a693d5ac848b76b45d097de3b0bfe6ef92f431f4f096b0782590e93a473bd35b

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 03:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/app/index.html
Size 27KB
Sample261002-dynpcstxfx
SHA256 a693d5ac848b76b45d097de3b0bfe6ef92f431f4f096b0782590e93a473bd35b
MD5 c2f76f2aacb6c097f676598057dfbf16
SHA1 4d1614df58b00cc730415ae2b2c5bf0f91ff85d1
SHA512 634a8fd6bbe9f0e3f646640928fcd68683d3388db08bcb14a43cd2d99a931d41aae82e979d140ec55cf7778b83bb2d3c5304a268e8df68da19c4c2934846a494
SSDEEP 384:23JlhPshoRJ/seq06ItLglbyPasN1vnY5gfZZ51Px+mppiq:2OhoX/seq06ItLglbyPa65n2q5xtoq
TLSH
T1BDC2D811DA36102DB237462AB5E2BA4E7024C117E6538A7EF65C5635CBDB18B1E13BCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4788	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{39071623-A6A3-4EF5-AA79-FA38A85BC1C9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
468	msedge.exe
468	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe
3736	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3736 wrote to memory of 3520	3736	msedge.exe	87
PID 3736 wrote to memory of 4788	3736	msedge.exe	88
PID 3736 wrote to memory of 4760	3736	msedge.exe	89
PID 3736 wrote to memory of 4760	3736	msedge.exe	89
PID 3736 wrote to memory of 4400	3736	msedge.exe	90
PID 3736 wrote to memory of 4760	3736	msedge.exe	89
PID 3736 wrote to memory of 4400	3736	msedge.exe	90
PID 3736 wrote to memory of 3124	3736	msedge.exe	92
PID 3736 wrote to memory of 3124	3736	msedge.exe	92
PID 3736 wrote to memory of 4072	3736	msedge.exe	93
PID 3736 wrote to memory of 3124	3736	msedge.exe	92
PID 3736 wrote to memory of 4072	3736	msedge.exe	93
PID 3736 wrote to memory of 4072	3736	msedge.exe	93
PID 3736 wrote to memory of 3512	3736	msedge.exe	94
PID 3736 wrote to memory of 4124	3736	msedge.exe	95
PID 3736 wrote to memory of 3512	3736	msedge.exe	94
PID 3736 wrote to memory of 3512	3736	msedge.exe	94
PID 3736 wrote to memory of 4124	3736	msedge.exe	95
PID 3736 wrote to memory of 4124	3736	msedge.exe	95
PID 3736 wrote to memory of 1740	3736	msedge.exe	99
PID 3736 wrote to memory of 1740	3736	msedge.exe	99
PID 3736 wrote to memory of 1680	3736	msedge.exe	100
PID 3736 wrote to memory of 1680	3736	msedge.exe	100
PID 3736 wrote to memory of 2380	3736	msedge.exe	102
PID 3736 wrote to memory of 2332	3736	msedge.exe	111
PID 3736 wrote to memory of 3080	3736	msedge.exe	112
PID 3736 wrote to memory of 4352	3736	msedge.exe	113
PID 3736 wrote to memory of 3044	3736	msedge.exe	122
PID 3736 wrote to memory of 3044	3736	msedge.exe	122
PID 3736 wrote to memory of 1760	3736	msedge.exe	125
PID 3736 wrote to memory of 1760	3736	msedge.exe	125
PID 3736 wrote to memory of 468	3736	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\app\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffab224c188,0x7ffab224c194,0x7ffab224c1a0
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,16510760664904216578,18093727839337813271,524288 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1880,i,16248369112640328617,18306906202596598580,262144 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:2
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,16064907433404592549,9838065434810834895,524288 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=2812 /prefetch:8
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,17453393116924731507,176710199217154317,2097152 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3552,i,17199850587813068532,14327946264513623061,2097152 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,9632452225104414055,1197197193319263549,2097152 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,4850272921161244290,17422895839075493482,2097152 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:2
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,5834881924135455551,6442591023461894037,524288 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3684,i,14646998118854410247,9060660555865696150,524288 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,10892321512654552802,9326589682467671360,524288 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,10892321512654552802,9326589682467671360,524288 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,9796325004484408815,10613595253522591437,524288 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4220,i,14136969693038242346,10627797366068377059,524288 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3880,i,15715717296140464299,878281322619837174,524288 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,7228871343321788906,11868844149348151879,524288 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,13546783294547815523,6872067674966515997,524288 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5208,i,7587182841219902583,7189041529730660598,262144 --field-trial-handle=2768,i,5910289535035610022,9484553330724101759,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:468

