b911161e6594ec76b872498b423c54406168f2974e0d407a847f7de1e5ff94dd

Analysis

max time kernel
148s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 04:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 19.4MB
Sample261030-e1d4dahs21
SHA256 b911161e6594ec76b872498b423c54406168f2974e0d407a847f7de1e5ff94dd
MD5 c8e8384bda055e42bcdc54cda98574ba
SHA1 eb7da46ad66f356437b4e7a41be3b41c52396f11
SHA512 c3fb288e7d25dbe61b132c81811d6d3d4deaf1ef227f1c9d8e56063c55e7204be57899f84492ad554553f21ad8642f27301e3ea12a8298247cf6dbb0a5c312f7
SSDEEP 49152:rP2/kdNTzeM75TYp2tzwC0/J3r8xsJQnFTCa7id+Ui4WMEAcA3:q
TLSH
T18627B46BBB49037316F242626B47A5CAF31EA13F375A1654309CC1182B7BD2483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3836	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{E366A718-F775-40FC-821F-0D39E06CC3B5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3972	msedge.exe
3972	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3568 wrote to memory of 3688	3568	msedge.exe	86
PID 3568 wrote to memory of 3836	3568	msedge.exe	87
PID 3568 wrote to memory of 1092	3568	msedge.exe	88
PID 3568 wrote to memory of 1092	3568	msedge.exe	88
PID 3568 wrote to memory of 1092	3568	msedge.exe	88
PID 3568 wrote to memory of 2260	3568	msedge.exe	89
PID 3568 wrote to memory of 2260	3568	msedge.exe	89
PID 3568 wrote to memory of 2960	3568	msedge.exe	91
PID 3568 wrote to memory of 2960	3568	msedge.exe	91
PID 3568 wrote to memory of 2960	3568	msedge.exe	91
PID 3568 wrote to memory of 4276	3568	msedge.exe	92
PID 3568 wrote to memory of 4276	3568	msedge.exe	92
PID 3568 wrote to memory of 4276	3568	msedge.exe	92
PID 3568 wrote to memory of 4280	3568	msedge.exe	93
PID 3568 wrote to memory of 3720	3568	msedge.exe	94
PID 3568 wrote to memory of 4280	3568	msedge.exe	93
PID 3568 wrote to memory of 4280	3568	msedge.exe	93
PID 3568 wrote to memory of 3720	3568	msedge.exe	94
PID 3568 wrote to memory of 3720	3568	msedge.exe	94
PID 3568 wrote to memory of 3276	3568	msedge.exe	101
PID 3568 wrote to memory of 4508	3568	msedge.exe	102
PID 3568 wrote to memory of 3276	3568	msedge.exe	101
PID 3568 wrote to memory of 4508	3568	msedge.exe	102
PID 3568 wrote to memory of 1164	3568	msedge.exe	104
PID 3568 wrote to memory of 3780	3568	msedge.exe	106
PID 3568 wrote to memory of 1728	3568	msedge.exe	107
PID 3568 wrote to memory of 3088	3568	msedge.exe	108
PID 3568 wrote to memory of 1800	3568	msedge.exe	110
PID 3568 wrote to memory of 1800	3568	msedge.exe	110
PID 3568 wrote to memory of 3972	3568	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffa1478c188,0x7ffa1478c194,0x7ffa1478c1a0
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,17223549621539015569,17634431556576670739,524288 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,13377941046060616345,10324228275900328668,262144 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,7787215557910750849,1851080545774567671,524288 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,11496877442448143718,11381655344236506766,2097152 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,17146418518416942122,8858179346449504246,2097152 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,3088770829425561082,5023464687292635747,2097152 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,819983365505886273,2260860670048747317,2097152 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,4615119638559388019,8560555976692062679,524288 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,222442044478564424,17575072880473352128,524288 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,12134975190188748120,17854468945384174619,524288 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,12134975190188748120,17854468945384174619,524288 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,13503143053679013737,3083629215707530738,524288 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,11804250747672052998,311190697828303270,524288 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,9725459480709453325,11077686151936556256,524288 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,342011796773215991,9222130130992552465,524288 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:8
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5200,i,3382222863989925580,16507737528346113421,262144 --field-trial-handle=2208,i,5584319196731831752,12002226465769535939,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3972

