b324b0053720a7be293e84f3bc20509f6a524c5b0431ca8253a1e7788d6f1a8a

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/10/2026, 14:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CatfishCMS-6.7.3/application/admin/view/index/editpage.html
Size 14KB
Sample261012-rxgrbasx3r
SHA256 b324b0053720a7be293e84f3bc20509f6a524c5b0431ca8253a1e7788d6f1a8a
MD5 70ed501eec3c692e32813113cd65c092
SHA1 b7fa132eef18f37ca521c8ee5146ffab11c6f645
SHA512 e55e55c76f7d2c982f98aa23ff9fe2cf3d9c9c7231eaa8168b8cea03cd7e0fba5f2ad2cfae2cab1c9257c6c47a5dc060453f68e40d415ff758b8f67668b1f162
SSDEEP 192:HjdB/JUn1qhCBScFzJOBILO2ABsbcHfpJVtO:HjT+HBScfLO2Ssbc/pJVtO
TLSH
T15452006165D88D3A91B3C5CAA3A09745FD81C246C71BA24473ED2BC30FB7C11ED77265
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4804	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{E3C36B5F-82F5-4B7C-AE06-227284F0E493}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3428	msedge.exe
3428	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 548 wrote to memory of 2724	548	msedge.exe	86
PID 548 wrote to memory of 4804	548	msedge.exe	87
PID 548 wrote to memory of 624	548	msedge.exe	88
PID 548 wrote to memory of 624	548	msedge.exe	88
PID 548 wrote to memory of 624	548	msedge.exe	88
PID 548 wrote to memory of 3948	548	msedge.exe	90
PID 548 wrote to memory of 3948	548	msedge.exe	90
PID 548 wrote to memory of 1968	548	msedge.exe	91
PID 548 wrote to memory of 1968	548	msedge.exe	91
PID 548 wrote to memory of 1932	548	msedge.exe	92
PID 548 wrote to memory of 1968	548	msedge.exe	91
PID 548 wrote to memory of 1932	548	msedge.exe	92
PID 548 wrote to memory of 1932	548	msedge.exe	92
PID 548 wrote to memory of 4180	548	msedge.exe	93
PID 548 wrote to memory of 2628	548	msedge.exe	94
PID 548 wrote to memory of 4180	548	msedge.exe	93
PID 548 wrote to memory of 4180	548	msedge.exe	93
PID 548 wrote to memory of 2628	548	msedge.exe	94
PID 548 wrote to memory of 2628	548	msedge.exe	94
PID 548 wrote to memory of 1544	548	msedge.exe	99
PID 548 wrote to memory of 4728	548	msedge.exe	100
PID 548 wrote to memory of 1544	548	msedge.exe	99
PID 548 wrote to memory of 4728	548	msedge.exe	100
PID 548 wrote to memory of 4020	548	msedge.exe	104
PID 548 wrote to memory of 1756	548	msedge.exe	111
PID 548 wrote to memory of 4648	548	msedge.exe	112
PID 548 wrote to memory of 3248	548	msedge.exe	113
PID 548 wrote to memory of 4556	548	msedge.exe	123
PID 548 wrote to memory of 4556	548	msedge.exe	123
PID 548 wrote to memory of 4372	548	msedge.exe	124
PID 548 wrote to memory of 4372	548	msedge.exe	124
PID 548 wrote to memory of 3428	548	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\CatfishCMS-6.7.3\application\admin\view\index\editpage.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffffc06c188,0x7ffffc06c194,0x7ffffc06c1a0
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2008,i,4871127862620022924,17789916760331337383,524288 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,6520018791481595354,501351534663464797,262144 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,1344500993508744570,7948366131039775439,524288 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,12278488291406727807,10609164395159299303,2097152 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,6569350767867309361,12773204300587859655,2097152 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,2714824990924005604,13898115946959417302,2097152 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,6281435648768956790,7373116552808690737,2097152 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,2889494333590356259,8372710381833098203,524288 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,5583904960207919911,2444800109146261655,524288 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3304,i,6880173414783321430,990968944525107136,524288 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3304,i,6880173414783321430,990968944525107136,524288 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,8391875697451047178,15059599753211260634,524288 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,12169632035001085285,13300486186614708218,524288 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,4941379592832070188,1547510474732846830,524288 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,10007333622250493975,8443125880786374534,524288 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,8735187243322180751,764118996115274220,524288 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6364,i,731395855580360356,12688593657509365003,262144 --field-trial-handle=2264,i,17211946446986135353,790951522368716326,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3428