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4732

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0ef8dd48-1bb6-4fd9-a555-902eb9a5e042.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0ef8dd48-1bb6-4fd9-a555-902eb9a5e042.tmp
Size 18KB
SHA256 8ac9d15e5615bf19d00743e3174b2603fd4fea3dcaeb565cd816191b46e6e0f2
MD5 2895d46e48d51bce761ae84c24e17c28
SHA1 32f07f0ad2caa40b19caf47fb5d04f2838731c78
SHA512 e4b0dc95625744eae2c8a4efa34dd871d30c463f49fb6b806c5139fb14ef7de8cb862eb122c942d5e4449863d40472646d3eaa51c7a3dfaa183a9909a305ff49
SSDEEP 384:0ZcIhsN7XSwJHY5Vs0BGYX5EXLEs9XlaYo7f20tgOIwZOyLZo9:yhU4gOGYuXLEs9ET20Xso+
TLSH
T188828E3698B86C7B6CFB9145F14A36134FF8D127A7C5AF8484ED6B1C01EA298131B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

489c94d7-73aa-4bfa-80d8-e9dc80172bfa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\489c94d7-73aa-4bfa-80d8-e9dc80172bfa.tmp
Size 8KB
SHA256 b53ee447ca972aa3f6075657ae39867a420081f8610baa4e04745b8f95bd73cd
MD5 f1a811b5c79c1b24eff7253923fdde3c
SHA1 e84663f8ad9f3e3f3c8d4682c6299691f1f4b180
SHA512 6da1e9a58b1b9d9773e4dd7abfa104d4976dd02c963ee9377c6a66b20dc5e23c16b8ab0a7d1d554048b1c6cdba62f9f01c86c0da518a60c9b1da53aa49ee4fb9
SSDEEP 192:LJONe6DphWqQmiUy0NUwGYX59ezWCLEs9XlaPwo7f5kIIdq5PU6:lONe61xnUwGYX5EXLEs9XlaYo7fq0U6
TLSH
T12A121931A8B8BC7B5DE36591F08B35135EE4922BEB847F94C5EC1A1C01DF29C130A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

829ebadc-07c4-4d9d-81a8-32e5db614061.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\829ebadc-07c4-4d9d-81a8-32e5db614061.tmp
Size 8KB
SHA256 daf9aa392812a88746dbb1c89d8d85168fe88bfa2f63ea116a1e5ba096f1f1db
MD5 b7e4630c1112f499d4945a0c831d11cc
SHA1 dd4a165230c901143fdd2bfc0d89095bcc4ec81c
SHA512 1958dcc63847bc85a25d998cce6f20b738e32bb84f178c19bed812b224d9a3a9350b59f3831ec8bc01e300eee5ba36f0c1430e224b54d3951cc57e236d80fd1e
SSDEEP 192:LJONV6DphmqQmiUy+Nq8wGYX59ezWCLEsXkk7JbU6:lONV619XRwGYX5EXLEs/FU6
TLSH
T11602FA39A8787CBB9DE36E45F48B26139FE4212FAA902F44D6E81A1D01D768C1307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

