hxxps://tria[.]ge/dashboard

Analysis

user interaction
yes
max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 09:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://tria.ge/dashboard
Sample261110-lem8gsec72

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4964	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{E046DAB0-197B-4C42-B977-4EDE2F86C517}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 2356 wrote to memory of 4992	2356	msedge.exe	86
PID 2356 wrote to memory of 4964	2356	msedge.exe	87
PID 2356 wrote to memory of 5108	2356	msedge.exe	88
PID 2356 wrote to memory of 5108	2356	msedge.exe	88
PID 2356 wrote to memory of 1828	2356	msedge.exe	89
PID 2356 wrote to memory of 1828	2356	msedge.exe	89
PID 2356 wrote to memory of 1828	2356	msedge.exe	89
PID 2356 wrote to memory of 3900	2356	msedge.exe	91
PID 2356 wrote to memory of 3900	2356	msedge.exe	91
PID 2356 wrote to memory of 3900	2356	msedge.exe	91
PID 2356 wrote to memory of 2060	2356	msedge.exe	92
PID 2356 wrote to memory of 2060	2356	msedge.exe	92
PID 2356 wrote to memory of 2060	2356	msedge.exe	92
PID 2356 wrote to memory of 4104	2356	msedge.exe	93
PID 2356 wrote to memory of 4104	2356	msedge.exe	93
PID 2356 wrote to memory of 4104	2356	msedge.exe	93
PID 2356 wrote to memory of 5096	2356	msedge.exe	94
PID 2356 wrote to memory of 5096	2356	msedge.exe	94
PID 2356 wrote to memory of 5096	2356	msedge.exe	94
PID 2356 wrote to memory of 3344	2356	msedge.exe	97
PID 2356 wrote to memory of 3344	2356	msedge.exe	97
PID 2356 wrote to memory of 3344	2356	msedge.exe	97
PID 2356 wrote to memory of 3796	2356	msedge.exe	99
PID 2356 wrote to memory of 4832	2356	msedge.exe	100
PID 2356 wrote to memory of 3796	2356	msedge.exe	99
PID 2356 wrote to memory of 4832	2356	msedge.exe	100
PID 2356 wrote to memory of 4616	2356	msedge.exe	102
PID 2356 wrote to memory of 3492	2356	msedge.exe	111
PID 2356 wrote to memory of 2236	2356	msedge.exe	112
PID 2356 wrote to memory of 3168	2356	msedge.exe	113
PID 2356 wrote to memory of 4852	2356	msedge.exe	115
PID 2356 wrote to memory of 4852	2356	msedge.exe	115
PID 2356 wrote to memory of 4672	2356	msedge.exe	116
PID 2356 wrote to memory of 4672	2356	msedge.exe	116
PID 2356 wrote to memory of 4276	2356	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://tria.ge/dashboard
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ffa124ec188,0x7ffa124ec194,0x7ffa124ec1a0
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,5714670519582668789,16774803649110382293,524288 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=2948 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2404,i,11302260296279672075,13158485551889649841,524288 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,7769340000028328625,13286420997369783196,262144 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,12616312053249011443,11973456459200737693,2097152 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,5299287807896488565,13621130603340881386,2097152 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,17924390110083823077,9636562668477056725,2097152 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4164,i,17697954556548610859,7092358718585918562,2097152 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:2
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5084,i,13311819845135704552,10195666856537265427,2097152 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,11382171039600462712,15078910001234678896,524288 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3956,i,10257631745493514416,14165041732482266227,524288 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,15161696515260902109,9386467829936291063,524288 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,15161696515260902109,9386467829936291063,524288 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4184,i,11425546105358141087,6853979349721411287,524288 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,15425589463918323383,3086293574062951106,524288 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,11146037331667097195,7469593363812137729,524288 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:8
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,7800131241432893304,13075972712933697818,524288 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=752,i,15860408588378271752,2326485297229946624,524288 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6688,i,14383156065916861443,3974050590956540275,262144 --field-trial-handle=2200,i,11424517965485819120,1361267156896671157,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4276

