e47f-49e9-bbcc-42c3192891d0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c86158f4-e47f-49e9-bbcc-42c3192891d0.tmp
Size 10KB
SHA256 1724ec8030b4c36e4c9ffafbc41d8a4a7fc6f874d27c231d784fa0c7445ad4c0
MD5 b03ce3b600b1fba36e7b6bf59c30d952
SHA1 eebfd23a2e751ababc9924d41a3715def556559a
SHA512 433f33d381461e85ee31652b1e8f9d15429e88ee05b66aa788df312d5ea089c607f82ade0f8abcb878705196447ebdaf14085cd5d26044c5ff0939d0885eda56
SSDEEP 192:sxZBR7WQ/fSsT+Idp5XHW6+WNN0d/Y3mB7R+MIg52J:sxZBQQ/fSsTvpHbe/ff8
TLSH
T1D922C7526E38A97B8CC6D21DBA15BF13E6F9403195D41E48AEFC861C05F66CD224B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d48439cd-cfa5-48d6-ae30-4f22403a6328.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d48439cd-cfa5-48d6-ae30-4f22403a6328.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c1d5c7eb-39a7-4543-aa0f-235861b98be8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c1d5c7eb-39a7-4543-aa0f-235861b98be8.tmp
Size 26KB
SHA256 3ec7a79dc7668bff5f3b212ceab88082205401b917b6827bd86a94e01f954f6e
MD5 0d4cd280a8c79acfa3352c9b69879568
SHA1 7f7b6911b24c73a2882301c05d7dbef98e546faa
SHA512 964b5cdbd0a3c03bc01291fb576b741b89e19154afa2b9d570662adafe7e28ab281ec71b7534e054fe5d29c3c1e878683ad339e5770ca20e2d0a5e22ad2e4ed4
SSDEEP 384:uiFzQkUSvTzsNR8TUNTUlIl3sEIvpuROf99iX5Fj8okXp6TH7vBEjUIIl+:FFd3cwgfIvJfjaCpsH75EYLw
TLSH
T18AC218F258E7493AD9AE9B03A33D3D139EBCC017B9945A50FB89561CCC861BFD30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cced98b2-985c-431f-8fa6-c40983959e0b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cced98b2-985c-431f-8fa6-c40983959e0b.tmp
Size 18KB
SHA256 66bd2daed0f1b9801b954334a6ec973e0318be60dec725eb36cfc45219e2ba37
MD5 877816411ebfc59fcdb9f58506daa547
SHA1 218144489b0a29b9226eb4a031d6b0a0c5210396
SHA512 bde7dbbdef7b6609e92e41ea0788da597522c5026c80b62117e891f6cee386a0f69cf55f5bbf45766245ae0dbe28ee774d92daf4f05171d167dd72e003e4973e
SSDEEP 384:NQkUSv0sNwU3sEIvpuROS99iX5Fj8okXY6TH7vBEjUIIl+:306IvJSjaCYsH75EYLw
TLSH
T194826D31B8785D2B06E2F611F14E3913EEB4901BDBD82F54DDEDA72C01DA29D234B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e8770656-f912-492e-9f23-349ea577594f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e8770656-f912-492e-9f23-349ea577594f.tmp
Size 8KB
SHA256 fdd5fa6fb809833969c1dfca6559af20e132c312b215b48fbf753da2b08c6c39
MD5 5807702996e5ec19ab0ac8c9d0f5b13a
SHA1 38eb8502d5aeb5150d53c8b85ca445144f3e1777
SHA512 19825946e58aec1d0dc75090125c010c5ebfff85e9643eba5e1a778ea372ba83ccd6500bbc99c4b66445c03266ae72191ba46a5ae7b58e386cd63521dfd41caa
SSDEEP 192:LONz6AmwprQmiUyR76siX5FzjzorosyNJiwxU6:LONz6ipdW6siX5Fj8omMU6
TLSH
T15902DA35AC786C7F8AF2AE45B58B76139FA5116BEB942F44CEEC1B2C01D765C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b185bc00-bd3c-43c0-ac0b-b85dc0e55750.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b185bc00-bd3c-43c0-ac0b-b85dc0e55750.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 29ffdf6f052d18f4bf2f7eb9f1d35e509747988e687f16b27556f41da6683090
MD5 22f1196246afd089b6ac2313301fba86
SHA1 84a89e8f3786a9fb514453346244359c58806157
SHA512 9e66c4b50dbb9f9f4b64796e701c607ce2ecc56d2a581746fcc19b3c056a1bdb0e14cf54e65acaa290427bd6edd8ae0794c73ce1b2c3bd01f7e2fdf2627008c4
TLSH
T1BA41D65CAAFD1158B3B7AE5AAFF6A87D447EB8772E06D19D00110D4F0B22A00D9A1737
MD5 SHA1 SHA512 TLSH

Submit Download