hxxps://tria[.]ge/dashboard

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 09:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://tria.ge/dashboard
Sample261110-letp9sec74

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2372	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{E9CAB222-C1AF-4F45-854C-45B1E2C554C3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2988	msedge.exe
2988	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4860 wrote to memory of 3712	4860	msedge.exe	84
PID 4860 wrote to memory of 2372	4860	msedge.exe	85
PID 4860 wrote to memory of 4572	4860	msedge.exe	86
PID 4860 wrote to memory of 4572	4860	msedge.exe	86
PID 4860 wrote to memory of 4572	4860	msedge.exe	86
PID 4860 wrote to memory of 1568	4860	msedge.exe	87
PID 4860 wrote to memory of 1568	4860	msedge.exe	87
PID 4860 wrote to memory of 4472	4860	msedge.exe	88
PID 4860 wrote to memory of 4472	4860	msedge.exe	88
PID 4860 wrote to memory of 4472	4860	msedge.exe	88
PID 4860 wrote to memory of 552	4860	msedge.exe	89
PID 4860 wrote to memory of 552	4860	msedge.exe	89
PID 4860 wrote to memory of 552	4860	msedge.exe	89
PID 4860 wrote to memory of 4576	4860	msedge.exe	91
PID 4860 wrote to memory of 4576	4860	msedge.exe	91
PID 4860 wrote to memory of 4576	4860	msedge.exe	91
PID 4860 wrote to memory of 4868	4860	msedge.exe	92
PID 4860 wrote to memory of 4868	4860	msedge.exe	92
PID 4860 wrote to memory of 4868	4860	msedge.exe	92
PID 4860 wrote to memory of 3944	4860	msedge.exe	95
PID 4860 wrote to memory of 3944	4860	msedge.exe	95
PID 4860 wrote to memory of 3944	4860	msedge.exe	95
PID 4860 wrote to memory of 1760	4860	msedge.exe	98
PID 4860 wrote to memory of 5092	4860	msedge.exe	99
PID 4860 wrote to memory of 1760	4860	msedge.exe	98
PID 4860 wrote to memory of 5092	4860	msedge.exe	99
PID 4860 wrote to memory of 684	4860	msedge.exe	101
PID 4860 wrote to memory of 4164	4860	msedge.exe	110
PID 4860 wrote to memory of 1824	4860	msedge.exe	111
PID 4860 wrote to memory of 4524	4860	msedge.exe	112
PID 4860 wrote to memory of 3976	4860	msedge.exe	114
PID 4860 wrote to memory of 3976	4860	msedge.exe	114
PID 4860 wrote to memory of 4068	4860	msedge.exe	115
PID 4860 wrote to memory of 4068	4860	msedge.exe	115
PID 4860 wrote to memory of 2988	4860	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://tria.ge/dashboard
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff865edc188,0x7ff865edc194,0x7ff865edc1a0
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=1760,i,8878491344536515416,5606810792710579895,524288 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,10632917071232830846,8253178742556958145,262144 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:2
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2260,i,3759969010186472324,14197033035759217332,524288 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,15226021375434160472,986268182033541507,2097152 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,4735275097361116834,3264790611594152004,2097152 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=3972,i,7157572675733818492,16488968164429854214,2097152 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=4080 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4088,i,14929401406512644193,9921436773533643490,2097152 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=4124 /prefetch:2
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5020,i,18375768508019685925,6429064809615580734,2097152 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5220,i,6532899505321314294,6855280452780151510,524288 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5200,i,2494545612581721417,10736358518263217409,524288 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5968,i,4633470552787481003,8232532484956336279,524288 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5968,i,4633470552787481003,8232532484956336279,524288 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4276,i,6176761307850535392,7939475339340406723,524288 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4268,i,4247862892114842356,2744138965432836917,524288 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=3548,i,4713796848959186007,3365915947220717691,524288 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2756,i,589928905673878351,17697681474754426289,524288 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:8
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5728,i,16598911054658737916,11827240775780693926,524288 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4648,i,2763173144468073316,15248072176330283041,262144 --field-trial-handle=2476,i,12841244357557856912,3090414590174700530,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2988