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4052

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

15e1d301-0f84-42ed-ad41-74cf52b01d87.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\15e1d301-0f84-42ed-ad41-74cf52b01d87.tmp
Size 21KB
SHA256 ff37835acbd3f914ddc42b5e5b713240a8fcb4e185f72bab1fd04d279eabfc49
MD5 a49726bd04f858631cc718f9e254577c
SHA1 93e116edf7bfc287b11c66c21d9109718f55f4c8
SHA512 1323489d855012505c1c7e192c7a528993fcb9606b16e1b8008e3d903c4588a870da62bd390435e21fecf4192862d125d21a8076e8f7046675ee3f1f511a5d6e
SSDEEP 384:IiFiZcIOzsN18TUNTUlIlrwe0R7m8OjTV9iOyGPjEjywJr8/S1i4/uANEbEeUz:TFQOIwgpXn2OYjZhKS1LJCbETz
TLSH
T14AA26D739C648D7BADB6AA46F98A31138FF88077D591BA90E6DD9E0D00971EC130BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b1d065a-8626-4a35-974b-0396a0d21170.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6b1d065a-8626-4a35-974b-0396a0d21170.tmp
Size 8KB
SHA256 faa476586b07c494c70f856817ff53bc6ba6b035e0b990b312a32fcbf20bbf71
MD5 8e422023a36f818ef1b1919ebf5e4356
SHA1 64d696072006d630207a573e4a89dc7cd7462614
SHA512 225fb7cc758c23911b1e0a91493a76d40c14d71c78df0e32a11bd594be497e19188a53ae69d6bf9ac7baf626be683e7331492fd2dce600fa42826060bc73d787
SSDEEP 192:YONG6yAQmiUyncLsOCTVgmiOyR0PjEjuFJSJr8/R3UbqCU6:YONG6T8QsOCTV9iOyGPjEjywJr8/C1U6
TLSH
T110121935A8686C7B5DA3B546F4C732139FA44167EA453F90E5DC2F1C02EB6EC234AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94aedb67-9f0d-4408-a522-7ac6fefd8dbf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\94aedb67-9f0d-4408-a522-7ac6fefd8dbf.tmp
Size 8KB
SHA256 d836ef1ffd70c6b7fc6ca452c66b3be232d883a7e55f6595e2d9c1dd5e6b5448
MD5 1e6560128b39f253b209e058fc9cabd7
SHA1 49adb70f8ce69aa27ac91ae35b5a4c0df7af3ec4
SHA512 5d853c55d179e823e10eb4720eb60a3c1abea84832b2311bd6f081c34e44a0f2ea59b15278c5b5757004efec7717d7cde38bd06fc1d36a7f3a1defbb01e501cd
SSDEEP 192:SONK6ygpQmiUy4LtOCTVgmiOyR0P5zPx8U6:SONK6lH1tOCTV9iOyGPVSU6
TLSH
T12802D734AC786CB78DB3AE06F88B37179FA4116BE9552F84DAD81E1C01D769C2306C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97bdd0a4-24bd-4739-8371-e8d4c016ef1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\97bdd0a4-24bd-4739-8371-e8d4c016ef1d.tmp
Size 18KB
SHA256 f67b910d1573de97c8cdcea9ee60fd8a47ae1f0c3cf3342fe15fab8ee3bd3979
MD5 4ea551cf2ea56542969063bc8ec21287
SHA1 ad49aa489ed7fb7af66fceaa5b4f5c9ff7cd7e2f
SHA512 7ba58d060468c4bab9abc7b716d4341401f11ad23fe1a7491b3bc407e08efbf78ab37cafb9874c0f8b47a56df3149099de65411e052052b8d1ca77a4111e54d1
SSDEEP 384:2ZcIhsNrywe0R7m8OjTV9iOyGPjEjywJr8/q1i4/uANEbEeUz:khBXn2OYjZhKq1LJCbETz
TLSH
T192827C72A8745C7B99B6A146F88B35178FF88077E6903BD4A4ED9F0D00AA5AC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0f2df256-5e5e-4a14-8933-97681580b090.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\0f2df256-5e5e-4a14-8933-97681580b090.tmp
Size 105KB
SHA256 36138979757d4e71ef05f08e5474db36d940b11e0e5038b1bc41edf6d9480864
MD5 1ffead718e2d4a1c853bdde71605a629
SHA1 bec748fbabd1ff5b25bcc88b57845b8ef801ffa3
SHA512 2d9d536f4d1f11cec455a2c5b7bd5485bf92d28d29a4af0c14a218e58f3db936b6de9aa72bdb015a143ce31a5dcdb74cea83b1d9addd898b44e718cacc158e4e
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P73:fwUQC5VwBIiElEd2K57P73
TLSH
T1F6B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

