b1ac2fb5c8f0407ec73ffbfcff46aa634a3acf034eb10ef3f69cf483f43e591e

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/10/2026, 17:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 9.0MB
Sample261020-vr9rpacv41
SHA256 b1ac2fb5c8f0407ec73ffbfcff46aa634a3acf034eb10ef3f69cf483f43e591e
MD5 a6788c05c8f55285267442473bc145aa
SHA1 a19630a8a0536a80f095e0be19b5a21b9f8b7945
SHA512 c7125e3062ce1591a646424e6f7fca36f0559cfe37197ad10f74415471916dd6d386b8d3f9c15accd43f678777b8a6f7c515be28f13b97d200942e5f13191d90
SSDEEP 24576:c4QQf6O36j54wRaXe1Vmf/6k6T6W6r656+eGj7/4po:xseGT
TLSH
T12CA6A52F7B48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5940	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{5901536C-7543-4969-9D44-C9355868278C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1848	msedge.exe
1848	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe
5652	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5652 wrote to memory of 5516	5652	msedge.exe	89
PID 5652 wrote to memory of 2880	5652	msedge.exe	91
PID 5652 wrote to memory of 5940	5652	msedge.exe	92
PID 5652 wrote to memory of 2880	5652	msedge.exe	91
PID 5652 wrote to memory of 2880	5652	msedge.exe	91
PID 5652 wrote to memory of 2640	5652	msedge.exe	93
PID 5652 wrote to memory of 2640	5652	msedge.exe	93
PID 5652 wrote to memory of 1396	5652	msedge.exe	94
PID 5652 wrote to memory of 1396	5652	msedge.exe	94
PID 5652 wrote to memory of 1396	5652	msedge.exe	94
PID 5652 wrote to memory of 2892	5652	msedge.exe	95
PID 5652 wrote to memory of 2892	5652	msedge.exe	95
PID 5652 wrote to memory of 2892	5652	msedge.exe	95
PID 5652 wrote to memory of 4828	5652	msedge.exe	96
PID 5652 wrote to memory of 4828	5652	msedge.exe	96
PID 5652 wrote to memory of 4828	5652	msedge.exe	96
PID 5652 wrote to memory of 2796	5652	msedge.exe	97
PID 5652 wrote to memory of 2796	5652	msedge.exe	97
PID 5652 wrote to memory of 2796	5652	msedge.exe	97
PID 5652 wrote to memory of 3604	5652	msedge.exe	99
PID 5652 wrote to memory of 3880	5652	msedge.exe	100
PID 5652 wrote to memory of 3604	5652	msedge.exe	99
PID 5652 wrote to memory of 3880	5652	msedge.exe	100
PID 5652 wrote to memory of 5672	5652	msedge.exe	102
PID 5652 wrote to memory of 3328	5652	msedge.exe	106
PID 5652 wrote to memory of 3792	5652	msedge.exe	107
PID 5652 wrote to memory of 3636	5652	msedge.exe	108
PID 5652 wrote to memory of 4132	5652	msedge.exe	109
PID 5652 wrote to memory of 4132	5652	msedge.exe	109
PID 5652 wrote to memory of 1848	5652	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x264,0x268,0x22c,0x270,0x7ffd18d8c188,0x7ffd18d8c194,0x7ffd18d8c1a0
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,10137836060913728331,6085673762937235186,262144 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,18074331250725117669,14413847787860384093,524288 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2292,i,14566707174470943908,2542438576131833925,524288 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=1936 /prefetch:13
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3388,i,15050690575187209467,3656016890988504845,2097152 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3396,i,16153025967743597857,8440651902093211469,2097152 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4308,i,9681773381370553245,10366656710855679249,2097152 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,18243864167066932230,15033610046003317924,2097152 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:9
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,15931485094096911685,5064742368447997151,524288 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:14
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,14518132906997133281,3530992340369213870,524288 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,16790353527227338897,15566032314866028419,524288 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,16790353527227338897,15566032314866028419,524288 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4704,i,12687789524185440214,15866106549268847682,524288 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:14
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4708,i,3040488679647643759,13580404513705532868,524288 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=4712 /prefetch:14
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4692,i,2823507199408498084,12273817297827301821,524288 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:14
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,5164294201665446794,12628055764555147234,524288 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:14
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6188,i,3314697381426986449,9165272313360866097,262144 --field-trial-handle=2244,i,17466655422524015401,11015788851998504755,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1848

