hxxps://login[.]multifctmfa[.]sbs/?p599COZM=Z2RvanI=

Analysis

user interaction
yes
max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 22:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://login.multifctmfa.sbs/?p599COZM=Z2RvanI=
Sample261110-16feaabf86

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2196	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{5315C7BD-E1B1-4BEC-9D60-E31B3793042B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2708	msedge.exe
2708	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4960 wrote to memory of 3088	4960	msedge.exe	83
PID 4960 wrote to memory of 2196	4960	msedge.exe	84
PID 4960 wrote to memory of 2760	4960	msedge.exe	85
PID 4960 wrote to memory of 2760	4960	msedge.exe	85
PID 4960 wrote to memory of 2760	4960	msedge.exe	85
PID 4960 wrote to memory of 4012	4960	msedge.exe	86
PID 4960 wrote to memory of 4012	4960	msedge.exe	86
PID 4960 wrote to memory of 1124	4960	msedge.exe	87
PID 4960 wrote to memory of 1124	4960	msedge.exe	87
PID 4960 wrote to memory of 1124	4960	msedge.exe	87
PID 4960 wrote to memory of 2464	4960	msedge.exe	88
PID 4960 wrote to memory of 2464	4960	msedge.exe	88
PID 4960 wrote to memory of 2464	4960	msedge.exe	88
PID 4960 wrote to memory of 4544	4960	msedge.exe	90
PID 4960 wrote to memory of 3508	4960	msedge.exe	91
PID 4960 wrote to memory of 4544	4960	msedge.exe	90
PID 4960 wrote to memory of 4544	4960	msedge.exe	90
PID 4960 wrote to memory of 3508	4960	msedge.exe	91
PID 4960 wrote to memory of 3508	4960	msedge.exe	91
PID 4960 wrote to memory of 1756	4960	msedge.exe	96
PID 4960 wrote to memory of 4568	4960	msedge.exe	97
PID 4960 wrote to memory of 1756	4960	msedge.exe	96
PID 4960 wrote to memory of 4568	4960	msedge.exe	97
PID 4960 wrote to memory of 3796	4960	msedge.exe	102
PID 4960 wrote to memory of 3372	4960	msedge.exe	112
PID 4960 wrote to memory of 2104	4960	msedge.exe	113
PID 4960 wrote to memory of 1616	4960	msedge.exe	114
PID 4960 wrote to memory of 1792	4960	msedge.exe	116
PID 4960 wrote to memory of 1792	4960	msedge.exe	116
PID 4960 wrote to memory of 3776	4960	msedge.exe	122
PID 4960 wrote to memory of 3776	4960	msedge.exe	122
PID 4960 wrote to memory of 2708	4960	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://login.multifctmfa.sbs/?p599COZM=Z2RvanI=
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff82aedc188,0x7ff82aedc194,0x7ff82aedc1a0
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,5334329141391484497,13758187982040599108,524288 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,16864786500597711641,3532244295826013246,262144 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2604,i,11639609199173824967,16613907706184047812,524288 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,9710852964967006053,1616215666046059090,2097152 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,9932492487655638067,16708781140381987183,2097152 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,8294532173386144629,12355194305369415135,2097152 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4112,i,48176718918239370,8716848380616731861,2097152 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=4100 /prefetch:2
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,14022151295120277248,3546240011066796888,524288 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,15044121842810001567,12815759388972922044,524288 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,9799882310112086672,7066754565476542815,524288 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,9799882310112086672,7066754565476542815,524288 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4104,i,3051078329177300281,448854394743756324,524288 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,6227391742828023063,64246108989729837,524288 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,14207988878708458662,13817237671996704070,524288 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,8530879812852183115,12763760769625375667,524288 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,5983913187763346714,6514286215907161505,524288 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6216,i,15564124080883630739,12981083911767885936,262144 --field-trial-handle=2092,i,6843783723711768516,1178602279039032350,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2708