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4852

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

077e94e6-11c0-4ff8-869a-8174fbdcbda5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\077e94e6-11c0-4ff8-869a-8174fbdcbda5.tmp
Size 8KB
SHA256 f7e225645a01b33f27aac69bdfdfd9ecb923ef826c87e11c879970349e8a0108
MD5 7f39ce10fd10199355cfc9809fb95bfd
SHA1 5137060efa885f95c9bd9ac74ffc05298dd8ded4
SHA512 37ce015967e8518ec1f072d8d2ba7a41c3da371471259b99b858643f23d9d14200d242297d6a9f784b77f096f8ea1b5658f406be971696eaf831d09feabcd37c
SSDEEP 192:/ONM6AmwpoQmiUyAghsiX5F7Y+DFM2PwowlRSqSnU6:/ONM6ipIUhsiX5F8+RM2YoqinU6
TLSH
T166125D35A8646C3F4DE3A565F08736239EA80127DB886FD4C9EC271C05EF598930BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

13fb61e8-ba13-40ed-b13a-bcd88e1d379d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\13fb61e8-ba13-40ed-b13a-bcd88e1d379d.tmp
Size 26KB
SHA256 bd14dadae000d75681aa22a9b4d41ebb73a654884829d53d8f4ab91004f1503f
MD5 9c9658194e13a2c6876f988f7d910984
SHA1 136796710e4d4a8413efa7515d262b34eb8f594a
SHA512 a04a6284c429c4d08c0537978ed1997181e5ecd493a8aa04882aea2a1138cebf0a8370a27530f11f4362f00e4259f870fa6b423c6cc52fc9571808e7dc9d8e42
SSDEEP 384:viFzQkUSvZzsNT8TUNTUlIlW5EpuJQz9iX5F8+RM2YoFinvaTZc0IIlI:6FdZCwgeEFxagWtUvaTZc0L2
TLSH
T12DC218F254D7983BD9AE5753A33E2E039EBCC063F9845A90B788561CCD960BFD34A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2340e2fe-145b-42b9-af62-bebc113d027c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2340e2fe-145b-42b9-af62-bebc113d027c.tmp
Size 18KB
SHA256 ffe7861022d3e2bbe7bf782b367b87422c39ee14ea03e4704ab8512abf053e55
MD5 94048dc6161501ddd237e24132ee735a
SHA1 e554e96799cafa52eb383b81f053c028ea6a0f26
SHA512 c89098174142accf6152d53e5184df91aefcb3237d88fab6848fb343f3c73597ec79dbca3ada15fa0fc985dd90fa3a0676bced3e58ba1c8503143556425b5cb0
SSDEEP 384:LQkUSv0sNBW5EpuJJz9iX5F8+RM2YouinvaTZc0IIlI:F0pEYxagWWUvaTZc0L2
TLSH
T120828E75A8286C3B4EF7A261F14F3603EFB49167DAC81F94D9DC572C06DB198234B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4c524b7-bab9-465c-88df-60f9fe3f90cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\d4c524b7-bab9-465c-88df-60f9fe3f90cd.tmp
Size 105KB
SHA256 8cba3acc7b1e2e6a4582b3efc850466ad2a143a22a68bcc17ede0a50bf8dec75
MD5 f0efd8a8aed6833c3d8f625a63092ada
SHA1 198d4c47ff87cca70b4869ab554e6d3fba676209
SHA512 d32a31d74a931cdfbe79224f885e6136b1d79cc96832701953ef91eebbe67a599f4513be7ec6863b730d12270784f4f13a4a3da3f5422655669ece0021a87185
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7d:fwUQC5VwBIiElEd2K57P7d
TLSH
T171B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