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4696

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1244

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0b3b1f36-6dd5-40f5-aeda-6f41272cf391.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0b3b1f36-6dd5-40f5-aeda-6f41272cf391.tmp
Size 37KB
SHA256 c433095687a2bff561148afe15055ebb536536af07cb864cf95b5f40c391fe98
MD5 0341fee2a4f7fb97410c1093630782a2
SHA1 25d09ef6568bd49e281935773e3caa7561ff7a22
SHA512 6c26444ed1cc5e393454912b8c0cad89b818eece731b2b0f2030fece9113f6497e5bad6e834c8b54e58228a3af1a7729cb544f3f16f99dde8fdbd4a54e4b6043
SSDEEP 768:5/UxvxjgC+93rBwOCqMu5fgGM1TnXMqOeXAaP8:sZj3+93cVcfgt1TnxOsAG8
TLSH
T17D03C036AC5568779CF3D384B30AA296AEF184A395C52EA889FC3E0E01D735D530BC53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ef2bfdb-4056-4176-a9d1-9c497044f63c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6ef2bfdb-4056-4176-a9d1-9c497044f63c.tmp
Size 36KB
SHA256 ecc07797ad8db6aca4be80711aca7051991b5949e0b648378ee2045000dd47ab
MD5 889887b1c0c3d1352165ed1494a7b644
SHA1 3d29e22b10e5dec76afbb4edbab6350feffdaeea
SHA512 87f5ec34483cfa88658bc0d61cb0c576f9f2f4e537c4a0cf8d6521b75dfc86acd023e7de7f443e3cd7076c33c3d890b39be9ceea1e3aa4a46bc05095b2edfaac
SSDEEP 768:JFd033wgOEY2wOCqwYy5fgGM1TnXMqOaoxTFLy:1034Tpdfgt1TnxOz32
TLSH
T17FF2B0335C9489779DE39B41F31E72966EF18167C9C52A98EADEAD0D018729E130FC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ac1373f-e811-4313-bd40-d70132f16ff1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7ac1373f-e811-4313-bd40-d70132f16ff1.tmp
Size 38KB
SHA256 ca10ba4be537c322c44f9cebe9b961f30ffef82db54c0173e93c2d42affb217d
MD5 14dff2a5cfc7cb79b5a010fd59e5a003
SHA1 dbf51a0619892facc6a1f37818b400b1a3e44532
SHA512 78ad0dc02ac4cc8fb14832d667635426db4d40745553b7a29c9e8303e3582c63e21652ab03ee2a59c0ddff64f5a02e5a41b29c1422dda3cd786a649a98b53ca3
SSDEEP 768:0/UxvxjgC+93ZYwOCqwY9u5fgGM1TnXMqO/oAaP8:hZj3+93Xpucfgt1TnxOQAG8
TLSH
T13303C036AC5559739CF3D381B20AA2966EF184A395C529A899FD7D0E01CB36D530FC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

528c2569-ea62-497d-bea6-f61d1cbb38eb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\528c2569-ea62-497d-bea6-f61d1cbb38eb.tmp
Size 11KB
SHA256 8b32d93b9710ee6da9cbd17096809a814d957f25fc7656e145040b284977b8df
MD5 3bc993f72eaae3ae744dd6c71e77b57a
SHA1 402da714e41a4a21e1eb4943ae3e91e064d3f975
SHA512 1cf284d50cb1af64f10ba0ffaed0da05d207418e1c7c201bd9c5bdc53647faeb3e95b034b9ae0b6af6b1e30f2de91129ee1daa283766e44ab0f4ea503a42dfc4
SSDEEP 192:sxRuRybD/fvsrVqvzoA8p4E/g6+WNIYRL1y3jhGxIgDxJ:sxRuGD/fvsZr1/5INGH
TLSH
T18A32B915AD28A97B8CCBD61DBB56BF53D6F9503261912E08E6FC8A1C04E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

