a693d5ac848b76b45d097de3b0bfe6ef92f431f4f096b0782590e93a473bd35b

Analysis

max time kernel
148s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 03:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/app/index.html
Size 27KB
Sample261002-dynpcstxfx
SHA256 a693d5ac848b76b45d097de3b0bfe6ef92f431f4f096b0782590e93a473bd35b
MD5 c2f76f2aacb6c097f676598057dfbf16
SHA1 4d1614df58b00cc730415ae2b2c5bf0f91ff85d1
SHA512 634a8fd6bbe9f0e3f646640928fcd68683d3388db08bcb14a43cd2d99a931d41aae82e979d140ec55cf7778b83bb2d3c5304a268e8df68da19c4c2934846a494
SSDEEP 384:23JlhPshoRJ/seq06ItLglbyPasN1vnY5gfZZ51Px+mppiq:2OhoX/seq06ItLglbyPa65n2q5xtoq
TLSH
T1BDC2D811DA36102DB237462AB5E2BA4E7024C117E6538A7EF65C5635CBDB18B1E13BCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2572	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{AD5BFC08-8E29-425A-BE9D-8489B69D2F3A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3460	msedge.exe
3460	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5568 wrote to memory of 3060	5568	msedge.exe	90
PID 5568 wrote to memory of 4184	5568	msedge.exe	91
PID 5568 wrote to memory of 2572	5568	msedge.exe	92
PID 5568 wrote to memory of 4184	5568	msedge.exe	91
PID 5568 wrote to memory of 4184	5568	msedge.exe	91
PID 5568 wrote to memory of 4736	5568	msedge.exe	93
PID 5568 wrote to memory of 4736	5568	msedge.exe	93
PID 5568 wrote to memory of 792	5568	msedge.exe	95
PID 5568 wrote to memory of 792	5568	msedge.exe	95
PID 5568 wrote to memory of 792	5568	msedge.exe	95
PID 5568 wrote to memory of 1044	5568	msedge.exe	96
PID 5568 wrote to memory of 1044	5568	msedge.exe	96
PID 5568 wrote to memory of 1044	5568	msedge.exe	96
PID 5568 wrote to memory of 4248	5568	msedge.exe	97
PID 5568 wrote to memory of 1676	5568	msedge.exe	98
PID 5568 wrote to memory of 4248	5568	msedge.exe	97
PID 5568 wrote to memory of 4248	5568	msedge.exe	97
PID 5568 wrote to memory of 1676	5568	msedge.exe	98
PID 5568 wrote to memory of 1676	5568	msedge.exe	98
PID 5568 wrote to memory of 5876	5568	msedge.exe	100
PID 5568 wrote to memory of 5360	5568	msedge.exe	101
PID 5568 wrote to memory of 5876	5568	msedge.exe	100
PID 5568 wrote to memory of 5360	5568	msedge.exe	101
PID 5568 wrote to memory of 3644	5568	msedge.exe	103
PID 5568 wrote to memory of 872	5568	msedge.exe	107
PID 5568 wrote to memory of 5116	5568	msedge.exe	108
PID 5568 wrote to memory of 4252	5568	msedge.exe	109
PID 5568 wrote to memory of 3856	5568	msedge.exe	110
PID 5568 wrote to memory of 3856	5568	msedge.exe	110
PID 5568 wrote to memory of 3396	5568	msedge.exe	111
PID 5568 wrote to memory of 3396	5568	msedge.exe	111
PID 5568 wrote to memory of 3460	5568	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\app\index.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x28c,0x7ff84b13c188,0x7ff84b13c194,0x7ff84b13c1a0
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,16601558181098781847,8498703393436970076,262144 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,15969952165822609881,17093323256357394611,524288 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,16584425630105462408,16001325283886650541,524288 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:13
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3656,i,15838516932484416581,7729724823833319401,2097152 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:1
  2⤵
  PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,2103255984360867459,15364415317021065714,2097152 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4344,i,6687843907659783023,3744051966746994205,2097152 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,2010204984404214807,8093920775068209534,2097152 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:9
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,11462966679427901022,7847317161248045092,524288 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=3940 /prefetch:14
  2⤵
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,9770225825453531956,4604910371962067637,524288 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=3944 /prefetch:14
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,17867046608461112552,8420432169423902006,524288 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,17867046608461112552,8420432169423902006,524288 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,3596715909192463270,5180016238759563794,524288 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4716,i,1411090822685658336,11314520311906355090,524288 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,17172977089871198207,5875149942174821542,524288 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,101804804238232815,4842283207107707770,524288 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:14
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,13804657710951777194,17986928477393747126,524288 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:14
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5540,i,13317283219610325222,1445586032752462046,262144 --field-trial-handle=2296,i,15232781698601264998,4212040768223505809,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3460

