bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d

Analysis

max time kernel
149s
max time network
166s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 09:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 7.9MB
Sample261030-lfc4xaa16w
SHA256 bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d
MD5 0e3e4362f785aff0b9e1852b1064c0f1
SHA1 a42ccb51e72bdcb5bb905a62efaa28857def3a17
SHA512 193b57efc5f5971fbd9e4ea1a80b34aadcc2a814ff49c4c06afe972bf327e98ff0498217a8bdef984b10fdec6e7858a6fb88c0b14936e0c6b404387a426b87f2
SSDEEP 24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i
TLSH
T1A786942F7B48037706C60262AB8BA5CBF21F903F3B561654345CD1681F6BA2583FB6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4816	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{2207A856-2AC6-401F-8018-19F3772C87ED}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1740	msedge.exe
1740	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe
1136	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1136 wrote to memory of 592	1136	msedge.exe	85
PID 1136 wrote to memory of 4816	1136	msedge.exe	87
PID 1136 wrote to memory of 2744	1136	msedge.exe	88
PID 1136 wrote to memory of 2744	1136	msedge.exe	88
PID 1136 wrote to memory of 2744	1136	msedge.exe	88
PID 1136 wrote to memory of 2336	1136	msedge.exe	91
PID 1136 wrote to memory of 2336	1136	msedge.exe	91
PID 1136 wrote to memory of 5100	1136	msedge.exe	92
PID 1136 wrote to memory of 3952	1136	msedge.exe	93
PID 1136 wrote to memory of 5100	1136	msedge.exe	92
PID 1136 wrote to memory of 5100	1136	msedge.exe	92
PID 1136 wrote to memory of 3952	1136	msedge.exe	93
PID 1136 wrote to memory of 3952	1136	msedge.exe	93
PID 1136 wrote to memory of 3516	1136	msedge.exe	94
PID 1136 wrote to memory of 3208	1136	msedge.exe	95
PID 1136 wrote to memory of 3516	1136	msedge.exe	94
PID 1136 wrote to memory of 3516	1136	msedge.exe	94
PID 1136 wrote to memory of 3208	1136	msedge.exe	95
PID 1136 wrote to memory of 3208	1136	msedge.exe	95
PID 1136 wrote to memory of 1324	1136	msedge.exe	100
PID 1136 wrote to memory of 4124	1136	msedge.exe	101
PID 1136 wrote to memory of 1324	1136	msedge.exe	100
PID 1136 wrote to memory of 4124	1136	msedge.exe	101
PID 1136 wrote to memory of 4704	1136	msedge.exe	103
PID 1136 wrote to memory of 4456	1136	msedge.exe	108
PID 1136 wrote to memory of 2428	1136	msedge.exe	109
PID 1136 wrote to memory of 3836	1136	msedge.exe	110
PID 1136 wrote to memory of 3208	1136	msedge.exe	111
PID 1136 wrote to memory of 3208	1136	msedge.exe	111
PID 1136 wrote to memory of 1740	1136	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe1c4bc188,0x7ffe1c4bc194,0x7ffe1c4bc1a0
  2⤵
  PID:592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,13292381236453004428,2629049276280025010,524288 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,5900399714337849049,3084034078782796871,262144 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:2
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,13613852382105629496,10514781140112043980,524288 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,7376313842575618494,18082687207369676055,2097152 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,8757422577935815342,2978143770042900155,2097152 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,4887829055346876283,17049609279195478172,2097152 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,4774986018819423728,660483154431476627,2097152 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:2
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,14818777930827485790,12178353586428735079,524288 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,4101354595243279746,8649726573711754011,524288 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,15571369559063793601,1762147004282846460,524288 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,15571369559063793601,1762147004282846460,524288 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,17432928077345558036,13854034725688914368,524288 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,7095889277271175366,9440547016857727241,524288 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3396,i,17339115857044417506,18157308819267674831,524288 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,7142370317080059799,7938958539753674524,524288 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,6187402112425947114,4589062533467508060,262144 --field-trial-handle=2044,i,14611117428393259295,6694132805716056164,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1740

