0883a9eb407906c12b334d89bc5fbc63bd1df9e0803c252cc8d23cb76b6d58f3

Analysis

max time kernel
149s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/10/2026, 22:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 18.6MB
Sample261016-2gft7aev5t
SHA256 0883a9eb407906c12b334d89bc5fbc63bd1df9e0803c252cc8d23cb76b6d58f3
MD5 77f8e4617a7729e6168944c936960255
SHA1 caf00f45cfb12de3b9951d25e9d6b70ed79b8b5a
SHA512 f58e6cd7afee7dc77d562f027ab47c23999fafa87153c674faca646aa44e94469194bfadc94c2c09515ea42c179dd560aea1b5b9d1ad3f83455f163a0d69dc45
SSDEEP 49152:nRWnjZ1pNUAwuTYp2bKvC6Y3r8xsJQf8xFTDeQdt+lHx37DoB:y
TLSH
T1DF17B56BBB49037316F242626B47A5CAF31EA13F375A1654309CC11C2B7B92483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3672	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2304238888-3968896904-642854331-1000\{B570CF06-2BE3-45B0-A741-301E8CA57DEA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3568	msedge.exe
3568	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5876 wrote to memory of 2548	5876	msedge.exe	89
PID 5876 wrote to memory of 2456	5876	msedge.exe	90
PID 5876 wrote to memory of 3672	5876	msedge.exe	91
PID 5876 wrote to memory of 2456	5876	msedge.exe	90
PID 5876 wrote to memory of 2456	5876	msedge.exe	90
PID 5876 wrote to memory of 4524	5876	msedge.exe	92
PID 5876 wrote to memory of 4524	5876	msedge.exe	92
PID 5876 wrote to memory of 1196	5876	msedge.exe	95
PID 5876 wrote to memory of 1200	5876	msedge.exe	94
PID 5876 wrote to memory of 1196	5876	msedge.exe	95
PID 5876 wrote to memory of 1196	5876	msedge.exe	95
PID 5876 wrote to memory of 1200	5876	msedge.exe	94
PID 5876 wrote to memory of 1200	5876	msedge.exe	94
PID 5876 wrote to memory of 4244	5876	msedge.exe	96
PID 5876 wrote to memory of 4244	5876	msedge.exe	96
PID 5876 wrote to memory of 4244	5876	msedge.exe	96
PID 5876 wrote to memory of 1488	5876	msedge.exe	97
PID 5876 wrote to memory of 1488	5876	msedge.exe	97
PID 5876 wrote to memory of 1488	5876	msedge.exe	97
PID 5876 wrote to memory of 3328	5876	msedge.exe	99
PID 5876 wrote to memory of 3328	5876	msedge.exe	99
PID 5876 wrote to memory of 4172	5876	msedge.exe	100
PID 5876 wrote to memory of 4172	5876	msedge.exe	100
PID 5876 wrote to memory of 5152	5876	msedge.exe	102
PID 5876 wrote to memory of 1200	5876	msedge.exe	106
PID 5876 wrote to memory of 896	5876	msedge.exe	107
PID 5876 wrote to memory of 944	5876	msedge.exe	108
PID 5876 wrote to memory of 2652	5876	msedge.exe	109
PID 5876 wrote to memory of 2652	5876	msedge.exe	109
PID 5876 wrote to memory of 3568	5876	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffe510dc188,0x7ffe510dc194,0x7ffe510dc1a0
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,17783221240548735441,1456878720944546752,262144 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:2
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,16019824523500181852,1590402818256886890,524288 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,14945496536671270973,18269952637254996400,524288 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=3216 /prefetch:13
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,8288825550123188822,8593871472428978957,2097152 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,3939379522819993417,130912839239434779,2097152 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,4478019874508811031,12058321869273492311,2097152 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,16916950428094492040,6535908102147205814,2097152 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:9
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3920,i,3574555772184935843,11694603114015208400,524288 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:14
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3908,i,6875843856342283277,12508358538643758312,524288 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,9252641778222430178,11471973932791509139,524288 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:14
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,9252641778222430178,11471973932791509139,524288 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:14
  2⤵
  PID:5152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,9208999553953959185,2888307811123664431,524288 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4724,i,17925953988407446986,12174282551326115452,524288 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:14
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4736,i,9788447971598412666,7004077313072694539,524288 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:14
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6468,i,12915132800731987897,1528539154259652529,524288 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:14
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6460,i,15313701462485778505,16041446805049891073,262144 --field-trial-handle=2844,i,8651025429232431445,7686302704772953810,262144 --variations-seed-version --mojo-platform-channel-handle=800 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3568