551dbb91-4986-49ed-866a-33e1cc93f6f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\551dbb91-4986-49ed-866a-33e1cc93f6f7.tmp
Size 23KB
SHA256 20c7f622981af3aa44632a921768caca3972024ff681166e29049ab2085bd473
MD5 a2162aa73dbf6ca07268d6c89bf06e4a
SHA1 07a74b7d994c34425b85a9ac5228bf8b7cec5fe6
SHA512 cd1df55c1225ca773cababc21eb6ba9d5313c1bb27545723b4aee5c39cfc654ddc44303dac1cf4ab965717e3fee7a8cc301c325e2d1b98c676189de858b65e0f
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRkzroqY6:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0V/
TLSH
T1BFB2DB2F644CCB7E4FC10AAD9C1A6FD76D9802C79B548E4047FE994C02C77FA921A4CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3cd8d51592b29a2a8d97611dd552f6b0616617db89f456dd6fede0a99b67c44c
MD5 bcd0c51121c57507ae7a0b4cff6f0bc4
SHA1 3cd3ff1d0e9066ed5c04c2664f1ae429219ea9ab
SHA512 f93667954094c28535a93d8a296759d18d6b24844d0ad84c820052de775fc740711feab72ace492e6c9a987c392690fcbdf41458458e3564cb46c5676943197d
TLSH
T1AE612B85039F9098FFAC12F0C2F312D77638B9B6E5B7BED207A0D3A468063270184388
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 64d403fdc7758bf0dedadece2d2a3f4d835b3a40387f02d0148fbc490220bdd4
MD5 35f697bab5646ac221649e0d1f90f5dc
SHA1 5e0b533ac6d9aadc394de9451be01d296ddc74d6
SHA512 12c3ed463a4429b9ee84fc9f1fcaab86a54c2eea91c209ba56b7f547385c58ad2ee6b2de1a71ff969f080af793e73f4e243b3c28286a2fbbc0181f439f2ffdc9
TLSH
T14E612C85539F9098FFAC52F5D2F312D77638B9B6D5B7BED107A0D7A468063270144388
MD5 SHA1 SHA512 TLSH

Submit Download

462e65a7-97c4-4a7f-abbd-5a7f8331b497.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\462e65a7-97c4-4a7f-abbd-5a7f8331b497.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3e5db3c8-5aa6-426e-aa19-c92bb7415931.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3e5db3c8-5aa6-426e-aa19-c92bb7415931.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

b3e16360-5006-4996-8c3f-612b4bd8cb18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b3e16360-5006-4996-8c3f-612b4bd8cb18.tmp
Size 1KB
SHA256 bc0326bcfaa57c1ed441eb30988a90660e53cba4a998c10d8b66c7e95ccdabf6
MD5 d5996ca20be9b6769b54b1db2b938420
SHA1 edf68b2f36ed8dfb60d76feaaf2829e5bd8a9299
SHA512 010df4e08c78dcb5e278510e180c584f20678f215df74c55036169543d294fe24f4fc8fb1c37b77c883c867bcef81986b526524df3582e2d5f9106df4ed23265
TLSH
T1D4216EF783B4957E8A11D6F0AA046F1FCF6D0511431C7C6AC5E46D2793E3461E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

c2abb95f-36ca-4fd3-b6f9-342554d2a3e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c2abb95f-36ca-4fd3-b6f9-342554d2a3e9.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7b45a4e39dd55ae4aa73dce639061b323f1177fbaa3fb15c05d1dcaa64180be0
MD5 62d2ac9f65d6ac2e29872c1578d77cd0
SHA1 ea09002e02e34d15877cf41892e9c438d13a9034
SHA512 c0185db281343a573348808378b700e30b64ef61d7758b62edc3b0ef0d148df003d40a4273a2650584fe5114e15f4dffe1151975ff5fa74b515d07a1f20717df
SSDEEP 48:KkaIfK/6UPykav2qQ0ggUcdzIhygKq1yogmCwzNITqIPKDasjyQ:KkaYK/6WeFyKO4RqYKDaqX
TLSH
T194910F20357A53903C7F265944E4961B8A5232E3B074E53B3BE995F29E3BE044EBD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

