5966979a422c2526dd77897fb643639d82b16bdb89d8fa6e8615d3b32169af3c

Analysis

max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/10/2026, 22:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/app/cmp.html
Size 5KB
Sample261013-2hlf3acv21
SHA256 5966979a422c2526dd77897fb643639d82b16bdb89d8fa6e8615d3b32169af3c
MD5 17241946e51074e6877c43737b94ad71
SHA1 16918c53471fe3f35fcae1e9902870d91c50d957
SHA512 b4b6e030fd1abe19fa308b32f04571a7c1c1f78a7cb789f169b37b54f281ec66d16e4cf0bbbdad81642bf28e266a6b2af7c19cf5106c683fb7f443bfa3110e05
SSDEEP 48:tZrc0/GdshWpo1rckthAoShbEHaLKNGiNQtvmolOGR36tgtr/GTvJP8AscaV4Li1:4V+8v4jHa2NGiivmmpWsBVuQFwlE5vSG
TLSH
T15DB1DB1A2D5914A80077E3385B6B6208F72AA1B72105CA067EACDE513FB152BD58FFCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4200	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{FF0C7F2B-542C-4E2A-BA06-5045D0DC3231}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2612	msedge.exe
2612	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 728 wrote to memory of 2972	728	msedge.exe	85
PID 728 wrote to memory of 4200	728	msedge.exe	86
PID 728 wrote to memory of 1836	728	msedge.exe	87
PID 728 wrote to memory of 1836	728	msedge.exe	87
PID 728 wrote to memory of 1836	728	msedge.exe	87
PID 728 wrote to memory of 4204	728	msedge.exe	88
PID 728 wrote to memory of 4204	728	msedge.exe	88
PID 728 wrote to memory of 4620	728	msedge.exe	89
PID 728 wrote to memory of 4620	728	msedge.exe	89
PID 728 wrote to memory of 4620	728	msedge.exe	89
PID 728 wrote to memory of 3768	728	msedge.exe	90
PID 728 wrote to memory of 3768	728	msedge.exe	90
PID 728 wrote to memory of 3768	728	msedge.exe	90
PID 728 wrote to memory of 3576	728	msedge.exe	92
PID 728 wrote to memory of 3576	728	msedge.exe	92
PID 728 wrote to memory of 3576	728	msedge.exe	92
PID 728 wrote to memory of 4952	728	msedge.exe	93
PID 728 wrote to memory of 4952	728	msedge.exe	93
PID 728 wrote to memory of 4952	728	msedge.exe	93
PID 728 wrote to memory of 4360	728	msedge.exe	99
PID 728 wrote to memory of 5116	728	msedge.exe	100
PID 728 wrote to memory of 4360	728	msedge.exe	99
PID 728 wrote to memory of 5116	728	msedge.exe	100
PID 728 wrote to memory of 1928	728	msedge.exe	103
PID 728 wrote to memory of 992	728	msedge.exe	110
PID 728 wrote to memory of 1856	728	msedge.exe	111
PID 728 wrote to memory of 4404	728	msedge.exe	112
PID 728 wrote to memory of 3920	728	msedge.exe	120
PID 728 wrote to memory of 3920	728	msedge.exe	120
PID 728 wrote to memory of 644	728	msedge.exe	121
PID 728 wrote to memory of 644	728	msedge.exe	121
PID 728 wrote to memory of 2612	728	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\app\cmp.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff700ac188,0x7fff700ac194,0x7fff700ac1a0
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,10979068022698533399,1233301048086085105,524288 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,6769259168551273647,7320594069073320278,262144 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:2
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2396,i,16864457811029749703,1746399993802293605,524288 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,16825679241580507893,14232008548767915053,2097152 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,11826053748620705941,13087704896207656801,2097152 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,12224492700476337006,17949269777571658984,2097152 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,6091689015713459493,15414258576789134698,2097152 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,4920433632090221104,2520246387669673944,524288 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,435431546948542675,3478250189483862299,524288 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,2830433201444145029,14870064266226267258,524288 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,2830433201444145029,14870064266226267258,524288 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,14288134767785885922,17052474078278962511,524288 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,11571459929620819874,14089206057606666305,524288 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:8
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,5117893498229611905,14022302969681620862,524288 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,5629063653966632285,10427877909588107984,524288 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=1216 /prefetch:8
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6280,i,12488564222470523836,4954571498920705772,524288 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,16811412138861320405,7563307627705362170,262144 --field-trial-handle=2888,i,7838864519046902952,9335850621250017145,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2612

