hxxps://ssl2[.]perquisite[.]net/RewardCentre/M/Login#/%20hxxps://www[.]pensioenbijcma-cgm[.]nl/online/

Analysis

user interaction
yes
max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/10/2026, 09:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://ssl2.perquisite.net/RewardCentre/M/Login#/%20https://www.pensioenbijcma-cgm.nl/online/
Sample261014-lmsg6ssxbt

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4112	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{B468E7E3-AA26-4545-8656-3BC328491752}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3140	msedge.exe
3140	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 1152 wrote to memory of 3680	1152	msedge.exe	86
PID 1152 wrote to memory of 4112	1152	msedge.exe	87
PID 1152 wrote to memory of 4664	1152	msedge.exe	88
PID 1152 wrote to memory of 4664	1152	msedge.exe	88
PID 1152 wrote to memory of 3628	1152	msedge.exe	89
PID 1152 wrote to memory of 4664	1152	msedge.exe	88
PID 1152 wrote to memory of 3628	1152	msedge.exe	89
PID 1152 wrote to memory of 4932	1152	msedge.exe	91
PID 1152 wrote to memory of 4896	1152	msedge.exe	92
PID 1152 wrote to memory of 4932	1152	msedge.exe	91
PID 1152 wrote to memory of 4932	1152	msedge.exe	91
PID 1152 wrote to memory of 4896	1152	msedge.exe	92
PID 1152 wrote to memory of 4896	1152	msedge.exe	92
PID 1152 wrote to memory of 4508	1152	msedge.exe	93
PID 1152 wrote to memory of 4128	1152	msedge.exe	94
PID 1152 wrote to memory of 4508	1152	msedge.exe	93
PID 1152 wrote to memory of 4508	1152	msedge.exe	93
PID 1152 wrote to memory of 4128	1152	msedge.exe	94
PID 1152 wrote to memory of 4128	1152	msedge.exe	94
PID 1152 wrote to memory of 2380	1152	msedge.exe	98
PID 1152 wrote to memory of 924	1152	msedge.exe	99
PID 1152 wrote to memory of 2380	1152	msedge.exe	98
PID 1152 wrote to memory of 924	1152	msedge.exe	99
PID 1152 wrote to memory of 3728	1152	msedge.exe	101
PID 1152 wrote to memory of 2148	1152	msedge.exe	112
PID 1152 wrote to memory of 1736	1152	msedge.exe	113
PID 1152 wrote to memory of 3520	1152	msedge.exe	114
PID 1152 wrote to memory of 2224	1152	msedge.exe	116
PID 1152 wrote to memory of 2224	1152	msedge.exe	116
PID 1152 wrote to memory of 4380	1152	msedge.exe	124
PID 1152 wrote to memory of 4380	1152	msedge.exe	124
PID 1152 wrote to memory of 1560	1152	msedge.exe	125
PID 1152 wrote to memory of 1560	1152	msedge.exe	125
PID 1152 wrote to memory of 3140	1152	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://ssl2.perquisite.net/RewardCentre/M/Login#/%20https://www.pensioenbijcma-cgm.nl/online/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffd2f29c188,0x7ffd2f29c194,0x7ffd2f29c1a0
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,9183856830093689665,3249501120389309928,524288 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,17500435270754555901,13776619788488182172,262144 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=2796 /prefetch:2
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,8688405977351040231,3399897795918110326,524288 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:8
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,3579209605145530437,12058183746879669840,2097152 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,10876493847941444914,12266757381600129691,2097152 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,1438602973838783625,6301722038093657334,2097152 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,11868177105236281426,13363146431692949374,2097152 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,15642929286570740293,18047857526442765104,524288 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,16699511914354083175,2878369611348769427,524288 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,10228502226412338574,3244124701125145081,524288 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,10228502226412338574,3244124701125145081,524288 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,12197719896476984348,18155549186703001588,524288 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:8
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,3489176765663710920,1515585544701908657,524288 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,15662719962489998368,2453838192838088210,524288 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,13113587028648029517,16593375243372421471,524288 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:8
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,59589018440266784,16862305367167624450,524288 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,12269552873032794680,6380234906561941825,524288 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,316970282351011123,4864719140169216452,262144 --field-trial-handle=2800,i,677429473196957978,10313952615312171032,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3140

