1145a9faaadf10f97ab6a1d0c5b7f74c6a2eae46b532f168a233b9a5cd7d52cf

Analysis

max time kernel
148s
max time network
142s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/10/2026, 23:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 15.3MB
Sample261023-3kshtsv13l
SHA256 1145a9faaadf10f97ab6a1d0c5b7f74c6a2eae46b532f168a233b9a5cd7d52cf
MD5 632ae2b84ce5a7ae5c51dea5d5b66de6
SHA1 62d8d66952166c8c32de54aef13ab57bb7b6afa1
SHA512 f17fff1ae50d99b2454429bdb5ec5d39b9d5d9ac133297a5c8e16ca3451d35e3a95305c3c0588c0ea72eb8ced419ca62f0d42bf067e99f305088fae011688361
SSDEEP 49152:/NQpqPgnqRweTYp2kGYC+O3r8xd2zJQf8xF6D7gQdGxw:0
TLSH
T1CCF6B56BBB49037316F242626B4BA5CAF31EA03F375A1654309CC15C1B7B92483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4636	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2757962786-3770611029-2102435697-1000\{AD55483A-AB31-4F19-9B0A-487FC9A7B63B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4060	msedge.exe
4060	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 2104 wrote to memory of 3588	2104	msedge.exe	81
PID 2104 wrote to memory of 4636	2104	msedge.exe	83
PID 2104 wrote to memory of 2428	2104	msedge.exe	84
PID 2104 wrote to memory of 2428	2104	msedge.exe	84
PID 2104 wrote to memory of 2428	2104	msedge.exe	84
PID 2104 wrote to memory of 3512	2104	msedge.exe	85
PID 2104 wrote to memory of 3512	2104	msedge.exe	85
PID 2104 wrote to memory of 3736	2104	msedge.exe	86
PID 2104 wrote to memory of 3736	2104	msedge.exe	86
PID 2104 wrote to memory of 3736	2104	msedge.exe	86
PID 2104 wrote to memory of 4532	2104	msedge.exe	87
PID 2104 wrote to memory of 4532	2104	msedge.exe	87
PID 2104 wrote to memory of 4532	2104	msedge.exe	87
PID 2104 wrote to memory of 3556	2104	msedge.exe	88
PID 2104 wrote to memory of 4668	2104	msedge.exe	89
PID 2104 wrote to memory of 1420	2104	msedge.exe	90
PID 2104 wrote to memory of 5000	2104	msedge.exe	91
PID 2104 wrote to memory of 3556	2104	msedge.exe	88
PID 2104 wrote to memory of 3556	2104	msedge.exe	88
PID 2104 wrote to memory of 4668	2104	msedge.exe	89
PID 2104 wrote to memory of 4668	2104	msedge.exe	89
PID 2104 wrote to memory of 1420	2104	msedge.exe	90
PID 2104 wrote to memory of 1420	2104	msedge.exe	90
PID 2104 wrote to memory of 5000	2104	msedge.exe	91
PID 2104 wrote to memory of 5000	2104	msedge.exe	91
PID 2104 wrote to memory of 3516	2104	msedge.exe	94
PID 2104 wrote to memory of 3208	2104	msedge.exe	95
PID 2104 wrote to memory of 3516	2104	msedge.exe	94
PID 2104 wrote to memory of 3208	2104	msedge.exe	95
PID 2104 wrote to memory of 404	2104	msedge.exe	97
PID 2104 wrote to memory of 4516	2104	msedge.exe	98
PID 4516 wrote to memory of 764	4516	msedge.exe	99
PID 2104 wrote to memory of 2680	2104	msedge.exe	100
PID 2104 wrote to memory of 1752	2104	msedge.exe	101
PID 2104 wrote to memory of 4068	2104	msedge.exe	102
PID 2104 wrote to memory of 3172	2104	msedge.exe	103
PID 2104 wrote to memory of 3172	2104	msedge.exe	103
PID 2104 wrote to memory of 4060	2104	msedge.exe	105