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

188892f5-9077-4dac-b71e-5fdd94367dd2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\188892f5-9077-4dac-b71e-5fdd94367dd2.tmp
Size 21KB
SHA256 4e932483b58042f00c07257dc21bb4229ab4a0ee9908e8c2dbde670de4fb81f0
MD5 e53e43e4080c1e3d394eae7dfc5b21d8
SHA1 ded35bdea8ca6889310535425c73160a301133a8
SHA512 cc8311dcb8ef732a25bd3b68fc8c59b069cd011fd599caa35afc038db871069453c36068667dbb5b7ad1c04003724cdfb4d94cb5e876dc488a3d16dab6732759
SSDEEP 384:7iFzQkUSvOzsNE8TUNTUlIly4InrMdup5u8i2ppYov+O2IMMtUnIIlt:WFdO1wgGMyk2bH75ZUnLD
TLSH
T18AA26D369C98AD3BAEB79A50F64A3203CEB48167C6D49F94E7CD6A1C01DB1DC1307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58a6f1a2-be9d-43c5-a064-c7b8da594bc7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\58a6f1a2-be9d-43c5-a064-c7b8da594bc7.tmp
Size 18KB
SHA256 eff0f67fb39b3f4f604db31e90e0eba135f9552f277ecb6dd6d641a4a3628fd3
MD5 54f2a071b7e7934735b19875629180a2
SHA1 2dc8b23eb78d0a1bb86710c398cbff724ca24eda
SHA512 b9b9224d4105c13c32bc38272494af5569bb079cafb2bffcf65f18a682f52682258c6c8d8918f17d4f18e24fdea5a8ec3e3d86be3aeb907a5686b5c1183dab87
SSDEEP 384:dQkUSv0sNMy4InrMdup5u8i2ppYoM+O2IMMtUnIIlt:H0sMyk2bU75ZUnLD
TLSH
T1B1828E35AC686D3B9DA79560F64A36038F78812BC7C84F84E6DD6B1C05DA2DC1707A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6212ec32-5e94-4452-a526-0537ac66f255.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6212ec32-5e94-4452-a526-0537ac66f255.tmp
Size 18KB
SHA256 d471b9f81a32ab53f735f97d7cae5018046b31a1fe1aceb0064be48862bb603d
MD5 45c16d2e178abca0287d7aba5618567a
SHA1 f58f40fdf244bfd9a17c07fdb574ab3dc9690b1f
SHA512 20db6c1d3dcf424f62327c16392f494276a0ae2f73dcbe63d90590305c6f5d36789f8993df5286cfbb81405b402617399d0ec574a5dac41efea7da224317c192
SSDEEP 384:4QkUSv0sNMz4InrMdup5u8i2ppYoM+O2IMMtUnIIlt:w0BMyk2bU75ZUnLD
TLSH
T1EF829E359C686D3B9EA79560F54B36038F78812BC7C84F84E6DD6B2C06DA2DC1707A17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8395b76f-8b49-4e65-a98e-ea1399dd6200.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8395b76f-8b49-4e65-a98e-ea1399dd6200.tmp
Size 8KB
SHA256 cf5270899920a348bd8255b3cd8fdef0d809688cdfdef1e2c98528e7eaa00c17
MD5 a3aa91c1c9a0b8f747d848767885443e
SHA1 81a0a39535de645800075bac34e19219b34f8c66
SHA512 9e0b3b6253364a68da3ccfce71559c6eb652df0a0c37cf909f26e55d6908c9d187f76edfa3712bd4cd8a950865d4f7630f8ff39883ac2a50b5fb83833939065d
SSDEEP 192:pONN6iD7QmiUye/nq5u88P/uhgKpPwoj7uZ3qJOU6:pONN6AJnq5u8i2ppYoK+OU6
TLSH
T11C122C356868BC3B6DD3A860F48736139EA9412BDB886FC4D5EC2A1C06EF69C5707913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

