6a717038f81271f62318212f00b1a2173b9cb0cc435f984710ac8355eb409081

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 02:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 8.8MB
Sample261027-c2me2a1sds
SHA256 6a717038f81271f62318212f00b1a2173b9cb0cc435f984710ac8355eb409081
MD5 2675b30d524b6c79b6cee41af86fc619
SHA1 407716c1bb83c211bcb51efbbcb6bf2ef1664e5b
SHA512 3214341da8bf3347a6874535bb0ff8d059ee604e779491780f2b29172f9963e23acbe3c534d888f7a3b99274f46d0628962e1e72a5d3fc6f18ca2b62343df485
SSDEEP 24576:cpD6826x5kSWSsRinoHnmfm646a6N6z68SH4SApTJ:cHSek
TLSH
T17B96A52F7F48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF699
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4052	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{15AF2263-E75F-4EE7-9AF9-EC06FD6B95D0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4452	msedge.exe
4452	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 3732 wrote to memory of 5408	3732	msedge.exe	84
PID 3732 wrote to memory of 4052	3732	msedge.exe	85
PID 3732 wrote to memory of 3028	3732	msedge.exe	86
PID 3732 wrote to memory of 3028	3732	msedge.exe	86
PID 3732 wrote to memory of 3028	3732	msedge.exe	86
PID 3732 wrote to memory of 1020	3732	msedge.exe	88
PID 3732 wrote to memory of 1020	3732	msedge.exe	88
PID 3732 wrote to memory of 2008	3732	msedge.exe	89
PID 3732 wrote to memory of 2008	3732	msedge.exe	89
PID 3732 wrote to memory of 2008	3732	msedge.exe	89
PID 3732 wrote to memory of 5792	3732	msedge.exe	90
PID 3732 wrote to memory of 5792	3732	msedge.exe	90
PID 3732 wrote to memory of 5792	3732	msedge.exe	90
PID 3732 wrote to memory of 5920	3732	msedge.exe	97
PID 3732 wrote to memory of 5288	3732	msedge.exe	98
PID 3732 wrote to memory of 5920	3732	msedge.exe	97
PID 3732 wrote to memory of 5288	3732	msedge.exe	98
PID 3732 wrote to memory of 6108	3732	msedge.exe	100
PID 3732 wrote to memory of 4528	3732	msedge.exe	109
PID 3732 wrote to memory of 4444	3732	msedge.exe	110
PID 3732 wrote to memory of 5904	3732	msedge.exe	111
PID 3732 wrote to memory of 5724	3732	msedge.exe	114
PID 3732 wrote to memory of 5724	3732	msedge.exe	114
PID 3732 wrote to memory of 4452	3732	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x244,0x248,0x24c,0x240,0x16c,0x7ffc2b21c188,0x7ffc2b21c194,0x7ffc2b21c1a0
  2⤵
  PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,4766767765832693214,7222140242862635114,524288 --field-trial-handle=2252,i,5519535317243452718,10221543283843894000,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,15434706802931114586,12450855152923585067,262144 --field-trial-handle=2252,i,5519535317243452718,10221543283843894000,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,10021469718155669163,12762646128505425135,524288 --field-trial-handle=2252,i,5519535317243452718,10221543283843894000,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,15652939778869001144,6722037119419102672,2097152 --field-trial-handle=2252,i,5519535317243452718,10221543283843894000,262144 --variations-seed-version --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,12086640599210636790,2629872368051146530,2097152 --field-trial-handle=2252,i,5519535317243452718,10221543283843894000,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,9744176146688384791,6033862047113976580,524288 --field-trial-handle=2252,i,5519535317243452718,10221543283843894000,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,14421542773635857324,17896769813923964044,524288 --field-trial-handle=2252,i,5519535317243452718,10221543283843894000,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:5288
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,10623317563384586408,7496663172652410544,524288 --field-trial-handle=2252,i,5519535317243452718,10221543283843894000,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:5244
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,10623317563384586408,7496663172652410544,524288 --field-trial-handle=2252,i,5519535317243452718,10221543283843894000,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,7366751326826530764,10739322659983365475,524288 --field-trial-handle=2252,i,5519535317243452718,10221543283843894000,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,3614486414200492774,1858639121911664591,524288 --field-trial-handle=2252,i,5519535317243452718,10221543283843894000,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,6208143584730070069,17118383616539854536,524288 --field-trial-handle=2252,i,5519535317243452718,10221543283843894000,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,648429594561724409,2353887434391010805,524288 --field-trial-handle=2252,i,5519535317243452718,10221543283843894000,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:8
  2⤵
  PID:5724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5828,i,14960600249760865760,18052945735575180352,262144 --field-trial-handle=2252,i,5519535317243452718,10221543283843894000,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4452

