524f1a711eed1f6e091d5d25ba2e752a9684fa2a3dfd88dd110ac2ff78a397b4

Analysis

max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/10/2026, 14:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CatfishCMS-6.7.3/application/admin/view/index/allpage.html
Size 5KB
Sample261012-rxgrbasx3r
SHA256 524f1a711eed1f6e091d5d25ba2e752a9684fa2a3dfd88dd110ac2ff78a397b4
MD5 9a01ed31221e99ac97ae27de598ba6fb
SHA1 9af2fa217a5eda18bd00fe5ff8305fff7c158d22
SHA512 76d7ff4d8025c20320ba3de80ce8517af4ccf6a6fdda7e47846da49d97420e0a503e405a7b072e53a19116adadd0394f0b074288107f908cc316197ec2bbb9a0
SSDEEP 48:HgDlg/JUnQp5G1TdimdB+PApGgIPeIVllpteHA+3kIqWmSm2WnbN:Hgq/JUnQDG5dBpkT7iHA+3kIvYN
TLSH
T17DB10E6181D99C3A60B3C2D6E3A0A756FD82C2C68356621477EE17831FFED12DC37215
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2120	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{15520FEB-797F-4CBC-8C37-D92F4F7CC09E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4572	msedge.exe
4572	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe
992	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 992 wrote to memory of 3536	992	msedge.exe	86
PID 992 wrote to memory of 2120	992	msedge.exe	87
PID 992 wrote to memory of 2544	992	msedge.exe	88
PID 992 wrote to memory of 2468	992	msedge.exe	89
PID 992 wrote to memory of 2544	992	msedge.exe	88
PID 992 wrote to memory of 2544	992	msedge.exe	88
PID 992 wrote to memory of 2468	992	msedge.exe	89
PID 992 wrote to memory of 5056	992	msedge.exe	91
PID 992 wrote to memory of 5056	992	msedge.exe	91
PID 992 wrote to memory of 4116	992	msedge.exe	92
PID 992 wrote to memory of 5056	992	msedge.exe	91
PID 992 wrote to memory of 4116	992	msedge.exe	92
PID 992 wrote to memory of 4116	992	msedge.exe	92
PID 992 wrote to memory of 4620	992	msedge.exe	93
PID 992 wrote to memory of 4724	992	msedge.exe	94
PID 992 wrote to memory of 4620	992	msedge.exe	93
PID 992 wrote to memory of 4620	992	msedge.exe	93
PID 992 wrote to memory of 4724	992	msedge.exe	94
PID 992 wrote to memory of 4724	992	msedge.exe	94
PID 992 wrote to memory of 2512	992	msedge.exe	99
PID 992 wrote to memory of 1308	992	msedge.exe	100
PID 992 wrote to memory of 2512	992	msedge.exe	99
PID 992 wrote to memory of 1308	992	msedge.exe	100
PID 992 wrote to memory of 4732	992	msedge.exe	102
PID 992 wrote to memory of 4404	992	msedge.exe	109
PID 992 wrote to memory of 4240	992	msedge.exe	110
PID 992 wrote to memory of 2868	992	msedge.exe	111
PID 992 wrote to memory of 4556	992	msedge.exe	113
PID 992 wrote to memory of 4556	992	msedge.exe	113
PID 992 wrote to memory of 3292	992	msedge.exe	114
PID 992 wrote to memory of 3292	992	msedge.exe	114
PID 992 wrote to memory of 2636	992	msedge.exe	115
PID 992 wrote to memory of 2636	992	msedge.exe	115
PID 992 wrote to memory of 4572	992	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\CatfishCMS-6.7.3\application\admin\view\index\allpage.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffe7b1dc188,0x7ffe7b1dc194,0x7ffe7b1dc1a0
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,8841684341249344494,3822550168664999578,524288 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,2198183507958611388,8662767172934675194,262144 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:2
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,17678738534538684091,7570031406087786100,524288 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:8
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,8040226217815423033,14562080024169229551,2097152 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,1697126725863944329,9364524104689841574,2097152 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,12636258983034598772,1600666501912788502,2097152 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,15676248471743091948,16763754097811825970,2097152 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:2
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,17232227968209646075,15796008620408972267,524288 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,201209037634466790,15795609161662493843,524288 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,9861945819437493907,6613029855955902634,524288 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,9861945819437493907,6613029855955902634,524288 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,8650508801797100469,2041770492118162691,524288 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,6064103737095552826,3120929939321976709,524288 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,12180050439298490278,15175245716935971510,524288 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:8
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,961052596902186742,14601429192658508156,524288 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,7320014045912511095,7072012700252917500,524288 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,5485510125794411382,17135494136209095794,524288 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:8
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5948,i,6248856195044391739,30587341681060290,262144 --field-trial-handle=2364,i,8398487184551379638,3937498558291399385,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4572

