e3c8a6093358521d4512d68945e16338755e687619196e63948d46c9267537b6

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/10/2026, 15:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 19.4MB
Sample261009-sdchxsh19x
SHA256 e3c8a6093358521d4512d68945e16338755e687619196e63948d46c9267537b6
MD5 f18ed9a25df7c7951cb7f936ca9feeea
SHA1 3ba65e050dbc1e365c6397d41edebeb8a4322794
SHA512 8eccd9eceb7032504437cc95e01e5e040872db5951ed1f7f11f86c26f244c2ff2516d792b32ed3941a2a3170048725112005877bd76637a9d1b3fec548cc19f8
SSDEEP 49152:52SFkMZThUZLQTYp281vCmh3r8xsJQfiFTuoYQdVi2Hxj37D4h:v
TLSH
T17127B46BBB49037316F242626B47A5CAF31EA13F375A1654309CC1182B7BD2483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4300	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{9AB23B8C-8D33-4C7B-BBD2-F8DE272B7923}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3976	msedge.exe
3976	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1256 wrote to memory of 1120	1256	msedge.exe	89
PID 1256 wrote to memory of 4300	1256	msedge.exe	90
PID 1256 wrote to memory of 3520	1256	msedge.exe	91
PID 1256 wrote to memory of 3520	1256	msedge.exe	91
PID 1256 wrote to memory of 3520	1256	msedge.exe	91
PID 1256 wrote to memory of 3248	1256	msedge.exe	92
PID 1256 wrote to memory of 3248	1256	msedge.exe	92
PID 1256 wrote to memory of 1576	1256	msedge.exe	93
PID 1256 wrote to memory of 1576	1256	msedge.exe	93
PID 1256 wrote to memory of 1576	1256	msedge.exe	93
PID 1256 wrote to memory of 400	1256	msedge.exe	94
PID 1256 wrote to memory of 400	1256	msedge.exe	94
PID 1256 wrote to memory of 400	1256	msedge.exe	94
PID 1256 wrote to memory of 2008	1256	msedge.exe	96
PID 1256 wrote to memory of 4704	1256	msedge.exe	97
PID 1256 wrote to memory of 2008	1256	msedge.exe	96
PID 1256 wrote to memory of 2008	1256	msedge.exe	96
PID 1256 wrote to memory of 4704	1256	msedge.exe	97
PID 1256 wrote to memory of 4704	1256	msedge.exe	97
PID 1256 wrote to memory of 4648	1256	msedge.exe	102
PID 1256 wrote to memory of 3096	1256	msedge.exe	103
PID 1256 wrote to memory of 4648	1256	msedge.exe	102
PID 1256 wrote to memory of 3096	1256	msedge.exe	103
PID 1256 wrote to memory of 3716	1256	msedge.exe	106
PID 1256 wrote to memory of 3904	1256	msedge.exe	116
PID 1256 wrote to memory of 3080	1256	msedge.exe	117
PID 1256 wrote to memory of 4928	1256	msedge.exe	118
PID 1256 wrote to memory of 3904	1256	msedge.exe	119
PID 1256 wrote to memory of 3904	1256	msedge.exe	119
PID 1256 wrote to memory of 3976	1256	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7fff6228c188,0x7fff6228c194,0x7fff6228c1a0
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,15684708028716376829,10515124128888821921,524288 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,9678986440280498358,5776785234248249223,262144 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,18324707254184404772,1204272875476351453,524288 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,7338711403705008179,3439636863139527168,2097152 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,4875149831713926471,3164085631936758548,2097152 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,46476710987448090,8395608559206951820,2097152 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,1560362026220736720,8169806495492074726,2097152 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,13434982958491005966,2822878988492981009,524288 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,11244239446400345946,3513993121821763703,524288 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,15442118214755194354,12501143206653789823,524288 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,15442118214755194354,12501143206653789823,524288 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,2504640240886046065,8852618325532026567,524288 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,1479817014201096136,14113003064006002648,524288 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,15079721736777264302,7130955534242986243,524288 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,12204399153731387086,938742292639902100,524288 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:8
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5480,i,16053563409999661479,4827904402229151526,262144 --field-trial-handle=2144,i,8684833163850842737,7930354912450714035,262144 --variations-seed-version --mojo-platform-channel-handle=768 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3976