0147f86c-fe01-4193-a876-17ece5a1ee45.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0147f86c-fe01-4193-a876-17ece5a1ee45.tmp
Size 10KB
SHA256 8bec3d205a5803b6b635cf00e2ee5bf79f2a626a452bcceac476174c567bc167
MD5 83d6469b984cad6b969aff95f220bd54
SHA1 9c596511b15f7de1d4c123ef9c7c3d89f9f3c41a
SHA512 f866ca9213a98a17e8a74850af2429df4388516b4f9a0c2ee9418a4b8634f0da028c86e3dd030927f6ddc69023ff8411bfbbbe3f1a364bb3fc9d7710f2dbd0d2
SSDEEP 192:sxZPuoRPWJm/fp/s6XlIdpdZHW6+WNGYRPT+YIIg5DJ:sxZPuoIJm/fp/s6XWLHbGm8D
TLSH
T1C322B712AE78A97B8CCBE20DBB55BF53D6F95032A1911E48E6FCC61C05E66DD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32ec44e6-8f53-406c-851c-3a987f4b0e8b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\32ec44e6-8f53-406c-851c-3a987f4b0e8b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d04a52d-4a21-4e4f-a958-412107dc782b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3d04a52d-4a21-4e4f-a958-412107dc782b.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

94df359e-4f8b-4f0b-984c-9ad6ee16d590.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\94df359e-4f8b-4f0b-984c-9ad6ee16d590.tmp
Size 10KB
SHA256 306f5585d65a76438ee827cb13185b8e4841010c315eba2d619d47a5875413ec
MD5 95239d6940f7b11b2ca18d9cfae45435
SHA1 d50e63e391402cd0d26518a81a223850871f43e4
SHA512 723d8dfdc5d4eea8c51dbf1021a5b01ce671cdee57db9c584de43ff18f0998982fd1028b5339522887b81e66f2d4b7dd9b1a1fff68001fe08cb2612197dcef97
SSDEEP 192:sxZPuoRPWJm/fp/sqXlIdpdZHW6+WNGYRPnyYIIgrJ:sxZPuoIJm/fp/sqXWLHbGmk9
TLSH
T1B122A8126E78A97B8CC7E20DBA65BF53D6F95032A1951E48E6FCC61C04E66DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 e02593a7d0203351141ee96c6f60f183f0f94b49e30a93bf9c429fd5383c0c5b
MD5 b7238d1294624fbb9706df5fa5195439
SHA1 436515941278dbad0fc69766b0eced6fb2876e93
SHA512 88a364f2c7ba570cadf316de9f7ef6967dd55bbec42bb6a95a5bf5c3368a1ccae63176ebf9d5504fe587d1718784531a0eb894717f88510e59652b53c6232040
TLSH
T1FAE026D844D8C22EA3F8E6B7127CA30CC3A1661BD3C0E90E2700C98A708BA51B3C2690
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 181d80db220077b17dab6c2fd1ab9f42d076a9a9c8514fe182c5b32e1e301698
MD5 784406c8afaf9c6926dc97fb27565793
SHA1 6b9fb8120850a032ca679974364a1155e49a1777
SHA512 577d3613da07cac4acadfc9c162dd5c1683fb6745f600339a424e77c6f46de30a048d0124db9e9224cff32d1eaef4ae6d4e905c9bbe2a1566e400d2c6791c8ad
TLSH
T14A61D390D6D1C365FFBFD9719B9532EF3A6CC9D204877D1243A8DB78A84EB0982150D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0fe89408e5f71055a08c2634eaa144204ed4cebaadc9caa1530d2888f83bf548
MD5 558459d959909d73312d59d324a72592
SHA1 7172e050e9406bb4a19ae79f8af7a646163a6716
SHA512 a935f7120862dd12e889959692633fce61ed9a27a8acf3444608d83874b0d6dee159874ee863483033264926abbe22af89defea980f67f43b4e9ec23ad62e9a6
TLSH
T10361E480D6D1C365FFBFD8719B9532EF3A6CC9D204877D1243A8DB78A84EB0982150C8
MD5 SHA1 SHA512 TLSH