24a9c922-435e-4d90-948d-0e54d39cc7c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\24a9c922-435e-4d90-948d-0e54d39cc7c7.tmp
Size 27KB
SHA256 07368954760b274bb0a7d35ac42553c4a808bcc519edbb9da7862e885bfacd7d
MD5 be53a7357d32ec899da208359dd19b06
SHA1 490c943ae07dd63013dc15cf368b43275493bc2e
SHA512 06c4bd0005ca008e1be771e6ba73695b6176e034e0181df722540fc1de6f5bb18d8c5a770687f184b87072750e9fffc865f81ffdd6bb57fce29d412e59f079f5
SSDEEP 768:1aichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzCroevr:1aichfPWvPZplu1jan+LKgzZ8r
TLSH
T1B3C2EA3B640CCB7E4FC01A9DDD5A6F967EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e6b45a6-953c-4d3d-9a1a-712e8ea2933c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2e6b45a6-953c-4d3d-9a1a-712e8ea2933c.tmp
Size 10KB
SHA256 c0008b06963ba9ed16cbacd1e0145dcda2b07d4210898c228086a31d45f71735
MD5 5993495e19c775c2daefc77c212af8f6
SHA1 efedf5ce77cfbd342080beff4bb4c236288580b4
SHA512 e8ae68329aa04c6381435a0bb4cf481a618d09c47b7a7bfdee5e44536c26dbc7cdcf6228964de54d62bee68418017a62cba2c7b05c3d723789186404b6815cb8
SSDEEP 192:sxZRROW6/fPsNFIdpd9HW6+WNGYgyz3XIg5cJ:sxZRv6/fPsN2THbG66
TLSH
T14622A7526E28697B8CCBD20DFB15BF53E6F9503251911E48AAFCC61C05E7BDE224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

35ad37ad-d06e-4e99-9f1b-b92279ddb262.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35ad37ad-d06e-4e99-9f1b-b92279ddb262.tmp
Size 9KB
SHA256 1795de708192c4a7bf356f76023b763e987e89ce70ba3e90cd66099af25eecab
MD5 07e6acf0bbcaf0874a7051da612c55dc
SHA1 2f45c76b5763903a5e603464eddb9d3577097d7d
SHA512 a081c8d9e2e5e9fd834e0b7dd01bedf6b1e54c087294625a7e838891e845ae00adbad66537096173a8706faaf55d8b061d893771408c327e2e1bc15d40c5dacd
SSDEEP 192:sxZRROW6/fPs2FIdpd9HW6+WNGYgU3XIgrJ:sxZRv6/fPs22THbGC9
TLSH
T10F22A7116E38A97B8CCBD20DBB15BF53D6F9503251901E58AAFC861C05E66DE224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69aeda1b-8685-4994-b834-9d3856fccbaa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\69aeda1b-8685-4994-b834-9d3856fccbaa.tmp
Size 10KB
SHA256 1653c2d3c75909724ab8890ad262e43d984bc2711647903b4fcaba7a482f8521
MD5 b6f42d8786c676cb8f03e954f33b03df
SHA1 25e933c33c7b862e1c871ce956c0271835cb7483
SHA512 5d6124620c58433675c242f6e62b9eef554d195b554e2ebd8fd7ef747f4f63f10b59da0064bf4e0aa78ff2664d0ca29a7f9e1947cf8c7e395fd64fb3e0422715
SSDEEP 192:sxZRROW6/fPsNFIdpH9HW6+WNGYggw3XIg5cJ:sxZRv6/fPsN2dHbGf6
TLSH
T14C22A7526E28697B8CCBD20DFB15BF53E6F9503251901E48AAFCC61C05E7BDE224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 51d019c9998a0338bcd9569e58a38a2614ce6e457ffb1a3ea3018cedb4d257f3
MD5 5fdee1a50d0888e4d35b448ca8213450
SHA1 722d082d1917c53cc3c7f0f53e6e7b235886677a
SHA512 76d2e667b77ab24a705f8c06851d450dcd661cce1f8b1f377d9fe0449267dfc7864d981ce04b3aeb9c72d86b53790cd91305f7f56e601c47667318508f1241ba
TLSH
T1FBE080F849C5C23D5184644B0295834CC791761B97C4AADD2714D589794658463D3B60
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 68f958c20637520629d7f74aebf13abc629826a2e9a86b295e0b7a4d9da0244b
MD5 f8c5ef5b5688e165cd890f6d7b8d88bb
SHA1 e0f2e8aa2a6de6e154854d5a2042c756541d5a2e
SHA512 e7084f5de501967f69ef53a2d32ae626afc3ebcf54b94259b2fefa5d5c62e7b496289bb4d68fd3eb436c970b403bb2498c113493661504b09c0aeaa149dba147
TLSH
T1595192B0BF8481A9F798627C9DCA02473E34998558B77FCC11E7CD7AF80A71E1124E44
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 cc09969c1c0ef096221be7d915c047c514f258891543c4c1b62cc5be1714ec6b
MD5 2c9da5707b85fa00802868dc472a736d
SHA1 66c5d7ad305487e1e7415a0607a23c20449e02d6
SHA512 43068895327b3947c4b947f0de67fd55ced6f7523f3507a6e1e31f65c079c7f09920b209ffd2bef07c144032c8f1b4bb4a3329676fba3a3d86e40e330a1a6374
TLSH
T1AC51B2B0BF8081A9F798623C9DCA02473E34998458B77FCD11EBCD7AF80A31E1124E44
MD5 SHA1 SHA512 TLSH