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5a67ec6d-a3d8-4213-9613-9cb1b74cf354.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5a67ec6d-a3d8-4213-9613-9cb1b74cf354.tmp
Size 8KB
SHA256 4f6bb74da3dd2748255f6e1a262724127d033273760a32773f2c84e327c12278
MD5 78aff38eae6a5fe71d994b086b673170
SHA1 c311bcfee8aeabb81ce9a3b962e67de91071499d
SHA512 e6b2d643f3a28966d4fe0731d08382ed3ae0696e7f0001460438e9b3204dc31a36dcdcf97c117fdde4c284baae69381c0628c51283529fc6c5013b28b19eb738
SSDEEP 192:hsONL6wlDSUQmiUyKdJ94X58gZYjzorxJjXXveBqSU6:6ONL6kVRT94X58EA8xJjXmrU6
TLSH
T1D5121935F5A8BC2B5DE2A445B18731139FA95127EB897F90C6EC1A2C02DF2AC530ED17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68fd4fa3-6b74-49d4-8aca-cb4670d12d17.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\68fd4fa3-6b74-49d4-8aca-cb4670d12d17.tmp
Size 21KB
SHA256 3ffd8c3e846d4e9a06bfa49e6e20cb5af5602f4e175b0e554e93b190d5cb7e77
MD5 34a2e3c904971b668f62b3094b3747a0
SHA1 b161a99f195a0eecd8325de1a64b693f54dd6e5b
SHA512 4306cb7f8d42f7d8a12a0c8cf7c970bdaa280761d78501b0ae8b70b8bffdc181e252498e85adb60fe1f03af4a3a2d68137e9b987e8c2af9f43f37ddc02b11f1f
SSDEEP 384:AiFiZcIvzsNq8TUNTUlIltvBuZ41g2dfHX58EA8xJjXErMTg:bFQLHwgvJuOPaqErMTg
TLSH
T1B2A28E739868E93BADF79A44F68932138FF84177D684AB94D3DC9A1D019B1DC030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8aa741b1-748b-49f7-8de3-64213f04e58b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8aa741b1-748b-49f7-8de3-64213f04e58b.tmp
Size 18KB
SHA256 bd175226ab08a175d85f9020897148f575a4ac02082cd0c137c5ede9e01260f7
MD5 838ebd198b5b4160b8b588f3b3e8fb21
SHA1 e9e5df5f253cd105854ec653f5ab95a4a4c378d0
SHA512 610d65831f348524b376de9caeca75c3b0c07ea9daddc60275db0a60452576e41557aac164a154df2abf18681f9c23f897c27f261c21bbd5d8bee444e9f4ee3a
SSDEEP 384:QZcIhsNStvBuZ41g2dfHX58EA8xJjX9rMTg:uhnJuOPaq9rMTg
TLSH
T1B7828D75A878BD3759E7A045F58A31139EF89037E7882F84D2EC9B1D029A699030BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

1ef4cee0-8111-43bf-9398-10e9d1aaa2f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1ef4cee0-8111-43bf-9398-10e9d1aaa2f4.tmp
Size 27KB
SHA256 4e37e03dcecc42e624be584011f1b82fc59fb3ebecebc3493d3526272459937e
MD5 07a126281099a51332ead2e01a300894
SHA1 ef9be7d50ee400d56b0089730ac77d6dd22551b3
SHA512 83c5bd46755331aa272e22aa85eb585583ed362a9034d5b82f9e4d05dae0475662cea9dd6d8fdb3aaa3b9306e95f49ad408700bc284c0d84969537d8543b7b0b
SSDEEP 768:2Hy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbFroRyB:2Hy4J/DWvbtBhu1jajiLm0b+cB
TLSH
T1A6C20A3B644CCA7E4FC00A9DED5E6F9B3E9802C79A948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5286f2bd-19f8-457a-89b7-53876dbd2b17.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5286f2bd-19f8-457a-89b7-53876dbd2b17.tmp
Size 10KB
SHA256 f4afc69b9b7d77c81ccb8f9ee88384dbe9a164b0190f62c683606f01168b2334
MD5 a7012e2707b0a612a8f4ee1ce97d9d06
SHA1 756f84b969b1e6a7b5962456911c10221c613278
SHA512 ec4aa346f7429f10dcbde3fed18a1b002a86462b9aa539c14492c820d48beaab4b195d9c89572f7fbecef463c340441bdeec06642ae6ec9c2c5be52d8ce3b0d4
SSDEEP 192:sxZYRgW2/fzXs6BUIdpdmHW6+WNGYr6x6D3Ig5aJ:sxZYF2/fbs2NsHbGbYA
TLSH
T14722C991AE28B93B8CCBD20DBB55BF53E6F9503265D51E44AAFC861C06E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

