5966979a422c2526dd77897fb643639d82b16bdb89d8fa6e8615d3b32169af3c

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 03:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/app/cmp.html
Size 5KB
Sample261002-dynpcstxfx
SHA256 5966979a422c2526dd77897fb643639d82b16bdb89d8fa6e8615d3b32169af3c
MD5 17241946e51074e6877c43737b94ad71
SHA1 16918c53471fe3f35fcae1e9902870d91c50d957
SHA512 b4b6e030fd1abe19fa308b32f04571a7c1c1f78a7cb789f169b37b54f281ec66d16e4cf0bbbdad81642bf28e266a6b2af7c19cf5106c683fb7f443bfa3110e05
SSDEEP 48:tZrc0/GdshWpo1rckthAoShbEHaLKNGiNQtvmolOGR36tgtr/GTvJP8AscaV4Li1:4V+8v4jHa2NGiivmmpWsBVuQFwlE5vSG
TLSH
T15DB1DB1A2D5914A80077E3385B6B6208F72AA1B72105CA067EACDE513FB152BD58FFCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5776	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1262770251-41185387-1005173349-1000\{46D1934C-7C65-468D-9AE8-72384F991AF5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2356	msedge.exe
2356	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe
2336	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2336 wrote to memory of 1664	2336	msedge.exe	89
PID 2336 wrote to memory of 4880	2336	msedge.exe	90
PID 2336 wrote to memory of 5776	2336	msedge.exe	92
PID 2336 wrote to memory of 4880	2336	msedge.exe	90
PID 2336 wrote to memory of 4880	2336	msedge.exe	90
PID 2336 wrote to memory of 1576	2336	msedge.exe	93
PID 2336 wrote to memory of 1576	2336	msedge.exe	93
PID 2336 wrote to memory of 5888	2336	msedge.exe	94
PID 2336 wrote to memory of 5888	2336	msedge.exe	94
PID 2336 wrote to memory of 5888	2336	msedge.exe	94
PID 2336 wrote to memory of 6000	2336	msedge.exe	95
PID 2336 wrote to memory of 6000	2336	msedge.exe	95
PID 2336 wrote to memory of 6000	2336	msedge.exe	95
PID 2336 wrote to memory of 2300	2336	msedge.exe	96
PID 2336 wrote to memory of 2300	2336	msedge.exe	96
PID 2336 wrote to memory of 2300	2336	msedge.exe	96
PID 2336 wrote to memory of 1648	2336	msedge.exe	97
PID 2336 wrote to memory of 1648	2336	msedge.exe	97
PID 2336 wrote to memory of 1648	2336	msedge.exe	97
PID 2336 wrote to memory of 248	2336	msedge.exe	99
PID 2336 wrote to memory of 252	2336	msedge.exe	100
PID 2336 wrote to memory of 248	2336	msedge.exe	99
PID 2336 wrote to memory of 252	2336	msedge.exe	100
PID 2336 wrote to memory of 6036	2336	msedge.exe	102
PID 2336 wrote to memory of 2020	2336	msedge.exe	106
PID 2336 wrote to memory of 856	2336	msedge.exe	107
PID 2336 wrote to memory of 4212	2336	msedge.exe	108
PID 2336 wrote to memory of 1764	2336	msedge.exe	109
PID 2336 wrote to memory of 1764	2336	msedge.exe	109
PID 2336 wrote to memory of 2356	2336	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\app\cmp.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7fff22ccc188,0x7fff22ccc194,0x7fff22ccc1a0
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,7768297998744261361,13706634768870927565,262144 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:2
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,7237956541351492227,2531910335535601942,524288 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2380,i,16691617711339899167,10968080158095347364,524288 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=3264 /prefetch:13
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,4417886163897884921,2103534221365341376,2097152 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3652,i,1779278882324083232,8444264844855214985,2097152 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4352,i,10124527186326430135,4588361443060495560,2097152 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4384,i,12415727808428678379,14044986151329274266,2097152 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:9
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,8728542347565748003,16631601414046468057,524288 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:14
  2⤵
  PID:248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,4341984234687066461,17863070097075679574,524288 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,11586998256717046235,2121221148724150532,524288 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,11586998256717046235,2121221148724150532,524288 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:6036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,12289458138917767498,11664262251204002616,524288 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:14
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,9283510757117510737,10237086357774137567,524288 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,2265484247650696954,890187978999300674,524288 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,15649250061491765958,8271801825593940291,524288 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:14
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5476,i,7928526485132730837,5290448780455212777,262144 --field-trial-handle=2876,i,4833309609309891221,13028103006823845848,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2356