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3472

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

72a6b65f-7231-4b3e-aea8-ef36ca17d2b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\72a6b65f-7231-4b3e-aea8-ef36ca17d2b9.tmp
Size 25KB
SHA256 1b70f996ec706fa7bfe8af84b6a7d3844e243f3a816e2c9bcb26f5e3e755dc0f
MD5 ddd475c4ec2fb0e0f246e61e954581bd
SHA1 e11cc80ccae4432538ab0d72e71bec989d324ef5
SHA512 9b8837bd8ba547ada124e1379909377b9b4b3e79d96bb1248351da59c5184a2e10660f61e34f063c1f0dec0850270c92fcaf5c72f712eeb247dc3d3dc2cc691c
SSDEEP 384:HiFzQkUSvWzsNm8TUNTUlIlgJAGZGO7fMHX58EzO/ARkuPJAxJ/ChlIIl+:CFdmfwgLGDyakO/wvPkJ/CbLA
TLSH
T165C219F258D79A36DAAE4703E77E2D038EBCD127F5815A50B388591CCC862BFD306915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

811ff208-ba02-4076-a119-eb4cf30c03ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\811ff208-ba02-4076-a119-eb4cf30c03ef.tmp
Size 18KB
SHA256 88b28a1d3d685dc74b21908e60eab2008ef1695d7fc94d937753d6a58027b159
MD5 c104cc07a8ddb8c1e59aa0840fb4f26f
SHA1 d17e5252432b3a4db0a867e0a76471c749e52ac8
SHA512 2e02bb0d4167cb4c86ac8f657ce715e1dac4175580006b5cc21ed598430bab0a03e6e58ab8afbec2a7227b01aadeccf689e62dd254b724e25a9582f719cae0f6
SSDEEP 384:JQkUSv0sN1UvJAGZGO7SMHX58EzO/AIkuPJAxJ/ChlIIl+:r00GWyakO/vvPkJ/CbLA
TLSH
T1D6826D71B8B8BE374AB79501F54B35039FA8A12BEAC51F94C6DC6B2C01CA3DC131B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9562c57b-f5e2-46e9-b7de-5fb31f4c0927.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9562c57b-f5e2-46e9-b7de-5fb31f4c0927.tmp
Size 8KB
SHA256 9cf56c3ddd35628362a96fd11f3bb9f5ff98c0aedc4a1ca365265e93f46a6ef0
MD5 bf9b7a72dc0c2c2eacdbf04ff8b43f3e
SHA1 0d75236b014df22847b295cd5a5ee7c8862b9320
SHA512 3edeb096840ae1c219bf2f1bed97e8683bf69066355d4a4c35231e177fb764f3e7d72aeabaaf84346e0a7b74cf2c9a0e4fa0887d006c0990c7c334b76d1866ba
SSDEEP 192:1ON36wlDgQmiUy6IW4X58gZrvOKG/DlgvU6:1ON36kgaW4X58EzO5WU6
TLSH
T1BF02FB34B9687D7B9EF3AD09F58B36139FA4202BE6556F44C6E81A1D00D729C2307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c18b1bd3-2c2d-4730-89b7-2c1a500d1693.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\c18b1bd3-2c2d-4730-89b7-2c1a500d1693.tmp
Size 105KB
SHA256 faa1d17dbaa7275c5bf9f5f85c56bfd5886f17e7f8b00784101de8f5c039c356
MD5 d8b17b6bb640bff8fe28ad44a747f3d3
SHA1 42af3c2e122da92ce166cc222fcb6c05cc8e472e
SHA512 bb4055fb646199a59be3e4d455909dff93e1c0cb13653477973c3a58336f13da6f23290ae834b4b70337e52f6ad5c4ba63776e096e692279fc99eb7436a85abb
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7b:fwUQC5VwBIiElEd2K57P7b
TLSH
T1D7B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