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4912

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

08831706-406b-4e6f-90f2-52a36ccd0454.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\08831706-406b-4e6f-90f2-52a36ccd0454.tmp
Size 18KB
SHA256 efedb2c70368d6a664edf46cde80bcfa1882db4400ce1c344b0b8a39eb050cce
MD5 bd6f659281295e7f2aa1c9741b6c2396
SHA1 f979d34485cce2faa0f550369fc815df3904ca75
SHA512 f6ee4bb7fd4ac2dafee281f2ca775e7b0dd09ef5dc62cb75c3b6c8842c2a67a142ab6ca650785c4a02a3198290801e0308dcb12ce78143e9952c364ab287bc5f
SSDEEP 384:gQkUSv0sNDIxC4puS2G9iX5Fj8okXr+vaTZcRIIlm:I0rxL0yaCr+vaTZcRLU
TLSH
T1D1827D35A8786C3B4AE6B550F24F3613DEB48157DBD82F94D9DC6B2C01DE29C235A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

1524c72c-e04c-447a-a364-a451e418584a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1524c72c-e04c-447a-a364-a451e418584a.tmp
Size 10KB
SHA256 c17f8591d1acf4581c0f6acc3c1bb3723fbc2b2066435f7210a56d5e8f1ca684
MD5 4754df4b0653de3bec6614930035e915
SHA1 a9def304e99741d7fb0271768284d7f68974e022
SHA512 64a8e30a4b41c0b61d7fc6b7e34ae5c47539dec4d6cf0fa6e52a9c1afa9ad74c4162d4696d10376b95e986fba4118732b20daa911bfbbb1f62480ff3ca6f5b01
SSDEEP 192:sxZNRVWd/f+s1JIdpv3HW6+WNbOmSZ/Y3Oso4cIg54J:sxZNed/f+s1CPHbA/tS
TLSH
T19522B7126E38A97B8CCAD21DBB15BF57E6F9503291D51E48A6FC8A1C04E77CD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1d4c356f-7c1a-4e36-943e-68dcb467259b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1d4c356f-7c1a-4e36-943e-68dcb467259b.tmp
Size 27KB
SHA256 866e42ec217d9ba9b18b3f2c337644e0925c8b2917f842f84dbdbcaae31eb3c7
MD5 d815cf90bc43ba65939e2b82618706de
SHA1 d217c4df707bb4070f2d136970917b14d0efd28e
SHA512 9a729f3839d5d697065548336d740c3d27aac3a1e3c32e9a6db5eeff7ed9cde3e4cb8e461a48f3bf013c1e66417203844d4e1f521ddaf2670b7ddc767e66bbb4
SSDEEP 768:4M30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72HrolZM+:4M30AbSWvS2l9u1jaLmLZ12UF
TLSH
T192C2EB3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796548D4047FA984C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45312dbd-3ad4-45d0-bbc4-a64caf3224a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\45312dbd-3ad4-45d0-bbc4-a64caf3224a5.tmp
Size 9KB
SHA256 2fb3e497c80253498e8b99a9f0df28b90aa65ac082b713e403ea2e563fbb93f1
MD5 f1e23cb5aa7b92a03427392d3e074daf
SHA1 f6875fcdc4a7d375263d27d6cea5285f8ad1bff2
SHA512 ab5a66a2f5c27e3c9ed2200c86bc600ee7fda675b9a5cb773a3d6d3ac32f71662fcf5943daf9ee73d1124cf8a518a6d00d2fc2bb985fb700bac49267a21d763e
SSDEEP 192:sxZNRVWd/f+sNJIdpv3HW6+WNbOmSZ/Y3Oso4cIgrJ:sxZNed/f+sNCPHbA/t9
TLSH
T17122B7126E38A97B8CCBD21DBB15BF53E6F9503291D51E48A6FC8A1C04E76DD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