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3640

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3740

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1ede158c-5a63-4b9c-a260-76e1cd1e0f01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1ede158c-5a63-4b9c-a260-76e1cd1e0f01.tmp
Size 34KB
SHA256 2fbe399f1279414eea76862438f22bc9434be326f4e58779f6a51f7dffb5e5fe
MD5 4b26119de02168c9d2388ad247351949
SHA1 c619e4f0389dee3cf7b2937a1f73be70892fd7fd
SHA512 bb66851c1a90ab0ccd2ca681037621424eafa79e3ce03164f4821c7ae32137d2ff9d8e2bc67a537c6258755af4fa538ab5433b766162bb21906c55e98d6046bc
SSDEEP 768:tU3konK3OoASA1h3Yogkl5akl8pbHW0AWDRUqj1JW:tU3kBTA1h3Yog05akl4bHW0AgU0zW
TLSH
T160F2BE31EC659EB74DE5D285B2167207BFF8D5236AD84B8494CC9F0E01A76AE070BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3ee20e6e-886d-4e6e-a0f6-8a40abf2c955.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3ee20e6e-886d-4e6e-a0f6-8a40abf2c955.tmp
Size 40KB
SHA256 35b2004f348fae827c007d160366d91ff527c7c6e75b6b817396568783cb06dc
MD5 ce68bd2f0add25726b324c5fb5863f62
SHA1 bd045c74eb12a374205979a830048083fc7459ea
SHA512 5a5733605e3c62d0007b708b308c2ecd5b5bb6c8e942e1394326922634c228a49dc2bbae59040e682b1a9dea6d061f60a3cc88a7674a8076335fe99c7621dcde
SSDEEP 768:r/UxvxjgC+x3BonK3OoAS21h3Yogkl5akl8pbHW0AWDRUqjr9:eZj3+x3BBT21h3Yog05akl4bHW0AgU0x
TLSH
T18013C035EC69AE774DE6D284721A6347BFF499232AC45F9488DC9F0E02973AD070BC52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

51b2b685-ecc1-4a1e-96cb-ce135c8219c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\51b2b685-ecc1-4a1e-96cb-ce135c8219c5.tmp
Size 37KB
SHA256 223d8c71b740f462f7fa396f03380c5f5ce2f4483bff4f288fde5aff48d49c13
MD5 ddce7a9ab557d3847343eb8e49c20b99
SHA1 f5f9b829eab032471d6170b000d96f19836318a8
SHA512 bb77aa3476afc9a571227782f8b08fadf05aef4b0a886d36146daf056e4300d9047a3a754dd64e42863c216ee341fc87a505947cc91b9a187bdb5e7033ab645f
SSDEEP 768:B/UxvxjgC+CZ3JAK3OoK1h3Yogkl5akl8pbHW0AWTJSHvP0Vv:UZj3+I3PK1h3Yog05akl4bHW0AESCv
TLSH
T17C03CF35EC659E778DE6E284761AA317FFF895636AC0569444DCAF0E02973AC030BC53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70f92b11-d270-4763-8218-d92a01e400df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\70f92b11-d270-4763-8218-d92a01e400df.tmp
Size 34KB
SHA256 af9e5d97f126eb6a4b0deba4066b84155449d8bb7f9b92e5dc87cd94ca5a1856
MD5 a3c2480aaf28bddfdd2928b228ca0f39
SHA1 3f5c27222a6d317206141fb4c76aaddcbcef9d08
SHA512 231f5e409fcb1b81bfbc6b26c2fc761a8aae5fda345cc60df463e6a38bafe9f9a5d415c1963c85ba937d64db72f64e2e70e0462523a72980b262f56b7bb5205e
SSDEEP 768:nU3BonK3OoASA1h3Yogkl5akl8pbHW0AWDRUqj1JW:nU3BBTA1h3Yog05akl4bHW0AgU0zW
TLSH
T16AF2AF71EC659EB74DE5D285B2167207BFF8D5236BD84B8494CC9F0E01976AE070BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92a369c2-1dc5-4df7-8276-614eeb6be928.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\92a369c2-1dc5-4df7-8276-614eeb6be928.tmp
Size 36KB
SHA256 efae3c3a5f5d89485c8b9b935944e416b68f78da2748a02c758db339da8d2857
MD5 5e0759042d053cfbceba259df292a410
SHA1 eab94cab259757045c1baec8603d50948b5da09f
SHA512 29eea472c87e75ae6b9f821dd1080be6f591c6120aaecc91ec7d2b2d976f6bb79fcdb150a078db4b6aeb091c2af2112bbcd59fe04c2d3e52f86f80be160f3bd2
SSDEEP 768:GFQR3vwgUonK3OoASO1h3Yogkl5akl8pbHW0AWDRUqj1JW:NR3CBTO1h3Yog05akl4bHW0AgU0zW
TLSH
T14A03AF72DCA4CABB9DE9C7C5B61A3202BFF495635AD49B80D5CC9E0D01972ED034BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e1837ee53009f9b691f7aee3be45ffb945d4894bf04ccaf875b9947114bb5224
MD5 58ba31abb4a3fd3bbc9aadea4fc9ca13
SHA1 d79c4b2ccee6dadb45162ea34fb988911510f0b8
SHA512 0c096d7f5d364e0911d26f4bc2ea03e3d81b2026be5182b04fc17e7949640761db8056138b55b28aa9abe884d601d2cf6b1be9e992fd3565c35c69def459d32a
TLSH
T1F3D02B3579ACD772C18C503A405901112A95F001FD46C1801953B10848913400006295
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0a1e646beadfff70af6a1dc73b6baa41188262ddbb2b7781270d4e94c92c02be
MD5 893220bb58a1416480d52375128fa19a
SHA1 3a577208211e9133f3744d9ba695501b0481ca9b
SHA512 b3f0e3d85398f7aa7fcea74cd44fd2709c0265d9072771dccfe7508832bc1173f452a0f49028e8bd62ea434676abcdf4a111c8e31f121871fbdfa4acf207b131
TLSH
T1C2D02B3179BCD772C18C503E405A01112A85F001FD46C1801A53F10848913400005281
MD5 SHA1 SHA512 TLSH