0ffb7cce-0fcc-4472-8a1b-c4adaf28cc9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0ffb7cce-0fcc-4472-8a1b-c4adaf28cc9c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12797aa0-394d-4209-92f3-179b414db498.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\12797aa0-394d-4209-92f3-179b414db498.tmp
Size 10KB
SHA256 5479fb3c23de0bdcfccf5cdcc4fb7a562f189744c8087e486702616450c37acf
MD5 3b4abe6a1c8f27abe1f5028eddd5b0f1
SHA1 71693229c94ec1de2371f919cc792682fd0cd686
SHA512 9cc4e01b2bd7e94b7c2bfd97046a560b74e25f40956311d95f5dbc3301e3c312328d51750eb37ae039934774efeecef4723be4705eaf22f39ee4f1bc90e0212f
SSDEEP 192:sxZqRqWc/fpsp6IdpN1HW6+WNskL/Yr1lH+qIg5NJ:sxZqfc/fpspTLHbz/qjN
TLSH
T16322D912BE28AA7B8CC7D209BA56BF03D6F9503665D51E44B6FC851C04E66CD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1d1cc7ce-c059-4e3e-9a33-9254b526fc11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1d1cc7ce-c059-4e3e-9a33-9254b526fc11.tmp
Size 10KB
SHA256 b5558d430fd022dce1ef0f397a1128377b9ca36931a5745e7634238907eef2d8
MD5 f4408ce3854cb721132e68a6a5347004
SHA1 408da097cd2af45d85137e4a356dd59ed67f1792
SHA512 833afe1f3207dac3114502ca4efd91225feeb12ef883d9ff31ad725f09fb2423ac52f249797288aa1c923bc1ee72cf51ed714bb99f05714728521515458352d7
SSDEEP 192:sxZqRqWc/fpsn6IdpN1HW6+WNskL/Yr1lH+qIgrJ:sxZqfc/fpsnTLHbz/qj9
TLSH
T16C22C912AE28AA7B8CC7D20DBA1ABF13D5F9503665D51E48FAFC851C04E76DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

307654af-55a1-46b0-82a2-910fcf9226d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\307654af-55a1-46b0-82a2-910fcf9226d1.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

3fe9cb23-aa62-4bec-9004-acd494ea4871.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3fe9cb23-aa62-4bec-9004-acd494ea4871.tmp
Size 10KB
SHA256 b157dce6504374936d38eb66326638079bbd82bc0a295ca982250161354f2dec
MD5 c0cedf9c81377653287135686a991baa
SHA1 3c9d2462787bc3587fa1d51c17a4b638d849aa46
SHA512 238d8b97d0c600007664efa181e74dab4653188bbbee417de2508147f38875230b7fc2b65ea411c0c52c894b97ade745b71ebf367bf9a57ecc2620cca6f86ac5
SSDEEP 192:sxZqRqWc/fpsg6IdpX1HW6+WNskL/Yr1km+qIg5nJ:sxZqfc/fpsgTFHbz/OjD
TLSH
T16832D952AD28AA7BCCC7E20DBA56BF03D6F95036A5D11E44B6FC861C05E76CD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 1d4fc580fe32a6dafc23a543e70de08a048699b569c6240437788013cd0d785a
MD5 6e6fda0e0d78737a48edfb31342b5c38
SHA1 5ff0bcdf97db3d6a12c55bb92ad8d258977a3946
SHA512 9dc54f21d80d087851126184c284c213ed7ae354850ad642edd2ef94bf9572d313b5f450fc9d25c2c7ed7be56607040ccb9a08c255b4bfc2e7abf493de00f2f0
TLSH
T1B5E026C415C8C23FB308B75B4278574C8B80261ED2D1BA0E7B08C9C8710A280E2E2690
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 320c0bf7b91285633ec379724d693b4d08e67f3bbcc84c9a2ba312a1a4bf36aa
MD5 93a9bdf4d18650b0317bbbba02617d3a
SHA1 d0a55d6cd46f22dfc3b27599709876b43846bbf5
SHA512 fdf936ada58bb619da41d63a333db228199c3c73385ecd8c54b16a04503b7773a45d307bb4e3f695d661e672759576e5a33f73cb3e1f8279bd9d7a8a7e2393b5
TLSH
T1B1E026C454C8C23FB30C6B4F027A974CCBC2371E92D0A90E2B00C5CC708D254A286694
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 0f0d786e027d694cdf64a43fe564f3cc21c71b60d0b4d82e0dd7abc6bc15ebce
MD5 45c05534e3642aafe102607b59c07278
SHA1 a880636d6742ab43f307da243f052d486473d6bf
SHA512 6f126d72659fd978cb69233a13ca5f1fa2766bcba82ffcf945d1d4b75cf2f434c8a154c8f566d25ec3e09b11a493a22786d050ad66363ffe6f67e5280b880097
TLSH
T1F651C583E7F4A046DF6A173149D214B73A3849B3ED43DD12C4B8D0B97B4EB1691002A7
MD5 SHA1 SHA512 TLSH