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1428

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

28d63a64-e38d-4794-9550-4926969306b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\28d63a64-e38d-4794-9550-4926969306b2.tmp
Size 8KB
SHA256 e827e576504dd7e78fd16cdee97456fe61f03b438479643d8cdf68f4ea98ea9c
MD5 1fb600ff40b658e859a5418baf61bdee
SHA1 494e4dfb301c8729201beffe967dd965a43e6f61
SHA512 e3e2ea0d01686243d5f7faea46b0540ab8119904b225b4e402f1736fbdb02d17c1fe70a93da6f9247b07b76970945006b03208ace9ce3e15d6749086e2c0714f
SSDEEP 192:SONz6iDCQmiUyKgHq5u88PwuhmwSq5YfHU6:SONz6/sHq5u8irA4gU6
TLSH
T15F02F938AC687C7B9DF3AD15B5877B135FA4113FE6942F84DAE8162C41E769C1303922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3156d80a-9817-4a96-872f-888a20f13372.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3156d80a-9817-4a96-872f-888a20f13372.tmp
Size 18KB
SHA256 96340ac3143803b68143187e0f30d08d7ad013e5f8625bf0b25f9f4e1ae4c0af
MD5 b955ce6fd411666535db9d8d9401bbfe
SHA1 e86a9fbf56e47a947a964dc60bf178d915963f85
SHA512 71f6e2ead6c6eb598eeb3708836d3febff382247c1efd9ca129f04fe25127223558cbec5a6f08da928eaf6326b73a6f1d9ac7f6b7b4fc7167dc6eb6085971c75
SSDEEP 384:KZcIhsN5kL1N5zWap5u8irABZYgi4/uANEbEeUA:oh7IYkrAYgLJCbETA
TLSH
T11F827D72A8B46C3A6DF7E456F88735139EB8803BE3D42F84D9DCA71D01EA5E81307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

583f06cc-b559-4b90-930f-b52b8669df30.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\583f06cc-b559-4b90-930f-b52b8669df30.tmp
Size 21KB
SHA256 adc038fdc092e45e82c30b619a5128670654e09e90faa0b2bcc08944715683b2
MD5 7ea2418ba2b6b88755cd3d8a8fe7adb2
SHA1 8284f459ef89917a6972caf60c080cb369f8cbd5
SHA512 bb7120974e3862897807bb8b34e3a5fee9d4f88a1ee171d7712d88dd053c8360e9bed29aa10974a4b1dedbe9fa7420953ad415104d1a147248e968b97874ca0e
SSDEEP 384:CiFiZcIpzsNb8TUNTUlIlkL1N5zWap5u8irABZ7gi4/uANEbEeUA:JFQJSwgsIYkrA7gLJCbETA
TLSH
T177A27D739CA4DD3BADF7AE46F94636138EF44077D694AB90D6DC9A1D01AB0D8030BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ca160f1-c6cc-44e4-9c26-bd23813fbd94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7ca160f1-c6cc-44e4-9c26-bd23813fbd94.tmp
Size 18KB
SHA256 ed74b9d46ab8cf16a6575ab46b019760cacfc962bd110d3db877fdf3959eec8c
MD5 f18335ac7a57959ba3399798d4c1a641
SHA1 f7756e6b040d30a3ed69a3a1a05415981022dd0a
SHA512 d7783c92319da7a194ba2522a795aa44840c2c96e97101a8c48b9a8dda5522a10b46058a1907c566a058536ad2976975a9f9d566c23bcbce2f508a90f7eae9b7
SSDEEP 384:DZcIhsN5ZL1N5zWap5u8irABZYgi4/uANEbEeUA:bhyIYkrAYgLJCbETA
TLSH
T179827E72ACB46C3A6DF7A456F84735138EB8803BE3D42F84D9DCA71D01EA5E80307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