Submit Download

13b58440-8ebb-47ee-93f3-bc3c18b8db79.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\13b58440-8ebb-47ee-93f3-bc3c18b8db79.tmp
Size 11KB
SHA256 75b3dbf291a871d55be62024212af1ef0013f95e76b6a2df91a36d5c919246fb
MD5 b330179d66889c2c413ad793111c9920
SHA1 bfccc4d16dd5489c1aa7f761aefe3c17c3bcd8a4
SHA512 11d66ee8f92887826127e51f831c5ab7f175ffdaed450c7799d32739bad7505aff46ad5fe87318f7d2dff29810b570c9c76e5c0901c34bff9e1ef50888629546
SSDEEP 192:sxRYRhbo/fJ+sNqmB2zoA8p4+/g6+WNIYdq3G7XIgIJ:sxRY7o/fssNHBrX/5IUs
TLSH
T107328515AD28A93B4CCBE21DFB657F53D2F95032A1951F48AAFC861C04EB6DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38b52542-f165-4930-a4b3-850996959485.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\38b52542-f165-4930-a4b3-850996959485.tmp
Size 11KB
SHA256 940fe56efe0b4cc52a97940e693677181254d93c4ed8a05f85472186a85a67b1
MD5 b86ee1544245f4dc21d3c6c10e4e6835
SHA1 90331436352492d34c609c334d9a2f717e1b9c3a
SHA512 259df4f9c86673e9cbaf61c9cf265325ebff8efa45bfdc43b0ea00f0956c144a016f78bc6dc9a56c9c8ba6e2e193919cb914a84ac8fc6aa0f5fbf71c5b74ccfa
SSDEEP 192:sxRTRhbo/fJ+s5qmB2zoA8p4+/g6+WNIYdH3G7XIgDfJ:sxRT7o/fss5HBrX/5It9
TLSH
T11C32A715AD28A97B4CCBE21DFB557F53E2F95032A1D51F48AAFC861C04EB6DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45671b95-0cd7-4634-9ac4-d5300f2d1ceb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\45671b95-0cd7-4634-9ac4-d5300f2d1ceb.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