bd2b8531-c151-4041-a90d-8a6c56206769.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bd2b8531-c151-4041-a90d-8a6c56206769.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c198b89c-d52a-4c61-96dd-905c0615ab50.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c198b89c-d52a-4c61-96dd-905c0615ab50.tmp
Size 11KB
SHA256 912a5e6ed3f7f221d81d755fa58fe327f3eb4cb3fbb6c63e7e3fb1abc240bd60
MD5 6c9d191628a85150604c2f307acad61f
SHA1 3d2b52c9d2f9ff9ce49ddf056bae6ed42cdb9940
SHA512 b889106e8da299ec38dd05e41b61620b7a452066a0c3bee3d676628696efd0ceb3b2f79ce3eded4b185585a8d816c5e1e55fcc51dd8c50d5e0812936c11abb08
SSDEEP 192:sxRVRybD/fvsBMqvzoA8p4E/g6+WNIYRLFe3jhGxIgIJ:sxRVGD/fvsar1/5IPGs
TLSH
T1EE32B815AD28A97B8CCBD21DBB55BF53D6F9503261D16E08E6FC8A1C04E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed899f9c-3eb1-437e-8ed3-16b85c2d09c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ed899f9c-3eb1-437e-8ed3-16b85c2d09c6.tmp
Size 11KB
SHA256 c2921e5127f50372fa278c0499636d09fb4f98a8354bc51ffe3105350dc7e0a9
MD5 1c8df3732ecc3750b60034a74bcbd3b3
SHA1 372b31b13ccc4347fa87237e86bca5f94203e475
SHA512 c9f5cca1263cf2cb8ad37227d4dcf6c0715ff580ec21e0aab16805e695f22b96a506a64c58334e9a76521faa08a16d40234d4fe070e1168ebc226e3d72afc080
SSDEEP 192:sxRuRybD/fvsrMqvzoA8p4E/g6+WNIYRLFe3jhGxIgDPJ:sxRuGD/fvsYr1/5IPG9
TLSH
T1C532B715AD28A97B8CCBD21DBB56BF53D6F9503261D12E08E6FC8A1C04E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d8c861bf-045f-43ef-b5d6-22251f11f3b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d8c861bf-045f-43ef-b5d6-22251f11f3b2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aa99fd0c-82e1-433c-9a68-b22ef7c09806.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\aa99fd0c-82e1-433c-9a68-b22ef7c09806.tmp
Size 38KB
SHA256 e9dcbd0fd99bfada2ee118d2276327245f797f8cbd70ae25abf6244e17f31a2b
MD5 0ae0b0a5710de177cfc8ac863781bc63
SHA1 914e8d82bec34b04b182a0e522595ffca5d9f11b
SHA512 fc51dcc359c01b93c50fabf9ef53cfd192e76d23c8222928e6f59af1917aa8d37f37341b3878f9b99025e8d2b7588727112225dc90a0c487ad9b0865a903d771
SSDEEP 768:U/UxvxjgC+Z39EK2wOCqwY995fgGM1TnXMqOaoT5P:BZj3+Z39Dpu3fgt1TnxOzFP
TLSH
T16003C0316C5558735CF3E341B21AA3D76EF18567D5C529A899EE6E0E018B3AE430FC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bbdaee2d-b4ad-4aa2-995d-4b7a049605a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bbdaee2d-b4ad-4aa2-995d-4b7a049605a4.tmp
Size 34KB
SHA256 89275389f8630c49cbde437d722bf50936f8c804b93adaf02111f81a9913524d
MD5 7f753b50062c71f99a62ae87e3a3411d
SHA1 12b9ac152f73dc12a49e1bc746295e10b4ec31d5
SHA512 e6f0597397059ac46e2f219e9b5e72fef8beecdebd9b80fe88429ee88e2071e0b08115c7038f3aec849c40bfa604b2533124bb685838dd64601243c3edaf9134
SSDEEP 768:Z139EY2wOCqwY9b5fgGM1TnXMqOaoxTFLy:Z139TpuVfgt1TnxOz32
TLSH
T1B7F2BF3168A558734CE3D341F21A76866EE1C167DAC91A98D9DEBE0D01C729E531BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

042d737d-76b6-49dc-b4ec-f645aa00b4a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\042d737d-76b6-49dc-b4ec-f645aa00b4a4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f8f23abf-9024-457d-93cc-cf3b58f4cfb8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f8f23abf-9024-457d-93cc-cf3b58f4cfb8.tmp
Size 34KB
SHA256 e96948d208d041cf944e0c80809b2a405a1b481406abf631617419233bb28957
MD5 e2e77f021d8bad277c3aa18d0e817ff1
SHA1 7ad6d848e98518536a2897fddbcabcf70a3838cd
SHA512 9e341e163cb55096e4e625f2b026e96edc7bd18d2ad06c3fa553b2f61ec81529c5be0886b9edbd8a537938aba14715068386b39d79cff72b3d73e1bb88cff6e5
SSDEEP 768:L13mEY2wOCqwY9b5fgGM1TnXMqOaoxTFLy:L13mTpuVfgt1TnxOz32
TLSH
T1C3F2BF3268A558734CE3D341F21A76866EE1C167DAC81E98E9DEBE0D01CB39E530BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download