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x24c,0x7ffe9cadc188,0x7ffe9cadc194,0x7ffe9cadc1a0
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,14066091143711414730,8917170761024093482,524288 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1536,i,4393137818362001553,16897982106181715239,262144 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:2
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,3622070186769348004,9364992387346736669,524288 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:13
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,12084027287571837859,14964280801420352160,2097152 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,6157502761711306251,18412879330480361881,2097152 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,3520107740186806382,13479348378090317668,2097152 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,7840834910944422360,840671128108447984,2097152 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:9
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4228,i,5642436100918755115,5239102295345359442,2097152 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4256,i,13500444397435326928,4957226675664066132,2097152 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:9
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,11931307051238017575,2996274246190969158,524288 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3844,i,7077472271250190347,8332401335098940949,524288 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:14
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,14907847528934166208,7412311385908971532,524288 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,14907847528934166208,7412311385908971532,524288 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,3387474476067349987,5246045850886112704,524288 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4516
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1136
    3⤵
    PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,9095805646182824891,838611236574319784,524288 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,17056245314562731052,4954594367055441769,524288 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=564 /prefetch:14
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,1690868531427608933,17674363160195416693,524288 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:14
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,1497171034848677152,6592290749830487496,524288 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:14
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5688,i,9141124606936074807,11380302571313647116,262144 --field-trial-handle=2496,i,8057606281125709701,5653366791872009532,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4060

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1152

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

06a4b346-2adf-4e88-b479-b64da0a7a683.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\06a4b346-2adf-4e88-b479-b64da0a7a683.tmp
Size 18KB
SHA256 5c05b17e2991358019554bd7b69a2efc9ef578cd70ec5933b000220d8af9742f
MD5 b67189fc2436ebafc2aee65e40684d6b
SHA1 f408e4dba60535f478e9c28062b2a6e93087bdc3
SHA512 048995fd8a656cbb568ae8be3de01b84b9b3a8ddc3450ab82756e084212690d2c9cf5127199cb22e315d3c65f319dcafc0a89837f1ce5ba77831c121b32a3111
SSDEEP 384:8QkUSvD8NPxHb7eMmX56yOLlghnB2IvMtUaIIld:8DgmBjOLmB5uUaL3
TLSH
T159827D75ACA9AD3759B3A540F64A3643DFB4806BD6981F84D6CC7F2C03CA29C230B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

167e0741-f65d-4f0f-b6ad-05b6dbcc01ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\167e0741-f65d-4f0f-b6ad-05b6dbcc01ae.tmp
Size 21KB
SHA256 a89fc5ee20c6c188f031a843b19a287fb501d1dd7502261af81548752abc0802
MD5 bc1155ccd3db8bd23fca08e199a003ae
SHA1 ba38a6090b8681d94a6ba7c5b8b7c881826e2856
SHA512 0e7df1ef3783b60fb05d6c85c591b668d9ba136fe42593126f0c8abd0df90eb959695e8627d9798eb2dd3558538983f0b1ba8285b858f0b538fa9684c8604b7f
SSDEEP 384:kiFPQkUSvL8Nx8TUNTUlIlSHb7eMmX56yOLlghpB2IvMtUaIIld:/FRLEwgImBjOLmB5uUaL3
TLSH
T1FCA24C775C98DD379EB69A40F64A3603DFB44067C9946F94E7CC6E2C028A2DC230BD56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a69c78c-9c03-4117-96bd-35478629d87b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6a69c78c-9c03-4117-96bd-35478629d87b.tmp
Size 18KB
SHA256 469b1b407062299889648e95db061af098bca08a9ffa23f5663b5cc24fe63bb5
MD5 ff021cfcf6172fa773e471fafdbcd3d7
SHA1 9aa9c535e981b2698d8207796e37fb3c15b40ea7
SHA512 7eaa58dc175c9911e0a18cba479a077be1fddf072a10f336401e5adbb5636e2ff5bd9501064af26804e422c9690ae5426e1537b280882a5932a1d8f2b324becc
SSDEEP 384:mQkUSvD8NPVHb7eMmX56yOLlghnB2IvMtUaIIld:GDMmBjOLmB5uUaL3
TLSH
T187827E756CA9AD3759B3A540F64A3643DFA4806BD6981F84D6CC7F2C03CA29C230B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a0fe234-34be-42ab-ba49-79fe13e04717.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8a0fe234-34be-42ab-ba49-79fe13e04717.tmp
Size 8KB
SHA256 2a5fb9cb08d5ec05afcfdf9861fde9ad564af85053f184949b759b0587f156bc
MD5 50817c280eabcda6bba6a9ae73d0c5fc
SHA1 de9da71670a028de3fe74ada3e9d9670891a2fa4
SHA512 e93401495401417010130448cee38471b656f32e9ca91f8b93b50128ef039be23d565eceaca6ec102cbb49831fb87a426cc7203109c8359cd2b7804ec4442949
SSDEEP 192:SGNy6FPLQmiUyRXcLX56yOKmzvl6NMATWUXq6U6:SGNy63scLX56yOLlghDBU6
TLSH
T12312F976B9A8FC376DE3A585F1863503DEA4517BDA887F80D5DC2B2C02DE25C230A952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