9f02104d-6ace-4213-bdbf-0954b2070b28.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9f02104d-6ace-4213-bdbf-0954b2070b28.tmp
Size 11KB
SHA256 d53034062c947637386c8432a3fc8a413bc8ce345df87dbe090956bd6796cb23
MD5 175d3de4b75b143439a73788feee0628
SHA1 a7b06c767d38e5a64a357fa0aa9c6655bf3dd234
SHA512 bc267631177f45c599235267580973586b1f913e380e63a290a3ba3822c5c4b02a7db9e1cf9a0ee3f0f3c7c916eaf51ababb7e44029f68386131889ae503e239
SSDEEP 192:sxRTRhbo/fJ+szqmB2zoA8p4+/g6+WNIYdq3G7XIgD5J:sxRT7o/fsszHBrX/5IUP
TLSH
T19C32B615AD28A97B4CCBE21DFB557F53E2F95032A1D51F48AAFC861C04EB6DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 b8afd75da3cb7ab048c44e65deac84bb3e962a30f8bd2d2a6ea11288816027a0
MD5 703cdfd6fd870b44fcd5505262dd76be
SHA1 7d7170f3fb8c4c7c643778a100f23a644d0ab9a6
SHA512 3daed525b71f590cedda01ef2671fa02e7d6eb701bcd24244c8917e5059bdac5ea20a3ee2984e4306891c21b924cae7ebd04d3cdebad24d6245ffdeba1c572ef
TLSH
T19A6197108E70870BF798317442DD0A9A3F79459CAEF3DF26539E81FC5AAA352A1D8078
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e2efee269aa8e2acb6407aba887e5eda09cbbbd1c439c1c78fa5aae10e272d29
MD5 df7708d0a72ddd71930b57bbc3804b79
SHA1 2de8667e94b672b6af55e86500f20b219c5495ef
SHA512 8b60bdb04f29a8ebdd253f969dfcf54ac9ce380ef6aab569b26cf2dc761e10cd521841d26299889dfcafa173fb3d6f34d33b6e153b7d7b3d955ed81912e2107c
TLSH
T1566198108E61870BE798307442DD0A9A3F79849CAEF3DF26539E81FC59AA352A1D8078
MD5 SHA1 SHA512 TLSH

Submit Download

6e70d9df-c3b3-415c-8ac0-d8b1fd9bb33c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\6e70d9df-c3b3-415c-8ac0-d8b1fd9bb33c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

8f8a1e0d-1255-41d4-885f-6ba09958e474.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8f8a1e0d-1255-41d4-885f-6ba09958e474.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

aa264222-2cf0-46ed-87fc-575d34499236.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\aa264222-2cf0-46ed-87fc-575d34499236.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

f73d238b-1be7-4364-b0bb-aa978a98ea47.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f73d238b-1be7-4364-b0bb-aa978a98ea47.tmp
Size 2KB
SHA256 dc6399eb6954b4c8e426e55430c42cc5ab11db6dfe93e58bb75f3dce74bc2d0c
MD5 79486bd8f02d97a35dcc058b310cc7f4
SHA1 ad074c3700fdd22c33952de4ea166ebe28788905
SHA512 662901bac15c3ef6c6548ea02b076e0b923262e7eabcaef5743902dca5f7e07968f87b4405e8291e379d6b77ac3839b51a60568ad65b97fda4b369b938f24181
TLSH
T1F7518EF7C3E8867D890196F4AB146E1BCE1D0915432C3C5A89E4AF2F93E24B1E14159F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a7189c9f3edbb8287c5ea156ba03d1c70572cb940424f5d4b5535c29ea6b16c6
MD5 eb8c91bb1df4a79ceed9ac0bab5e7086
SHA1 e7126f93d0e803da087452f28ff19b7f7133e3ca
SHA512 32eed6a3c5098afd811f06239343bf884dfb765e921693fc894b97d22b3c186f378f305628d255ef2987968164e6d70ca154b59649bb77fe2dfa0041d20b3645
SSDEEP 48:KU6IfK3Kk3y5QIzKFa8hvIZKoI8Hy3WlcQOO:KU6IK3Ku6QQKFamv+KoI2R
TLSH
T1FC918116367A13403C7E6E1C41DE8E3F924130B23468F6AF77A951A19E2BE054DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

cb1206c6-d497-4a97-b769-64732291afc9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cb1206c6-d497-4a97-b769-64732291afc9.tmp
Size 23KB
SHA256 b3b58b29cf2e3aa38b04715b0f56ef3ed2ddde3a1f6123a0001f08006e286fb2
MD5 7857d5dc18e853650990a681c66ddb4c
SHA1 99269677c9495a4dc29d126930857284fa8b476e
SHA512 99f978fc981a9e67c49316f5de7fbbec3d6d6b34be14fb39a53c9cf1574631b983749b6155354772fd44a3e3164a2d2a451e2445250baa54a3f51e137e035d77
SSDEEP 384:qYe+z1ifCtgUGFf8SKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV269GGRLproKrW:qF+z1oWgU6f8S8F1+UoAYDCx9Tuqh0VN
TLSH
T1CEB2EA2B604DCB7E4FC11A9D9C196F976DA802C796588D4047FED84C03C77EAA21A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df354cae-55ca-4439-81e3-3f34d679df17.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\df354cae-55ca-4439-81e3-3f34d679df17.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3758888c-bf73-48d4-9916-7b5ea3e60e34.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3758888c-bf73-48d4-9916-7b5ea3e60e34.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download