c6080d60736384a4a8fdd23404d59ae2d939e5124d80df89f8fd4e450bb9bd6f

Resubmissions

01/10/2026, 17:43

261001-waqsxsxsg1

01/10/2026, 17:06

261001-vmt6fa1cra7

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 17:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 8.7MB
Sample261001-vmt6fa1cra
SHA256 c6080d60736384a4a8fdd23404d59ae2d939e5124d80df89f8fd4e450bb9bd6f
MD5 edaeffe92dbfd973958c9d2267201b32
SHA1 ae43e814d3eea2ff27bb414c9e26ecb1b5c0341f
SHA512 d0e58cf4bc9db25982d726f1ba65924bcef8fa405f06f6abf0ab80177d691805ff228039c5a85c3a8029e4422fd50c3d8e84bc6528771092c79e3d5229f43281
SSDEEP 24576:2o9dQj6p6j6j1WZswRiXj3mfI/6k6mjK64jK6gjK6e6cjK6feGjl8LpH:BWVeG2
TLSH
T1E896A52F7B48037306C642A26B8B65CAF21F903F3B561654345CD1681F6BA2983FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4024	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{93E9B694-42EE-4995-A0EA-77C475A3AA44}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2664	msedge.exe
2664	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4276 wrote to memory of 1680	4276	msedge.exe	89
PID 4276 wrote to memory of 3252	4276	msedge.exe	90
PID 4276 wrote to memory of 4024	4276	msedge.exe	92
PID 4276 wrote to memory of 3252	4276	msedge.exe	90
PID 4276 wrote to memory of 3252	4276	msedge.exe	90
PID 4276 wrote to memory of 2648	4276	msedge.exe	93
PID 4276 wrote to memory of 2648	4276	msedge.exe	93
PID 4276 wrote to memory of 3384	4276	msedge.exe	94
PID 4276 wrote to memory of 3384	4276	msedge.exe	94
PID 4276 wrote to memory of 3384	4276	msedge.exe	94
PID 4276 wrote to memory of 2052	4276	msedge.exe	95
PID 4276 wrote to memory of 2052	4276	msedge.exe	95
PID 4276 wrote to memory of 2052	4276	msedge.exe	95
PID 4276 wrote to memory of 1432	4276	msedge.exe	96
PID 4276 wrote to memory of 1432	4276	msedge.exe	96
PID 4276 wrote to memory of 1432	4276	msedge.exe	96
PID 4276 wrote to memory of 3236	4276	msedge.exe	97
PID 4276 wrote to memory of 3236	4276	msedge.exe	97
PID 4276 wrote to memory of 3236	4276	msedge.exe	97
PID 4276 wrote to memory of 1320	4276	msedge.exe	103
PID 4276 wrote to memory of 3828	4276	msedge.exe	104
PID 4276 wrote to memory of 1320	4276	msedge.exe	103
PID 4276 wrote to memory of 3828	4276	msedge.exe	104
PID 4276 wrote to memory of 2880	4276	msedge.exe	106
PID 4276 wrote to memory of 4300	4276	msedge.exe	110
PID 4276 wrote to memory of 1036	4276	msedge.exe	111
PID 4276 wrote to memory of 3608	4276	msedge.exe	112
PID 4276 wrote to memory of 1816	4276	msedge.exe	119
PID 4276 wrote to memory of 1816	4276	msedge.exe	119
PID 4276 wrote to memory of 2664	4276	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffa4dd8c188,0x7ffa4dd8c194,0x7ffa4dd8c1a0
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,10403858100644209227,13321525245343350006,262144 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,11513429027191011837,5292408550748727243,524288 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2552,i,3871913110211173709,6869073265743694333,524288 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=3192 /prefetch:8
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,7496176777016617662,8879136701941069358,2097152 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,7382650388977054351,13896417690044686565,2097152 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,13548329667682612353,1178204682962701787,2097152 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=4132 /prefetch:1
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,2013876764102528350,3928249181186846062,2097152 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,5849353161154153916,222925068291429179,524288 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,5095245803049977749,5017230138989536834,524288 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,6217215033896987534,10525513469852476781,524288 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,6217215033896987534,10525513469852476781,524288 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,14227255287496454110,11371335337152798757,524288 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,11693812036124223332,18394862493818133673,524288 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:8
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,12853631930906239509,12879476947322190965,524288 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:8
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,16165104775229390089,2333800119896306304,524288 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5376,i,8106392250254808929,2604179800987663905,262144 --field-trial-handle=2132,i,13228230077586144022,7267878373753755658,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2664