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3196

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3976

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0bfda964-9560-4bda-ac6a-193a87ac7205.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0bfda964-9560-4bda-ac6a-193a87ac7205.tmp
Size 26KB
SHA256 b7f0e2da6cf2107600555d7ccd8ca81b18dd9fd001a3b118ab9a02e521c125f0
MD5 f57bba72a43b9c7a6d68f601dd5798d3
SHA1 79054eee9d780fde041081fe8edcb70a4627b727
SHA512 c9137e66aa8bd9f166a4547ca60a6016e375fe222f546510b32e1222bdbdaa14f0868a3752622044353f6d56a9d26c070a0eb96d52cb6129f48590dc1709fef8
SSDEEP 384:nN5iFzQkUSv23sNd8TUNTUlI4s5mg3yS/K2fLBP7+ttARQaPHzoldbvaTZclgL/A:NQFd230wgqTSPBP7+tt052bvaTZcpLD
TLSH
T147C24C32E898DD7BECEB8BA5A74E3643DDE04153C98C9AD4DAC95C6C00DB19D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e0a6520-79c4-4004-838a-dced1eca2ea6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1e0a6520-79c4-4004-838a-dced1eca2ea6.tmp
Size 26KB
SHA256 4037a92705e2ad3d643bd43968091cc885902f1ca1080fdf57d3175bd8b00a57
MD5 ee5b091e3b8367f8a5a900dfc5b1bcd8
SHA1 e72c0138c49b18ac2a6ebd3b0542addc5a4ef6f1
SHA512 0d984440808d7ef754aa5430e1091c64f36e7195007d811b3f55456efd4173230d76363d5d9ef185dd6e14fcdd96554d211f906a9ae4201fbc42d46c26ed12b8
SSDEEP 384:nr5iFiZcI63sN58TUNTUlIm25mg6yicK2fLBP7+ttARQaPHzol7b7O6R2FeofgLd:rQFQ63EwgSIiIBP7+tt05mb7TR3f
TLSH
T101C25C32E898D9BBECEB8BE6A74A3607DDF44153C58D9AC0D9D85D1D008B5AD030BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38c47a83-7a78-4b48-8df8-3e70da34c61b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\38c47a83-7a78-4b48-8df8-3e70da34c61b.tmp
Size 27KB
SHA256 152e76652cf83c77a788844b73ec9685b64218cb274ae08f94e2bcbb412d61aa
MD5 6b3d5c7c3312655399734f614c81dc4e
SHA1 98e93c79dc6c6bc45dbb85ea73674b002c8f793f
SHA512 4cba9f314f6e63f16cb401770fa80f56bff98766807fa6061cf1e12daf265f7540378e7d220bbc512ee7f13169b3859dbbfa8f67bf2c7f64b63e7b6142ec3a83
SSDEEP 384:nNiFzQkUSvSf3sNd8TUNTUlI4s5mg3yS/K2fLBP7+ttARQaPHzolhbvaTZclgL/A:EFdI30wgqTSPBP7+tt05UbvaTZcpLD
TLSH
T10FC24C32E898ED7BDDEA8BA5B74E3643DDE04153C98C9AD4DAC95C6C00DB19D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

