5966979a422c2526dd77897fb643639d82b16bdb89d8fa6e8615d3b32169af3c

Analysis

max time kernel
148s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/08/2026, 23:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/app/cmp.html
Size 5KB
Sample260807-21vsfsad65
SHA256 5966979a422c2526dd77897fb643639d82b16bdb89d8fa6e8615d3b32169af3c
MD5 17241946e51074e6877c43737b94ad71
SHA1 16918c53471fe3f35fcae1e9902870d91c50d957
SHA512 b4b6e030fd1abe19fa308b32f04571a7c1c1f78a7cb789f169b37b54f281ec66d16e4cf0bbbdad81642bf28e266a6b2af7c19cf5106c683fb7f443bfa3110e05
SSDEEP 48:tZrc0/GdshWpo1rckthAoShbEHaLKNGiNQtvmolOGR36tgtr/GTvJP8AscaV4Li1:4V+8v4jHa2NGiivmmpWsBVuQFwlE5vSG
TLSH
T15DB1DB1A2D5914A80077E3385B6B6208F72AA1B72105CA067EACDE513FB152BD58FFCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2808	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306174939460988"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{9F628628-E5DF-4559-A1B3-AF0361500D6D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1736	msedge.exe
1736	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe
4600	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4600 wrote to memory of 1116	4600	msedge.exe	88
PID 4600 wrote to memory of 2364	4600	msedge.exe	89
PID 4600 wrote to memory of 2808	4600	msedge.exe	90
PID 4600 wrote to memory of 2364	4600	msedge.exe	89
PID 4600 wrote to memory of 2364	4600	msedge.exe	89
PID 4600 wrote to memory of 3164	4600	msedge.exe	91
PID 4600 wrote to memory of 3164	4600	msedge.exe	91
PID 4600 wrote to memory of 3636	4600	msedge.exe	93
PID 4600 wrote to memory of 4192	4600	msedge.exe	94
PID 4600 wrote to memory of 3636	4600	msedge.exe	93
PID 4600 wrote to memory of 3636	4600	msedge.exe	93
PID 4600 wrote to memory of 4192	4600	msedge.exe	94
PID 4600 wrote to memory of 4192	4600	msedge.exe	94
PID 4600 wrote to memory of 4492	4600	msedge.exe	95
PID 4600 wrote to memory of 4492	4600	msedge.exe	95
PID 4600 wrote to memory of 4492	4600	msedge.exe	95
PID 4600 wrote to memory of 828	4600	msedge.exe	96
PID 4600 wrote to memory of 828	4600	msedge.exe	96
PID 4600 wrote to memory of 828	4600	msedge.exe	96
PID 4600 wrote to memory of 5080	4600	msedge.exe	100
PID 4600 wrote to memory of 1328	4600	msedge.exe	101
PID 4600 wrote to memory of 5080	4600	msedge.exe	100
PID 4600 wrote to memory of 1328	4600	msedge.exe	101
PID 4600 wrote to memory of 2964	4600	msedge.exe	103
PID 4600 wrote to memory of 4500	4600	msedge.exe	110
PID 4600 wrote to memory of 4048	4600	msedge.exe	111
PID 4600 wrote to memory of 4220	4600	msedge.exe	112
PID 4600 wrote to memory of 1548	4600	msedge.exe	113
PID 4600 wrote to memory of 1548	4600	msedge.exe	113
PID 4600 wrote to memory of 2412	4600	msedge.exe	115
PID 4600 wrote to memory of 2412	4600	msedge.exe	115
PID 4600 wrote to memory of 1736	4600	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\app\cmp.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbf87ec188,0x7ffbf87ec194,0x7ffbf87ec1a0
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,8057899262199992633,8821033639321060071,262144 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,12216269633508633328,5875700354922998900,524288 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2528,i,14511106797825430827,7122690642166078726,524288 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,9284998579385813118,15776747248225810286,2097152 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,9516028151297541327,4325250080171874570,2097152 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,4432173441543947712,10548872049229709633,2097152 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,7412432189615467106,11464794820769310723,2097152 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,15968079380968840214,16337106612481113631,524288 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,11824114524772559993,10081157629052839728,524288 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,1594514698449518155,4945476030152753316,524288 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,1594514698449518155,4945476030152753316,524288 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,12467341753572023235,4653397472550693534,524288 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,1557718295149276019,3910610954923908468,524288 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,1886141125892359241,1027101791056584374,524288 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3340,i,772729157776846200,16367156781248161912,524288 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:8
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,18190320330303119522,13040879541653827778,524288 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:8
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6128,i,7414327699605700881,4235346012993084683,262144 --field-trial-handle=2324,i,11938369079077376961,5637869775299506778,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1736