7704d1d3-945e-4114-b519-e667a3f68204.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7704d1d3-945e-4114-b519-e667a3f68204.tmp
Size 10KB
SHA256 10906bdf778dbef58fba3495262be385e3dcc8c30c01536741be0dca5dc8736e
MD5 39ad58ffb1918d52c3ef82fe43eb2b6b
SHA1 70582ca5f1e100139213ea0f7d4e09e8f8c8180b
SHA512 0103f8e4c04fbad6ec2b4176766a9226c1997445fe827b999e96eb3ca2e805d80ef77e4213fc7bfaa06fdb7f7a0b81a9e047af018e48f897ac2b9cb2ade7837f
SSDEEP 192:sxZIR6W1/fFsQqwIdpd8HW6+WNGYamhklIg52J:sxZIr1/fFsQqROHbG1o
TLSH
T19422B8556E28A97B8CCBD20DBA55BF13E6F9503251941E88AAFCC61C05E7ACD230781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9dfe00b5-4990-4a70-9399-7bcb79ab00c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9dfe00b5-4990-4a70-9399-7bcb79ab00c7.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 9f2a8bddc6b81de63961d59ee63160f854ad2375806e4e016d015694df5c139f
MD5 bc59f4cc5d85ff13fedc9713ef722ebd
SHA1 126b6cce32832305cbe2e1c9bba900cf831c1f93
SHA512 b62feab41734defb599c5f17fcf75576b6ca03a2c01af3ae614bb5cb36331994557b81af7b2e9fa0dfeb8c0f513a1fa7c985650d5cd02155812cb7e8e82b7f34
TLSH
T1B961708CEE918577F794C8B187D132B77AFB44B958833D31A3ACE8E98B567423320044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 15575e15c4496629207b79d87fb6c23ace31bcae4004c2f37781300fc312e9be
MD5 4467a4062e5f0de670a080624b1b2d26
SHA1 e4a3214062867be1b50d004bc5aca2e4d28de3ac
SHA512 aaf90eba7c9d47837520fa1a8c83daff6c59da559680bb2fd18a52cb3540aa8d0b2173a9f85e0dd529bc86085a9b4740e91b24735de986ea6286dbe322ed3022
TLSH
T19361728CDE808577F794C4B187D131BB7AFB44B958833D32A3ACE4E98B467423350044
MD5 SHA1 SHA512 TLSH

Submit Download

02b8090f-4684-4f0f-9615-eff1eaf03daa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\02b8090f-4684-4f0f-9615-eff1eaf03daa.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

6d8ba981-3cfe-404b-bc0f-16168e506bf2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6d8ba981-3cfe-404b-bc0f-16168e506bf2.tmp
Size 949B
SHA256 c30cccfcd1def9c5caa59ee45a2679f339a38040c6a363c2232a480e299ba32f
MD5 29fb97d92c5ded7a203aebf516f9049c
SHA1 0b0c792e016990b077cb5da182531d60cc30d540
SHA512 9dc9c186a292a20616b9779ad6a575d127aeae587edc0d6d58c8f640eea9eaae162485d85fba9686c0d28815b2a39efc74acbb311a8616e2ef520ca85ffbe127
TLSH
T18811BAB3C3D585AE891156F06A28EE2BCE2D0606821C7C1989D4EF2BD3E3075E00295B
MD5 SHA1 SHA512 TLSH

Submit Download

6f8010b1-8664-484a-92f7-97b3452b6bc2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6f8010b1-8664-484a-92f7-97b3452b6bc2.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