968866e7-c2d3-44cc-a53c-02d0fd7767a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\968866e7-c2d3-44cc-a53c-02d0fd7767a6.tmp
Size 18KB
SHA256 d355010c4f50b2b2db010b994e5ff08b3df9a988420cb0eee2b68fa9fd1877e9
MD5 09a46aa7979d486d36e6a9692a0ca9af
SHA1 faeeab25bd0822bcdd662b872aefdf02e72f7a6f
SHA512 934b556ff6726acee964501563e0de367c24f994f15d4a9fbe683d25c9285b1f89a05e6609cd914a90699d6b62c0ab2cfd08fbc806142d6b08719923fddbdf5a
SSDEEP 384:SQkUSvD8NPSHb7eMmX56yOLlghnB2IvMtUaIIld:KDlmBjOLmB5uUaL3
TLSH
T163827D756CA9AD3759B3A540F64A3643DFB4806BD6981F94D6CC7F2C03CA29C230B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e0653c7dfe0810a5ba2c25399711a69ff5ccfc817819d34f6722ae2f2cd5878f
MD5 7d9ceef5daa4101fd9b28ee948203837
SHA1 ad81e9d42e96e81834610892e0cbe006311016fb
SHA512 5fcae862842c3f4a69612b1563a769c05365d02e6c1981b600f92a8204d1bccef7066e0f30e9f4cd820c979d8be93f5d5f5a0cbcc14e4c67fdb497df535a879a
TLSH
T15DD02230F32B8002C2C0B03B83C3C3203CCACA0A020E20AEE0302C203CAA02AF80E0C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f3441efe89f40c49c2eb2faa60bc806081bb2ed5672b81b3317480a16d9defd0
MD5 48af34be1fd83b68e08abd8324fcc533
SHA1 15f0d4791b9ba48b92ee9290ab043242241b1137
SHA512 9687f23e1f8c4b413fabcf01b867bb71849109f11f20aeb0da3a5e1a25b610ec3fa85aa3ce714ace9479c0c98da93c7301d990baf3c243f6c14cc1010ae46a5a
TLSH
T12ED0243073574401C1C0703743C3C3103CC5C505010D515FD0301C103C57055F40D0C1
MD5 SHA1 SHA512 TLSH

Submit Download

2f6dd001-041d-436f-a7b5-146c089c98c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2f6dd001-041d-436f-a7b5-146c089c98c1.tmp
Size 10KB
SHA256 10470105eba93e2035aa961cba3711bc701ccd43261163596c363eef2e9e63b5
MD5 eebc4ed216b50290c68cfea28e6e8244
SHA1 2b97cbca512d203069db1246e1354b605d48398a
SHA512 bef8818d2b1720a5e977f520b3fb13a8a7abfb03c6ff0410c0a801bf9ff904d40770ed20bda664dfd6db1c16b200fc4c714d72c06caa8f942894ee5bfae9b176
SSDEEP 192:sxZXR0ibf/fMs7jXIdpys/W6+WNGY0vjjmNPIg5uJ:sxZXHf/fMs78n/bG5mk
TLSH
T15122B6116A64A97B8CCBE21DBB15BF53E6F9503251A11E48BAFC861C06E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d9c9a4f-8861-4ccf-ae27-59f853c808b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5d9c9a4f-8861-4ccf-ae27-59f853c808b7.tmp
Size 10KB
SHA256 9f338e3a3c9dbfb96ecc7e0af083b7b8b07e91828e86e5a0a559d3c58c1ae195
MD5 7f5f6164355c2ba44fc88fb79b68193b
SHA1 db21d4d10623427ca4723871a0a6ffc04c6d0a5a
SHA512 a33e0a8987c249a58764f4c963d55bc88aeb68e376009239c84a9ea24760b9a444554cf30ab0deb418d65316f8f45aa16553675b75f392d1f4f50b08f5c4c5ed
SSDEEP 192:sxZXR0ibf/fMs7jXIdpEs/W6+WNGY0vdjtNPIg5uJ:sxZXHf/fMs78l/bG5tk
TLSH
T18A22B6126A64A97B8CC7D21DBB15BF53E6F9503251A11E48BAFCC61C06E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 ab9b88bb3bceb695164c5b81eb030b2187a4b44b42d999c2b58f77fa46970969
MD5 2896a85906acbc6bef8f6f038022ffd7
SHA1 8cdf5c3882ce7354b43b0f496574cc08348c71d2
SHA512 30af056df0a780e80d7132491aa9386692d51ae45789e2336098c9b748a9484bd8a9415f47341dea9684723c86972c96c2d371da8cd669260ed5219caefe96c2
TLSH
T18961A7866AB890F6DBF8E57DB6C7028B3134FA827583AD510C94D9F77E06F19C0060B0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d0ffe66c492b97e99b4c5831e386995116cab9ca584af873d5836c3510351bbb
MD5 4a3c1b70bb80c62e3a79a47248614768
SHA1 4cb814d42ee02619b9488ab872edfe54d5ad0a57
SHA512 bbeb17a752195f825cf447de86c34c2aad4a96df5cb664a33a8ed67521e3953d114ebb2d9fb34397ac893c12755565ab28ea429d59e587bcf88e2f81f712f780
TLSH
T13D61A78666B890F6DBF8E57DB6C7028B3134F9827583AD510C94C9F77E05F09C0060B0
MD5 SHA1 SHA512 TLSH