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

36a32788-3ce0-4262-9bb8-547dbe64233a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\36a32788-3ce0-4262-9bb8-547dbe64233a.tmp
Size 8KB
SHA256 06fac3184a32f2c576416a0a5205cbd7a0fb2a99a2bbebf05a9c81274c0a63ed
MD5 89414af3b8c3fb9e58e98403b2b8e53c
SHA1 2bc1ee8d10f3659379b7ecdef36abf4e217036fe
SHA512 2e87b15637e528f32b8022795296dce854fa595d8640c27234cf8bd04f3ab6d3a4d404cdb699878473de6f8b81e7f9536763fb8cb44e6a869c54de2ce670bde7
SSDEEP 192:SONO6iDCQmiUy7XHq5u88PcnZcSq6YCU6:SONO6/eHq5u8ic2AU6
TLSH
T1240209396C787CBBADE2AD15B5873B179FA4112FE6952F84D9E8162C01E729C1303923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f628065-49f0-478e-8499-b16f6c34da31.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4f628065-49f0-478e-8499-b16f6c34da31.tmp
Size 18KB
SHA256 3081934cf6e598e6d58a933b50aea82de6f7f294f80978c569f98b63f156e864
MD5 aa6e213ed70c409198d7adf91f3e1164
SHA1 fa844f94608a0dab08a7ef4ee97e51acf32d5dd7
SHA512 e9d04267667daf7f6441de7e6efe442016fd290505ecb855475988b4fb5cf34345e07c2ff168c0f84e6cb38341f5919c6c864c17de9cd8a2fe816035acf7208d
SSDEEP 192:ubm+xasuheOwQxMGsNRJQp6aQj36jDPvnTQmiU1Aph8t4p5u88PcnZmHGaqlAAq0:3ZcIhsNRJHzuPFiYip5u8icIHGaxcIfS
TLSH
T1F8829E712C34A937ADE79556F18B3613DEB8912BE389AF88D4DD970D01EF1E81307912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a7f68dd-37cf-4a30-b2cc-c44482448fd2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5a7f68dd-37cf-4a30-b2cc-c44482448fd2.tmp
Size 21KB
SHA256 86b4c3a3595bb69e89289935e67f0e655dbcd95cc99d3e270a453993d4477fd6
MD5 0baa24844f3bbbc295f3a5fb4058a1d9
SHA1 e45df55925f025d5ab6523775fddc5d62c48e558
SHA512 d931d6479eca7dd73bfdbd962af3ec1c3ea11bf7f1b8d32303ac8028082b176d838a8815f055d2d1ba686a3013117dfc9f8f82fd5eacdec38e7c2ebc8a77b460
SSDEEP 384:9iFiZcIbzsNj8TUNTUlIlJHzuPFiYip5u8icIHGaIcIfS:0FQP+wgHmAkcmIcIfS
TLSH
T19FA27C331C64D93BBEEA9E45F58B3603CEB4416BD689FB98E6CD960D01AB1D81307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8023cdf9-ed49-4265-9663-034f5e874d03.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8023cdf9-ed49-4265-9663-034f5e874d03.tmp
Size 8KB
SHA256 fa46df48eae2070bb535e8f46fcbfb156cc1de2e3fdb44ca527e2623007426a8
MD5 703376323b1b99ad028ad1e1bbbb5d06
SHA1 6d907da116400d25f73eac9e607cac1274d1e052
SHA512 8da189fb0cdb9117e5cd9499d25c7dc424a145563b14ccbecebc26e4a40932c134504dead5c27508760938148caab5f8128956d7786328b20aea2c113111f1ed
SSDEEP 192:SONU6iD1QmiUy0paX+q5u88PcnZmHGaquZAqiU6:SONU6S/k+q5u8icIHGaNcU6
TLSH
T172121A3668B8AC6B6DE2A961F08736139EA4412BE789BFC4D5DD261C06EF19C1307913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