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3568

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

083715b1-c0e8-4234-ac8e-14a16a9a4d40.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\083715b1-c0e8-4234-ac8e-14a16a9a4d40.tmp
Size 18KB
SHA256 2d2a4b1d547d89b3594fd2c36893267338ed1584f1f225c2f246bcf92d2d912c
MD5 95db8b19f0069346e3fad75f9f06b8aa
SHA1 ebb6e9a279eeec955d3028c649b3c7d76985aae2
SHA512 39456fa72593f25896041c0e5488af8cec0bd511d4b42752d0a61dbe48d16aa099c98bc541f80eb2e61752ba3310b9d301ec5f629b4e03a72fe3b712f60484be
SSDEEP 384:hDQkUSv0sNwUTvfe3Cbbums4h//GJEivaTZchHWIIlC:ht0Afek5sE/xivaTZchHWLc
TLSH
T11A827C35A878BC378EB39541F54B3B079EB08163DBC41F94D6D9AB2C05CB29C234B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

612f8d76-6004-4500-9a88-02baa5436a49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\612f8d76-6004-4500-9a88-02baa5436a49.tmp
Size 18KB
SHA256 f836bc11036878f8e1b13eb90039a43c5ba94a2f2c851a7ceba1ae9731806acc
MD5 eee3ac6e2be3432a399afae6db8ff3aa
SHA1 16b788ee97f09ceef7383faf8c251f8810cb1c53
SHA512 7a076cef5c776d28ebac497b5dc3e97857d482d7710e611debe7dd6d71df50e108f7227cb4740f6dcf1ec05513022e067b1405378a84c855ac62bd946a884af4
SSDEEP 384:9DQkUSv0sNwUqvfe3Cbbums4h//GJEivaTZchHWIIlC:9t0Dfek5sE/xivaTZchHWLc
TLSH
T134827C35A878BC278EB39541F54B3B079EB08167DBC41F94D6DDAB2C05CB29C234B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76a8fde3-0552-4896-8f61-699dc77b106e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\76a8fde3-0552-4896-8f61-699dc77b106e.tmp
Size 8KB
SHA256 a67e8a921687af0db915db6996fe6b5c5295fc037d4364de7abe75b631ad374a
MD5 a57f0dafdd3fb38e3e69b73ee13c291d
SHA1 52dd31b664ff5503ac6c7fc35f1b9c8d97f43f45
SHA512 878f019c76b3c5b13b230e91291d91ec8da43dd3978db42cd6b3fc365a9a47f33fc11e0599ace7ac78da5fff5b3335fccce914b390303c00b9896815cd8fcd48
SSDEEP 192:nzONq6JUviQmiUyQdHo//GBm88NxCqiU6:nzONq6+vejHo//GJuiU6
TLSH
T19C122B39B878BC7B5EA3A941F4833B135EA44127EBC56F84D6DD2B1C05DB19C230B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ec7bca8-ad44-404d-bbf2-d5a4d3a5fae6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9ec7bca8-ad44-404d-bbf2-d5a4d3a5fae6.tmp
Size 26KB
SHA256 fc237591a867b565d98795c7bcc14d1de72fd597bf82da119e3b717549811842
MD5 e883aef7636a7136395b7a403ec05758
SHA1 65aec19c0a782a320e82d60b22b575d9216be537
SHA512 a9a7ab15808105fd7ed93954ea461456507474cd5b43d1b35a45f9faa9ce52f17532f86a523e53fd74293137a080165ea8b1abddd24e77629269f055260ed3eb
SSDEEP 384:F3iFzQkUSvtFzsNR8TUNTUlIlqvfe3Cbbu6s4h//GJgivaTZchHWIIlC:FyFdt9kwg0feklsE/bivaTZchHWLc
TLSH
T147C218F258D7983AD9AE5B43A77E2E038E7CC053F5845A90B7C95A1CCC861BFD34A901
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

0c7a617b-2372-44d1-9d3e-f27572bbc4a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0c7a617b-2372-44d1-9d3e-f27572bbc4a0.tmp
Size 10KB
SHA256 34a89993b406b06e2be6e2679695996cd0e8d0f6ab05c0b6144c38ab24e14c1b
MD5 2a2601e62bbaa15325bd53ac94e0eafb
SHA1 2248e348bfc0ba075200c530062d43c312b0248e
SHA512 cba893714244c6ee8e601224e3f5225fc527b705aca6a018a6207ca805ce7925cb3ee13b29e46f265859279ceac7112e05954afa9636cfaa2c3c8cf58b0f9191
SSDEEP 192:sxZYRiWc/fXsNFaIdp3lHW6+WNSf8/Y36FI8+IIg57J:sxZYLc/fXs7zVHbt/XbPv
TLSH
T17432C8526E38697BDCD7D209BE15BF53E2FA503291901E48A6FC861C09E76DD224B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12167653-a26a-452e-9d6b-21df22f269c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\12167653-a26a-452e-9d6b-21df22f269c3.tmp
Size 10KB
SHA256 4319ee32f5de6840be8fa2f3010aded00153cbb140870d426099d2661ed641ce
MD5 9fdc4a43f865e2bb44abbc5da1b3e5ea
SHA1 7a88041801a7c4f89f2e8796ceea05934aec4dd5
SHA512 58ff4aac6ef63c80d6a7f39040368ebab33b5b6350f2747862c665eac00ea232ec46a2d42588f66c0feb124c3dd4ed637fdffcc806e3887ffc49cd2a1143e3fe
SSDEEP 192:sxZYRiWc/fXsNaIdp9lHW6+WNSf8/Y36JzL+IIgrJ:sxZYLc/fXsNzvHbt/XFP9
TLSH
T11E22B9516E38B97B8CD7D209BE25BF53D6FA503291D11E48A6FC861C08E76DD224B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