3f7a324e-6216-4b5c-87b5-0211e2fafb95.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3f7a324e-6216-4b5c-87b5-0211e2fafb95.tmp
Size 9KB
SHA256 e63dab961f5fff341c45d28704bae9e735f00a45c066ab0b08c4c806c6f0be7f
MD5 0110b3eb65755dd5c4c8f0d2dc9efaef
SHA1 59b085b3a740422fc0a730e928023e7744482b71
SHA512 d37f34a74007ccff84f0a632ff7461d184227ef21187bb212e3b086be4072131c99e2ecf55e995beebb77e93262fcc0972d2e4c387d21f6c433ff8570782a85f
SSDEEP 192:sxZdRSWT/fgsN/6IdpdBHW6+WNGYaJczWIgrJ:sxZdvT/fgsN/T3HbGP9
TLSH
T17E22B851AE38A93B8CC7E20DBB65BF53D5F9503261901E48AAFCC61C05EAADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 b439fdfa19fcb389bdd6019da6dfd1b9b9983d1b9c42169c2cbe0312ed6f53ee
MD5 12dca31477c81a2d14a96501e7e7c24f
SHA1 5e7fe920d43d259644be8774b929ed73e3788a1e
SHA512 d29d63e656e11596d68d735e26bd746f70d16b2fa7b958555f3a3ad9f5ad665f0485add4ac8610d90966c42beca5c4216b8b9171423608fdd9a761ad101e9f6e
TLSH
T1E4E026C44AC8C22FB358764B12686B0C9BF0265F93C0EDCE2B08C585721EF43E7C2690
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 26747e33f32e5d2de6f350d9dd925e73b2105cab3a3d97a7d6d97895c713353f
MD5 e3530d8281b79fe023cf4cd331643288
SHA1 3f7c68d8b26695ec6a542707bf208ee9d1d2b2ff
SHA512 1e73012ac56b3cd677cd42a8afd21f54ea9dfaa75fe789a5aa4e82d5c467cbf89568b460c1f52f9a2ab5d36b997936dd112aa82e19a442c53827a734a1087edb
TLSH
T1ECE026EC14C8C22EB3686657517C530CC3A0BA5B93C0ED0E1749C985740FA60E3C7AD0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 c433bf3b29a11e151e43343a9e63f2afffa725dfa5378dcb931fee9996a26c8a
MD5 322619d1be3d764efc9cd77280c974d3
SHA1 30d83c690b976068ef888785eb0ff98ee148fc64
SHA512 37251085fdac2e6532a157198e77c1383825bab52ea772ccdd8afec516f0dd2fd33800219d0f1bbe3564bd1672c40fcce5cc82b05ec80729c572872edd1ce00d
TLSH
T1FA6151F16FA0A8D0F7F86B31A9D6148739F57581E5531D0FD064D4BD290A3B8181437E
MD5 SHA1 SHA512 TLSH