Submit Download

216f8d3a-6137-480d-8f32-64a51acb7134.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\216f8d3a-6137-480d-8f32-64a51acb7134.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

56b38264-d374-4a04-a37e-3418c145bc4e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\56b38264-d374-4a04-a37e-3418c145bc4e.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

81210f12-6f85-492e-81b3-c0abf77bf976.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\81210f12-6f85-492e-81b3-c0abf77bf976.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

87ac0ccb-e4e9-4da0-824d-1d35849530af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\87ac0ccb-e4e9-4da0-824d-1d35849530af.tmp
Size 949B
SHA256 7ab4749b6623f3bb2cf0b5e05d02b7988df70ebf1213eb00d35cfb46a60f7c17
MD5 30c00988ee90d8387f0ba74b3c1c66ed
SHA1 7bd427e02f1a518ac3f21d8d328a959c7cd1c850
SHA512 309dfcf2d6f79d5b23f44f6390cc59b7e17ad58fe88af618e5fc6700de605852949f0df183ef3ff166dff64e55aeebc2ba5e96184b1b7ba1fef912214af290fd
TLSH
T1E4117DF3C3D585AE890556F05A28AE1BDE1D0605431C7C1585E4EF2793F3475E10655F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 729B
SHA256 cbcb79e207f933459dda979e7800d11609503586d976eca6f0b32f65a3690a09
MD5 82adcf1768b94f0cdd65a4fdc64bed16
SHA1 84697e248215b2e027e1717f2665b52fe75d2408
SHA512 c13023b9d09498aefb174a197a703e4082d4f27c1c40a32d62cc496dcdd5176ec2e5e5d1448006a0b399c17f93ea13165cc211c45a187583ee8f3dcd80d6cf17
TLSH
T129017D2B30394310767F6608485BB516965120B1391CF87E3AB582E10A1AE1509FEDC9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 5ada9b27449c097264960e800f0b0b37f1d7460f462005e0b5aa5aa2b572e9d0
MD5 c3599f63c30fae6d2164ad818744469b
SHA1 4bf5c544af7fa7997520129933dfcdd7263e90f5
SHA512 a7bdce6f0175cc9d40b4ffad7edea611b04b8ec7d10541be692293d11748d003a82cb86305ca1be2ee120f433e597bb8762563f0849ce9d957af4fb3025c78b5
TLSH
T1E8219C2B613643107A3E260C095BB4169A5230B2391CF87E36B981F50B2AE155CFEDC9
MD5 SHA1 SHA512 TLSH

