fc2a256467fb4d4ff72be6c423e5961e98b418554deeec296aded0e757b9a585

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/10/2026, 18:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 5.1MB
Sample261009-w54chade72
SHA256 fc2a256467fb4d4ff72be6c423e5961e98b418554deeec296aded0e757b9a585
MD5 6b84319ee8a0a0af690273d3d2dcbaf4
SHA1 857ca353e0582d100dcbc6cb6761bb4430d0cb90
SHA512 26f9842bfdb429ef132cc1a930da9187071a339927eda402e8d54b5eb9e03067612cdadc3a2dad3d0977f8e6af18c05eab6ac91720221c6a0104f96638f85a8a
SSDEEP 24576:yd97B+mnLiLsrDy2VrErjKCqzkU98wwg3QeXuh:0P+mLAqHBCuRoeS
TLSH
T1D046D66BBB49037316F282626B4AA4CAF31E903F375A1514345CD15C2B7BA2483FF69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4544	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{2CE4C19A-4164-48AE-8A0A-1EAA88B0EB1D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4944	msedge.exe
4944	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2124 wrote to memory of 3784	2124	msedge.exe	87
PID 2124 wrote to memory of 4544	2124	msedge.exe	88
PID 2124 wrote to memory of 3368	2124	msedge.exe	89
PID 2124 wrote to memory of 3368	2124	msedge.exe	89
PID 2124 wrote to memory of 3368	2124	msedge.exe	89
PID 2124 wrote to memory of 2372	2124	msedge.exe	90
PID 2124 wrote to memory of 2372	2124	msedge.exe	90
PID 2124 wrote to memory of 652	2124	msedge.exe	92
PID 2124 wrote to memory of 652	2124	msedge.exe	92
PID 2124 wrote to memory of 2572	2124	msedge.exe	93
PID 2124 wrote to memory of 652	2124	msedge.exe	92
PID 2124 wrote to memory of 2572	2124	msedge.exe	93
PID 2124 wrote to memory of 2572	2124	msedge.exe	93
PID 2124 wrote to memory of 2416	2124	msedge.exe	94
PID 2124 wrote to memory of 2416	2124	msedge.exe	94
PID 2124 wrote to memory of 2416	2124	msedge.exe	94
PID 2124 wrote to memory of 3792	2124	msedge.exe	95
PID 2124 wrote to memory of 3792	2124	msedge.exe	95
PID 2124 wrote to memory of 3792	2124	msedge.exe	95
PID 2124 wrote to memory of 908	2124	msedge.exe	102
PID 2124 wrote to memory of 3364	2124	msedge.exe	103
PID 2124 wrote to memory of 908	2124	msedge.exe	102
PID 2124 wrote to memory of 3364	2124	msedge.exe	103
PID 2124 wrote to memory of 2468	2124	msedge.exe	105
PID 2124 wrote to memory of 2400	2124	msedge.exe	111
PID 2124 wrote to memory of 1284	2124	msedge.exe	112
PID 2124 wrote to memory of 3736	2124	msedge.exe	113
PID 2124 wrote to memory of 3704	2124	msedge.exe	121
PID 2124 wrote to memory of 3704	2124	msedge.exe	121
PID 2124 wrote to memory of 1648	2124	msedge.exe	123
PID 2124 wrote to memory of 1648	2124	msedge.exe	123
PID 2124 wrote to memory of 4944	2124	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff84dcec188,0x7ff84dcec194,0x7ff84dcec1a0
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,8868203765962136099,8003168650445686769,524288 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,3488906437479349685,16500859900541106884,262144 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2560,i,10440055366448907029,9617342977324780464,524288 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,591118463870700567,10122487539684070846,2097152 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,4871414911954027059,15728148308998544439,2097152 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,14367653173184634857,12922074349422600386,2097152 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,2443361486124891664,3807019221071114819,2097152 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=3408 /prefetch:2
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4636,i,8381298785307287208,7100880482970175617,524288 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4640,i,13829578733727005191,17001414686666865107,524288 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,18168126324830810320,10870915534285949382,524288 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,18168126324830810320,10870915534285949382,524288 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,17771272414931373425,5820266568649873894,524288 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:8
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4168,i,1151299304882499388,17967735740630543827,524288 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:8
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3464,i,7045111479860393905,7686196166713494429,524288 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,3044962701792464954,14532927854556633490,524288 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,13969343528909016504,8382659365654973970,524288 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6316,i,4322120647010912648,12065392471208794935,262144 --field-trial-handle=2124,i,18326154106480186875,10826291934592638038,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4944

