c6080d60736384a4a8fdd23404d59ae2d939e5124d80df89f8fd4e450bb9bd6f

Analysis

user interaction
yes
max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 17:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 8.7MB
Sample261024-wfzb9awsd1
SHA256 c6080d60736384a4a8fdd23404d59ae2d939e5124d80df89f8fd4e450bb9bd6f
MD5 edaeffe92dbfd973958c9d2267201b32
SHA1 ae43e814d3eea2ff27bb414c9e26ecb1b5c0341f
SHA512 d0e58cf4bc9db25982d726f1ba65924bcef8fa405f06f6abf0ab80177d691805ff228039c5a85c3a8029e4422fd50c3d8e84bc6528771092c79e3d5229f43281
SSDEEP 24576:2o9dQj6p6j6j1WZswRiXj3mfI/6k6mjK64jK6gjK6e6cjK6feGjl8LpH:BWVeG2
TLSH
T1E896A52F7B48037306C642A26B8B65CAF21F903F3B561654345CD1681F6BA2983FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
900	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{C9C08134-62BA-42AD-B39C-B586640A3706}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2812	msedge.exe
2812	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe
5488	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5488 wrote to memory of 1616	5488	msedge.exe	88
PID 5488 wrote to memory of 4408	5488	msedge.exe	90
PID 5488 wrote to memory of 900	5488	msedge.exe	91
PID 5488 wrote to memory of 4408	5488	msedge.exe	90
PID 5488 wrote to memory of 4408	5488	msedge.exe	90
PID 5488 wrote to memory of 400	5488	msedge.exe	92
PID 5488 wrote to memory of 400	5488	msedge.exe	92
PID 5488 wrote to memory of 3452	5488	msedge.exe	93
PID 5488 wrote to memory of 3452	5488	msedge.exe	93
PID 5488 wrote to memory of 1844	5488	msedge.exe	94
PID 5488 wrote to memory of 3452	5488	msedge.exe	93
PID 5488 wrote to memory of 1844	5488	msedge.exe	94
PID 5488 wrote to memory of 1844	5488	msedge.exe	94
PID 5488 wrote to memory of 6060	5488	msedge.exe	95
PID 5488 wrote to memory of 6060	5488	msedge.exe	95
PID 5488 wrote to memory of 6060	5488	msedge.exe	95
PID 5488 wrote to memory of 1032	5488	msedge.exe	96
PID 5488 wrote to memory of 1032	5488	msedge.exe	96
PID 5488 wrote to memory of 1032	5488	msedge.exe	96
PID 5488 wrote to memory of 2968	5488	msedge.exe	98
PID 5488 wrote to memory of 3204	5488	msedge.exe	99
PID 5488 wrote to memory of 2968	5488	msedge.exe	98
PID 5488 wrote to memory of 3204	5488	msedge.exe	99
PID 5488 wrote to memory of 2172	5488	msedge.exe	101
PID 5488 wrote to memory of 4584	5488	msedge.exe	105
PID 5488 wrote to memory of 3096	5488	msedge.exe	106
PID 5488 wrote to memory of 4316	5488	msedge.exe	107
PID 5488 wrote to memory of 2920	5488	msedge.exe	108
PID 5488 wrote to memory of 2920	5488	msedge.exe	108
PID 5488 wrote to memory of 4456	5488	msedge.exe	110
PID 5488 wrote to memory of 4456	5488	msedge.exe	110
PID 5488 wrote to memory of 2812	5488	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d4,0x7ffaf23fc188,0x7ffaf23fc194,0x7ffaf23fc1a0
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1608,i,16489845852295881927,13801153820674610773,262144 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:2
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,8212125264440208329,5805824284585357223,524288 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:11
  2⤵
  - System Time Discovery
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,2386860141504633727,8941981526806936274,524288 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=3116 /prefetch:13
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,10738622887915921010,973179501094353394,2097152 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,6664039150982326098,6242696890727948517,2097152 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,5745458377086256167,1290247345764539694,2097152 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,7103800072765739498,13304735019810097211,2097152 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:9
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3700,i,13742898527152067878,15088625714774151549,524288 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,2267872228987192271,15066635096109797711,524288 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,17737625490308824623,8324226368883161277,524288 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:14
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,17737625490308824623,8324226368883161277,524288 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:14
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4744,i,9276034598821772872,12239925302610893220,524288 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:14
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4788,i,8686638930209506336,1913627811970998821,524288 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:14
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,8191813634712369788,378714918578459209,524288 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,17030026665072804996,14654396013231957560,524288 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:14
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5620,i,10965807652420585701,2901364517992587167,524288 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:14
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5524,i,8362342561063012129,4988911834799157600,262144 --field-trial-handle=2436,i,2736473006492140253,12046751700868782489,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2812