23978dca-a2e9-44ce-ad7a-78adfb0c9e1a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\23978dca-a2e9-44ce-ad7a-78adfb0c9e1a.tmp
Size 27KB
SHA256 4628261a6cfe585100d0be7542a70bb5b569b30b0993b04f412d447f649e5586
MD5 813e0698700b44d22e15ddb64b48da9d
SHA1 9ebf1706e3098d3e6bc526944f51408a0f700449
SHA512 7a5f8d5afb5926a2a884a75bfad4ecde3983668174bfe01800ec4248fa1b5791f29ed0c1d978cbf6bd63738a0442b3aa0d246cefdea8b55095481bdcf1de8f7b
SSDEEP 768:bV30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72ErolZMP:bV30AbSWvS2l9u1jaLmLZ12PY
TLSH
T1BDC2EB3B644CCB7E4FC01A9DDC6AAF9B6E9C02C796548D4047FA984C02C77EA91174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c6bab1d-bdaa-4beb-9a60-ce8be4141425.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2c6bab1d-bdaa-4beb-9a60-ce8be4141425.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

5d2876cc-eadf-4050-bd88-9ee2b87b023a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5d2876cc-eadf-4050-bd88-9ee2b87b023a.tmp
Size 10KB
SHA256 b1bf529183c6aa2a9966431f39602385598ea8b932c45c9546035ee4d26b535f
MD5 3e0600fc60de78c8b12ac5c4e845ee10
SHA1 3a11ca48aebd5dafd6d06d689f753040887c966d
SHA512 7d706ca6d36fae6bef8b9d207ea6faf8709e2b386b72302f09f541003c56030bf2153df31599dd981e8570058ce246355d31c9edb6872cfc94d800991dfe1d9f
SSDEEP 192:sxZ2RWW0/fBsbAIdp9rHW6+WNS9K/Y3zXkuzIg5pJ:sxZ270/fBsbBhHbZ/WR
TLSH
T11C22B7526E38A97B8CCBD21DBA15BF53E6F9503291D11E98A6FC861C04E76CD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6fd2f1fe-b57d-43c9-a6de-7dbf9aecd4a7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6fd2f1fe-b57d-43c9-a6de-7dbf9aecd4a7.tmp
Size 10KB
SHA256 3f4dd4440cd9f19a79849e84b204ca942a58c6024c638c35bf2fafcd1d66a65a
MD5 d99ace0f1ecd1d3b024828b26567be1f
SHA1 ead4d549454a4e7aedc15c23a62b95ade311da91
SHA512 bc71d097a4b32173e048b24451fb30d8187f5f48bbf0a4811b3d462951ce27f456ad0449a11b024c332e1b200bf0e732d671b2c4b7d5d88b556cb92b9428112d
SSDEEP 192:sxZ2RWW0/fBsZAIdp9rHW6+WNS9K/Y30XGuzIg5TJ:sxZ270/fBsZBhHbZ/73
TLSH
T13622C7526E38A97B8CDBD21DBA15BF53E6F9403291911E88A6FCCA1C04E76CD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 8b31a3be0abb1a9d1387566f0597251ca515ba9e0abe63ced4f90150dee67b33
MD5 08b6af98ee64048fd610a539a49e0379
SHA1 98aa503b89b214507e467203c0ce2d7f1da9d004
SHA512 2e5f77ca23fb14fae93625ee5175f6f16d31deb24b5e258e1afd024a9a421461c1935437acd5a11386f4ec079f1114abebc382b5d4c27fedabc35973ce8141bf
TLSH
T156E026F415C8C22FE328A48706B8430C92803A5AA7C0698E7B46C4C87881490E6E2B90
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 b61325df164e6bdc51a1864f34510a8ff7ae818406650fb9b222dd1c3623049a
MD5 bce17d768e37b99d9df17966a2b2c920
SHA1 2348f7acf635ed61c7e706a6bebc255b82094516
SHA512 73fe34473ab9018a03eb61ad2db45d7b0dbedc9a888ca3e0956b799e1d18abeb28faf61243cedbd5c38025138345b07db6eca98e702d1bb9e79c2c172b8f0e1e
TLSH
T1547171C9558040AAFBE84234B4CB1D8F36F4899DD6B31EE20564E674FB8FB560040EBA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 670d82ef3bdc117a4fceb70da8bddd8fee2ae049a040b07092735547426c1541
MD5 ee9fa0a1fc5d95c6f73e5fd1dea5d540
SHA1 0c14b27afd4f05e5e22d4793da247b27cb57d189
SHA512 9add89686ed81f38e63e1347a20e8681ede033ba3f98e2639f5fa4e24c95b6b780e4b560d59c2cf23adaa8bd8b6b7be54768e7defad0462c974fe518cf480c28
TLSH
T1AE613EC9594040AAF7E84574B5DB0D8F36F4899DD6B31ED205A4E634FBCFB560040EBA
MD5 SHA1 SHA512 TLSH