988c5ed9-ef31-46f5-bd8e-ff3d7a4e6f9e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\988c5ed9-ef31-46f5-bd8e-ff3d7a4e6f9e.tmp
Size 10KB
SHA256 61e26a2361248f5147666fc92c9681573e1600861a1a2a84105f446f46bf6425
MD5 753663ac3debdae4903ec1e096d1f41f
SHA1 60e85c751e09f6f790f81b6485b5a69704433abd
SHA512 57c07e08998c0ef2ecce4e41f300d08337201cf4ce9f9a4e4b2b7aff438d892804c0b0860f3d77056756fc26b77c3dc7c79ba9ccc83b1c9f8f1d657277e7b81b
SSDEEP 192:sxZNRVWd/f+sgJIdpZ3HW6+WNbSrXY3SJ4cIg5aJ:sxZNed/f+sgCZHbsXTQ
TLSH
T13E22B7526E28A97B8CCBD21DBB15BF17E6F95032A1901E58A6FCCA1C04E77CD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98b90c04-fa3d-4dbd-b31b-b5278940a073.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\98b90c04-fa3d-4dbd-b31b-b5278940a073.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 cc5b5c4dc7f57640911c0450e77917aaaf2d5d8f14dab00a4aba68f6ffd03b45
MD5 679c414cdea32ee1cb8aeb7b54727bef
SHA1 d55248b8870e2aa7068d1acd67710fc60f50d8b6
SHA512 a3dc38e2dc1d32ae8ce2366bc90d6feed5fc34f552b6ca248a034ad5612b9566ba65def4f53593415896c36f65bcfb801c090c539aebc24f7f2cec4bbaf86224
TLSH
T118E0268825C9C33EE348665742AC430C8E803A2B93C0690FAB08C5C870030A4E7AA6B0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 fb9d9fa41d396415f45a2cac8c56e96ef073d14f6fd6ed594220532a552f4b28
MD5 4b79b5acaa40694d587b60ff6fef9054
SHA1 06c8bd5ce10cd14a18411b34640af3936ef16482
SHA512 77e27bfa1134c49ca9e24db670a61a216c4c8df06cc0a0b06d2d28a9c1a14132a7b71f98417488f86c075933442d306b9f42532c81b95467b2a2a4cea025221b
TLSH
T1F7617041DB9183F1FBAE4172F8F800ABB23E6D8965831D831248D5B5E4CE7EC61DD84A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e87c8d9639f53580ee63faa3d450994e6280ca2b3a7b93c820c9ad874ff1dcc5
MD5 8fafb550e3f97dc076ac4839eb8915ec
SHA1 221885cf26b41b7fe9afda8c6b9f0cf0f015db5b
SHA512 5eca6b5debf3be73a9b2d3fb360c93fda01f68421748a94771bca7d0c1169b2b38a7e02e9820d562bbe613710cfb64bf5a90bd004274b529ac44bc194749e68d
TLSH
T19C617041DB9183F1FB6E4072F9F800ABB23E6D8965931D831248D5B5E4CE7EC61DD84A
MD5 SHA1 SHA512 TLSH

Submit Download

8cd8b0b6-de56-47dc-9bb2-430c9b99413d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\8cd8b0b6-de56-47dc-9bb2-430c9b99413d.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

07690525-7718-4cf0-a56b-d83e2d7d50de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\07690525-7718-4cf0-a56b-d83e2d7d50de.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