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2056

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

996bc1ee-6896-4d1e-9de6-397f061f15c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\996bc1ee-6896-4d1e-9de6-397f061f15c7.tmp
Size 8KB
SHA256 a63e90c2980b49f682db391a61ec8be71be3373c644dd79796a590f3c91c4e17
MD5 c72bb9161f9b66a2832a7495783792bf
SHA1 73af07f5be7236ff8f2e5416cd2e2950be84a3ea
SHA512 68d9fd7b49120db4cbddd42d4d9e207dd6ff8db25b677fe0c5de2e8db642e24bcbfce16de08b44d71f6f0edf1b7d886f66dc5dbde0b8866865f8dad074c4cf90
SSDEEP 96:KqONkCQsjpfbUmjH5ih/cIPURHl8h4otop5/aD3BKP4v+Y1xf//ojdDxv3ywlBCF:BONy6JUm0QmiUyUxso//2ywlBCHhNU6
TLSH
T1AF020A39BC687C7B9EF3AE45B48777235FA4106BA9912F84DAD81E1D01D725C1303C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

1b2380aa-9a17-4a8d-ba69-638bbdf64460.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1b2380aa-9a17-4a8d-ba69-638bbdf64460.tmp
Size 10KB
SHA256 e4f4a23368adc5bdf97828ac424091c878a1e143051e366075edc5fff7b9778e
MD5 f5490245de5b92fd4ac2b200c63e7993
SHA1 bbf44ba883e066be0cc85bed6ded04cf424df8b8
SHA512 5703072c174d63e27e4432264fdad12ae4c3cea86104f33b1e035de9621a4ff629398429b2265f71decb505ad38275dc4e5b67afb1c6dff73665bc6cb47de771
SSDEEP 192:sxZSRcWd/fNsSKIdpd2HW6+WNGY36a4HIg5GJ:sxZS5d/fNsSDUHbGXLU
TLSH
T1B322C8116E38A97B8CCBD20DBA65BF53D6F9503261D51E58A6FCC61C05E76CD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3dcfb5b7-1c71-48e5-b31d-11b31dd5b005.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3dcfb5b7-1c71-48e5-b31d-11b31dd5b005.tmp
Size 10KB
SHA256 8e96fff47ad9f1e0f6058bd8cb0670e3b9018002aba398f3b6aa548126baf73d
MD5 4eb9551fa0e45b5870a4c0d91f33dfaf
SHA1 abb3dfcdd438c9308d72631ec6954ca50fae8ff8
SHA512 e6c83fa5341f72ce175121bf3cf5e02cce99da10a894bda875df67f62b6d9354842b2af59e859637c17329f4666c5525664ffb5650d086d441b03fde59cb86a1
SSDEEP 192:sxZSRcWd/fNszKIdpd2HW6+WNGY36M4HIg5sJ:sxZS5d/fNszDUHbGXl+
TLSH
T14522D9116E28A97B8CC7D20DBA65BF53E6F9503260D51E58A6FCC61C06E76CD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7bc0839d-88f6-42ea-9b9c-7465bbdb7060.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7bc0839d-88f6-42ea-9b9c-7465bbdb7060.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

8b006f85-fcd7-4fb5-bc06-77d1a81695f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8b006f85-fcd7-4fb5-bc06-77d1a81695f1.tmp
Size 27KB
SHA256 3001b474a25655e4287b38860bc70e41da31ead0b316f61ddb2e32e20669a689
MD5 551daa76007782b55e71c6eb2d4fc571
SHA1 7311c39db1e33d1040fe7dfc988ad9b29be24c1b
SHA512 09a154bfbb0cc0d9ba7db1a2c0a668624e8a1df87ef3c577dd871d30b3b079ac78319efd32e9cf1cd9ba0df46e6eeebfbfd914b7a5f15f16d4ac090191fef8ad
SSDEEP 768:xdKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/WrowH:xdKlm7QWvUYe0u1ja8/L/E/twH
TLSH
T1EEC20A3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA91274DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92b0cae0-ff29-4805-a42e-3cc72556790b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\92b0cae0-ff29-4805-a42e-3cc72556790b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98306b77-e0cf-4a39-be51-00f1cf9def9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\98306b77-e0cf-4a39-be51-00f1cf9def9d.tmp
Size 10KB
SHA256 048a3189258572d50eaba0ce7de34ff6a1fbc82e2109b1dd92cc42eb51a19d3d
MD5 b54fbbfdb8d917c46a91c91351ee3672
SHA1 c50c638b280128644affe1a09032a46eae511be8
SHA512 2cf76553cf2c0b87c555c724fa28347a9f923ab7c36f9cd1a4707a51c3ff2d2ef2fe63e45d2c256e2dc5377e959df719fefc71fdd1a3958cdaef1ff43bd51400
SSDEEP 192:sxZSRcWd/fNszKIdpH2HW6+WNGY36u8HIg5sJ:sxZS5d/fNszDWHbGX7+
TLSH
T19522D9116E38A97B8CD7D20DBA65BF53D6F9503260D51E48A6FCC61C06E76CD220B81F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 06669676d03b37a02ef135dc297e10737ee00af6a81b48579a60231e351adb8f
MD5 8a667cc52faa37cd302dddead141ede4
SHA1 eeafa952dbbade09042fb1f71ab883cca67341bb
SHA512 22556c2d880ef5578ccc0fb75a01f9d67071d07f541d477c6d18f52233a21010bfc0573a41c3b89d5a0a71f0f5a130760e0a084d9d61c362cff85c078bf32d29
TLSH
T1B0E07DEC08CCC22EA208E487217CE70CC3C17A9AE3C8EE0F1B08CD84B406451B6E27A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 67a04ce73d23a703f375bd4128b55087dcc67498cc6f1a00b210a309dbb8378a
MD5 b5ebd6ff65b67fa2c5b8ab3548223952
SHA1 d760937049ad61c3051878c1fa41b81737e1d903
SHA512 e522a2f57d550ec799b869d9a3cf7f32c9ec4f83ee73889c724090865068d34ba65967326334bcb4abbcc3ed6a44fc526cf5f4cbca9230bbf1492c6218ad70ff
TLSH
T15D5153C11AA447D1FBE890F449C511873A3D6DB15A432E323AEBDEB6E38A759712C484
MD5 SHA1 SHA512 TLSH