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2972

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

05ed6580-ae82-49ff-82c0-c514d11ebd2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\05ed6580-ae82-49ff-82c0-c514d11ebd2b.tmp
Size 39KB
SHA256 94d27700d68af4f7bc87fb123e2bc6b85e60834a3e2f428922361869b1e1e61f
MD5 03fbe1f0bfcd9dc608b82ff01f5de07f
SHA1 b7dd5be638406ff0cf552b91a64a634fcb2a0540
SHA512 9dd3862addd9b9223856a062403e78f6402e4c7df8761c17062178b87046423e2c3d0872f46d139de09bbf8def275c021a9baa7ae8dd614fe60804a0db2fb02d
SSDEEP 768:5H/UxvxjgC+E3JeSO5CjbmMIYNa8S5oYklnA+i74I:AZj3+E3ISMTWRdAp74I
TLSH
T1D103B039ACA4AD7398E6A2C4B20B6353AFF01523D5C56EE489EC1F0D16CB3EE5303815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32d38508-e81b-46e8-a02f-f044cbd19f41.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\32d38508-e81b-46e8-a02f-f044cbd19f41.tmp
Size 34KB
SHA256 31cb82d9e5a43ab3d7fd647a7ad8059d03f52084df41a043deaaa5c5cfc27447
MD5 ee292e664cf865a005e10b41a31bdcba
SHA1 7e2b039f314f0355d30b45377d7a5f427995f821
SHA512 e7e56b4a024a2d722fbbedab1900ec2fa805492acac093af802ab9215770812c800752eff65f8516dcc3881972ad3ec4a3b3aa0849f5260cacfa1777da14799b
SSDEEP 768:hw3ReSO5CjbmMIYNa8S5oYklnA+ixTILe:hw3gSMTWRdApWC
TLSH
T12EF2AE39ACA4AD738CD652C5B21A7752BFE05223D6881FA4DADC5F1D12CB29F2303812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4698710d-26f8-40c1-9b6f-483c9a127c5b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4698710d-26f8-40c1-9b6f-483c9a127c5b.tmp
Size 36KB
SHA256 5fa19b7bbfbfd3e1f4dd7cbd75891f437722375966df5063c40968205bbb9471
MD5 16370a88c6148fbdfb659dc97f24b747
SHA1 2201379662543a0460ce194e3058f5a4c621ee18
SHA512 929c52655a49188cca91522ac85ce4df7ea405d030f2d1a2f0ad8b8ee93c07051edd1a24bb6cdace3536b116ec3c8c476b85d033850007605e48420d91b65f3a
SSDEEP 768:3Fdd3fwgReSO5CjSCMIYNa8S5oYklnA+ixTILe:Hd3GpYTWRdApWC
TLSH
T1E4F29E3AACE4DA779CE657C5F61E3352AFE05223C9855AE4DACC5E1D128B2DE1303C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

65b74c1b-b37f-4424-b650-b9c143d274d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\65b74c1b-b37f-4424-b650-b9c143d274d6.tmp
Size 34KB
SHA256 d8d9d04f0a5a9e358b31c31283adc7c50cf2f337770aed06abaa2f5b436445ea
MD5 63f5b7bb6ead434220a14665ae9d5c25
SHA1 6bb0a82cc7fe0b979f616377c9c7de0bdce1af0d
SHA512 e4eeff2b85f193cc411e1caf1e1796c6dfedd15cb1fcdc7aea206584618d0e1f68b85f755cd68d010e06240a59c7e160206e85a7dd1fc3d4ec859e88bab0173a
SSDEEP 768:5sw30eSO5CjbmMIYNa8S5oYklnA+ixTILe:qw35SMTWRdApWC
TLSH
T1BDF2AE39ACA4AD738CD652C5B21A7752BFE05223D6C81FA4DADC5F1D12CB29F2303816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87e74406-e83d-4455-bd38-78e11ace26b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\87e74406-e83d-4455-bd38-78e11ace26b2.tmp
Size 38KB
SHA256 402da07c5a1205d6387dbd1733c0237920cd5973e682d77aa550c046f6561cae
MD5 1f25200676eaa4c096517c52f254a984
SHA1 a21265f69274d2ee38965b9377ddf5471eb9692c
SHA512 aae2f0f8e6041a0eeb2fcadd33946faa12e563d7f3bcae88efaaac242045992ea013a9e8128fd4b3258346788c400eb18867a6a929fef862d6e11672cbf1c26e
SSDEEP 768:ds/UxvxjgC+23z0SO5CjbxMIYNa8S5oYklnALiSH8L4:bZj3+23wSPTWRdAuS04
TLSH
T13403C03AADA4AC739CE663C4720AA347AEE55223D5C52DF489EC1F0D17CB2AE5303411
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 84d025c8484a1ba1eae075fe4fb60ee1013d5e3c0fe4757f9d23c77a5ecf4bff
MD5 40a03f8f45ceb83458e7ff6718e8114c
SHA1 3aee2deed85e7e1b8a1a9090347606288ce5f90c
SHA512 011f7c1ff606c9271e176c099ac19361c51f6a3eb7ee8dae4e0bead781595a3fa38a006247688a203ba11818d1de1b9066033932d5d22ba79d5a19f921cf6159
TLSH
T164D02B316CDD4D23C08CA27C0056004117617400FE10404011211048080824142823AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 72a43fbaed1cd4a89462ff759b5bb2f6f6d1a7a9c08002937c809c101fc685e4
MD5 b04c9bc22d86d65999036cf784bd7a42
SHA1 74f3b96e34181e491a9fd238877d82f72fce321d
SHA512 9bbf9224f5546df81a26e79932518e2c3bea2fc0e37127e4af1f02d1a5543680b5d9370365c28b8bb5427b3bb4f27eb12737d158490216ff77859483f95a6b00
TLSH
T189D02B316CED4C23C08CA27C0057004117517400EA1040401221504808082414281399
MD5 SHA1 SHA512 TLSH