Submit Download

f1509eb9-e896-4773-9cb9-ba734be52c92.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f1509eb9-e896-4773-9cb9-ba734be52c92.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

892ff5c5-a168-4eb7-8fd0-6f5d4b9e5eca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\892ff5c5-a168-4eb7-8fd0-6f5d4b9e5eca.tmp
Size 1KB
SHA256 50da35bc3b5eda5011362dacd4a9add463ee417cf538e24e6ddf20f99586ddb9
MD5 357369e06fe097027a5b1e6992e3fa47
SHA1 19d423f710d19c2ac10ab719605237b5f7ac602d
SHA512 0f05203c589643f5288f047ac6f1d24bb0fe87c98cb3c6179c057aab22abdb73b12b25d921d8dbf921c165b5a21c0334e17127c2946489731003d3381716e156
TLSH
T1D911CCF3C3E5966E890116F09A14EE2BCE2D0A16532C3C29C9D4EF67D3E3075E002A5B
MD5 SHA1 SHA512 TLSH

Submit Download

8e11b7b1-ee35-413c-9dd5-522bedff04fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8e11b7b1-ee35-413c-9dd5-522bedff04fa.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

9eb9ca60-31b0-4df4-8bf3-967d611b2c58.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9eb9ca60-31b0-4df4-8bf3-967d611b2c58.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d9da8f7abef69bcd612cc6a334dc0806b56a4f54886ec5e8b470d423dc2d8832
MD5 06d101dc052de9e85381b73afa3624fa
SHA1 0ea970dabaa78e16ead892aa1fadbe27d653a92d
SHA512 f8d042e13d6424b0f1f347d063a7dd63e4094f0fae4816967ecd95b4789e09c3965d309ac75745dcac0500ae6e93a9f923c265c5491ae4e10942e97c84c300cb
SSDEEP 48:K0mImmBcAeEE9bI/wISY9K981+9xWtYXoEPyLZo1JTXrEbXyvIShEK9h1LExpUYG:K0m9luKuMjqiAKTaS27MKbC5
TLSH
T119A1294434BB0654B8BE255881B4872E469135733558EA3BBFBC40AA8E6FE084DFE4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d17eaefd-b64a-4f7b-a258-b97d696beac3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d17eaefd-b64a-4f7b-a258-b97d696beac3.tmp
Size 10KB
SHA256 3a3baca8307456540fd1659cb1ba93a54e620333d6838e2175b11c39d839fa0e
MD5 2f01d48e86e44f438aba48412a9c11f1
SHA1 d4c5f8c24ed549cee3a6e92c431224b8ce8a5fc7
SHA512 3dea225b06381ac7fd172a47bd1bbebe0bcf6c9dab8fc249fd7c2637762e043d3c51445c81868e85f7e922add79d067c67a3a956da6eb4e06030e9742eeef1d5
SSDEEP 192:sxZPuoRPWJm/fp/s1XlIdpdZHW6+WNGYRPnyYIIg5ZJ:sxZPuoIJm/fp/s1XWLHbGmkN
TLSH
T16C22A712AE74A97B8CCAE20DBB55BF53D6F95032A1951E48E6FCC61C04E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d7fc42cb-8958-4b26-af2a-7f4a149f6b0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d7fc42cb-8958-4b26-af2a-7f4a149f6b0d.tmp
Size 10KB
SHA256 7b038b7771bcad70cc188796b8f682396f25cacd8c2be95675d2ad989f9e8eb2