Submit Download

0a6b4e8e-9ad4-41bf-aca0-ea365876b172.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0a6b4e8e-9ad4-41bf-aca0-ea365876b172.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4ad40cca-06f4-4560-a830-e99d4abc37d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4ad40cca-06f4-4560-a830-e99d4abc37d9.tmp
Size 1KB
SHA256 44c1ade765139390c0e0fe25bf83f327dd471085ceb8b4404d2b2857d59aaf0f
MD5 d2ef38651928321b567e36eb1d3a0c26
SHA1 7c62de30711eb9bddb7a7fe850d770875cfe0a13
SHA512 2ac87be16741ead39660d5e0c447d0ca04f11319078b809f116a0b475779f3b7e26b7ee8c7481d905928d49393aabfd8401c0933cc26d2814377cde252728120
TLSH
T10F217DF7C3E4866E8D0156F09A24AE1BCE1D0616472C3C1A89E4EF2B93F3475E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

864f2fb7-7752-4ea5-9614-eaf8bcb7b011.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\864f2fb7-7752-4ea5-9614-eaf8bcb7b011.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

feb20256-99c8-4c49-8b9c-294a9b25992c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\feb20256-99c8-4c49-8b9c-294a9b25992c.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a77826c9eaf01037be3d231c707556f720a47e2d8f9dd563ed473e5b6bc89b33
MD5 0081b75e8006f3e6cd443573fdc3393d
SHA1 72988dbbc486820e369ffc436cd5f39bebf68a91
SHA512 c19272d099925367256728fe937011334de22f053548bc901ae6da6f20b6980d1842cc2b59adacb2d5be456534548805312034f01497a83110c8ee927b48f0eb
SSDEEP 48:K0CNQ8CgARbcrMISURK9Y1iRxaBYDUAyyLJ4FZDHb0bni/ISx0K9x1b0xZkYijPQ:KQNqKu0CC+oKDCw2EKjaWR
TLSH
T1CF9130623577130038BD694C40A4AAAA4A4231F77024AAAE7F7D41E68D6FF145EFF4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a5380eec-40ee-408f-a030-03db47d02e03.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a5380eec-40ee-408f-a030-03db47d02e03.tmp
Size 9KB
SHA256 a74a5e32ab6e7131c1fb392cc9bc82f64059b92814a22f3ae03f6e3eb3b97c50
MD5 bd8f105663b4ebee9c89fa0c35a3f2fe
SHA1 405bb827ca5e03040c84e132c4228f160422a3ff
SHA512 ad38c958ad988b8f5398649fa5e02bc46a432bc7c5e2844a2c11fd4db64647003b86c87eecdf51decdd8f49ef34bee092a5c5bab5b3e37b2a4d15431be442561
SSDEEP 192:sxZRROW6/fPs2FIdpd9HW6+WNGYgU3XIg52J:sxZRv6/fPs22THbGCg
TLSH