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6a540517-82f6-4e4e-87a5-196992b3a284.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6a540517-82f6-4e4e-87a5-196992b3a284.tmp
Size 18KB
SHA256 b7718e6ac48bcb7a23c723ab78441b3df46d23970e3b72e6cfba56d8dadd22cc
MD5 9967a824f41d16dd68f97bf111874a47
SHA1 70ae68fce8d601e0ca43eac4f06cf566c0bf6dc7
SHA512 dedaef62ae52206f4187b9ca814aa168e658179e2712dca296905988a6b9a0680831da21b426d47ab8c6e54063c72701a5b2e82ae97ecaefed3d4bbcdc3dc697
SSDEEP 384:8ZcIhsNP9pJ5X/mBGYX5EWS4It18UndtgOIwZOyoouom:qhsBgGYuWXIt6UndXscul
TLSH
T111828D729CB85C7B5CE79185F58A36034FB8852BE7C8AB54D4ED5B1C01DB6A8030BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

767154a7-f500-46f2-ab9f-785df761ca19.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\767154a7-f500-46f2-ab9f-785df761ca19.tmp
Size 21KB
SHA256 11a2c9e9dbcf729a332b72b87de49ec8d11faa6468c6382e90f51234ac83923a
MD5 115c6a8329b86b65e1550ef0efb9cafb
SHA1 bb8bcef8a3cbdbc92b1e96737add5287bf5672e0
SHA512 0be7396ecd7b9f4e295c49335eb1fe52a5612338b9633a3791c54a4c91d8f25c6485f7e82c3c54ba17b49117455e41e91d10f05cc161f44a3a18b33ba2a61c6e
SSDEEP 384:xiFiZcInzsNx8TUNTUlIl6pJ5X/mBGYX5EWS4It18U3dtgOIwZOyoouom:YFQzYwgUBgGYuWXIt6U3dXscul
TLSH
T1A1A26C7388B8997FADF79A85F54A36038FB84127DA85EB90E6DD5A1C00DB1D8030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

1ce0ad14-0deb-4579-8129-43aa21046613.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1ce0ad14-0deb-4579-8129-43aa21046613.tmp
Size 10KB
SHA256 b041d5ed49b1feddb5185e46ec9abcfc5cd221bedc761e87082c7dcf9ed897f1
MD5 bb5629140b03e12a9b4b48cf8fdda35a
SHA1 1fb73fbc810b521946808d683bd132721f24440c
SHA512 3d17c4885fe937b6105b2d7f1ad80744d67de753652f5a82403987dfe2dc45f6766e158950a3a98b0dffa2b4b37b23463751264d62533cb60909180bfd58e00c
SSDEEP 192:sxZ/RKWp/fgsq8zIdpHYHW6+WNGYgr+0jIg5CJ:sxZ/np/fgs/s4HbGFU
TLSH
T1B422B7566E24A97B8CC7D20DBB55BF53E6F9503291911E48AAFCC61C05E7BCD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4521dbf8-a4ed-451c-9854-cb8d48361879.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4521dbf8-a4ed-451c-9854-cb8d48361879.tmp
Size 10KB
SHA256 87340e9f77322d8b0312338c5491657577dbd5799b74d7c3d48d6503acb806a4
MD5 eb8ff558c8bc50d1d7a124fd0457b6f0
SHA1 30b0638e590beea4078a8bea17ece06dfd7be93a
SHA512 5f0a3041b4f96d75499e70d9083e6352ae3c2cd73104cee917c93447a832e05d40edba88f898adff5b188c2c0f0aa900f393daa6028496b2780a29035df4cbb9
SSDEEP 192:sxZ/RKWp/fgsq8zIdpdYHW6+WNGYgt+0jIg5CJ:sxZ/np/fgs/s+HbGnU
TLSH
T12B22A7566E24A97B8CCBD20DBB55BF53E6F9503291911E48AAFCC61C05E7BCD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56119467-979e-4206-bfec-20466a8f7b4f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\56119467-979e-4206-bfec-20466a8f7b4f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8ad4eb31-347d-4917-ae8f-1daa66ccf694.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8ad4eb31-347d-4917-ae8f-1daa66ccf694.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 61eb182ab04f706f6381cc275289f185b6f7f7d69a2de6785389be23c85ce78d
MD5 aca87a3e2cbad2d0dc52a227c4b29b83
SHA1 2a276e88a44a0471298d50ceca706246ebbf6908
SHA512 d8eb90408ba80e272e2f7a164779282cd587c245ced6bcf2c8455119f90438084a762c40383ab303e095bbe22948efb27ce3b7ea29753039d3c8dbe2a1cb590d
TLSH
T1705180817AE4C084FFA45FB1D0C818AFBA32D58CA483BF130FA4E4B96B123348149394
MD5 SHA1 SHA512 TLSH