MD5 b2f796eeb85f26a29aa3f9298de131ad
SHA1 b3e5bfed0356ae3fd30d72424ea18f36caecb17e
SHA512 08810d8b61d831e9bf453e75aba395a535d38aec4d044b4b05c629225e4818c461ed858ad7e0a668d01c6d7ec0a2fb7ceb4fd3d75bbcde8638ddce745432bcae
SSDEEP 192:sxZPuoRPWJm/fp/s6XlIdpHZHW6+WNGYRPzd6IIg5DJ:sxZPuoIJm/fp/s6XW5HbGm9D
TLSH
T1E932B852AE78697B8CC7E20DBA55BF53D6F95032A1902E48A6FCC61C05E76DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f68019e1-147f-4f4d-a8a4-1c223419fa10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f68019e1-147f-4f4d-a8a4-1c223419fa10.tmp
Size 27KB
SHA256 050d5cf811c5dfb45bd5628be773161a8bcc3c514a01102e2c5b3b4933c6697a
MD5 f1d536be102a10e3c9b64dda102c10ae
SHA1 4e79e46fbe79236fcf21865c2212f490ea0004ee
SHA512 ff2210ee94a76aa142d1bb6cb3590ceb2d72ba3f670c39101074a6cc1b88815073b615c9168e952a920ddb9d1fdf11482ff13f0207e8e338afdce7f26e613d79
SSDEEP 768:4qK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Ero9+EB:4qK9uzYWvcQWsu1ja0HL7Q3P9+EB
TLSH
T126C2F93F640CCB7E4FC01A9DDC5A6F972E9802D7A6688D4047FE984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3ff2c626-9b94-434f-8be9-f1b7defb62e4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3ff2c626-9b94-434f-8be9-f1b7defb62e4.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

ce6daf66-4a22-442d-aa99-9df2850a1199.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ce6daf66-4a22-442d-aa99-9df2850a1199.tmp
Size 18KB
SHA256 eb6fb82ab0275d6f9337fb41c0cbc7da6410f0f2f8bea292f17dabe94a8f62c8
MD5 eeb751c091a362a41e64ec6489142dfe
SHA1 6af0bc0771f6a9fe13d4df074e9210b7d0d51e8e
SHA512 7678cae3e5953a3228484e98f8bc90b18c0064e3e0631d0272d7932cd2db9976eeb1cfab899434befa5fc168a9097dce447ed97c9fbcfa0cc7741cb15440ba18
SSDEEP 384:QZcIhsNrrwe0R7m8OjTV9iOyGPjEjywJr8/q1i4/uANEbEeUz:uhwXn2OYjZhKq1LJCbETz
TLSH
T12B827C72A8745D7799F7A146F88735178FF88077E6803BD4A4ED9F0D00AA5AC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0f271f7b-f33a-417c-9dd8-45842ade0121.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0f271f7b-f33a-417c-9dd8-45842ade0121.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 632dfb473b63e9874982956f2d89c7458e846ba13d16d52d2de64b49c34bb2bb
MD5 568a676b904058081d2a7af0425fcc02
SHA1 a1f8e2c6ca5b32fdbf27460d4acc14c7d46c26d4
SHA512 a86a0ad52156717c840fadcd53a572c21b522e5446f777ea753240772edb4980cca83015c219d48dfcef3077004e23c8edf36fea7f4a35fed761eb899342c425
TLSH
T1D7411A58BAEA2148B3777E569BF7A86E887A7C772E46C54D10110E4F4A23B40C971733
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download