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3840

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4668

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5d0a35c5-a23a-441f-afee-e51ae5663623.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5d0a35c5-a23a-441f-afee-e51ae5663623.tmp
Size 35KB
SHA256 434416fb8c3b68c5995b84b8a291446291b4ee9899880c35b18de2d56f2987df
MD5 5d0b4abd31da288a181726db10a736d2
SHA1 5439f1e0f3d86a7afdaf87674a235d4a18065544
SHA512 30fa8e0b46e75125cb544f40e69664ea36b130e5699acff239d0b19985c2b468a136664bb7bd7b5c833e7b8027bc27dd46c0464a5632e3bef67dc4e3f06884a9
SSDEEP 768:ju3XIlAgm1OgJAfDmGA5b65Q92RQMPbILTL3:ju3HAZAF65dQrvT
TLSH
T16EF2C032EC90EDB39DB5A6C1724AB242BFA88213D5CC46909AD97F1C01C75CE535F92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

629fa0ab-abe0-4cef-9def-0c4c9b923c6c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\629fa0ab-abe0-4cef-9def-0c4c9b923c6c.tmp
Size 39KB
SHA256 c0bc694f71e91216f7846c1046b3e9ccf54f93b4a66e64d53f34a605dfc6b648
MD5 a4cf3e6e15f0977b28e286df16d0b23a
SHA1 f7ab0d9a8fccaa5c4b6977bac8cc0d317921ca32
SHA512 91d6b6b9f32415aa762adc8c5cf42e0b860e0d9adf5223e08a6850d90e9afe276e8eca28354d913962aad0f49b7052c68f2eab3e46ef68e693167f9869dede66
SSDEEP 768:Y/UxvxjgC+B30Lmgm1OgJAFDmGA5b65Q92RQMPqIFj0O:lZj3+B3PAPAF65dQYFQO
TLSH
T17F03D032EC94ADB3DCF456C0365BB356AFF84163D1C545E049E92E1D06C7A8D830B96B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a415d3a-4e9d-422d-b456-ff94f3f873e4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7a415d3a-4e9d-422d-b456-ff94f3f873e4.tmp
Size 39KB
SHA256 7dff0248d356674288f742fa4a77e641f1f6e0a86a947abb3609c08c56a91d8a
MD5 1a782be3302aa83cbe525685e03d920a
SHA1 a3034faa452fbc8d432630fb34a2f48217188728
SHA512 66087eb235701efa0ef4ee2ea7939d4ec986caf7070cdd44710511cd27322a1a2e4d4e2a442c48defaa09ebc420e1b3f394d7ad56a62bb0836e082cc6d0b052c
SSDEEP 768:U/UxvxjgC+B3q8bavgm1OQtDmGA5b65Q92RQMPbeNFj0O:BZj3+B3qQQ3AF65dQTNFQO
TLSH
T1E203C036EC90AEB3DCF99280364BA35AAFF84573D0C556A049E96F1D06C768C430B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

89d58929-6f84-4e65-9b31-4ba0ec444fa8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\89d58929-6f84-4e65-9b31-4ba0ec444fa8.tmp
Size 35KB
SHA256 e747a22189ec72bd1f3bf6f8526dfcab776e873f40aaaa9a0c3cce945ef26070
MD5 81658d6fee8b39ce83ea1e3edad34057
SHA1 8f1b5c3f8c067406a49a8adcd2941768b0dea2d7
SHA512 bba2281494a3bd6ac3864e666f557b3b94691d19aeac9ff5a1b970bf37e6e5ad02f58b5347526bc1e16dc8c4a83e55f055f8df8975c909187a5c327eacc43606
SSDEEP 768:vu3IIyAgm1OgJAkDmGA5b65Q92RQMPbILTL3:vu3/AMAF65dQrvT
TLSH
T174F2C032EC90EDB39DB596C0725AB242BFA88213D5C846909AD97F1C02C75CE535F91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