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2024

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2660

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

052ebdf1-d2c1-4608-afb6-19e7d2aebbed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\052ebdf1-d2c1-4608-afb6-19e7d2aebbed.tmp
Size 36KB
SHA256 41f33c1620131a01e665c5465b8608474503e957b906d19d2559c4cb7a536cd4
MD5 d27bd0b4aef0625fe1add9fd2d423a33
SHA1 9708f7216021f562206ca126c86dd1bf4493c88d
SHA512 f7d77876370c1d18764d4b2fa1b795f0d00b9fc380af7ce6f55f983c6385b06ac0a3cb3b518519dad99c953236e73b184cfdae35e1651946854987166d4777c1
SSDEEP 768:qFQH39wgwoeOuwwb/9OA9at01j0iq00+Iaig4YGHWl:RH3MmCHq00Naf4YUWl
TLSH
T104F2AE72ECA4CE77ACFAAB85F60663429FF44163CACDD690C6D9290E00576DE1307C66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

06b1230b-d63d-499f-adf1-74f8d683d2c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\06b1230b-d63d-499f-adf1-74f8d683d2c1.tmp
Size 34KB
SHA256 f18707faa0e025c07b5395dd3d5ebd3cca34105591eb3dc42b605af9b4217e66
MD5 e31db71a9748ddabff1d2179d38d0db2
SHA1 515e6d21bd1f548cb908f443b14c49c5a1110c02
SHA512 b5a6ae809331782c08364840c831563566bd0f64f51cc11c2e4246cc5e53fe0c99277d127715ba617ab01a7f6ef180a2d89c2277e9ee6f3ec456719a1115d33a
SSDEEP 768:5w3fdeOuwwq/9OA9at01j0iq00+Iaig4YGHWl:5w3fkCHq00Naf4YUWl
TLSH
T19BF2BF71ECA59E739CFAE685B20267475FF44513C7CD9AC085ED2A0E0057AAE2707C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a488c7a-4292-4569-8988-2b6ce69682ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6a488c7a-4292-4569-8988-2b6ce69682ee.tmp
Size 34KB
SHA256 31405d6f32fd8e846a118d7d2cb3a7e55d9725f3bab97ec10345033fdbf18f4d
MD5 553dc8a722ed7107858a3d1e475100a4
SHA1 09e7bf615914bfa669d1f07dcc37e6fd7eb2c531
SHA512 874f921be1991d33cd1c82199fa06fc3470b91d536863ccc53a2a6b15fe230b610ffdfdee06d6fc6f900d6861b1da93301193719ea875de163a1245a001ee16c
SSDEEP 768:Sw36oeOuwwq/9OA9at01j0iq00+Iaig4YGHWl:Sw361CHq00Naf4YUWl
TLSH
T1DBF2AF71ECA59E739CFAE685B20267475FF44513C7CD9AC085ED2A0E0057AAE2707C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