Submit Download

b06405a3-f8f4-4ff4-ac43-f31fcae96d74.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b06405a3-f8f4-4ff4-ac43-f31fcae96d74.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3bcb6b4c-40da-4c90-b91a-e1b434d8b50e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3bcb6b4c-40da-4c90-b91a-e1b434d8b50e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

57f83040-c3ce-410b-9e2b-e16e93748ad1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\57f83040-c3ce-410b-9e2b-e16e93748ad1.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

e3bc995e-ea1a-4938-8bc1-5461e673874a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e3bc995e-ea1a-4938-8bc1-5461e673874a.tmp
Size 1KB
SHA256 b1f92d54670f20ccbf90a55ab51fdc1cd2fa59d6bc1ccb2ee3dbc6cb06c21337
MD5 ebb014c0e8ae6be0acc13e04d34ca3d1
SHA1 af4776685fd97682b43d7a725fcddd033f267f9f
SHA512 48693e2b6b94b8018eb8cee8ebbfa10907f3157545698fbef0f72c0f3e1c7fe652eadc613cae337df3678bdac7569792d460baded7004fdf2f627de0fbd83a7a
TLSH
T1AF31AFF2C3E085ADDA1152F05A14AE1BCE5C058643283D198AD4AF1BD7E3075E141A4F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d318bc326b6c85b39d677058b0692cb558c964e8a834d5422fb16a03200ea5c6
MD5 8e286a46fc1103c5fc9a58efa4fb2ed5
SHA1 3ac782d4b9c1931531f3c8cef309270c9ced0d44
SHA512 6628e4131b9f7b742464ebdc754cf265e45303a6a8a3e9e995dab5a5a54788cc2ea871f88aaf3670317cefd39502957a4121cef2cd22500f4e2a4de5f64e9ac3
SSDEEP 24:KnmVbE7konimk2ioQPIhQkKcHhkGk1aI0SIayrCI5yXBGhWckIxKah41aSjgGuRf:KgJIdK6YQ3yVbIxKM4MEbIhKMIcvylS
TLSH
T18E911A20326A170039BE394944B5962B224235B33059F6AF7BFD80E74E6BF158DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce6364ca-15fc-4359-85f2-eb361f879768.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ce6364ca-15fc-4359-85f2-eb361f879768.tmp
Size 10KB
SHA256 4db99bc95886f6f822dd1ff4bba4058a28a5aa829ea55c5b767139a57f5e9304
MD5 1af5d8b7497ad12ccdf4918e50bf6d1b
SHA1 74682a99dcd4c355d6b518e40101a21157511116
SHA512 603aa1f5c35f18d5b106ac5baf939e0ddf9b26f43a0710b6ed70c1106d56f27b071b35d1f16e19cc0af689abddc3c248042aa1190f803c2b792e1ef0325c6235
SSDEEP 192:sxZ2RWW0/fBsZAIdp3rHW6+WNS9K/Y36XduzIg5TJ:sxZ270/fBsZBbHbZ/i3
TLSH
T14722C7526E38A97B8CDBD21DBA15BF53E6F9503291911E88A7FC8A1C04E76CD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4c2d7fe-71f7-4ced-8c23-35cd0728f35d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d4c2d7fe-71f7-4ced-8c23-35cd0728f35d.tmp
Size 9KB
SHA256 b5fb658949e414aa132ace56003ba03096067e1f3815e06c23dec605a7d3b673
MD5 697e2aefb5d66175fb6b18018f7088a3
SHA1 e91c76d636873c2206ff8e638697d5f5b8880617
SHA512 36dbe8553506ed1a2c67c699ea01136323ede3dc8c01ee003ab2bee8664894f1bed37002019a988bf19ba1d5066a99f4e08625cb95eb246effa4940afd50a7b2
SSDEEP 192:sxZ2RWW0/fBszAIdp9rHW6+WNS9K/Y3zXkuzIgrJ:sxZ270/fBszBhHbZ/W9
TLSH
T16A22B8516E38A93B8CCBD21DBE25BF53E6F9503291D11E58A6FC861C04E76CD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed7886cf-454c-4d9d-9df7-06195ee9b9ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ed7886cf-454c-4d9d-9df7-06195ee9b9ef.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