Submit Download

52a8a6a6-d9a9-48d5-bdbf-91c76762d31b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\52a8a6a6-d9a9-48d5-bdbf-91c76762d31b.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0e0f3432-5156-4ad2-8e4e-3479229df59a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0e0f3432-5156-4ad2-8e4e-3479229df59a.tmp
Size 949B
SHA256 f4ef1281f44c470005807c2931d5f20c3cc59aa7c69fa97e45cc24ea374f1709
MD5 081bbf3f308431ce917149071326409d
SHA1 bf553a1bafd88af084f2f16898d8a006a71a02fc
SHA512 8d34f5a88f6c486bb7e7a9c17be20b3ecd4823ebb939d157efe2160ba308cd09dee49edce6c8ab6706f5c2c1ff69129084ed90a03041bceed678f163df335648
TLSH
T14C11BDF3C3E5856E8A0116F05A24AE1BCE2D0516521C3D19C5D4EF2BD3E30B5E10295F
MD5 SHA1 SHA512 TLSH

Submit Download

d87d3f9a-d9c6-4eb9-9ca9-49f787763b80.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d87d3f9a-d9c6-4eb9-9ca9-49f787763b80.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

ea377065-4e44-4f9e-b74b-d4ceee25d7f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ea377065-4e44-4f9e-b74b-d4ceee25d7f4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 5c637b834ab216d0beec9c20bb7fdfd30db5feb7025f09d0a8913fa268689589
MD5 cce522b747e2c6b6f020d5be105aa0ea
SHA1 dd76a8906927ce0324ba4266ee98564a011e417d
SHA512 8c76786b9dbe5ea235579915c1e9c882d019f8195f7c7003d463dcbc7d7ff86056a5d55fcb3951629706b28c8bc878a84b01cfcb1dcb57c170926e21cb0cc9e0
SSDEEP 768:e3yQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3GrobZll:e3yQRbrWvvlpZu1jaXKLf339bZll
TLSH
T1D9C2FA2B640CCB7E4FC01E9DDC6A6F976EA802C766588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 05cdd5c8ab4285e6e56888ccfb93932859c2f5447bebe66888b8f77edc54eaed
MD5 8890e4d401100a1ab5166a2be2377140
SHA1 c77d4adf37d69fdd1588384c0e90a94b7123765f
SHA512 5987b8a3203c5d93f82e4288d6f37f5d7d3f6cee17f88450e6cae3d3b1097cd0ec7a404f8751ac4b02ea538caa899f837baf6d62a442c603c7e11c541f4a21fe
SSDEEP 48:K03pYl5jn7UbHCfISRUK9R17Ux5EYCDZJyLAPGKQ6uvbG9mISivK9+1Evx4/YF2C:KU2wKrCee/yK8YzdOKmMim
TLSH
T15B913154356BA22138BE294841B5C66B624531F37368F93BBBBC54A14E6FE040DFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a6ad20bc-9df4-4b95-9d71-b98e39e9225a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a6ad20bc-9df4-4b95-9d71-b98e39e9225a.tmp
Size 10KB
SHA256 6086815fa7be4ded301406fd498297f466554c68b1559b8599683b8490ffb066
MD5 d49744bf3e5a799fd1a6b15e94f35e1d
SHA1 9b2d2779fefbeecc17fb3327957e9d1541af557d
SHA512 4266fa98d5c38791b19b965bfc55cfd09d3f66273e559c9f514ac20e65546e4b04cdff2475b42509dba6f2b26bb15a928dd421b00684ecfbbc73eff572116fec
SSDEEP 192:sxZdRSWT/fgsr/6IdpHBHW6+WNGYaOj4WIg5sJ:sxZdvT/fgsr/ThHbGKG
TLSH
T12B22D956AD38697B8CC7E20DBF55BF53E2F9503261901E48AAFCC61C05EBADD220750B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb932cb1-f83b-4562-8762-66ed258bd72d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cb932cb1-f83b-4562-8762-66ed258bd72d.tmp
Size 10KB
SHA256 c992286249ebc83d73f387d62f57334a0936386326c2fafcca6cc02a2eb40f35
MD5 572d9965594529be53dd919c4c6f7e65
SHA1 bb769421ff9e0fbb0cc9014fb94740032dada738
SHA512 8a82257ffe26ceeaef196b194ce2f4f1584da3bab4762425f8532b7f458c4e8e87cf5b5b8394ba78b55961339ce52eb0fd608df070bf1228d8d126e0e8f47d92
SSDEEP 192:sxZdRSWT/fgsr/6IdpdBHW6+WNGYas0zWIg5sJ:sxZdvT/fgsr/T3HbG6G
TLSH
T17E22D951AE38697B8CC7E20DBB55BF53E6F9503261901E48B6FCC61C05EBADD220750B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dc131515-2a32-434b-817b-832eaa16125f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dc131515-2a32-434b-817b-832eaa16125f.tmp
Size 10KB
SHA256 b0f7f3ab5f08375d86edd68956aa82fa5f6d93e30a834a3f07d6fce582951870
MD5 43f5f9c38f4a04118d9c6e12926dbe6a
SHA1 87ff9dec421a24b7ff1716e11780c911ee019119
SHA512 4f52691a9fc27abf67480cf2c47c9efcba51981237cdd8edac9bf46f3a59f637785f3c52779ecada81c89021c03dc0b1cf788feb93ce9c700be8cbebdc5411ca
SSDEEP 192:sxZdRSWT/fgsq/6IdpdBHW6+WNGYaJczWIg5GJ:sxZdvT/fgsq/T3HbGPM
TLSH
T1DE22D911AE38B97B8CC7E20DBB55BF53D5F9503261901E48AAFCC61C09EAADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e14153b6-2601-4c4b-a7c2-ed3c8d093a54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e14153b6-2601-4c4b-a7c2-ed3c8d093a54.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fba0ecf0-f859-47b1-adee-f6848e056b57.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fba0ecf0-f859-47b1-adee-f6848e056b57.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