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2312

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

9c1f4702-6a26-4543-9dd1-f7e7cf6bf270.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9c1f4702-6a26-4543-9dd1-f7e7cf6bf270.tmp
Size 9KB
SHA256 70cb77e9b1f60215bd2785f2be10d1e33431b4f67228203387d0a32df10c5dad
MD5 6537ebf49de2c67e0d9b8aa05e969ac5
SHA1 dfd6b7b9f0dfbfc39d4dccffdfb3e1446ac8f1ec
SHA512 eec29af6c5031e0d5b58cd527bc1156aa7a749eb6fc5b953a3e38bb39cf3303e9a780de8b11189e9efe7bb1525d67d84b08f689f652868d7f3e8b6eb3fe95577
SSDEEP 192:sxZYRfkq/f6sx5veXIdpdqHW6+WNGYzQ2m+mIgrJ:sxZYCq/f6sxRNoHbGnR9
TLSH
T17A22C7526E28A87B8CCBE21DBB15BF53D6F9503291941E58E6FC961C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f1b8cb3f9ed3fcb3ad44c9a11aaec2f945a5b94350dc56da639294e61f5256f2
MD5 d474e5cace777086cf3969b09714274f
SHA1 5c19fcc0564f595bb8078c7152b90b60724d5572
SHA512 564f601c2f9195468b213d10dc311b59c3d12cda2557b86323506f4ae7103135bbf154c830b86ee65dcdce51df27f7d973dfcd936f23da1719790e87d54b2815
TLSH
T1AC71E93D040E4429D3AA03F364F217167D71BBDBF5D32E957190AAF028013D68E0F1A8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588f1c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588f1c.TMP
Size 3KB
SHA256 d43af7099d64b3013b33573d8345fc5a5d5f86f2de3fc38e7fae2b6ca46d5dfc
MD5 c6465c13bd9e9b4e8c9c092a0c793762
SHA1 ff7fac3b09df5a8f77e9095dfd5c2c3cc984ca31
SHA512 cb11c8285c6b3fd52323637bdc1600cc229d21885a1332e4d909814b30c9477166db1de8048860c9b8ee96c51ac50a733aa7eac71a9400ef9bad553bca3b0209
TLSH
T19371C83D044E4469D3AA03F364F217167D71BBEBF5D32E9571949AF028053D68E4F1A8
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 9b6ad688236cdd44aa93d3294813b5b1f3653923591205c2e08bee3949784d44
MD5 09ba9dd967e95e88a3c8734a5c09b1eb
SHA1 94a1d295c052bc58987ef733bf8569c53b58e538
SHA512 d960bb1257967761b968d03ced17a56ee99b4083743325f9de675e8788753682fbbc7180b8f45e43d326bb9a9f0074aec71180b939932e3c1df25d825d9517c2
TLSH
T12A218BB7C3E4866E890156F05A24AE2BCE2D0546432C3C25C9E4AF6B93F3475E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b950d5acb1e9f32a857772a35450467c98151832a60c2ca368d77d812c88c2ff
MD5 f8d410b4f27993750e10c157e2ba9e2a
SHA1 75d8f09bbd45b6cd1d9e8c865f17973f28215d87
SHA512 8ef7aa2742d2f161f7111ea0d84cf129609dd67d6d9c3cb4b3420e7b2e1089658ec92756d5fea5fe8a4ae925e3db5b5242d142584933514b5bf1004d3514dc23
SSDEEP 192:sxZYRfkq/f6sg5veXIdpdqHW6+WNGYzQ2m+mIg5gJ:sxZYCq/f6sgRNoHbGnRG
TLSH
T14D22D7526E28A87B8CCBE21DBB15BF53D6F9503291941E58E6FC961C04E7BDD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f67136e24a75e6332f3e8d23f36482c88fed075a9c2dc9bf93a17bb5016612be
MD5 784090b5c0b9c0662fab76394eeca92e
SHA1 f5c5dcf8e2f6a990541a383787675055baea7eb2
SHA512 52207df3844a359f12b5883f20599487ccf2a26a7a529503fb5aa3ec1d64015369546b366d0322546da0ee90dfe6631696fa32cbdfd38078b01cbc513c61160a
SSDEEP 192:sxZYRfkq/f6sgZveXIdpdqHW6+WNGYzcSm+mIg5SJ:sxZYCq/f6sgxNoHbGnRE
TLSH
T19322D7526E28A87B8CCBE219BB15BF13E6F9503291901E58E6FCD61C05E7BDD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 5138d37b289b9ac699385aa7963c3b250603ce24f1cc80cc8c194c1259c4b205
MD5 125978dc26042919a158bcee00817bbe
SHA1 0fdb04c1c0bba7a1ed7088d30c2facff9c8a9131
SHA512 dbeacff5a342cbc4413d074722403aebd8c2d31148e655554887b1e34946db3e5b56e3b86b85f15fffe91b6a1b59b3c98ee32714fd6c5f17305e945df805d754
SSDEEP 768:e8k7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBAroyPYW:e8k7u70WvqiEau1jai5LA3BLvW
TLSH
T1C7C2E93B740CCB7E4F801E9DAC5A6F977E9802C7A6948D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8f0ca6d616475468bbe456ed6e66557aee9153056ab48c872ca8d30dabebc1e6
