bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/10/2026, 00:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 7.9MB
Sample261017-alpjcaew9r
SHA256 bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d
MD5 0e3e4362f785aff0b9e1852b1064c0f1
SHA1 a42ccb51e72bdcb5bb905a62efaa28857def3a17
SHA512 193b57efc5f5971fbd9e4ea1a80b34aadcc2a814ff49c4c06afe972bf327e98ff0498217a8bdef984b10fdec6e7858a6fb88c0b14936e0c6b404387a426b87f2
SSDEEP 24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i
TLSH
T1A786942F7B48037706C60262AB8BA5CBF21F903F3B561654345CD1681F6BA2583FB6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2532	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{6EF52571-13BE-4674-A477-6E1B28CCCF8D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5664	msedge.exe
5664	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4276 wrote to memory of 4860	4276	msedge.exe	89
PID 4276 wrote to memory of 2532	4276	msedge.exe	91
PID 4276 wrote to memory of 4984	4276	msedge.exe	92
PID 4276 wrote to memory of 4984	4276	msedge.exe	92
PID 4276 wrote to memory of 4984	4276	msedge.exe	92
PID 4276 wrote to memory of 1872	4276	msedge.exe	93
PID 4276 wrote to memory of 1872	4276	msedge.exe	93
PID 4276 wrote to memory of 3160	4276	msedge.exe	95
PID 4276 wrote to memory of 3160	4276	msedge.exe	95
PID 4276 wrote to memory of 3160	4276	msedge.exe	95
PID 4276 wrote to memory of 4468	4276	msedge.exe	96
PID 4276 wrote to memory of 4468	4276	msedge.exe	96
PID 4276 wrote to memory of 4468	4276	msedge.exe	96
PID 4276 wrote to memory of 1736	4276	msedge.exe	97
PID 4276 wrote to memory of 3952	4276	msedge.exe	98
PID 4276 wrote to memory of 1736	4276	msedge.exe	97
PID 4276 wrote to memory of 1736	4276	msedge.exe	97
PID 4276 wrote to memory of 3952	4276	msedge.exe	98
PID 4276 wrote to memory of 3952	4276	msedge.exe	98
PID 4276 wrote to memory of 4136	4276	msedge.exe	102
PID 4276 wrote to memory of 1100	4276	msedge.exe	103
PID 4276 wrote to memory of 4136	4276	msedge.exe	102
PID 4276 wrote to memory of 1100	4276	msedge.exe	103
PID 4276 wrote to memory of 1512	4276	msedge.exe	105
PID 4276 wrote to memory of 5748	4276	msedge.exe	117
PID 4276 wrote to memory of 5756	4276	msedge.exe	118
PID 4276 wrote to memory of 5764	4276	msedge.exe	119
PID 4276 wrote to memory of 4368	4276	msedge.exe	121
PID 4276 wrote to memory of 4368	4276	msedge.exe	121
PID 4276 wrote to memory of 5664	4276	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ffaabfdc188,0x7ffaabfdc194,0x7ffaabfdc1a0
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,5289421356481726360,5720103613482846692,524288 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,17141627351576012364,1033674915068713703,262144 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,2079486844889361007,10125440574172169915,524288 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:8
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,18243916065831658494,17778380235935379778,2097152 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,9199698937136892979,938392914502219874,2097152 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,13254095426596594350,13346139243754427482,2097152 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,9668877827142238741,12109544707120850148,2097152 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,14029155230437678505,18009114740164754771,524288 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,4940513688220679213,5155176334886321626,524288 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,10929334401389812058,405549032918593194,524288 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,10929334401389812058,405549032918593194,524288 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,11633695962786499897,9918004526932146261,524288 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:8
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,5129945101503181466,3956436341899238406,524288 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:8
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4628,i,5731797700781326672,439116534538930328,524288 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,1520860596660092241,12038824950697739247,524288 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=1000 /prefetch:8
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6096,i,16574348691845358486,336018785268677286,262144 --field-trial-handle=2300,i,1090769677785119513,14678420681274737798,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5664