456e3f84-1591-4070-a96a-618e2c67cf49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\456e3f84-1591-4070-a96a-618e2c67cf49.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4a010b58-63eb-4809-a106-adbeca0d58ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4a010b58-63eb-4809-a106-adbeca0d58ef.tmp
Size 10KB
SHA256 bb8b3ee17969efab7e775e0d1933d25585c92bd4b55525b411c253280aee0647
MD5 a128c2d6c26d3e0a7ed89d1e6819f9d3
SHA1 6ead466b612546b8a1cbe9937e3d29204fab3aa4
SHA512 1b4282ff7e7a69b6cfb944ea7260a0675019ed1b8b7b2f1991baca29cd107db6af801eb716d4bdee1a00b3b0bb277646f947a5e275d5fc2291df0e3d40cd5c63
SSDEEP 192:sxZYRiWc/fXsNFaIdp9lHW6+WNSf8/Y36yXL+IIg57J:sxZYLc/fXs7zvHbt/XEPv
TLSH
T10122C8516E38697B9CD7D209BE15BF53E6FA503291901E44A7FC871C08E76DD224B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86b9f80c-4d0d-4241-be4c-5f271452a380.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\86b9f80c-4d0d-4241-be4c-5f271452a380.tmp
Size 10KB
SHA256 e94f97b01d7b88a95a80bcc864256a251af93e66549705855536ba9302823e64
MD5 f066a4d54691f11f16b6740172eadfbd
SHA1 cd4c77a39fa40a316fa8d160c95bd6be3e870ff7
SHA512 f743dce617a6faf47ba39b8f16590b6c9a89aaad3e30de86658b799d82adca80e6a5412a9e62f043def93374196d9ff5dd60cbeb2d021da1307636682b62d0b5
SSDEEP 192:sxZYRiWc/fXsN5aIdp9lHW6+WNSf8/Y36JzL+IIg5BJ:sxZYLc/fXsHzvHbt/XFPZ
TLSH
T15822B8516E38B97B8CDBD209BE15BF53D6FA503291D01E48A6FC861C08E76DD224B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 34fd4b2f452c8f810e7373b9995fa99333deca89b316cc5658fc1ac58773f7b6
MD5 f83a20e6feb623d5ab7e563b48b32d18
SHA1 884f8012d8dbe851d03c900bb4fb20b5e3cc0128
SHA512 dccf52795d6478fae41879e36295cbb1e55dba132fc95f4021972fdab71b75243169f9da0061873037fc0451a46e61ffce276da6df8436cb976bf6b8464859f1
TLSH
T1A4E07DA439C8C32FE328669751E8430CC6803A5BD3C0698E7B41CCC97843054F6E36D0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 4bac62ac204bcdf3bc97fa43bd925ef650a6fbdbb6717679f0d3649f91f509b8
MD5 12d61e5f237d86a580b67b5c508ed882
SHA1 0561869ee031a9e038a574a7b3b7b8115715de31
SHA512 402a68404ea9230f8a51f5ed542e88f4fb18fc35f0fac6bc20bb4578e31efe700eeff89d72b9338a066cf6cc00f332c956f5df5bc62887be0b67e0c529055a0a
TLSH
T1C461C8E05FB1A1D4F7B843B5F5C1267332B4A090E5A32F6F4252E8BD48077F8589436A
MD5 SHA1 SHA512 TLSH

Submit Download

e0d96003-cb63-4db5-b60f-5d4ea660c5be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e0d96003-cb63-4db5-b60f-5d4ea660c5be.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