527b0735-6d00-489d-ba13-7b08fe8d6419.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\527b0735-6d00-489d-ba13-7b08fe8d6419.tmp
Size 25KB
SHA256 bb5d7246349542b2a2b04b59950e44923e339bb41cb0b663baff79b719dc7d7c
MD5 bac54976193cf4fdc904dc9bddb208aa
SHA1 7eb068e2ab09d1ab46d9a5000e1a10d6652749b3
SHA512 9c8e3ee39c85c3203b55463b7cbb4e5cfca3aec06d1af0f8caea61dd9413fe30b4d220a3579d60db926a57586246ad0eaa1eaaf30709b4c0670d2251ddb07503
SSDEEP 384:n05iFiZcI63sNO8TUNTUlIm25mg5yynK2fLBP7+ttARQaPHzoF8c7O6R2FeofgLd:0QFQ63rwgSdy3BP7+tt05a77TR3f
TLSH
T16EC24A36E898D9BBECFA8F9AA74A7A07DEF41163819C99C0D9D85D1D008759D0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

0a72d3c7-44ea-4938-a5f9-1d80b7e257a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a72d3c7-44ea-4938-a5f9-1d80b7e257a0.tmp
Size 414B
SHA256 d2f9e4f21e72e087cbbb2bc3da8a5720029ad225ccad27a176f51c44865cf00e
MD5 77aea6781198dabf62ce2956752e66fe
SHA1 7be49830f7615cfe364ac45ab7169cd3ddc60059
SHA512 cb2f5df23bf9e814606ccaa74e5cbf363b8ee406c0915e8c8035668278649e23256367a5a8147f7263c2c618af269dbebd1098893c5d44ba90e5a2feb669dd7a
TLSH
T1BDE022FACC6ABC3B0CFC4B2850540685EB41035B2A81888B3B3C901D8FF5A36418686C
MD5 SHA1 SHA512 TLSH

Submit Download

31a7f104-bd72-4d4b-af9a-1e1a886f8f60.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\31a7f104-bd72-4d4b-af9a-1e1a886f8f60.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

3a2fe9d8-17c5-4c97-8240-349ef2b7f527.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3a2fe9d8-17c5-4c97-8240-349ef2b7f527.tmp
Size 12KB
SHA256 186f5549eb740bf9d89d9c24ab94fe04d57b042dd7161eb022e181824e1c1f5e
MD5 1dae7bf3f379c82ea09e5a0947f70c57
SHA1 40eef748c56247d12225c115ce965ea5ae4527a8
SHA512 72b2fdc5f7c267208ea69c81704ef9f913d81b541934ab8a198f18126ac94678cebb6bf7dd9fcb78121a94f23d52eccec4fffe30c848a1b5331959815357f1bb
SSDEEP 192:sxZhRgk6/fgsOQZZBVzodpHPHW6+WNGYbItIbYx6Ig5zFJ:sxZhx6/fgsOOZB+vHbGFcYo5v
TLSH
T1A742B7156E28B93B8CCBD319FA55BF53D7F95032A0951E48A6FC8A2C14EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a09a847-b7eb-4b79-bc8a-e285d49cb500.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9a09a847-b7eb-4b79-bc8a-e285d49cb500.tmp
Size 12KB
SHA256 18577f505a507445b0df0040252a873e56af38ca71ab2ad087c384fac416110b
MD5 fb071a05001255b61098e7e26eecebce
SHA1 4d2124a76a5977208a78166376080c71a2ead378
SHA512 701161b075f29374ffc572f022079f20a47038c9cca38d4c77a125b67827310a2fa3d768ded1d7d12f122cf8ebe12575dad6f1e2b32eb265d9f903f5abb96166
SSDEEP 192:sxZhRgk6/fgsfQZZBVzodpHPHW6+WNGYbIuIbYx6Ig5zFJ:sxZhx6/fgsfOZB+vHbGFFYo5v
TLSH
T12B42B7156E28B93B8CCBD319FA55BF53E7F95032A0951E48A6FC8A1C14E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

72e88ba1-3005-4bfd-ab08-c19201ed5e16.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\72e88ba1-3005-4bfd-ab08-c19201ed5e16.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

18fce7f5-2091-4cd7-9250-6fe076ea67cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\18fce7f5-2091-4cd7-9250-6fe076ea67cd.tmp
Size 1KB
SHA256 78807884d512228cdc4e1c5dac23a8b9cf72d2c435743b08eb759344a61ed321
MD5 1f73698c5e6a6fafd34ee94371142923
SHA1 a7bb2b5770c075f0029568617f23323891f5aa59
SHA512 268d62cf1bfa7649d94f58337a498f4a166041ab615b3a74d0ede3613fc1db08f55f48260d0f38588c4cb09e9d9411dddee61f85335cade30fb368d4c4571a95
TLSH
T1E231AFF787F4856E8A0196F0AA28AE2BDE2D0514432C7D9A84E4AF2BD3E3471D14165F
MD5 SHA1 SHA512 TLSH