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2548

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1413ebb4-5de3-4457-9c47-6b631b0c55cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1413ebb4-5de3-4457-9c47-6b631b0c55cd.tmp
Size 18KB
SHA256 9b044307dcb0c954e5bd1a29cf90536bf78f19de34bbc5e9000ccc2a9c6f026a
MD5 e209e92ed09fe449f7825de04a650d47
SHA1 19d0966a8c636f7611139450c1533fda8e3bb2f7
SHA512 5cb9a5a5c786c1cb315665326c0f7799aa99ec404eaad8baf8fd98b537bbdd4739e80a3339c0b41015df65cd77715ecdfeaa65abf6df1792f26dc5e624a1e792
SSDEEP 384:EQkUSv0sNyDyuEChdlpuacL9iX5F71sFq7SnMTcIIlT:00D7qpa8LnMTcLN
TLSH
T1B4825C766CB86D7B49E3A550F14B3603AFB4912BEBD41F50DADD6B2C02DA1DC2307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

30b9363a-343a-4332-b19c-fb7dfdb0aa87.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\30b9363a-343a-4332-b19c-fb7dfdb0aa87.tmp
Size 8KB
SHA256 caf66b9e1cf4dda1d95ba7c03c479c5bb61face598de21313cf94898a32dffa4
MD5 39a721bfe8518a85a7a239457e86fbbf
SHA1 1b17a5c149a5fb301d6edd657ab5312446034bbf
SHA512 2d492234cdecebf79079ae46d440ce0d5e9031db550bfaffce14bef1eea66018c21b87e79e5390951fc54b122e77ca13380579ce5d08abe949a3fbabd04b3ae8
SSDEEP 192:VON76AmwpuQmiUy1aJsiX5F7wksFqwKPe6lRzq0U6:VON76ipqJJsiX5F71sFq7tnU6
TLSH
T11E120B35A8786C7B4DD3A554F08735139EB55167EB88BF90D9EC2B2C02EF59C530A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8111ea99-2e0c-48eb-b1dd-05042fbe9f5c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8111ea99-2e0c-48eb-b1dd-05042fbe9f5c.tmp
Size 8KB
SHA256 003972bb49fdc160d2d620ed3e7df190561cb87440596ec159cd953821be31b4
MD5 cc639b0cb349b15f745778a9422f0712
SHA1 d3ea640a7c7f5fd8552458350f7829c728c1c0e5
SHA512 26e944b2d44aa1d92e5b3b8eae98d8307428099154a0ad933b2b4e95af5379cbc164ee91f5d3590de73d70c94ac564c87f0f7d2c80ac6fb53740085749c94892
SSDEEP 192:LON/6AmwprQmiUyea6siX5F7wksF+JiIpU6:LON/6ipdA6siX5F71sFroU6
TLSH
T1E702F935BD686C7B8DF3AE45B58B37135FA5117BEA902F84C9E81B2C01D769C1306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

1ac16a91-5a42-4fb5-be51-f5a31ead3613.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1ac16a91-5a42-4fb5-be51-f5a31ead3613.tmp
Size 10KB
SHA256 d185c0c6eccd5727db401c35ccbdd36a4bfeb829742dcab4b332944547101bca
MD5 cf080a9bd56639869b5d786b144c37db
SHA1 c0cb55cf8a4b070d111777c52c37deb066f89bee
SHA512 f9653ab3ce7b2892818222ed4a760cfc9d5f823ce012aa1f6c37b1cd855aa8dfd46d9d5826d0badeb53c775415f868f58023ed2b7a8c558d6e6e11c25556abee
SSDEEP 192:sxZVRjWK/fPsnlLIdpdWHW6+WNGY3SqVyIg5KJ:sxZVkK/fPsnlUoHbGho
TLSH
T1DD22D8616E28A97B8CC7E20DBB557F13E6F95032A5D41E48AAFCC61C05F76CD120741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38365212-ffe9-45aa-96b3-697ce7ed7408.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\38365212-ffe9-45aa-96b3-697ce7ed7408.tmp
Size 10KB
SHA256 95126d1ea5ef1f672e99f126447029def23f1772eb5141a6428876f75c2ab428
MD5 ff2e83e47986003644f14df50f4d60bb
SHA1 ddd5f98f2c3200f400f5044dc77f4b240784610f
SHA512 1a36d3dc67d00409341ae749229ab088a12659a82d4eac0e6924e6575f869c627cdb37233eb40e03d3e705c748608b5ad4f2751a4e8a1c43f374c785f17080a7
SSDEEP 192:sxZVRjWK/fPsnlLIdpHWHW6+WNGY3WRVyIg5KJ:sxZVkK/fPsnlU2HbG0o
TLSH
T10F22E9516E28A93B8CC7E21DBB557F13E6F95032A5D01E48A6FCC61C05F76CD120741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