Submit Download

0dd97bdd-54e7-4790-8674-bfabc27f3137.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0dd97bdd-54e7-4790-8674-bfabc27f3137.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

109fc9cb-e6a1-4ca7-8b61-209cbacff6ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\109fc9cb-e6a1-4ca7-8b61-209cbacff6ad.tmp
Size 10KB
SHA256 ed6778fa35b38dab28990c1623cfea40eda0d00b2cc24c43d3473c2893409b5d
MD5 c252a1f273880e6b506bfdc23e3ee85b
SHA1 ecaab43acdbdfe3c86891ed071333fcdcd37b806
SHA512 2f2a3734a1af235345318d93ed7e97b5b9006edee666158213c1ef2970eeaf51c0710ba90177e45dfc2ef30ffec0cd49eca9eef5cf331b989b182fc39723ae85
SSDEEP 192:sxRVRkbK/fYsv2zoA8p4w/g6+WNIYueXrBGRzIgIJ:sxRVkK/fYsvrV/5IDs
TLSH
T15332A5156E68A93B8CCBD20DFB55BF53D2F92032A1911F58B6FC9A1C14EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45eab453-2ece-476c-add0-4acff3d05538.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\45eab453-2ece-476c-add0-4acff3d05538.tmp
Size 11KB
SHA256 d9ecfbb59b276a65740b7d0b8f42eccf79c5f723d967546bfd10b99464217d47
MD5 3038fa414d06b3ef6eca37cb782d2e68
SHA1 61b5585b608ab88397c1023eca7922a7363b3715
SHA512 3b1049c78e865708cdc4970949712fdabcd33d2a355f8fba3d63cd3db69848da79c8fdf614599dc438a7320c296ddb284642868f536e8f88e2add5e374b46524
SSDEEP 192:sxReRkbK/fYsm2zoA8p4w/g6+WNIYucDrBGRzIgDScJ:sxRekK/fYsmrV/5IjT
TLSH
T131329415AE68A93B9CCBD20DFB55BF13D2F91032A1911F58A6FC961C14EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 676acdbe1c361093ac5c41aceaf52a3bafd881e4e608b2369d6a752aa1394d78
MD5 679816bb6617fb17fe53a332b8361d1b
SHA1 d164882c8d22899ed88049c9e12a998a1a1bec38
SHA512 8fab52fa5d8291748510b24e9100ba352b95b8afcba28584b87f9b7a4e5a2c3424604a3377a6b141376f8049f83714820b030cb6c21ccaec5ec076930e052856
TLSH
T1B94199584FB0AC50FB68E17CC6E00E873EB785D024C31E001766E5B86AE63BA4DD8354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 90575ebe06f433a86c305fe2dc59c39a7fa6b0117f2309b84839909e809806a2
MD5 bda93aad02dc1674515e421c06fdbc4a
SHA1 85471784f9cbae97c51030f648c0ed5395029122
SHA512 0b14787ee058740e1242b23186c1391706f0c3b61ae4ce1dacc93b01a8a0bfc759d15706516901075b8cddadd1731f1a88e6e3dc5030318a495288ca953deca8
TLSH
T1F94179594FB0AC50FB68E17CC6E15E873EB786D024C31E00176AE5B86EE63BA4DD8354
MD5 SHA1 SHA512 TLSH

Submit Download

f8e5a8de-ff51-47e3-873b-45109284a19e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f8e5a8de-ff51-47e3-873b-45109284a19e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

06115480-21d1-4fbf-be41-33e452b2bc3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\06115480-21d1-4fbf-be41-33e452b2bc3a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

47dfcdbb-b878-4748-b8f7-7fb77a90ea7c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\47dfcdbb-b878-4748-b8f7-7fb77a90ea7c.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