12163973-e482-4305-ae46-1044237261cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\12163973-e482-4305-ae46-1044237261cc.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

bef70b27-4a3a-4cd5-9212-94a424110c07.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bef70b27-4a3a-4cd5-9212-94a424110c07.tmp
Size 8KB
SHA256 121c2ebae8785420e695468bd027c868fab96f3b192bc44d98657f63e7531d00
MD5 1f2c82019b58e77fdf132b5707b4fc58
SHA1 43ccbf7a71996563ed7beffcf7e9abb2f2784cdf
SHA512 3f2ff8efff68249fb521053fa6f9f58666493ed5a7009f12642d2d0891f38eeaa39d54a43d72c336f5e5142e9442705efce7253c4fd4345566a613bcb6cc5630
SSDEEP 192:6ON86iDuQmiUyXUgGq5u88PwuhmBUohSuZFq1U6:6ON86Ds7Gq5u8irABZlgU6
TLSH
T1EC120C3568A87C7B6DE3A865F88736139E644177EB886F80D5DC272C02EF5D85307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e90fd969-f3e3-4a7e-a6c9-e8e5cfdfe85a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e90fd969-f3e3-4a7e-a6c9-e8e5cfdfe85a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 51060ab53eb37ead3c3dfc8594b0cae207cecbd8b900f237675080ec1a4cb722
MD5 ee59ae07695aa763107de2f74c47c106
SHA1 7c479c80fd322f77fd208cc790f0c2454e32d75d
SHA512 cf75a927a8e24398baf1dd76fb717159f4600788e5ef7f9e3af25feec3f6829f7a9bc1eef406750e8d6806f06c65532d5969ab80464782929e15c353de69fc9a
TLSH
T14041F95DB6E91108B7B76E569BF6A86E487FBD772E06D46D00120E4E4A23F00CC62737
MD5 SHA1 SHA512 TLSH

Submit Download