927a75af-f92d-46d0-952f-f437f591b345.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\927a75af-f92d-46d0-952f-f437f591b345.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

cb2ee060-1275-4c1b-ba11-1d85143fe0bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cb2ee060-1275-4c1b-ba11-1d85143fe0bb.tmp
Size 2KB
SHA256 9d2c1a390c8fa3c0c946d657a524007568d9b5a95a0769ad442785bebaee3b17
MD5 d864112f0b4ada7a6fa94bff2a397436
SHA1 59f34f88d7c9b46db952890b37784d915fc85a96
SHA512 a997290cd138f901dc8a8e656275790b94d72f59e451be2d15803af5ec6a50284291b4940637c34244c3b1d57eef7aa7827de673776cc546061fa58d69cc959c
TLSH
T15951C0B2C6D99A2DC81156F05A246E2ACD4D0D0842287E19C9EAFF5FA3E2835E14258F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 2KB
SHA256 c06a7844315f08f9bde9bbd278de2fb081fd688b249c6a1bc43f946d7e1db915
MD5 3c7ca62203c88244084c9070801aaecb
SHA1 4f5cd914792ca6f39033eaf0915f2423bcc15d7c
SHA512 7f166ad00307d195fee0475d487ceb696362f4bda3f62f22583ec17f6384a13e12c8793520f1f50ce99edbb8ae9f5737bccf677e640d9134f76130c6b2266839
TLSH
T13451C154709B07206AFD291A107DD4268A4231B33114A46F3FA9C2FB4EB7E615EFCDE9
MD5 SHA1 SHA512 TLSH

Submit Download

baeef98c-5c72-4315-ab22-b060999e77bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\baeef98c-5c72-4315-ab22-b060999e77bd.tmp
Size 10KB
SHA256 3a870a700f8fa97ecde15cfdc787c0477774dde2082c948fb84ba3de1790f22e
MD5 cb7e88522b7b8c56e903fdb39d372862
SHA1 f883b5462e9d6f8b6408e6607548fc1d7db4154c
SHA512 6371b67fd32d3a0e53f6817d81a7d848514d974dc6a5542013ef1e08a4cd3b99fa36d80b48807ee90eb320fec135dd090c13d7bb617cefdb18b1459225544ed0
SSDEEP 192:sxZNRVWd/f+sgxIdpZ3HW6+WNbSrXY3SJ4cIg5aJ:sxZNed/f+sg6ZHbsXTQ
TLSH
T1C122B6526E28A97B9CCBD21DBB15BF13E6F9503291901E58A6FCCA1C04E77CD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e8b2e4dc-4356-4a15-9965-cdfbe39fefd4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e8b2e4dc-4356-4a15-9965-cdfbe39fefd4.tmp
Size 10KB
SHA256 959ffb437a6566f35807e6db9746b6ae50d2d480d4c62c4febb94add3863c100
MD5 19a4aaf827198d14973756d85c47d17a
SHA1 d08998f3a13b10ff28465272830ea2b92cbed4f8
SHA512 76bee54b4815c411b0c3f500f1436489bb9240c19ed0220f2768c3ffa4ca7c08c8ea27a33f63eb681799e476be022b82363fa720201daee71733f0ff99cd02d5
SSDEEP 192:sxZNRVWd/f+sgJIdpv3HW6+WNbOmSZ/Y3O6S4cIg5aJ:sxZNed/f+sgCPHbA/vQ
TLSH
T1AA22C7126E28697B8CCAE21DBB15BF17E6F9503291D11E48A6FCCA1C04E77CD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