72ece7b7-628f-4251-92ee-42f56611d2c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\72ece7b7-628f-4251-92ee-42f56611d2c6.tmp
Size 1KB
SHA256 8ade17167e3e19ff55a683cad618f85651b3b2b86264cc55135a0580c4639533
MD5 04892b0467a05725f19e49d74e7c353e
SHA1 221f1e1e6a07e77b051b73d59ae2785bc0099e7e
SHA512 2c7a28bb72e4de6a5aad8761adfbbeb2b80bafcc706e147a754d15a3779da337cf7cb74570a4e33d3b2af754e1c12bfc924d50bf3b8638171700089618687d7f
TLSH
T1D331E2F787B4857E8A0186F0EA14AE1FCE2D0515432C7D6985E09E2793F3471E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bf8ff6d38c60700d9c06c0a6038f21e70a4a145377646d78ad2b2f4711c29e82
MD5 84a4d43b57ed69882f6ae4410bfa63fc
SHA1 f2473e982a0cc88b025ca5fb624a3cbbef8952ee
SHA512 13fd6a67205c910df3a416bbb99a20f35657eb2b1fe6917ec5a02b936f084c193352c6137b98a2b98f6abe95f4ccd4a82dbf324075e01bdfb10a43fcd6dcac3e
SSDEEP 24:KaYroAqIlKIhw1GSt+pyXvYXAE+IlK0hA1GSROX92p8NI/KRhK1KSUvTyXqpSu:KodIlK+wI3y1RIlKiAICmI/K3KM7yK
TLSH
T13E910011703B025138BF692940A8966B8A5271A37138ED2B7FED45A38E7BF041DFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ada98edd-e7ad-4b3c-80b5-1f1f308ffc2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ada98edd-e7ad-4b3c-80b5-1f1f308ffc2a.tmp
Size 23KB
SHA256 1f041f5a388b3a3fe7ee369851c047f3f85b29b2f057fa1cad8533fe6d0e6879
MD5 b6c5a1670982752c5287c053fe76c0a0
SHA1 9aa6ddf8f05503d36fd719e0c8285d1594ede43a
SHA512 a87f9eb7f46c3e375f9e3aa23ba46e4b108b30a6b2922fd526bdce58eeb1a2e14ff53f79655f496b89954d8d8e225b01bf1c745d347956234bf9dc8cbf68d832
SSDEEP 384:/7fnhUVfCtg6UFfCwKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXb9kMR6Procba:/jnhUJWg6cfCw8F1+UoAYDCx9Tuqh0VG
TLSH
T193B2EA2B644CCB7E9FC00AADDC196F976D9802C796A88D4047FE994C03C77EE911A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d708b464-f7f9-49d0-8723-322d6a0aac67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d708b464-f7f9-49d0-8723-322d6a0aac67.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

daa4294a-3099-4eed-a57c-90175b630b59.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\daa4294a-3099-4eed-a57c-90175b630b59.tmp
Size 11KB
SHA256 bb3b4704177c15e6ac21f1a2bfa9c3b93c7ecada6eac71513d563dc49f483f7d
MD5 1d5ce7f80de28227d5940e5bfee76de0
SHA1 ee93137e7e8a128b0bc201052d6f97e728ddbd97
SHA512 4b71e6d68b23e3dcfd2b04f9ce6e837c0ca14afd7caa59b7ef271e8a1e813ccb779f9cd88067997ef866ecd15a7713b3a0f66568051b91669b6f081011e8295c
SSDEEP 192:sxReRkbK/fYsS2zoA8p4w/g6+WNIYueXrBGRzIgDSGJ:sxRekK/fYsSrV/5ID5
TLSH
T17A329415AE28A93B8CCBD20DFB55BF53D2F91032A1911F58A6FC9A1C14EB7DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2b554027-91a6-4415-970b-2233fba9269a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2b554027-91a6-4415-970b-2233fba9269a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8da1b0a-7cfb-44da-95f2-bce17afe54ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b8da1b0a-7cfb-44da-95f2-bce17afe54ee.tmp
Size 38KB
SHA256 1ba8188404719a1e7bb2e8faecb3b7ef733d5a02ccaf3dc10d47279bb8a5a195
MD5 e5ffebe7ac2c5f88b666b492df71d58e
SHA1 a6646ad708503ce89800195c038ecb9b40c9a766
SHA512 d96b138d41f765460cfb99b8dbe392e9e13b5355636f68b8fe243a1e35d3712ac5861395e15f1607425cae67b7be229b8ad4a36d3a35c2a3b747acc61d425cda
SSDEEP 768:do/UxvxjgC+23pfwSO5CkJMIYNa8S5oYklnAaLPSH8L4:nZj3+23JIVHTWRdAMS04
TLSH
T17103C03AAC94A973CCF663C4760AA357AEF45123D1C56AF88AEC1F0E17C72AD5303451
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download