750f4735-9fc6-4643-9cca-fa7a74b3b20c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\750f4735-9fc6-4643-9cca-fa7a74b3b20c.tmp
Size 10KB
SHA256 15073fc9eea586d41c05ab4599f546e9f4de701f0359d5062d901dea75cbb759
MD5 a1ff86864ebb962822c88c8e9c014455
SHA1 23ef423aa038f5a8a05e281f60344cd1222a0beb
SHA512 8873f4e1ee3f1a223a5fdd17ec1d727a664502a3ebfee1f5b951a3d95952122cfcfda7808e5468750d401cc8126e7c21517dac8810833a4d4b3a01ed50a2a77c
SSDEEP 192:sxZYRgW2/fzXs6BUIdpHmHW6+WNGYrPxxD3Ig5aJ:sxZYF2/fbs2NGHbGKBA
TLSH
T15022C992AE28B93B8CC7D20DBB55BF53D6F9503265D41E44AAFC861C06E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75743e67-ef2e-4c21-8635-8c6258b5c291.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\75743e67-ef2e-4c21-8635-8c6258b5c291.tmp
Size 9KB
SHA256 7b6c8ee56a7b347ce21983589b14c7edc3a70e238168529d5025af5bdb92da39
MD5 c008c61dfa80cfb95887066bbef3e502
SHA1 f13a7ffdb8f9214180ed94e1371a5391046b6404
SHA512 87d1fd3b4e0929eef0583e82fc7ece1fb96140f851e04783cd5732cd58698d591df2426917ef1b833c786987ea6e86aa3e2c06c90e4e58ca1e0dc8ac2615a022
SSDEEP 192:sxZYRgW2/fzXs6xUIdpdmHW6+WNGYrvx6D3Ig54J:sxZYF2/fbsGNsHbGKYC
TLSH
T17A22C892AE28B93B8CCBD20DBB55BF53D6F9503265D41E44AAFC861C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9afd0e01-722e-44cb-afa9-3713fbdb5f18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9afd0e01-722e-44cb-afa9-3713fbdb5f18.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 5a2f27ddd5ada8f294b8cc4fc5477fc5db1f0ee541cc6d56b45efeb43f37cfcd
MD5 0a18894acd31eda808be48a6716c40b4
SHA1 39af1b932745ff4fc492fb0c4d385de4d5bfc99f
SHA512 a0948c0bfe25958735a27585476381fa605345cdfdf61061bd737ab1092607ac9f4f463a90ad0ca0abadadf4c2704ba96392d0cc6d706ada866bb8c860f5a09e
TLSH
T189E0DFD535E8C3AEA3586447836C430CCB81771B97C87E9A1700CAC9724A248B2866A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 390c72c9d4be25ecf58509074276f48ad938f47f894fdd45a5d26c2b133a6eee
MD5 ee9fbb47c1aa632e5f40be5a3e273c7c
SHA1 07ba108d8de75c225ff4db1f3142d49c74069b98
SHA512 9574e371630552ceb50d4311eb03a9f3ee450e6994740fa5f67e9679d5928e366fe710e186b6ef41eb32f2cbd1877275f0de3d770c15e33dcdaf329f2cd2ccb0
TLSH
T1E8614EC152B0486DFB69E37286FA1067B5348C728EE3ED72E454F8F95C4632071648BE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 552f1b6fddab9c8a3828b2a5b722ea1510fe020746b758d509b2c97f2e8d79d6
MD5 f7a6c9be22b1a3735c98169b3201c3e7
SHA1 91987564f284662af7385812bc770a0c823a80f7
SHA512 379999644fcf2cd0393c42f3f5843247e1b29ce93c214e40d959c2d5e11a27a1df632d51b777a03683ace36422d3f64f25aca77160678599b1903c083f3c11bb
TLSH
T1306150C152B0486DFB69E37286FA10A7B5348C728EE3ED72E454F8F95C0632071648BE
MD5 SHA1 SHA512 TLSH