Submit Download

a433c89d-ada8-401a-b655-4dca4b58fb27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a433c89d-ada8-401a-b655-4dca4b58fb27.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6193c7c-6251-4823-ba72-174431bfcb82.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d6193c7c-6251-4823-ba72-174431bfcb82.tmp
Size 10KB
SHA256 20134996974f5efa47de9e1acdeb5a1cd73e602251789b457fe276656edb8055
MD5 9361ede26a89e96e960fae734ed2f119
SHA1 31f690b30a92eda7cbf619c2f7154b75083e3187
SHA512 6b0afdd52108ea6697e39ef50cb172d4b1fe34b3ca5c499621089fb746c2fae66e6e90de12b07963e6883d93bc7bc217cf6b4c628c78c8e751b4786819999c90
SSDEEP 192:sxZXR0ibf/fMs7jXIdpys/W6+WNGY0vniNPIg58J:sxZXHf/fMs78n/bG5Cm
TLSH
T18522B5116A24A97B8CCBD21DBB25BF53E6F9503291A11E48FAFC851C06E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eadd2cf8-8292-4819-b27d-ab70425a28d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eadd2cf8-8292-4819-b27d-ab70425a28d6.tmp
Size 9KB
SHA256 f10e744eb320adb83cc57f4c62ac4cee875ced28021a38049288180dae6016ef
MD5 2ac88d5a6c7157f0fe107ff4c7eb51a8
SHA1 3f3e45f1100f8d3535bb6a19ca44b961b8969a7e
SHA512 60b7d097eb21f1bf1ae8532d64d0351bb03b9cae0256c6223e762c605b4dbd975a91ade38f6de0c61d28e947906b17f20e40bcfc10fa0b8baf5bc10a854b838a
SSDEEP 192:sxZXR0ibf/fMs2jXIdpys/W6+WNGY0vnmNPIgrJ:sxZXHf/fMs28n/bG529
TLSH
T1D722B6116E24A97B8CCBD21DBB25BF53E6F9503291A51E48FAFC851C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f0cd98b3-8dd4-4824-8888-ba2a6074215e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f0cd98b3-8dd4-4824-8888-ba2a6074215e.tmp
Size 28KB
SHA256 13a7467756950502430a5e90cd48d4ffa12f07c0638d6639c6af1f06d93d4dc6
MD5 a10fe012ba55dd7646391849ee5bc36e
SHA1 e747cbd436c3c78348e4d8930dbaeb6b2d160791
SHA512 1000f3c277422f867c66c8304335a6e65d86c18ad09c2ba5dbba689ec9d301a5c0b3ab6204ce690cdb3dbba94948c42d99aa160ca1e0d7221b733a0588153613
SSDEEP 768:mehnP8y32tFWRmaeQwe8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3olLl/9v0zxNrot7:mehnP8y32tFWRmaeQweu1jaKolLp9MzY
TLSH
T164D2F92B244CCB7E4FC05A9DDC566F976EA802C7A6688D4047FE894C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 d628dbce42aa4b9652438ad82bab23453af6c7fa1fa466c08144c25285e00455
MD5 82f7b34ed415666bb88e80a2412f1594
SHA1 55fabfb95d1c063fdcebead6145c96b84bb5243d
SHA512 d21f9a6804e643b33f110731b80e783fdff68feb07a4d49f1a19ea44f94bbea48618077750681c168f31f608659484bb7f7c70c6d8003b9f1a4dafe351e20086
TLSH
T181214485D3B990647E5BA641810F740374B12E75110DACBA232FD1F40F4CC1E0AAFEA1
MD5 SHA1 SHA512 TLSH

Submit Download

04754006-144a-4882-ba9c-2b23175017ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\04754006-144a-4882-ba9c-2b23175017ee.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

1c23c202-3504-4083-809a-f4f5a475a8cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1c23c202-3504-4083-809a-f4f5a475a8cc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fd02321b-8c2c-4374-9edb-8557938b1473.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fd02321b-8c2c-4374-9edb-8557938b1473.tmp
Size 8KB
SHA256 200b793686419fdd03ea66e03a9397d46d6ebc972fa84836e8657b713a3aec58
MD5 8936f7b84957c164b050429356208364
SHA1 95d7546db5bd40d3c8f5ec1465646ba8e9995924
SHA512 f96d90fc1fa729b3a9473ba62a9bcd429d089bc2ed6d5216880a48145bd0b570802241e0537d6f103db4cf2e7dc2f17762ac3d9a650c1df01893f75d39c09f3a
SSDEEP 192:mGNK6FPhQmiUybkX2LX56yOKmzdCP1MrU6:mGNK6R002LX56yO2iU6
TLSH
T17202C835AD787C779EE3EE49B68637139FE4103BE5582F84DAE81E2C019725C2306936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download