38a1578a-24d4-4e05-a729-67b5d2f2bf4d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\38a1578a-24d4-4e05-a729-67b5d2f2bf4d.tmp
Size 23KB
SHA256 cd2729cca60a19c33bf5fa06c0e2205c6bdeebe60443018265690356ef723c9b
MD5 1ff228945542cde6a38d8a6a75847138
SHA1 55d6f8978977a9dddc39cabd128abc3368d0d03a
SHA512 8f53b70c6c3c96c600dc69dff49628e9a909f424f2964a3480bbf896712b4b9d5be8b9755cdd19c2846dff6be289a20b18f72bf45f1840e8a697c4cc3b8573b6
SSDEEP 384:pFZwWWPfCtg/NFf1pKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVt5931RU/rondz:p/wWWnWg/Xf1p8F1+UoAYDCx9Tuqh0Vs
TLSH
T148B2E92B744CCB7E4FC04A9DDC196FDB6D9802C796588D8047FE994C02C77EA922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3de2bd23-6596-4e38-8a6d-958eee26aa52.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3de2bd23-6596-4e38-8a6d-958eee26aa52.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 1876a79c0b4c04c7c5cd26454750aea4f7f8e0166c0d1e6c932539b32229893b
MD5 f036587d619b44778a4afcf53d724e98
SHA1 5d6915b23e643c7cd30c109733c63fd95ca83e7d
SHA512 e75494b6a32d3fa870954621138fe5092382de5ec5aa8adb8a45af9f53a21207552451f484443af73e80873f4ccac22027662ce06a173420e733bc4ea1ad98ad
TLSH
T1B3E026F405CBC33EE208A88B03A8470C8381371B93C069DE2704C5887985090B7C77A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 250af23fe7ac03446e9b8ccf99baab4e4b5a8f7afcec892ce8d955a7bd4f71b5
MD5 6ac1dd4fb88234aa081f055c8ae93e16
SHA1 e39d029aaf53b48b26d1e65ca6fe9e099e962faa
SHA512 6c20284b8702274b4601bea6e9b20f4bbcdb823381e6e54d1e168fd3bc50ef348a258d83e06148e1adb6139e1a862c0f42013db95de778783e196c56b25c038e
TLSH
T15751770D3AEC40C6F744003159D39E4B36BF89AAA9831F61454DCFB7DA4337752A55E2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 71f63bac640dd41072bbdacb2b5cfab251bb097aca990108b284435a759a42fa
MD5 7a485781d5b2b3727520be309c1409ff
SHA1 04d53c1c2a6e95bde5675b79085fa9bfe7dc904f
SHA512 d24bb893c49d879b5aac2bb403f8df78a4a67629a05aed1819cda55e2303ed1bb2be8c8dfa05e09a1dfe8cc6ba25548f83e1f1de4902be37f3b83d8afd215381
TLSH
T1F551660D3AEC40C6F744003159D39E4B36BB89AAA9831F61454DCEB7DE4337752A55E2
MD5 SHA1 SHA512 TLSH

Submit Download

035afe95-c550-491e-8965-109b13671edc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\035afe95-c550-491e-8965-109b13671edc.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

296a6e90-7674-4f25-91dd-039cc970b13d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\296a6e90-7674-4f25-91dd-039cc970b13d.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

8e8a99f4-c9a6-4aae-953b-60913f3e666d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8e8a99f4-c9a6-4aae-953b-60913f3e666d.tmp
Size 2KB
SHA256 e7945a59ce17cbd079883460363c3479963d9b030af6a2d537c6538bfcd352d0
MD5 500c112cd4a3ba35bfaf1585bbd34467
SHA1 aa45e78db6d209e6ccf6c0316d3965293576a650
SHA512 5ee2ff6e0b4b27bcda17b6c3f2229b26f942047697ca4c55910f5407ba041cc1e355819f732ecb619a374c0dc3ea8d005f75707a59d443c8bd2df46afb3244a3
TLSH
T1C2419DF7C3E4867E990196F0AA14AE1BCE1D0915832C3C5AC9E4AE1B93F34B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