65bc5c8c-0fa9-4007-b25f-076974e81452.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\65bc5c8c-0fa9-4007-b25f-076974e81452.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c182ac3b-b9ef-445b-b752-49898b7242b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c182ac3b-b9ef-445b-b752-49898b7242b3.tmp
Size 8KB
SHA256 4fb572acef317e5338dc7d96bdae23889891f5f244402320957427e100c4e884
MD5 837dda864d2e12897e29f18f8ae63d4c
SHA1 7990a0e1d62243712beb8edcbb259b80f582dda3
SHA512 d78cd7a8f9865e6038631622b35d4dd080fe671006bc11bbd010b0a96af762922d99f91a79553e3645cd38c634e415d4c91003475d56b0ffaf0ed7dfd49c9e72
SSDEEP 192:OON+6AmwpJQmiUyDNDSsiX5FzjzorosyoX9lRvq5U6:OON+6ipnQSsiX5Fj8okXF+U6
TLSH
T148120A36B8786C3B5ED2B554B54B3513DEA94127EB886F90C9EC2B2C01DF65C534A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9508f19-0713-4bd8-a55d-7f95b29c02e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d9508f19-0713-4bd8-a55d-7f95b29c02e2.tmp
Size 8KB
SHA256 9f99832f7f7306f08696a83aa3910a0aa8feb6519205af1a79873d92d22f6dfe
MD5 ba76f91d658509ddfe154bf940a55347
SHA1 642e568ed9441941f11a5ef5421ee141aa981b1f
SHA512 96ff9bef03b9d693289e204c91e556768865684a174e0a44351a59fc8aa134b8719e3cd1d2b65a5a7501c2968fcfa27dfa31cba6f6f77769c768fdf14fa60024
SSDEEP 192:LONz6AmwprQmiUyDQD6siX5FzjzorosyNJigxU6:LONz6ipdb6siX5Fj8om8U6
TLSH
T17902DA35AC746C7F8AF2AE45B58B36139FA5116BEA942F44CEE81B2C01D765C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbb893bd-4175-451f-bf4d-661346ef5665.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dbb893bd-4175-451f-bf4d-661346ef5665.tmp
Size 18KB
SHA256 a91a475064bd1c2201e930036e3dc34705e70010e6a8b9320a7e7e9f74cae0c2
MD5 c6727627bbeaa20c0a4c07aca4147d1b
SHA1 68817cedb09270c6835bad9c814c261c76e7c724
SHA512 d20a87945e7ae06eb4770a454773139848b848e4dda41d999b0020f3198bbe3f76a62fd01d5c30ad12e74d80d85c871a11094de33a58c5c992348b60a6b47df9
SSDEEP 384:KQkUSv0sNDHxC4puS2G9iX5Fj8okXr+vaTZcRIIlm:y0exL0yaCr+vaTZcRLU
TLSH
T1E5827D35A8786C3B4AE2B550F14F3603DEB48167DBD82F94D9DD6B2C01DE29C235AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e849f0ee-3a42-4453-9406-abe9cf434d81.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e849f0ee-3a42-4453-9406-abe9cf434d81.tmp
Size 26KB
SHA256 c81432ab72099821ace5d4c56394fb43b14b3cc2d6b141a1f1e11bb454df88ee
MD5 9910fed25f54ac3bf13d35d1f2b079bf
SHA1 7fdbb6fbd21f6fe218b0b2453a53de0656139ddd
SHA512 a98ae0a14a0df494c28fff82592a38659daf11ffa13ea396b59adffbc18e47945e52515fa03403962ec843658080145c87f939a2d4d82d101e1ffe4711160621
SSDEEP 384:ZiFzQkUSvQzsNd8TUNTUlIlIxC4puS6G9iX5Fj8okXW+vaTZcRIIlm:wFdMwwgOxLgyaCW+vaTZcRLU
TLSH
T1CFC219F258D7583ADAAE5B53A73D2D038EBCC057F9845A50F788562CCC8A1BFD34A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8ca66a5e-eca4-40af-8723-bd44274d3c2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8ca66a5e-eca4-40af-8723-bd44274d3c2a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d450652bb273b60f6c290fc9f465a6089f1a0fbefa700ec0296619feb3526ab7
MD5 04ea7c94e44cea9fe36055b8b4f7a87a
SHA1 6cfc71ac6ef714aef795c90065279d0ae83dfa14
SHA512 b15809644777af381626ff4dcaea5998aee3565e37385415cd3bdf807f8e1089a0928786339ba9068fe8004921d792c1e4b4b9935a000668d61b8ff2c6cf92c9
TLSH
T16741275DAAEA1148F3B7AF56ABF2A87D543AB8772E07D45E10410E4F0A23B40D571B33
MD5 SHA1 SHA512 TLSH

Submit Download