767b4a2d-410e-4454-9c1f-5dd08fc9a388.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\767b4a2d-410e-4454-9c1f-5dd08fc9a388.tmp
Size 9KB
SHA256 05774f4cbdc70f2b832bbbac6e7caa519a99b8c9b70c8da67d25e78f4b83a029
MD5 7c918e0749494ba45c7ebb67fb4ed27e
SHA1 3305085fcc3771943a672de714819c19691b9600
SHA512 59df11f0299793430a1a9f7c1607c869f6ffe6899368e08af41c1583fe43650c4b0a6451b28b92a5833678ea9325b4c80358d37f44306c408cdec2d5dd7fe47b
SSDEEP 192:sxZVRjWK/fPsnQLIdpdWHW6+WNGY3SQVyIg5oJ:sxZVkK/fPsnQUoHbGza
TLSH
T1A022C8516E28A97B8CC7D21DBB55BF13E6F95032A5D41E48AAFC861C04E76CD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86ae3d72-cf74-4d0b-856c-75b83882622c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\86ae3d72-cf74-4d0b-856c-75b83882622c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

983314d3-ae7c-4e49-b577-7e1457b705ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\983314d3-ae7c-4e49-b577-7e1457b705ee.tmp
Size 27KB
SHA256 3177e44b487b8300a44b0299e82f4b784dc8aaef047f9b318e67dec49466212f
MD5 d91cf4267e7ea242703e4e05c3da69cb
SHA1 e2f4f89e41c569a7e584a8871eef6fe8db8c75bf
SHA512 2cc9f340453a0fccf75104f3c1dcd474e0769a395d252486de8d716d3c4bc701893804e34585cfac86f731301032d1eec307bedd21389b960f7a0b0582e61070
SSDEEP 768:QU30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72vrolZMe:QU30AbSWvS2l9u1jaLmLZ128d
TLSH
T1AFC2DA3B640CCB7E4FC05E9DDC6AAF9B6E9802C796648D4047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 6d20e2ecba83eb1d0c6b5ba81d86434f427182da4f5588ae76d4623ba3a81bda
MD5 d809b0868eac06469fea743c9b10a3dc
SHA1 2f59a0255ac1ea209f454e7e9df78c82b7f09d55
SHA512 2bb002d6602eec176604ff5bfe8aeda9afcb0107450aa69bae2941f07f11ef99ae6cf096f340c50ed98f3b19b0a448ac383e870d8872d3be3ad771d58b540972
TLSH
T15161518F46D8C867FBF895B296F5938336F8A6815B431DC130E4D879D82EB53F109200
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 26e697de0a2c6e4990032bad8c1def82e4599f3854a82ce5c91b417da9566da7
MD5 665d322563c9e189b5afa8763b992033
SHA1 320476043cddbf63bf7a07b8fe5dfabe909fb64c
SHA512 02ba3653777fcc922e6c24ac48045691792d51570e747dfd62b8c205337e589158fcb595d3737bfe9bd97396d919ebc7148605abf65f890d487883af49eac16d
TLSH
T1FE61418F46D8C867FBF895B296F5938336F8A6825B431DC130E4D879D82EB53F149200
MD5 SHA1 SHA512 TLSH

Submit Download

0d2bc062-2010-4cb9-9f0a-17d6b6e894a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0d2bc062-2010-4cb9-9f0a-17d6b6e894a6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

a2efab9d-e015-459d-8edb-a0c70ee1f734.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a2efab9d-e015-459d-8edb-a0c70ee1f734.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a7d3aa0e-8b75-4ff7-bf2b-dac736b5b3ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a7d3aa0e-8b75-4ff7-bf2b-dac736b5b3ae.tmp
Size 949B
SHA256 86cf1a4472f98210580fa10af1d04f642765364bceda50ae15f8bfbdda14b37c
MD5 7caccbadbe07d0ff4e85c62730b1202a
SHA1 0cc153c53313dcf12b753b553bc15b66083f4856
SHA512 7844d2410e58c838c5bc31ad4e4ddbab7a08ba329366d8584cd68d934d0512e370a76cb0b677de70a401445b3c9a01aabcfab1edee65912b26f64a3bbb4f6ff8
TLSH
T108117DF3C7E5C56E891516F06A24AE2BCE2D0505421C7C1995D4EF2B93E30B5E50195F
MD5 SHA1 SHA512 TLSH