35196ea2-85c9-4e21-a06d-2ccc4ecf2960.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35196ea2-85c9-4e21-a06d-2ccc4ecf2960.tmp
Size 11KB
SHA256 c465b043b7dcbb59ab9b29864f7d24e041891545c325519971260e03536967be
MD5 ee1ccab223704c9b23ab5299ddfd00b8
SHA1 ca5ce69c7d21d8bcdfc2ff2ca831ec7f69d3429b
SHA512 f7be11a51b9c4e0b406bf63faf47aa1695a20394fa54feb57f9cd20785da8c7392d714598ab3b08f93da29c019ff7188ceec3c391a9a7a16ac1ca8803dbae4a5
SSDEEP 192:sxRxRNbr6/fsrsNyYh0zoA8p4l/g6+WNIY2FNcEGTIgDCJ:sxRxXW/fsrsNbVQ/5Iarq
TLSH
T19632C915AD28A93B9CD7D20DFB65BF53D2FD5033A0901E48A6FC8A1C04E76DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f2e375f-3469-450d-8e14-808a46d46105.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5f2e375f-3469-450d-8e14-808a46d46105.tmp
Size 11KB
SHA256 a535e8cd3d773193fd9667d3c31f819180603f372106f82b31c32d7be21edca7
MD5 085c2cfd39f60c322fc68c1b304f83cf
SHA1 7989e6a1258870cbb71fdbef7c415c4d6bfc1fd4
SHA512 901152707f29d68857a51de3f7757cbe4f0180e6a95c95c4a769194b5b1f70a44af3db180f1d4cead94f75fd0bc54e3eabe0880ef5a0b435bf0a9062cae0d474
SSDEEP 192:sxRxRNbr6/fsrsayYh0zoA8p4l/g6+WNIY2l5cEGTIgD4J:sxRxXW/fsrsabVQ/5Iero
TLSH
T1AA32B715AD28A93B9CD7D60DFB65BF53D2FD5033A0941E48A6FC8A1C04E7ADD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ecff624-2a6c-4054-ada7-93efc7782bb4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9ecff624-2a6c-4054-ada7-93efc7782bb4.tmp
Size 11KB
SHA256 eb5d0d26567bcf61b7845ffb8267506d313d78cb8d74f1edd846564c2bd6648c
MD5 5fd3abe4b6272c724f8b229ee3020dcc
SHA1 458d52e8135fab6704b9eccd620eed1613004ed4
SHA512 5d2a9889ef4c4a1304206e8b612ec96d8883f731fd4e7b45c4fb6baf8230891a6229655cecea9fc17e957034b9882e9e406a361c84e3497c1a560042b03b9e5b
SSDEEP 192:sxRuRNbr6/fsrsDyYh0zoA8p4l/g6+WNIY2FNcEGTIgIJ:sxRuXW/fsrsDbVQ/5Iars
TLSH
T1EE32C915AD28A93B9CD7D20DFB65BF53D6FD1033A0901E48A6FC8A1C04E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9fec8ba3-ef02-447c-86a8-96235e278351.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9fec8ba3-ef02-447c-86a8-96235e278351.tmp
Size 23KB
SHA256 0eee036873f8dd8f83277a8fcd630e2f7ad325760629797c7f9d722501f0f010
MD5 98d805fed55214958060b2fa08720519
SHA1 4ac608b5b718465d94f25b8396fe27239c2e91e5
SHA512 6a272118932acd078f2263fffb846464ff9c78964f4e78e9f3d9228794d5878301c4f01cdf36898d298d4acad5d24911e94592ed061687a40fa156864c024b81
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWhroHr9:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0VA
TLSH
T1CEB2EA2F640CCB7E8FD00A9DAC596F9B7D9802C796588D4047FE994C02C7BEA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 e7448a6811c04bffc012a92697058ad6e9d6f258be27dacc3f4f7a5692cc255a
MD5 10ef4d9664ebf4979147134485cc4eb5
SHA1 e982543bbea30ad7dd56d76d69e0cd1dbde48e4e
SHA512 6d5166385bee5205812ec1eadd1e13c939fe295745e265a5a06c85d5573a8b5a2ae833cb543dd4b4f188effedc522b6499209700521b0f1be1bbca0fb603609c
TLSH
T147E07D8545C9C33EAF186CC7036C530C83E0362AD7C1790F6718CD88740D448B3C66E4
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 0565bbb3f8731bf87d64fdf620fb156d22312b677b0ff7e0e6f8b5ed440121b2
MD5 04f27b5e5e6c472e11f5d1cafb056a7f
SHA1 51cf3d9f5b09b8d9cf25d5b4161c3f8285739539
SHA512 78ee497c38511a37b9a15b950be5cbe5d25583f1207ca0a8250843343d6519b3024bbeb1bdd87347352041a519f8de6561cb62773b81def0429532ba370509b1
TLSH
T1FD51B6BC42AF0159DB54493353E0618B3B38EAFD0A673EFF1DAAC8B45B16715DE05004
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 88dfb57a884e1a557f1d693611564b16d4a9eb750f2008c49eb8b1beb8d08c43
MD5 4041f9fef633b60b7d171f22d461a0b2
SHA1 259037f3138bcba1fa864f53a67107f906dc1751
SHA512 0c95f3d462981a61555d01a4e0d3c9ba6d77e69d57d6cd04923e16358623d771dc7c3d9ce0f822624aecbefbde2684abd17b3d7b5c3883437dbc86dc25f716be
TLSH
T1E751A5BC42AF0159DB54493353E0618B3B38EAFD0A673EFF5DAAC8B46B16715DE05004
MD5 SHA1 SHA512 TLSH