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1904

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

549248d2-d264-455a-8ce7-2be28b111edf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\549248d2-d264-455a-8ce7-2be28b111edf.tmp
Size 8KB
SHA256 9b3b68b543fd846257ed9bc498d51e6e4500d302eb3d05ed2771a4e45ed9db44
MD5 db4964ccb3ebf44c4671c2efa5b07980
SHA1 52e786461bb00cb67885c27805522001062e40c8
SHA512 c313d9ef01e891bd17b0af15248821159a77f26041d5da64536a92326bacd2c17e67fa7fdf6b92bf57c216d92c46b22ed507fc5b6dbadec7f0d6aa60b5e792f8
SSDEEP 96:KqONkhQsjpfbUmjH5ih/cIPURHl8h4otop5+aDdBKP4v+Y1xf//ojdexVeYrMpPX:BONJ6JUm0QmiUyzDso//ZsPC7dBCK+U6
TLSH
T1B102D838BC68BCBB9EE3AE45F48777239FA4106BD6951F84DAD85E1C01D715C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

858ca12c-abc7-4ac1-8a01-b7decc14e32f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\858ca12c-abc7-4ac1-8a01-b7decc14e32f.tmp
Size 8KB
SHA256 bd9887a1d6b5a00000c92dabda44069994451e493133ea6cb96add96df120d56
MD5 86e82729c25c54b1d1a26d4b733a2dd3
SHA1 eb6bade2cce959507a9187a279c3514a51550e05
SHA512 e1cb2ce178fc6751bf3b94d132b9b04b9a886f886bf09cdfe32f64e14ee4fe25142a224c469b24012d69ff55cfb7d733268611083966556caa01ae55b216e5f3
SSDEEP 192:mONvf6JUoQmiUy9Dqo//ZsPC7nQez6NxMqiU6:mONn6+I6qo//ma7AYU6
TLSH
T113120B35B878FC7B5DA3A995F08336139E644167DB896F90DADC2B1C02EF19C530B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

0aa70086-db2a-4b01-a902-9bf67326d876.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0aa70086-db2a-4b01-a902-9bf67326d876.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

2e3b13e3-1da6-4c58-855f-582b762fd100.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2e3b13e3-1da6-4c58-855f-582b762fd100.tmp
Size 9KB
SHA256 86306790688234dc973be866c1040b3a1be495e598fe80f6433535ee9dd329cd
MD5 a7025dfe42576c085c2d013882a2d7c4
SHA1 6231347bc2c8f9999cd29bd1d162d61f5b0a0628
SHA512 5f2a3a0e407796644fd818a5175f26aa78fa00eda286e8a8b7346d3f5a900dfa083c18dab1859a94e0a06cee0e6ad0c25f9dd320a8af230c170e099f971bbcc5
SSDEEP 192:sxZbRwWW/fUsuBRIdpdYHW6+WNGY36WDZX3IgrJ:sxZb9W/fUsuQKHbGXy9
TLSH
T1AB22B7516E38A97B4CCBE20DBB25BF53D6FA503291D01E58AAFC861C05E6ADD120790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e62becf-eac6-493e-9d30-e36e14174663.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2e62becf-eac6-493e-9d30-e36e14174663.tmp
Size 10KB
SHA256 5350dfef8705dee64dc65746741edfe1364746a55e077177c13cf08b5a2a7695
MD5 ac41287aa0cce2a2ad6ab0bf812b0062
SHA1 5c8661a2187d9257caba174f69449652cdb3a8d7
SHA512 98adfa1b0c4ebe630712d83d8aba5c4daa082b9c94e8a8cb082138c2602f821747cd867635c8b2fb33d89213436287843ba5045ac3bb5416d29b28e54fb7bfa0
SSDEEP 192:sxZbRwWW/fUsGBRIdpdYHW6+WNGY36WDZX3Ig5OgJ:sxZb9W/fUsGQKHbGXyD
TLSH
T19822B7517E38A97B8CCBD209FB25BF53D6FE503291901E58AAFC8A1C05E66DD120790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3a9b9837-db04-47c9-af49-62a9e1277e82.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3a9b9837-db04-47c9-af49-62a9e1277e82.tmp
Size 10KB
SHA256 dd0bc36cc5b6efae8a98296ad3419a637b228eeb14472582bbc8f4170f0b51a6
MD5 5c8bfa2c56e26a8863306dd4c708c254
SHA1 a07c14c3d18c31d85cb48da07ea173ace60a833b
SHA512 69e200d999ba46e82a3bb872cfe6bbd36f1d5ee46f4ce07bf497d97e959189788cd8dc699726e1ca9c58010950f1f7f0c4d024b2e1e30d2ca781814894691eb9
SSDEEP 192:sxZbRwWW/fUsEBRIdpHYHW6+WNGY36D4/X3Ig5OSJ:sxZb9W/fUsEQ4HbGX41
TLSH
T12D22B7517E38697B8CCBE609BB25BF53E6F9503291901E48AAFC8A1C05E66DD120790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75d45828-cae0-4039-bb6e-a152becba659.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\75d45828-cae0-4039-bb6e-a152becba659.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 49b437b165824e1718df430c7254de7daf3ab5287b0ed7ffeb3e451900b343bc
MD5 edb4491e0a1839394184776dbecef668
SHA1 60b8baab3f164f60ed6bfbc7057b5bfff6396fa0
SHA512 aec87a1ad4d866c727c8e5e48386c55d3db9d668e0ab2a4f77244dd728d4762dc7b6c89f07c0dd8d56e36090454da6560132c8bfb0a69dc6fa88616073f38545
TLSH
T1FF51A4C0A584C161CB9854F086D126A33737767BE9C3DE430D48D9BEDB4A736D1020DE
MD5 SHA1 SHA512 TLSH