Submit Download

f68a4405-cf9b-48bb-9c71-aaa64fb7e14a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f68a4405-cf9b-48bb-9c71-aaa64fb7e14a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3ed571ef-4720-4e8c-b60c-57389b419c03.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3ed571ef-4720-4e8c-b60c-57389b419c03.tmp
Size 949B
SHA256 f2e3d301d6fd9c03c9a3601435d877c1f05faba237fd9bfa0afb7be69aabab72
MD5 24077ecce8d3acc6a3beda6bed61bba4
SHA1 89488134419f8011ff36530316e0d9f858f6f428
SHA512 cb053c808687d49e33870877af4425f891c6ae813bd8c8fef5f039498e16757bacdc89f21abf89a15583a9f20ca13a84a880a2aa476ba4641faba59edc9025ae
TLSH
T15D117AF3C3D5866E8D1116F05A24AE2BDE2D0606921C7C1989D8FF2B93E34B5E10269F
MD5 SHA1 SHA512 TLSH

Submit Download

c4f5966c-579b-4fa7-bec8-f8d2e4f96321.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c4f5966c-579b-4fa7-bec8-f8d2e4f96321.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

d726c29d-3422-414d-a944-fd4a9ad16f05.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d726c29d-3422-414d-a944-fd4a9ad16f05.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 85fcedc574e9e38e882960f19f6c9aea475d855b03da97615d19e203f04b7837
MD5 03b48a1d239b0b3417e565d77a90066c
SHA1 872027cb58b9850e33caa57f63dbff19750c7725
SHA512 243cd5e763ba864a104e586cb8b038c003fe98b43411a11fa0d434e539dc3fedeacfa926081a72803f75d37bc6d78505ec0e7037b0d6728fc733105f94a1de74
SSDEEP 48:K0BQ9xbfj8bP6nISJ8K9p1D8xhsYarhhyL6lI064I5bkjUISs5K9Q1K5xipYb88C:KUuQKTS2OJWKK05PuKYQOYvyzflhD
TLSH
T14E91561231B71241397F664D42749A1F425131B73109E92BBBFC44A2CEEEE149CFE9CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7a57cac-21ac-40c0-a3c0-04bc69f177c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e7a57cac-21ac-40c0-a3c0-04bc69f177c1.tmp
Size 9KB
SHA256 aa3acfc3b020c12b2a2526cb3848b89c204a6a997a03b5bc18696922573d07b1
MD5 654cdd4459555a68b128341437d672a6
SHA1 1d962d5d409af9cddcff536af18b84563f7cb31c
SHA512 4a865bfc55f0f7e78e62c45d6b7d635ff3682837af732f329e341d9ebf63742bf7d24a3822b063f79f5168a1dd0b8c96a418e8ed4497793ff91ccab1ee7ebf71
SSDEEP 192:sxZSRcWd/fNsDKIdpd2HW6+WNGY36a4HIgrJ:sxZS5d/fNsDDUHbGXL9
TLSH
T1DF22C7116E28A97B8CC7D20DBA25BF53D6F9503261D51E58A6FCC61C05E76CD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d1e4e086-1637-4ccb-9395-a74ae138f191.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d1e4e086-1637-4ccb-9395-a74ae138f191.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a08905d6-b28c-4c2f-8382-508fcda67c76.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a08905d6-b28c-4c2f-8382-508fcda67c76.tmp
Size 18KB
SHA256 8f6257556f6bb30d03bbde7e0b62097f47f0742835bf6ef008298730dcd2ac65
MD5 146f6d62a62403ac291ad17a84b2df14
SHA1 7610c7dc6c1831e8176314307a5635bb8f7afb57
SHA512 1522623c468dc2e1de061e9a921dffd179f36c4fe270437307cca1527996263596428d9e0bfb6bf51202a3989102dc9c7955a67341c6f3a0b2a7835b1e2327ea