802ff385-b5af-469e-b10c-32edcec33b67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\802ff385-b5af-469e-b10c-32edcec33b67.tmp
Size 105KB
SHA256 c43cdac343629dd02c753c69bd2d3d68f6a680941595b5b24e7a4c0e9af0a92f
MD5 512d6bb5eb68161105e73a7d201bcd46
SHA1 3f8132f698803f82d145294d3019bcea70f3c08d
SHA512 e38ff3ffe44f85efe82044549aaabda9821a1dcd1cc60d7c374e5a927da058dab823cdcc8869ae493cfe1f07dceeb7c09d2d0fc8d0e02bd13f3b122b9b61425d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7T:fwUQC5VwBIiElEd2K57P7T
TLSH
T191B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4953eb47ddf8fed591c7d8926a102a58328776c2f8bcb0dcc6c2f6f790020aa9
MD5 4dce79f6f910909bafe5b8817320847d
SHA1 e10678ff1c26e3e9d2f3bf3bb824dc7adf3c47e4
SHA512 9329ecf2bfca29939d71c91b740a18344d0c73d558771b355af8d5bafc3d053fd9c23a07e1db9b22bfa7909d7bb78bb5272f713dbfc950acdbf066383642330d
TLSH
T146D02BC890D43958E41630351026850233CCDD54F003234780450591C4412C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2b6f38f22081ddaa1111b84705bb0452e935cba70ffda2b2886601f1d8df6360
MD5 ec02b779d41e6c7bfde9a979b0a24d5d
SHA1 d7bfaab5e399fd543bd91b28be91cb05e1603c12
SHA512 7039abea8da570fee0fd1cebc7e8feacc30cdd16fd0348ba5146c309f1696c541bd99a85a480ad3c227df6df586718bd26cf483ae0af65010caac2db1bde30aa
TLSH
T156D02BC8D0D43558E01630351027850233CCDD54F003224680450591C4402C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

0a8d81ba-6938-4af0-be2b-ccfde23f2a37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a8d81ba-6938-4af0-be2b-ccfde23f2a37.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3708cfa9-26d1-47dd-a52b-54f91e2b44ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3708cfa9-26d1-47dd-a52b-54f91e2b44ec.tmp
Size 27KB
SHA256 4e8ce9432cfb8dfd8b67e2ff0b6d406d9e3f10ab4dd9b56d9978c10d5d5b819c
MD5 8ac9824c7aaa8613363700419f269ac8
SHA1 d92ccac4d935e8e16c86894895ece9cbbd47b847
SHA512 20f9a4ddbaa1884101fc30753bf43cd92b931b62005dbfb96574ce667527b093c077fc53814335ef7e1a9cc099f63ee86e2ef04d9bd9df3c1b1dcf8fdbbb72bb
SSDEEP 768:enyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3JroqZ6Lr:enyQRbrWvvlpZu1jaXKLf33iqZ6Lr
TLSH
T1FDC2F93B640CCB7E4FC01E9DDC6A6F976EA802C766588D4447FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5581ebf1-a915-4576-a684-aa985fdda281.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5581ebf1-a915-4576-a684-aa985fdda281.tmp
Size 9KB
SHA256 3369168872ebc3849a0e48367cae1f6782358f0aacd046f7dc029499355ce6c9
MD5 c70b23e9c56e7a96f7246ac3a6c3cc44
SHA1 c91a81cd0e902dad510fc558ce1e1be787381770
SHA512 16fa5ad636ba43d32f001529e632acdbf77704743f61fb4fe7728863aef0ef8a0433fe8575221c8f2969772201928962e0e9a9e4444d38cc9cdab9c3b5e7d61f
SSDEEP 192:sxZgRkWc/f2s71dzIdpdbHW6+WNGYaQR6Ig5aJ:sxZgpc/f2s71dslHbGxQ
TLSH
T1BE22D7156E28A97B8CCBD20DFB55BF53E6F9503261951E88BAFC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8fa114ee-c613-404b-90d9-24d828ae1220.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8fa114ee-c613-404b-90d9-24d828ae1220.tmp
Size 10KB
SHA256 4c4f215176e25be991631f5c61717bfa9d1c784c4e4d553c6e21508bf36ea268
MD5 f0f7f9bd2a611f2e0a596fa79ef3f05f
SHA1 df61b1121384e36d4b85e15342a1b74e5fc88eab
SHA512 360ffb5e3dde30411cb220d11d9d46cf0b7869bceaf9911f55c23c90ed2794788b6a07733aa2d2fa59ea7bac90227bc5b152f090d825c482f1b46ac152f2bda3
SSDEEP 192:sxZgRkWc/f2se1dzIdpdbHW6+WNGYagR6Ig5wJ:sxZgpc/f2se1dslHbGhq
TLSH
T16722E8516E28A97B8CCBD20DFB55BF53E6F9507261911E88BAFC861C05E76CD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