MD5 69c0747c7378b0271b2717439771d279
SHA1 e317f4540ca0c32da3d57fb0aedd08371cba5576
SHA512 d770c15006aece1a7eef3b10bb2d87f6cbc33454b1cdd343346e2f43278ca6ea29e0de1a2cf385955165a68ed5aa262e7019b4325c876b16e26d8e59f5105541
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTfTINKIsgPy1FIhKeE0ryN/IVKi:KIbCKcfTWKIsSOFWKeEa2/WKi
TLSH
T14191660532BA0A013DBE7948A19AC5270F4271533618F47FFFA910621EAAE650DFECDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe592cf2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe592cf2.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 21d0d41f7e8961993d3502fe10ca48823f0f61159e9be4910d50af9e0f912bc9
MD5 c0e721f1c4f194a839f35a6c62fb1c06
SHA1 23826ce66ede921f8e290df66b247a0875e1146c
SHA512 5251b7f8b4b1623fb2890f916fc4306088ffc91547f38f047f053bd6d9cde9177a17be4cfdd5542445503401ad6d7d7ea372cf46d7e97614a6c0ca427bddc83c
SSDEEP 384:jWZcIhsNqUX8bzzhQd0mEMwwnTKwBODNZOCo0v:YhLjKkMwwnewBKZOh0v
TLSH
T17C928D715C385D7B5EE6B105F84A36074FF88177E6C42B68E6DEBB1C01A9298130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 6f2a8e7616a47a2d8a6a261fa2514ca337ffe8b886dd5744f57f66556ae6cb88
MD5 d027f89d8406bd55fd4596aea23d25d4
SHA1 9077266b8ff98d23fefee3771a8007480a5340f7
SHA512 b221d8873f3a2f6afa2bdd67f3271dfa25ce27fad312f8048a0f570da5c82f4ee63df4a882170eb10b7f45f483630c6671077e5b7ccc73d8c7f75dc32772bd93
SSDEEP 384:7piFiZcIqzsNP8TUNTUlIly8bzzhQd0mEMnwnTKwBODNZOCo0v:8FQiCwgZjKkMnwnewBKZOh0v
TLSH
T10FA28D724C68997FAEE6A745F94A32178FF881B3D5C46A64E7DDAF1C00A619C030BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 33cf0ad4342e6ccc327855a5cb02f8a0fe45f56f516b199021500cc4591710ad
MD5 676bff2a94bd2dd559caf73d42e79dde
SHA1 0e8fb73e8da87d40f67503ef1b984bb5815c4448
SHA512 05caaf57f2a64507a8b006f806992aecff517837c143912870e4c9df25883fbe3fe9ecb3bff385540fe42e18d69fad168b0b0f0bec910a97a44ce48e10d2467b
SSDEEP 192:MONf64BAQmiUyz1OW5GBPKcl+FdGuom1baDX5U6:MONf6eAocWzd0mSJU6
TLSH
T1BE020A34AC756C7B9EB2BE45F58637175FD8112BE6945B44EAD82B1C00D724C234682B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 60513cdcb58041250d825e17ab78f15a9264705df57ecc98843ff916b272dc5b
MD5 dc102427292bf8e8d6ccf282ade9abe2
SHA1 db0a9605a935a982d35f7b07b01e4de9254e45cc
SHA512 ca895e9a144d416faadac2f2c30be93b9cf115ab5f0e48f8328192f928a5ce7da1aa316dafb41098908c214f18421be8e5d7c5709c8535a7dfd15faced5dcb41
SSDEEP 384:DWZcIhsNqUy8bzzhQd0mEMwwnTKwBODNZOCo0v:4h+jKkMwwnewBKZOh0v
TLSH
T179928D715C385D7B5EE6B106F84A32174FF88177E6C42F68E6EEBB1C05A9298130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8711c0046fd1bdab3c8f08c1d3b85107a34d77392ccdd4fbcd9aed16eb9e50da
MD5 3afe3f09159402d41813df4dde03ec98
SHA1 9bdd8511c8de49e3bef3861bad2a315e98a28e7b
SHA512 5577ce5ea49cbd886afb02de4a7a2f4b2a6569d8f7268e8c01911f48cc877af498576acf712abfc5f3a312f2df72bfc95b47354ca02da12c09ae0e018c6314c1
SSDEEP 192:pONY64BlQmiUy/OT5GBPKcl+FdGuom1YKEMmWwlqdU6:pONY6eDzTzd0mEMEwU6
TLSH
T118121A316C78AC2B5E92B541F48737175FE4422BEA886F94E7DD3B1C05EF29C230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a2837537-aed1-459b-b72b-8dbb1409a18c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a2837537-aed1-459b-b72b-8dbb1409a18c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f29b64925540beb665cd10639560f6823336bf68ecaf17bfca9ba7ef7c604e22
MD5 c0b6938429032e6c9f79bea2effe000a
SHA1 ff6ec868982d8e0114468034037f55d513424828
SHA512 2c20e2fc4db847a5edf536ae1c3659b02adeafa63056010c6a65fa4b40e6740af6a6b33ce88de711c48cf0180905fd29f88ac56fdcfbe0494b2cd58bfe5d3443
TLSH
T15841F868A6F91148B3B77F56ABF7A92D457ABD772E06D45D00010E4E0A32B40C962B37
MD5 SHA1 SHA512 TLSH

Submit Download