SSDEEP 192:ucm+xasuheOwQxMGsN+AxQPUba52QmiU1XXF54h//2yw3AaoHWquCVTEFc08+jrx:aZcIhsN+ERbQStVmh//S3qqMTU
TLSH
T12C827B326C74A8775DE7A445B4873A138FF88137EBC92B8495EDDB1D02DB1A81307E26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b3cb4cc0-a423-4da1-9684-c3c6e9500251.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b3cb4cc0-a423-4da1-9684-c3c6e9500251.tmp
Size 8KB
SHA256 a509d852ca5231cf8e70ce2fac179c2d0367c4a7de34901daec529cfc3f6c4e6
MD5 55946d0964e246ead53285be38a4ee51
SHA1 b51d19fa5db6259355927e598bab6ac4b8040d5e
SHA512 bebe5080f378bed73900722fa99a6cef85cc9e76d55b3021ee3287af75723e6997cf8cad4c5f9dce286c337b6ee19dfdaac1bfd4b7f14a021fcb7f3318b8891f
SSDEEP 192:BONv6JUTQmiUyRYxyo//2yw36NxHWquU6:BONv6+FiCyo//S3gqU6
TLSH
T120120935BC68BC7B5DE39584B08736135EA44227EB896F84D6DC5E1C02DB15C630BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c1e27926-a554-4385-9670-2d62f05ca578.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c1e27926-a554-4385-9670-2d62f05ca578.tmp
Size 21KB
SHA256 1afae59684b82c6bdfbdae5109cd596b85a401d2253cc0dd866063301918d5e8
MD5 ba51a677b7b7adf964ae71757221be50
SHA1 4a7a092fafeaaf04c5a71962849002256487f48c
SHA512 b287b08a6808c7e2a89fabd97e021218086cea7a88a8fa8bf78980b914adc42af7d83e794042ffd772d631ba37b6d2e857f772ef3a85a1b8f1ee885851e2b693
SSDEEP 384:iNiFiZcIazsNO8TUNTUlIlNRbQStVmh//S3aqMTU:iEFQyHwg92/3qMTU
TLSH
T190A26C335C64A87BADF79A44F48B36138FF44077EAD5AA94E6DC9A1D02D709C1307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9adfd34-bc24-42f4-81e1-20f545c1670a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e9adfd34-bc24-42f4-81e1-20f545c1670a.tmp
Size 18KB
SHA256 e9b9f09382a1b859dfd492234b2ffa88482602b8f00e43630faf942be694a488
MD5 96ebbaf8a42838a107deccf96eb78aaa
SHA1 7f817bc3689c5e826028e2268b362f84936a2ed6
SHA512 6a0e0aa2a57cc6567386539957f0d6698a75f3ce46e9a939708fc9bba2a50265e4f839292b724a71124c3cfdd7f386f06d855042c033efd57d7cec1aa5b92ebe
SSDEEP 192:uZHm+xasuheOwQxMGsN+DxQPUba52QmiU1XXF54h//2yw3AaoHWquCVTEFc08+jN:aEZcIhsN+NRbQStVmh//S3qqMTU
TLSH
T1C7827C326C74A8775DE7A445B4873A138FB88037EBC92F8495ECDB1D02DB1A81307E26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f819740-b890-43ec-9559-a067e856044b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3f819740-b890-43ec-9559-a067e856044b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 19352e9f087df132b793e40fd11e1aa58342aeae8e59cef7d315d3d68de8eeb0
MD5 c1d09bbc79f4d2bc494153f8c3fa1117
SHA1 a525d3b75d38894c010ed2be7d93e288cdf3be3f
SHA512 51a9ee54521faae5fe7cc1f635e93cac611b61b21f35a9bffbe8d26fe7dd086dcc9ccdaf8891a38dc1aa28aabd039f399c8649744c717a191eb772175ef8121f
TLSH
T17F415F58B6FA1048B3B76F5A6FF3A86E487B7D373E06D45D10110E4E0A62B40C961737
MD5 SHA1 SHA512 TLSH

Submit Download