227981e0-d1ca-4f65-a8af-34cc181ae3a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\227981e0-d1ca-4f65-a8af-34cc181ae3a9.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

bf5bb561-59cd-470a-8d3e-56093c0ed125.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bf5bb561-59cd-470a-8d3e-56093c0ed125.tmp
Size 1KB
SHA256 37a4964e7bbaf0206bf42dcdcdc79e2fe5939961ed5bf3df121757589247f505
MD5 d4b5db571ead9a16b7bc8098143b7bce
SHA1 eacee3c680ba95ca3a796eac315ffdeae04c9824
SHA512 8bc9f26abce0bc402d82cb01cd2f934a826607611d1bd9a8fb4632c7c8c27b9e616bd354ab02baba12c8bb2e9db5991e431898d17b0bc9aa2c0d3ff4ce966f78
TLSH
T13331B0F6C3E1456ECE1152F05E14AE2BCE5C054643283C198AE4AF1B97F34B6E142A4F
MD5 SHA1 SHA512 TLSH

Submit Download

cdccbcd3-cd20-4afc-836a-493691397e33.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cdccbcd3-cd20-4afc-836a-493691397e33.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e2b020a7dd36c5e1e0bb3948784152b1845788f77827cad7a6e92808ff062d15
MD5 7adc1dc61e40c05155a80509a05d5031
SHA1 af58c88530775da188353b462976d4e162bd854b
SHA512 95d1bad9cd203bdbb9630792b5459fec85119d7c819c8ecc42848c7ed6e31abf1e088ba0d3d8c645e5c3795286f840a1e793876da843861c346e1db5a7526512
SSDEEP 48:K0ydgMyQwBbsbcISkBK9o1yBxKRYTkQCyLQ/26gK+/b2NWISS/K9u10/xIvY1mOz:Kg1SK+Maun2KIQHeQKvqKez
TLSH
T159919710727B235439BE694940B4963B424231733118F96F7FBE60A78E6BE548CFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aa502f48-811b-4b75-975c-b9fce6ba4f33.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aa502f48-811b-4b75-975c-b9fce6ba4f33.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

cb93eafe-e5dd-41a2-a2a6-e1f8b5934a07.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cb93eafe-e5dd-41a2-a2a6-e1f8b5934a07.tmp
Size 27KB
SHA256 3368bf66e801b6656058e1a70aa3a29343097331e51f3f967ff655be89a3746c
MD5 1887f154d8f5437b16d9e4c225a54816
SHA1 aae61eab6dfd868efc94b20ecc1d35a201602c51
SHA512 aad4fa253bd220c703c4ec8f71cccd9a0456f9dcd21a0941508c8f5f04097e1c153eeb861718d416afc4f7b0e3754530531400beef8f585440225a171fa66665
SSDEEP 768:77Klm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/oro4D:77Klm7QWvUYe0u1ja8/L/E/T4D
TLSH
T16EC20B3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EE91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5935db7a-c988-43a7-87e6-7abfcc0e5515.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5935db7a-c988-43a7-87e6-7abfcc0e5515.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

89b2947d-a952-401f-89e0-d2ffa267a2c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\89b2947d-a952-401f-89e0-d2ffa267a2c2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f16e9f0c-b902-492e-8c46-20365d250b33.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f16e9f0c-b902-492e-8c46-20365d250b33.tmp
Size 8KB
SHA256 42c8f19f7baf8740b7fa3d72fb6d43799b533857aae7d920bd734dcf3e3e0167
MD5 090e6fbcc21f2657570ef79ee7be2b23
SHA1 e2c837a04ec01dfa14667c182d208cb04829f128
SHA512 012a95cbcc907c4ad7427ebc840caf27cd961a320d26fc8c46127793b586e2ae672ef9dacf8881c63e2ea360c088003771e4e8a723f92f33c636d4ef434abb85
SSDEEP 96:KqONk5QsjpfbUmjH5ih/cIPURHl8h4otop57aDDBKP4v+Y1xf//ojdhxZBmqBCz4:BONd6JUm0QmiUyodso//GBmqBCBkU6
TLSH
T1A102F938BC687CBB9EB39E46B4877B139FA41067E6912F84DAD91F1C01D715C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b3d38f8f77ed6c07101a068fd980532ba59b7d2ed96f07a8f510c00ab337cb59
MD5 b0aee2f6896f2eb93be33cdf7ebafb6b
SHA1 739f5d5451828390c789d27c1d902041338357cb
SHA512 98eec96efce175dce5361acbf98516a6d86a478ede2c6e931bf05f895e6a9bd938a6377bc59ae63a148de0e00ce55683ee99c3b7d5f35d4e3aacfec794cf632d
TLSH
T1BC411C58A6ED114CB3B67E5AABF6A82D487FB9771E06D49E40110D4F0A72B00CDA1B37
MD5 SHA1 SHA512 TLSH

Submit Download