95f2409c-2a81-46e4-af61-e6b93af41b6f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\95f2409c-2a81-46e4-af61-e6b93af41b6f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0c1a655-242c-4ead-9825-340625ca6a05.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c0c1a655-242c-4ead-9825-340625ca6a05.tmp
Size 18KB
SHA256 e328e0be9beeddc323582424c213dc479e6098a077b493177216573f2f223813
MD5 c11eb383852cbae3dd37467e3638f4ce
SHA1 e4d25e3dd414d188aaee11e74adb6b7d403a818c
SHA512 5f8a62d644d19fc42667fb2b771c5b8bdf4f59d91bc635f8345e1b06b4f30dd7a55b1720adef722e653445fee424d44e7423337435c5b5758ea4af11e8d994ed
SSDEEP 384:nQkUSv0sNB55EpuJJz9iX5F8+RM2YouinvaTZc0IIlI:50MEYxagWWUvaTZc0L2
TLSH
T1F6828D35A8286C3B4EF7A261F14F3603EFB49167DAC81F94D9DC672C06DB198134B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e8c43254-7da0-4872-818c-045a92272807.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e8c43254-7da0-4872-818c-045a92272807.tmp
Size 8KB
SHA256 fd304b7768f238d35365f7d1db80a9e72122736f395046eaf5b66798f1717249
MD5 818dc9802496a0537fc87b61503d9b09
SHA1 44ded14c4b0d9d4dec6a0de1c90c56a446e2b8b6
SHA512 1861f386bdcbe73343d133b4d71f4f99d7cb315b0f8c4264122395eb88db6aea6dcfe0804974a1487634561980c2fc26fa25bc2082af1331c6284fbbf9b9727f
SSDEEP 192:LONy6AmwprQmiUyEg6siX5F7Y+DJJixeNU6:LONy6ipdQ6siX5F8+SMNU6
TLSH
T1B702FB35AC686C7B8DF3AE55B54B3B239FE5116BEA942F84C9E81B1C01D764C1306833
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cfa1304c-46d0-4c7c-9569-42065545adcf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cfa1304c-46d0-4c7c-9569-42065545adcf.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 259864b9be2ae21d41e312fe2f97f83049817d05fb8eabbfe4444a7e3df52473
MD5 e1cd00d1aec36d0d6adec20de6dab2b9
SHA1 fa48d23c4ca1b73b83e6f8bb33df2d6908c664db
SHA512 8ca8c7b50435718e1f387200f86e9ead228b24e4a4aca445db560969f6c8ab2cdd287ae01136771ad5a3cbb6bb276b654d13d2c1a2e0149a147e34e66df77c19
TLSH
T1F641E948A6FA2108B3B76E599BF6687D447E7C672F07C59D10110D8F0B23B40C961B37
MD5 SHA1 SHA512 TLSH

Submit Download