Submit Download

0cc23fd2-c379-4ecf-b684-366892831b98.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0cc23fd2-c379-4ecf-b684-366892831b98.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

17aa2313-a52d-468d-806e-67fe4bd787ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\17aa2313-a52d-468d-806e-67fe4bd787ae.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

c54a3959-fa64-4384-9895-7c4aee32e059.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c54a3959-fa64-4384-9895-7c4aee32e059.tmp
Size 949B
SHA256 5088aef0d27f9a730b11840f65244a0b59741b978ea826761532b1d46b73c2cd
MD5 37fdd75928e105d48466eae8f63494e2
SHA1 b111ea87db85403c182ad99e7bf366d1f23bd9c7
SHA512 36a36badb37e12e4fd530c9ae828e28f6d960d6241fd92486d191b26ea54a755afe4aad7d84195e4db0f056f850e031db262567135b9c52819cfafc627d7bf46
TLSH
T1D0117DB3C3D586AE891156F06A28AE2BCE2D0506522C7C1A85D4EF2B93E3075E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

f5ad6fd1-6189-4b90-9dfa-8d87f4efddf0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f5ad6fd1-6189-4b90-9dfa-8d87f4efddf0.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 da1e236bfe336279a3f1aee724ccdc0455272e9e5b637a45f6c0188ed2c46dac
MD5 ae44448f73a7b10d545590f1cb9b2973
SHA1 ff57e903ed6a7a9f38c98cd0382bed2bb5d8f5cd
SHA512 615e24fa5a9ba8471ef48a8962242347e930d5dd36a9caca3fcfc97c90dac58a395ecc215e741289a67765113b0ea4d24e076338739cfe7a417a586da11d4ced
SSDEEP 96:KIDCKs0+aCYKjilmBA9xvDnk3DePdJkKlBdHk5Rx+vzR6KaM6qEQKxy5:E53smBA9xvDn6DelJFBdHKRx+v21vW
TLSH
T1D2E1D15534B7020038BD769882B5872A52433677301AEA3BBFFC40668E6BE445DFE5CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd180870-ff63-4eb7-86a4-9b3c85a1f4f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cd180870-ff63-4eb7-86a4-9b3c85a1f4f0.tmp
Size 10KB
SHA256 2eed8aed8416509100096ebadd631e28879994b1a29a3838e13cde8b6dc25110
MD5 1f6ce7827c4af149e548287cfd736b42
SHA1 3383ea613632eeef59523992d511456b0f5044c2
SHA512 46a414bf6cc15af2b59df303da38443cd57c04243cee0cb08e1ed2548907a4a2319be00534b66c3d098f07a2a1a472c3f9afb02acf059b4da2a05ee13f365ea8
SSDEEP 192:sxZqRqWc/fpsg6IdpN1HW6+WNskL/YrBXH+qIg5nJ:sxZqfc/fpsgTLHbz/ejD
TLSH
T18D22EA12BD28AA7BCCC7E209BA56BF03E6F9503665D11E44B6FC861C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d80588f7-93b9-49d1-aee7-7ada8bc2050d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d80588f7-93b9-49d1-aee7-7ada8bc2050d.tmp
Size 27KB
SHA256 399a258fdbbb9d208bf0adb25701f5dce87f1f3d8fd875b6008481354e7760c3