875615be-9acc-4093-b47c-2a3f934798b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\875615be-9acc-4093-b47c-2a3f934798b0.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0b0aa83190032326d61c1777889017360a05f933cfb4ab03c9607f44ac496242
MD5 bc4fd325dda1528b7a24cf6984ae48f9
SHA1 160aaa7bc86e1aadbf6340c28b4ccce75624a30f
SHA512 efe7dcaa95130ee68837e9f538de24db7b3b7750c9207b49c88f66fea18e9170cc3eb402b58d7a0ddeb29c17b25485e1147bcfb6e4be2d0bdc593a72172f3287
SSDEEP 96:Ko5aKiwyMnur351JgV9Iz//gK31/RgbP/4xnFSKukaO:YRMnur351Js9Ir/z1/REP/4xCVO
TLSH
T1E8913941717B120138BE394846B4862E124671B33469B57BBBBC45EB4E6FE099CFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a84bfbf0-e4d3-429e-9c48-6f25637a2ab5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a84bfbf0-e4d3-429e-9c48-6f25637a2ab5.tmp
Size 10KB
SHA256 a5a3a07b813bac85cbf560c30f731226d40201f418a766f2298115f7f7ff477b
MD5 d630645b7ed7242db5c52925ce328e74
SHA1 a300bc9ed48eebda5cfae90ab612f5fc7b0e28b5
SHA512 8347ae36bcea4441147e02b9fbff7eb021b58ac16acc99c6e1c026e5f44e7a9806dc46697d6b3c3132b94940b1bc434d074314adc863210b25b3359cac4d8674
SSDEEP 192:sxZIR6W1/fFsQqwIdpH8HW6+WNGYaFuklIg52J:sxZIr1/fFsQqRcHbG9o
TLSH
T19922C8556E38A97B8CCBD20DBA55BF13E6F9503251901E88AAFCC61C05E7ACD230781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b83b6024-3944-4791-9ac2-3dc83cbc96e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b83b6024-3944-4791-9ac2-3dc83cbc96e5.tmp
Size 9KB
SHA256 24297043a53d2c42d66db207759d2854c30ec6220ad206752163374dfce0c2e3
MD5 31401bf2240de016e30583dce710df53
SHA1 bccfcf39debf6caabb21f20707f5ebfbb9eff360
SHA512 b31dc364719be5bf743f444e719f607969c5db1dd1cfef321da6713d12dfe6386cbcdae582a1cd8d57a2c3d6b157aa2e8534af46e14052112d267ce41b0b8745
SSDEEP 192:sxZIR6W1/fFsZqwIdpd8HW6+WNGYaJTklIgrJ:sxZIr1/fFsZqROHbGO9
TLSH
T1E622B7516E38A57B8CCBD20DBA55BF13E6F9503191D41E88AAFC961C05E7ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba7fee84-e1eb-4c69-9333-8b5f354b135c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ba7fee84-e1eb-4c69-9333-8b5f354b135c.tmp
Size 27KB
SHA256 8d5a0f5deba2476ab4ec7716f08d4f4f0946624a7d0e5fd6ee151418d06b456c
MD5 22d0cc2125c327d1be9bee166d422a0e
SHA1 11ab53c69bd15927f4ce5bb40fad8f2fc15ddb65
SHA512 926c584d0d67ff2414aff57102f6b28a0e81f52cf7723f40138202945e4d65637580fe63dadc2e2dfd133cf2c6dd23bcf31513925e1fece6634a19336d89a64b
SSDEEP 768:MdyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3XroOZvr:MdyQRbrWvvlpZu1jaXKLf33EOZvr
TLSH
T1E9C2E92B640CCB7E4FD01E9DDC6A6F976EA802C766588D4047FA984C02C77EE512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c75b6bcd-ccf4-484a-a2da-e3be0781959a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c75b6bcd-ccf4-484a-a2da-e3be0781959a.tmp
Size 9KB
SHA256 7f371ba75ca24e64049ca5c59f48be5f8754596b08fb07247f87554ea346d81b
MD5 708505b71a5a797e0089da94ccde4272
SHA1 97763639f703cb907e3b75fa6a0b426166a62050
SHA512 0a481be6498727a82680a60ad924af5fef1656ae81c49cf1b6dbe285403fda5c1f7b41960dbe76bf17a095d20ee849d31d028d907654b484e559167a78e9cbc4
SSDEEP 192:sxZIR6W1/fFsXqwIdpd8HW6+WNGYaJTklIg5UJ:sxZIr1/fFsXqROHbGOa
TLSH
T16E22C6516E38A97B8CCBD20DBA55BF13E6F9503191D41E88AAFC861C05E7ACD230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

dccb7b4f-2c05-44c9-878f-e7306252f972.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\dccb7b4f-2c05-44c9-878f-e7306252f972.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ec586e8c-8bc6-4a3e-b933-1ebdc8f70a96.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ec586e8c-8bc6-4a3e-b933-1ebdc8f70a96.tmp
Size 8KB
SHA256 72ecd195ee49b906c86cbc9c0c225a6d6ad1d0a820dc4882f0d40c9a71eaed80
MD5 76c46d633e4620990b1109a480da3d48
SHA1 9617157786408457bd84849c53ec01ee7892391d
SHA512 ae4300641e128a924d617c6a09c7876e53cb35ff040387fe64691429b60a369523d1028f3a281022d37d829caffc8828cb66ecce6bd989323bda720725ad9490
SSDEEP 192:SONtB6iDCQmiUy1/Hq5u88P/uhgVSq/oiU6:SONtB6/4Hq5u8i2A3U6
TLSH
T14E02FA346C287C7B9DE3AD15B9477B279FA4013FE6941F84DAE81A2C01D769C1303923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92d8d43f-723e-4cee-af16-b1fbdc36c589.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\92d8d43f-723e-4cee-af16-b1fbdc36c589.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 77d05877d26f97f5b34bcd0141b3c3218152ff51f084a6dd867f4fd1d09a52f0
MD5 ed6183dbfa55ab5c32258c1d0dc4f707
SHA1 bf57c579c1bdb8e4c4ebc00c8a474fa9ccd97bd1
SHA512 2368cf41de44dda4f25d765958caece94281360cf8097aaaf592a36317cce4eb6bac1ba969e0a4dc5cc4a71124692222be169119c1752e8c5293bd6bdd1fcd7e
TLSH
T1FD41275CBAF91118B3B76F5A9BF6A86D487EBC772E46D49E10000E4F0A62B40CD61733
MD5 SHA1 SHA512 TLSH

Submit Download