Submit Download

d2da7c48-b05d-4cef-8039-82a993e7a26b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d2da7c48-b05d-4cef-8039-82a993e7a26b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c33c431d-a5b0-45f8-ba77-b433e9b75f04.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c33c431d-a5b0-45f8-ba77-b433e9b75f04.tmp
Size 9KB
SHA256 324919b15ae662bd937730c85bf2276115b05d6df0dec25b54558e0713c54636
MD5 77e217cb657dd90af7ab8e565b448b33
SHA1 728659ab25629406461cd87dd19d9546cbdab147
SHA512 d1154bd3115590cd08fdc1a6c7796fd603f6779158170a524c020cfbcdf90c6c7636f1236a7ed8c12c8334a0f40961be35d3793ebff26a6222c3e2116e70bbfa
SSDEEP 192:sxZVRjWK/fPsnQLIdpdWHW6+WNGY3SQVyIgrJ:sxZVkK/fPsnQUoHbGz9
TLSH
T1FA22B7516E28A57B8CC7E21DBB55BF13E6F95032A5D41E48AAFC861C04E66CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1aa1056b-6162-42e6-ac4e-29b508637b12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1aa1056b-6162-42e6-ac4e-29b508637b12.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a96be27b-4453-4d8d-8475-d4b9db43a6ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a96be27b-4453-4d8d-8475-d4b9db43a6ff.tmp
Size 21KB
SHA256 8ec57edbf54245c875d57c08646079ae691db8b6b8e1fdc134b2a510b203b5d1
MD5 70dd5b08bbc797534439e9d007471135
SHA1 8020f777463e25f1387048609caadf8fd0faf92a
SHA512 1df530f4530789c4096032c2a259ba50ade56976931d2dc283eb8a921b318a8ec290a6adb4f78d515121b42a1ac0a1200b1578b3f4acd116f2cf2c22535e54f1
SSDEEP 384:ziFzQkUSv0zsNK8TUNTUlIlwyuEChdlpuacL9iX5F71sFq73nMTcIIlT:eFdInwgO7qpa8AnMTcLN
TLSH
T1CDA25B776CA8997B9EE3AA90F14A3203DFB45167DED4AE50E7CD5A1C01DA1DC2307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cba6e64e-7437-4e7a-875e-4ba45faeb7d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cba6e64e-7437-4e7a-875e-4ba45faeb7d8.tmp
Size 18KB
SHA256 3de10cd554aa65faf5a4ccd12c19861f6f79e63b04767a9ba17a7561f99f5466
MD5 8f8624e3d6f6123165368e0f0d52afb9
SHA1 799e62a2b230c95d04ec45682d1392a83e2b1986
SHA512 2086cd20c6691d21e7f1de72852453d2f68f3d2a604140bdc58299ab559302632236e4ec938d990d268fa54a074046f5eb1701a8b68436438640b42a00e7f045
SSDEEP 384:RQkUSv0sNywyuEChdlpuacL9iX5F71sFq7SnMTcIIlT:D0W7qpa8LnMTcLN
TLSH
T19E826C766C786D6B49E3A550F14B3603AFB4912BEFD81F50DADD6B2C02DA1DC2307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f024577-a688-4998-bc96-52e60d26b7d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2f024577-a688-4998-bc96-52e60d26b7d5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0148a602f742a3b2cbd05a6a4a56485ef093972612829af49735adc57720146a
MD5 809d3f0792993ba0c0b5b8bc6b2b1939
SHA1 c88a5556bb5e7db2a95f6d026aed37381e7dbaaf
SHA512 a0d2ee2bfc4ca9d67c4adb68dc2130e3b0f91fad4bc49dc890ea02ff7f59bc5125cae1d2d1d4e3e433c303446be8b89b93f565fd18f59a61bf51975b37d39057
TLSH
T1EA4129986AED1158B3B36F599BF6647E447BBD372E06906E00110E4F0722B40C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download