Submit Download

fed00a1f-d833-4764-9dd6-3df238a1567d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\fed00a1f-d833-4764-9dd6-3df238a1567d.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

06544fb8-454d-4bc0-9467-3f9dffb4b5ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\06544fb8-454d-4bc0-9467-3f9dffb4b5ff.tmp
Size 949B
SHA256 2b8dc2affbbd268d014c00c0a003743d3bc2b2eeb29b0e4f62a134c9dd9ee396
MD5 3ce850a8d417b4be836bb22e57955cd6
SHA1 0aabdff36f5d0326576ff03207d9bb1d711f2773
SHA512 70e440dc15cf1d8c245b0700c561983873ae2ebdc416e05d148d3c389fc160453b2e27fb1d608cc186ee0064648c749bfd750eb121da2a0ba333201f309ef954
TLSH
T18A11BDF3C3D585AE890516F05A28EE1BCE1C0606421C3C1AC9D4EF2B93F3475E00159B
MD5 SHA1 SHA512 TLSH

Submit Download

d27ae789-d7e2-47e6-a6fc-0d1305933424.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d27ae789-d7e2-47e6-a6fc-0d1305933424.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

ede012d5-a494-4e5a-bbff-06b26b212750.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ede012d5-a494-4e5a-bbff-06b26b212750.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 138c2eb5685cab813a18c4ef3b01abfbb212a91379862dc4745286d897c1db1c
MD5 82d9aefb3074843bcc2c6496731d8b97
SHA1 7072b47f8f44bb74bfb1eb77b22a11b3e68d2a6f
SHA512 e4df391b358bac99da8333a8e4a652ebe1365b480d2ddcef3c8d8d39c9644ce543496c6a3dd6ab3281042ba43d81d71095c51fd14892d3aa78006c5ce36b5832
SSDEEP 96:KoLWKQsSKeoKDicivYkKQQtRc9AbstKTMbKtPSKl8wWufkTPRv:glfi59
TLSH
T1FE915050326E02057CBD2A4A8465A65B024171F77068A97FFFBC52B24E2FE446DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bdeac93c-3ebb-4141-9d13-c4f80a6ca86a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bdeac93c-3ebb-4141-9d13-c4f80a6ca86a.tmp
Size 27KB
SHA256 650909008851885721bba7e5cf9ea8a655cc044cb3e983e59d9373fcc8601d4c
MD5 5beeea9e777aba1376932c4cd7364efd
SHA1 b34509fe5dd96298796d906018d53a2ce9dea2c6
SHA512 5fe60244f459e32a66dbee089b559687697b4b0eae3514ffbba22d161f415de539324c3f19cb6cc079a18041bcf795906858858b73945eadb30af55e2a4e0f38
SSDEEP 768:gdichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzfroRxW:gdichfPWvPZplu1jan+LKgzMbW
TLSH
T1B6C2EA3B640CCB7E4FC01E5DDD566F9A7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9210837-cc88-42aa-9094-109bdd0842cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d9210837-cc88-42aa-9094-109bdd0842cc.tmp
Size 9KB
SHA256 46fb2b91a172e90bd1ecaa147481631238e956c42266f331c01ed05047798101
MD5 8619b062b802ac538a07fff9e267e6a2
SHA1 c0514d721feb269cb51d202ca5679d256c23d293
SHA512 121a85a37697abedf6ead30cf5451be45284ee30543b2ab0eebbcc66907121b44164cbdf95411a31de561e6ede952cc63b9ccdf6d7058d0dcf890c829a99b4bf
SSDEEP 192:sxZ/RKWp/fgsB8zIdpdYHW6+WNGYgU+0jIgrJ:sxZ/np/fgs+s+HbG29
TLSH
T15D22A7526E34A97B8CC7D20DBB25BF13D6F9503291951E48AAFC861C04E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fb83b7cb-c174-4e8e-b9bc-a05cc1d60936.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fb83b7cb-c174-4e8e-b9bc-a05cc1d60936.tmp
Size 10KB
SHA256 2e491d36b3baa57eb4e2394e89722d5c3a0212d92c8dbaf3d5539ee9ecaeef19
MD5 fcdf58aeea9ecde38a7d948677e17389
SHA1 d29fa76c7641367e592286c393fff53bc8b05b42
SHA512 5c4c3fd383d8d22eafbb4c60b48669db0332378451fef5269180a67ad49c2c47b40e1e6b2d1251c2d97d69fffa3bfd5cb3f8bb65ccec82f57f980cf4c30de176
SSDEEP 192:sxZ/RKWp/fgsu8zIdpdYHW6+WNGYgU+0jIg5QJ:sxZ/np/fgsDs+HbG2W
TLSH
T16A22A5566E34A97B8CCBD20DBB55BF53E6F9503291911E48AAFC861C04E6BCD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