f46d22fc-3cc3-4fdb-b1f7-6ff90e770085.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f46d22fc-3cc3-4fdb-b1f7-6ff90e770085.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7e63c1b03399a0fb499eb49e5a469122f99162858f71d252b1e48062ae3d65bf
MD5 1f8ace7ffbb4fe9bfeb7579164826bf6
SHA1 60ddb1fb5039ccfdda836fb298b7f634e2290140
SHA512 eab8769d0d600c5aa4026ba8bd0a6e3aa8138f9c87d49c9ca50a52a6bf2065e41b1cf1e632f943ffa5b2e42b0ddd15e78ee6db9d2745dad154e389c8d3e6efaa
SSDEEP 192:sxRQRObl/fYsj1zoA8p4D/g6+WNIYoj8GkCIgIJ:sxRQGl/fYsjYG/5IMCs
TLSH
T16C2296156E28A97B8CCBD21DFB657F53D2F9503261951F48EAFC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d689382d30186c9a82af124bc5fc29ce29203ea908ad53b6d1f052e6d31dbf56
MD5 e70195fe71b28b404cea9171f802f588
SHA1 57b17868625f0c4375c5caa3b0ee8bef4fc7f9d0
SHA512 b6d047eb6fc3df25790ac5fac37fa90ce449d86cecc4ce5a81db255bb1bd4a5df42beed63911c58e53dc32d66a8f5e3324cb1b0f929e051ac47d3092135229ea
SSDEEP 96:KHa1G6gYI2yYz9I62KwTI82MCabsanq+gKrytITcoGmbVCKmIyg:85PuITcoGmehg
TLSH
T173915FA9713F1624387D750C61D4A65B974236F33138E66F37AA00624E6BE084DBDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b2a707b9-b7a5-4e4d-b393-903d4fe199ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b2a707b9-b7a5-4e4d-b393-903d4fe199ed.tmp
Size 10KB
SHA256 163d9f8c9c4b0b4f31202e798018032eb41b626908eb89438f56e17b09470e9d
MD5 57ade9968719bb2980b71d97fbfb0082
SHA1 25a03665e9f64b6f9422759f16563cdb0eaff4f2
SHA512 4d5c460e390be1c16c49e248984a863c668f3708a07b838dcc08d6eb95696469121e8b77389ac241ced114b7f6bbb8009f720684318eaa8932a63a291c65059e
SSDEEP 192:sxR7RObl/fYsJ1zoA8p4D/g6+WNIYoj8GkCIgDmJ:sxR7Gl/fYsJYG/5IMCm
TLSH
T1F032A615AE28A97B8CCBD21DFB65BF53D2F9503261D51F48AAFC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c3e71060-238d-4704-adc4-b0ddc6849565.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c3e71060-238d-4704-adc4-b0ddc6849565.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f0d3ad24-5159-4ff2-93c4-b5fe7ca4b516.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f0d3ad24-5159-4ff2-93c4-b5fe7ca4b516.tmp
Size 10KB
SHA256 552f0525f5f46bec3581697cccc8cd5048c9973d0bcc8521f1b36a8939a6d1fa
MD5 005d50fc2c608fb86bb62eda693f2022
SHA1 2ea89a1c836c54cd37da4279a334c269095cabc6
SHA512 7c3e69c2981ba9f7dd708d48d9a466cdc51d9ee5dca4599dd4b21d881a3d466d6bbbb8474cb9655fa1c3c90cb5817be2ce41b17c2df5ae295240c7e304d9ef5d
SSDEEP 192:sxR7RObl/fYsU1zoA8p4D/g6+WNIYou8GkCIgD8J:sxR7Gl/fYsUYG/5IfC0
TLSH
T14332A615AE28A97B8CCBD20DFB657F53E2F9503261951F48AAFC861C05F76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc0d770d-2f08-47c0-9ce1-0eefc25489cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\cc0d770d-2f08-47c0-9ce1-0eefc25489cc.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 f3ab8967adb21886fbfed65aac5d7b7ef008d652519d74d9576f0fdc128c8200
MD5 d68d1f615e5175d16f353295284c9fce
SHA1 dc543102b40d9187d5a76f0892c912955d6181fc
SHA512 8e0800a18522153305d16cf5d233a4a46ecea4535eec2bae8ae8ddfa8a50238d101f678b00970d998146e90adb786ff16baab0e82620ce2e5fd08299fb8bc907
SSDEEP 768:X/UxvxjgC+H3FiHOuwz/9OA9at01j0iq00+Ia2XdSHxRz:KZj3+H3FeCHq00NaMdSTz
TLSH
T13003C031ECA59D739CF2B384730A63879FF44563C6C9669049ED2E0E01876AD2307CA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f85db08e-4909-459c-9f9f-c4a9574db883.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f85db08e-4909-459c-9f9f-c4a9574db883.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download