Submit Download

9b164c54-8670-4540-964e-cf0591e7c54a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\9b164c54-8670-4540-964e-cf0591e7c54a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0a54d219-14b7-4dca-b2be-7e8c3c826fbe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0a54d219-14b7-4dca-b2be-7e8c3c826fbe.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

1e4dd06b-207a-4b0f-a232-5acefed039f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1e4dd06b-207a-4b0f-a232-5acefed039f1.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

cb1454fb-c011-4450-aca3-ed36846d8f9a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cb1454fb-c011-4450-aca3-ed36846d8f9a.tmp
Size 1KB
SHA256 96fb4c8bccc51505e325871e08e68f31207297f09669a9724a819ae2ce060014
MD5 c7896afe5677e79062e905c973268506
SHA1 abe7d58c46b6f88476e105dd38d44123bc389ff0
SHA512 3f58e45a00f897c5802079fba77a5b6b58e372660562bd51195473bfa08bb064635896f3286ee8ba2dc74c12a1716970e59458ed4eb01972bced2bb7818248a1
TLSH
T10031C0F783B4957E9A01D6F0BA046E1FCE2D0511432C78AA85E45D2793F3462E181A9F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f9f31552-217d-4745-831c-adc17d861f71.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f9f31552-217d-4745-831c-adc17d861f71.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

fbb120f0-26a9-4cdb-b295-aa92a6a7e25f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\fbb120f0-26a9-4cdb-b295-aa92a6a7e25f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2f9dab2-94e5-4229-9579-4f55050de43f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c2f9dab2-94e5-4229-9579-4f55050de43f.tmp
Size 37KB
SHA256 b9521ee92d20b1e863c053b447a8fd5dfad9006b9d37f08b92895f67fbd42e2f
MD5 08a64cbefc5df5adf51583a9bb69ee7b
SHA1 59b6190309e4298aa8440c074eb6f7403d82b58a
SHA512 a1be59ef2a2dc5309cf778eb631f8b9e0e88f1074f4ea44d98114b6923db56d06eff91193890ae4c476ee14886467265db573af3b6068d91128ce3611c636a51
SSDEEP 768:yFdo3IwgWIlAgm1OgJbDmGA5b65Q92RQMPbILTL3:Co39dAF65dQrvT
TLSH
T1C603BF33DC84DDB7EDB99BC0B65AB242AFB48263C5C98690A6C96E1C01C75CD134BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

13a1c987-da81-4551-99d7-98441d4698d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\13a1c987-da81-4551-99d7-98441d4698d4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download