Submit Download

60e081cf-258e-4eb0-ad45-9ebd8d7427ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\60e081cf-258e-4eb0-ad45-9ebd8d7427ce.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

aaae1cce-9b93-4098-bf16-770866212541.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\aaae1cce-9b93-4098-bf16-770866212541.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 8f2ff4b50553fc163d24db6ff49874b55f0f48a07e431609064b4f600b3b83d2
MD5 77eac78201d4af935b1a25d05f7f3536
SHA1 29caa69668ca70357e02e4e52d668e28e048eaa2
SHA512 11ef48e67ad845aa5cdf633c710e75b90803be7f427c6c9cd85963107206bf8877dc5bba3d9d5558120da44644b25badef421ce7d456c3b558a19bcab9ce6de3
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXYPjq:OtfFvpopPxrB4RhfYLq
TLSH
T105B2311471BA021138FE690C81B6972F464232B37159E62F3FBD14A69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

d510b8ca-7854-4161-9b4d-0347873b3071.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d510b8ca-7854-4161-9b4d-0347873b3071.tmp
Size 11KB
SHA256 e30f93d81041584342e8ba961f9364c5562759d0b72559949fd905927d3be130
MD5 c15d20191ecf8a9d4f11fc4d308d2bab
SHA1 0443b8232dad8760435264b3e4e695b43b7e2bdd
SHA512 83d9f81acacbde6234e41d2f3c46b79d2c58d79c270ae1612dff0944c8450aaf7e1fbd58ba16d1e0f480aedd1683a3c867c723b60ae2b5f2850b17a1cd8d161a
SSDEEP 192:sxZhRgk6/fgshQZZBVzodpHPHW6+WNGYbItIbYx6IgjFJ:sxZhx6/fgshOZB+vHbGFcYojv
TLSH
T18742B7156E28B93B8CC7D319FA55BF53D7F95032A0951E48AAFC8A2C14EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9f13471-e4fd-45ff-bc6f-4a811f8be931.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d9f13471-e4fd-45ff-bc6f-4a811f8be931.tmp
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a013e78a-cc8e-45e5-9833-4482cf9ca54a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a013e78a-cc8e-45e5-9833-4482cf9ca54a.tmp
Size 26KB
SHA256 2c2b1c100b8c157e13684e55e461e2adca7deabb99217f1bc2793ae71e7e93dc
MD5 16d55692d938c831990ed850140e7189
SHA1 d1a2b5f0bc55e6e7119c131e1a60bdf9bee5722f
SHA512 85e23e42d59fd761b838c6afefe32958e86dd92ffd13f6d4a2d75666334525b41358c46c8f6387b7e637e461123c8195fd45a7ec572efe59d9d16997c0a8cbd0
SSDEEP 384:nm5iFzQkUSv23sNd8TUNTUlI4s5mgVyS/K2fLBP7+ttARQaPHzoldbvaTZclgL/A:mQFd230wgqLSPBP7+tt052bvaTZcpLD
TLSH
T1F4C24C32E898DD7BEDEB8BA5A74E3643DDE04153C98C9AD4DAC95C6C00DB19D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6e8f7f6690f417ac579f2da9cf1c1888e09d7c8aed8cf3f542e24225a4a40ffd
MD5 8bc26d6faf4992d3acdddbd8da207049
SHA1 7033401074f96fb5634571b29df98b1c388255dd
SHA512 d2d978a906f6a05844cb462db7f83939d36a419aac5a5c05bb056cf264e2c6ef6ddeab94c869a1e6007da2ac5cc08781617b7f62cad9d38a7622efc7dd7b13c4
TLSH
T10541F859A6FE1148B3B76E59ABF6A87E487A7D272F56C5AD00110D4F0722E00C871B37
MD5 SHA1 SHA512 TLSH

Submit Download