T1EC22B7126E38A97B8CCBD20DFB15BF53D6F9503251901E48AAFC861C05E67DE224B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f74aa9f3-ef33-4939-a26d-7868e75fb74c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f74aa9f3-ef33-4939-a26d-7868e75fb74c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c4a4f7fa-1313-46da-8da3-3b12bd1fdbc5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c4a4f7fa-1313-46da-8da3-3b12bd1fdbc5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da9c6595-8cdb-4eaf-8c9c-c4d1d2002ec3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\da9c6595-8cdb-4eaf-8c9c-c4d1d2002ec3.tmp
Size 21KB
SHA256 d028593aad0d0f0165eeb2d144e8dde7708500cc544bfd9e41afb9e41b7a063b
MD5 c2af34f1eb740607d4980a1bef44cad9
SHA1 e4460e25573e120ef13c1396fa18f8c8587d6ee8
SHA512 c3cb45838b77677dc8c1ce36fe1af6ed099b92533b8332b4af91d9901af8fe78a7549367cdda384414cda96bd6ee5a7a0a01320984f2e65e7890cadc35b359f3
SSDEEP 384:qiFiZcIUzsNF8TUNTUlIl6SwJHY5Vs0BGYX5EXLEs9XlaYo7fq0tgOIwZOyLZo9:hFQogwg04gOGYuXLEs9ETq0Xso+
TLSH
T1DEA26C3388B89D7FADFB9645F54A32138EF49127DAC5AB9096DC5A1C00AA19C034BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e0df2f9e-e6b7-4650-9b5a-5b2d29dc9957.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e0df2f9e-e6b7-4650-9b5a-5b2d29dc9957.tmp
Size 18KB
SHA256 f45c6c13337b5eb2d6c8e7bdfabd9ac390a8d5b7b3e73720eb1e8695a4f12550
MD5 14e03df43336948fd22e5aeeedc7baf1
SHA1 ae79de46af16f20b7976767f59b02066f995877a
SHA512 3d2d47ce32e591a52dbde47a7e666aa4ed8fb34e78254511c6cfd1eef94f614adc4c6440596e2b4d3ac0a7e6c85577342e9d9118e3bd77de63662d10fe3fef54
SSDEEP 384:jZcIhsN76SwJHY5Vs0BGYX5EXLEs9XlaYo7f20tgOIwZOyLZo9:7h/4gOGYuXLEs9ET20Xso+
TLSH
T1CB828E7598B86C7B6CFB9145F14A36135FF8D127A7C5AF8084ED6B1C01EA298130B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e90ea54a-837a-42a6-9242-a921283a3c69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e90ea54a-837a-42a6-9242-a921283a3c69.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 54242b60cde3717f06e69628f233031b1b5b9531dfbf026abd0c3dca558be9ac
MD5 ea5b070a75a4e3fccec0d6c8120c8028
SHA1 e7e6d23d68a74de45de5a8096996797ad628053b
SHA512 f23e321908bf86dd21280f54d5ca110b6921157971ca721b92621b3bee227671e2320107dd0654c81fba1950e498ebfedfecbbb8e40a0f0fe42414805dd42927
TLSH
T1E5412C58AAEA1148B7B76F1AABF2A85D48BFB8771F06D45D00110D4F0A63B40CD71B37
MD5 SHA1 SHA512 TLSH

Submit Download