957a1d02-a1db-4fd5-922c-c0a896417b62.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\957a1d02-a1db-4fd5-922c-c0a896417b62.tmp
Size 9KB
SHA256 cd57a59f9a2869b23a4eb7f32228f303c3ec5556668455010920ebe9bcc1cf6e
MD5 65f3c58ad11339ea031e86866caefb99
SHA1 1fac8335af4e5bdd731bde3c566cde76835a35f6
SHA512 bc82a737039e490d7bde3cf66f7a7f7ddc062278bc0bc72807d77cc5a6423a5e6a56d7655ca2042ce181ee28c02d0fd2e0abc7209466fa0a545ed49b063a037e
SSDEEP 192:sxZgRkWc/f2sl1dzIdpdbHW6+WNGYaQR6IgrJ:sxZgpc/f2sl1dslHbGx9
TLSH
T17C22D7116E28A57B8CCBD20DBB65BF53E6F9503261951E88FAFC861C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 18736bd2ac3ebdc50da22017d75cd0ea8624c459b8a17c5cb08c48db99c6781d
MD5 a47b6126c60706fbbed67386eb192c64
SHA1 96ee000d064533add34273ee9ee1f1ec7bfdb3f3
SHA512 2cae8b487c94716fd823b145b960346af5b73ae988d34485f6642f27075b9e9710f1ecf08950317037169aa43d682d8ebd3bb4da58082394533c860a0a589d5e
TLSH
T1F3614BF475934755FBEC40FB41E115AB3B3B499C548B6E310CDED4784A4AB16B35AC40
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a6c76151ddc2ebdb75e6878b433441bbe1fabd9d82e59faa182cfe087cda548e
MD5 aaa19dac0bc11562b352f50cf83fd300
SHA1 8a4b440cdf8ceeebf1e6a4cb48e8b748811a9d93
SHA512 1510e50e3b8f823294e37a97625d0092340398d82579f2b2c736c9d2c1c17971891f8b24ea5c412fa0ceab244d8d9e084f25066ba165e6fa225ece021d349a6b
TLSH
T1EA614BF479930754FBEC40F781E115AB3B3B499C548B6E320CDED4784A4AB1AB35AD40
MD5 SHA1 SHA512 TLSH

Submit Download

52f81036-81eb-4090-85e8-3a4744793f44.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\52f81036-81eb-4090-85e8-3a4744793f44.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

9393c063-a2f5-4e8c-8ed4-c201ce154c54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9393c063-a2f5-4e8c-8ed4-c201ce154c54.tmp
Size 949B
SHA256 51e7fcae7b3d94fbb369414050b9eeb71405d3666bad71c07aab2f15481ad505
MD5 c14e8b5a25faf3e933df1a89eabe207f
SHA1 b53cf50e4f1d74aff3a2afa7cf5c317b7a53dc59
SHA512 2b9a54cabea3bec47d286ee756b7a359531e1e5863560be2b55a649eabd15b0d724ba5d16c7192d06a56085986f666861c59c69c36c8fdf5fb4854182a5b93a8
TLSH
T110115BF3C3D5956E890116F05A24AE2BDE1D060542187C1A85D4EF2797F3465D10259B
MD5 SHA1 SHA512 TLSH