42e46d84-4d07-451b-9d19-f126c34c2b2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\42e46d84-4d07-451b-9d19-f126c34c2b2d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a78aa8b5-4685-4ced-b2b6-0d8a87bba726.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a78aa8b5-4685-4ced-b2b6-0d8a87bba726.tmp
Size 18KB
SHA256 7096ba25a0f26475a40ec756e3e83b631f837168efb75881c049494ac9dea1d2
MD5 541b4ccc6022fb0b310524edb5818a89
SHA1 e66e1c8fa30c15fc08098e16ae32e61cbb3bbc94
SHA512 b94a3bb076182aceb57198df83dd9822042e4a335e3ce1243aec2e94244cb6aea7973fc38dbc01b905e6110cc38a101fc1151e1fce39013bf3d166cfcf2313b9
SSDEEP 384:6ZcIhsNP6pJ5X/mBGYX5EWS4It18UndtgOIwZOyoouom:4hpBgGYuWXIt6UndXscul
TLSH
T14D828D7298B85C7B5CE79185F58A36038FB8852BE7C8AF54D4ED5B1C01DB6A8030BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6ae4a3b-ad35-4a5b-ae08-929716dea72c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c6ae4a3b-ad35-4a5b-ae08-929716dea72c.tmp
Size 8KB
SHA256 07d8b857ed744af01b58719bc2f7aee12a6641dcb01e6a561a2df8a4af05ab84
MD5 8a85ac0be38f6ae734142535ade6ace7
SHA1 c04f3a3f79f9e84cdb3dfb9218ce47a9c8f3d5e0
SHA512 3262ed97e919b70c687c89141c849d67a8fd8298c73bdb15163a9d60b98113c49c92f89c762def1eff00a035ceb6ac02f86204d15a47a75d65828d9ba3d62738
SSDEEP 192:LJONC6Dph1qQmiUy3fywGYX59eznCS3oIt18UHkIIHq5UU6:lONC612aywGYX5EWS4It18UwdU6
TLSH
T1F5120B35E8B8AC6B5DD35991F48B35138EA8522BEB887F54D5EC1A1C01DF69C130B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf63589f-a4ca-456e-b1f4-864f2cd1584f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cf63589f-a4ca-456e-b1f4-864f2cd1584f.tmp
Size 8KB
SHA256 e50c7ac132992b0ba67790c51f8822e0e4f29d5286a5d5acae0e02445ef0dbad
MD5 0cb3f30de8f7b6d564d244121c1379c3
SHA1 d5928f51c16377a58f649df45fa95d989ca1ebce
SHA512 aafe0f44a17a963f9f772aa880a6a37b80c49dc203de8c33bc74c43d7c0971d3c4a6f97f8bcdb0611544c1e680808148922f9c2390463e5646addc39d4698316
SSDEEP 192:LJONg6DphmqQmiUyBfq8wGYX59eznCS3oInkk7WLqbU6:lONg619qRwGYX5EWS4IP8qbU6
TLSH
T12E02FB39E87C7C7B4EE36E45F5873B135F98112BAA942F84D6E81A1C00D769C1306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b586e860-ba2a-45d5-8b1b-6e178ff6052f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b586e860-ba2a-45d5-8b1b-6e178ff6052f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cdb86ee7842575c3be4560cc477fbbc31eecd8f258240cc8cb321b8b35a38f42
MD5 d0908279630aabe58f5a2e93d1225b81
SHA1 df3a863fbdf1a03e45493adc2d3b79ec3f43ed22
SHA512 6b3400aef1aa021b590e7e25032c856c5489f4e2e98582b073945f40c1c31b009e3d1b71edb0be902c57ae78567ccb1ed4ce4336291c2b1875b873dda4bbc984
TLSH
T105412758AAFA1148B3B76E56ABF6A46E447B7D772F06D09E10110D4F0A27B00C871B3B
MD5 SHA1 SHA512 TLSH

Submit Download