MD5 9f766f9081e3472b5197259b2ab0394d
SHA1 7e9adc0b987aaf077a6961dd7b2b1d5f06dffef5
SHA512 4926c74596a0dbc5ce85660a5aeffe213b50afb9b6fd1edaeb94232f71b21adea1344dcdc83b952d8edbcf4cc67bd3d25cfeaadaf14b79b21ba9073da8702d48
SSDEEP 768:HEy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbfroRdU:HEy4J/DWvbtBhu1jajiLm0bMPU
TLSH
T1AEC2FB3B644CCB7E4FC00A9DED5E6F973E9802C7AA948D4047FA954C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f383bdf-4706-46c9-b1dd-799d52192d37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2f383bdf-4706-46c9-b1dd-799d52192d37.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad60d8fa-684c-4466-bf39-d21d9621d049.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ad60d8fa-684c-4466-bf39-d21d9621d049.tmp
Size 18KB
SHA256 2533ccb356485e156cfe47789ee63030df87d7d538e6f98f7726011b954ca633
MD5 1b276870be33fd178a0bb10dbcb605e1
SHA1 e17b98a57616c78ba583a0c461763f74f5bf27a2
SHA512 4159ba4d9126b4e586f3c5ebb34a3398e25229d933ec74ae845a682237dd40cc3c60ce88a8bb9bef68a3b84bc4f87ba24e10ade775058fc16fdd746ee1528df0
SSDEEP 384:5QkUSv0sN1UgJAGZGO7FMHX58EzO/AIkuPJAxJ/ChlIIl+:b0LG5yakO/vvPkJ/CbLA
TLSH
T12D825C71B8A8BE374AB79501F54B35039FA8A12BEAC51F94C6DC6B2C01CA3DC131B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c88ecece-4cda-4b80-a1aa-b9aed9b8bebb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c88ecece-4cda-4b80-a1aa-b9aed9b8bebb.tmp
Size 8KB
SHA256 20adb7a29d76090f42bf39c0a44ceece29671625a0a31232db712199ed0892fe
MD5 b0cd48854e2a028cd0bfa94468dca303
SHA1 c1ac3ef7fc5fa99de09290d296b1c25551637298
SHA512 7de66e4f59c4f22f41d0a39eed7b67b62f683e1c407d871f74294940cde0dc7c38cd7b37081e47f9ad6f58fd9936888663d35d70be380aca6940761112437eed
SSDEEP 192:aONv6wlD/QmiUyXCIc4X58gZrvOKGPaN6veYqCuU6:aONv6kBY1c4X58EzO/ANkuU6
TLSH
T131120935B568BD2B5EE3A544F48731039FA9512BEA867F90C6EC2A1C01DF2AC131B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5c96e92f-536d-4e43-9699-bf7efc2cf9cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5c96e92f-536d-4e43-9699-bf7efc2cf9cf.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 dbc3ab2f094dc4be6a9a445ec4d52c4da61b94aaf603c05bf93830135bddd76a
MD5 f5c6c54e177a6c6eeca59f5d63a8dbb3
SHA1 e4bc5c846a1a49d23ef05fc4ebc1128e60d2d22d
SHA512 5c1fc9a6bdb6fe2f9086caa96ec2a46fdac60767ac29fdca0693a9ce74b0cc7b9f193325b345fece8836009f3b863128327d10f5463d637d5a768a313e691b66
TLSH
T188411858B6FD1158B3B77E0AABF3686E847B79772E47845E10110D4E0A62F00CCA1B37
MD5 SHA1 SHA512 TLSH

Submit Download