Submit Download

bcc2b355-da60-49c1-90af-cee2bff73246.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bcc2b355-da60-49c1-90af-cee2bff73246.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

f224dc2d-50e0-4318-a98f-da7be0ecce9a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f224dc2d-50e0-4318-a98f-da7be0ecce9a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7ba9cfaa04ef796a488a608d113679a9567108308187035fc6eb00e059d26d86
MD5 0a5e450bc39d02b9aa68132eb82a80e0
SHA1 e19b95e123cd8e6f86755b0e87b1c7583c49d2fd
SHA512 fc5950a57be21f44ba7c5a0cff73bf7d5b9e8509e55de4bd1b744555d6b6f7066df84797fb83a4ebf49dee2168f56f5f2335c33d19d40b8cc86ae9a97fdec317
SSDEEP 48:K0gvmqwaOPbmdGISCPK9e1kPxYfYlW+EyLKV4kKIYJbUzEIScJK9A16JxyZYLs4P:KAHGKIQm+xOK601kwKxKCW
TLSH
T1E59133023677428079BD6A4C81B58E1F81A276B37115ED2F7FA850529F6FD048DFD8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b72fe884-c0a4-4878-8fbf-7be9484e5d2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b72fe884-c0a4-4878-8fbf-7be9484e5d2d.tmp
Size 10KB
SHA256 b49782e02846e55c4db1e05892a01a0cc7b4f5019edbb2e72e847b38b4b12871
MD5 486e25ca5e946fdf12e10918cfc717a0
SHA1 f098ebac0b08f5934cec4284b9749b4ce83087dd
SHA512 0c87a2d8e61806267615ea3eda2c244bc92e0578f97646557f1997bd6ed347eaef6976df19370b3a29d005a3b6567fbe3a5be8587262d02cab43d8012749dcbe
SSDEEP 192:sxZgRkWc/f2se1dzIdpHbHW6+WNGYaNR6Ig5wJ:sxZgpc/f2se1ds7HbGuq
TLSH
T15922F9516E28A97B8CCBD20DFB56BF53E6F9507261911E88BAFC861C05E7ACD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8a24f6d-faf9-4078-ac54-2fcadf76471d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8a24f6d-faf9-4078-ac54-2fcadf76471d.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

4d82b01a-134a-481d-b309-e507bf614a21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4d82b01a-134a-481d-b309-e507bf614a21.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

afb4f78b-9775-49ff-acf0-db827ebf7ccd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\afb4f78b-9775-49ff-acf0-db827ebf7ccd.tmp
Size 18KB
SHA256 832eb3e0ccc08414e7873427637bfe53de0cca282db30d4fc1f7264c41ceb338
MD5 171dc06dff8f074c99334f3c0b5a0bc4
SHA1 693421ec4bf03cd0bad34125889fa572b37148d8
SHA512 de0be0b832762f938b9bebac973cd1924f88c06eac801e91dbc82f17d6a0c1b8a1c2117ae4358eb29de6d0319a61a7f4d0e43096b03086d8fc7293dad4257766
SSDEEP 192:uWm+xasuheOwQxMGsNRAQp6aQj36jDPvnTQmiU1Aph8t4p5u88PcnZmHGaqlAAq0:iZcIhsNRAHzuPFiYip5u8icIHGaxcIfS
TLSH
T17A828E322C74A937ADE69556F08B36139EB8916BE389AF88D4DD970D01EF1E41307912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e908cfab-cbb1-4ce4-9249-06b9ec5931da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e908cfab-cbb1-4ce4-9249-06b9ec5931da.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 94e1aac78fd3455fb673c57d7d867ac8ac0b7873fb1e202fb07717cb5def7094
MD5 dd8516abf50502de9b0018e46c625914
SHA1 7cdeb47796b7722bbd8d81f3f707bd7a544e1d42
SHA512 391cd0adb21e43ef2d463498bf0ff4332079bb7f9a6802c1b5f143cc707c4999f1163432dc464351ef85e1b21a18aabbd9b14d0ad2056d58587bd90cacf1aae5
TLSH
T124412959AAEE1158B3B77E1AAFF7A82D487AB9772E06905D00110D4F0A67A00C871B37
MD5 SHA1 SHA512 TLSH

Submit Download