Submit Download

ee807c00-ae3a-4b9b-b671-c8c746d4ae49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ee807c00-ae3a-4b9b-b671-c8c746d4ae49.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4cb0c74d-7243-4d13-ad90-d40e7e31aee6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4cb0c74d-7243-4d13-ad90-d40e7e31aee6.tmp
Size 1KB
SHA256 b78240f8a5c044e18255e70b4b748eb2b632a0145f48890cff5ae64854c21866
MD5 aabc67a4590ed99d6b267e3705d41478
SHA1 94b2032cbc98c802fb1dd270e67933930283552c
SHA512 fe2a1e9c9af9a9a06f1129224331f8f3513d4a3891a5931959b6bee59484aceb09f40bfeec3bab7da801a77151449daa5b680bca237dea5395b3cb80af1d3e89
TLSH
T1471180B7C7E4867E890156F09A28AE2BCE1D0557431C3C5689E4BE2B93F34B5D10199F
MD5 SHA1 SHA512 TLSH

Submit Download

66f6f7df-13f7-4aa8-af53-8b66392bac10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\66f6f7df-13f7-4aa8-af53-8b66392bac10.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f0ba9d09-f1b9-4e56-a927-488c651c501d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f0ba9d09-f1b9-4e56-a927-488c651c501d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

aebe8efb-48c7-4309-8480-10c1dfdd79e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aebe8efb-48c7-4309-8480-10c1dfdd79e2.tmp
Size 9KB
SHA256 aa1099c04df1adc8f7e220108630921cc1fb4cf3a4eb89296b87a01b708e8f41
MD5 552ab34174c576989480baa2f2e2f325
SHA1 3472f355fdcc0ae46e3474c012667caa04703eec
SHA512 a296ccf749c233e024eb0a740a9e4a2a9707822a88745dc48a61c4cbcf36186b3ac270b1e193964c5e87c671765c35e40957c72b453ce26ce28e6a5537d51611
SSDEEP 192:sxZYRgW2/fzXsYxUIdpdmHW6+WNGYrvx6D3IgrJ:sxZYF2/fbs0NsHbGKY9
TLSH
T1CE22B8526E28B93B8CC7D20DBB55BF53D6F9503265D41E48AAFC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

afb8e102-da2b-4a4a-8e72-5fc906b57ce3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\afb8e102-da2b-4a4a-8e72-5fc906b57ce3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bbe3cb66-7d5c-4066-8589-186ba8ba5628.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bbe3cb66-7d5c-4066-8589-186ba8ba5628.tmp
Size 8KB
SHA256 97e65a4baee8555619521e8abe338398492bb9f0a7934759842eba262cef13db
MD5 d614f6946c86650f5d50cf1b529818c1
SHA1 f8b5fbe3816d594d819889f89fedd1289f69b805
SHA512 95d7d6ec87b5031d368626fafaeecd01b60b56f4f414d512359778687c8f920925dc92070c7c5b4f10e778b10b14a81e1f188167b31f3d60dca0a9571037bb39
SSDEEP 192:1ONT6wlDgQmiUyfJW4X58gZYjzorxJiDlp5U6:1ONT6kg6W4X58EA8xJifU6
TLSH
T176020938F9787C7B8EF2AE09F58A26139FE5112BE6952F44C6E81B1D00D765C2306D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c740ef4f-74af-4c2a-9308-4d65bae3c997.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c740ef4f-74af-4c2a-9308-4d65bae3c997.tmp
Size 18KB
SHA256 3d1ccf059ee730dcd0ca8f14fe4c3373f45bc6ece27343fc1470b69ef29fc602
MD5 ba023be522cbef154cf214d342f7be97
SHA1 78c170ee9f09bf3eb70d40b2de98f0f7f8e1b374
SHA512 15d368a6b1d39ffeaa67f0c22044c5c57c86418a953716c7012dc5596731cf48d154d55ec59e3b08c3771a7b63d738602778d9bff99a36ef816cc0f7a002e360
SSDEEP 384:iZcIhsNSAvBuZ41g2dfHX58EA8xJjX9rMTg:QhWJuOPaq9rMTg
TLSH
T1D0828D75A878BD375DE7A045F58A31138FF89137E7882F84D1EC9B1D029A6A9030BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3167d0a-20e3-4dbd-8508-a24123c7241b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e3167d0a-20e3-4dbd-8508-a24123c7241b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c8214e2653a6856f6357b7b30f6611e6156c3c0139a5c143fa43039815636094
MD5 639a39a2f28c6714accae8e8fd9dec2e
SHA1 e61dfbe9a0d27a3ed0114b09aace5336d420cb3a
SHA512 2053f2f3d6136ecb6a0d023e4269b2354ebfbbc285eac25caf4b966467ffa9cc1611cd0b97f2db74a87067f67038b845cb1b7a3438f6623bc1d117e699357626
TLSH
T177412B4DAAE91108B7B77F4A9BF6686E88BF78772E06D05D10110E4F0A62A41DC7173B
MD5 SHA1 SHA512 TLSH

Submit Download