Submit Download

c9903936-8764-4fa1-b4fa-2e1df506a812.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c9903936-8764-4fa1-b4fa-2e1df506a812.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

97b91ff4-a44f-4fb6-b953-b5b48b00ddeb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\97b91ff4-a44f-4fb6-b953-b5b48b00ddeb.tmp
Size 949B
SHA256 8672a2e0a64700c622f8b605f91889ee257b8efb7bd062c4f1021fec21a6187c
MD5 1f3f6d3fe250364fdd93002ddeffe999
SHA1 a3a42db47f1e30f9415883098efd3a90ab36b7e6
SHA512 3f66f27547125e325b7e4375c63358f096072273290603f6443070776ee3b8c3f2b8fd52180436ff7a74b21a0d2c9143250f0249205a09adcc824c6110be2df6
TLSH
T116117DF3C3D5856EC91156F05A24AE2BCE2D0906421C7C2999E4EF6B93E3075E10295F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c1e47d82-e27d-4066-9f1b-ae284e0144c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c1e47d82-e27d-4066-9f1b-ae284e0144c0.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9fe3c8b4e0b2a8be7d55274aae73aff678c3dc869a1dede7cb91d59e07049e02
MD5 657cd31d71723f0e1787024f99376a6f
SHA1 ccb746e8f5e0c08adb833c0ac6c886b62afc0ed7
SHA512 4c2e13b44f1c7d4a965124662e8bffe67e68918be90b55b1638a7fcef053c85b39b1f3b4468d1e753a8d6a43b8ae0d422ba4d4d4e278afb3e08c085ef035c277
SSDEEP 48:K098xN/rvQbjWDISFQK9F1nQxVAYGH99yLGDGmGHGjGNGlG1G2bGlGoG9ISGjG2b:KE6kKbqCeDyKcEz6IKTCCP
TLSH
T1E9911B00706E425138BE795850F5872F12563273705DEA2FBFAE52E28A6EE048DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a1950ef7-63b1-46f7-970c-d8da1dfff5a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a1950ef7-63b1-46f7-970c-d8da1dfff5a4.tmp
Size 27KB
SHA256 ea7fc84f75bd5b3bf1883cd7bd304d3fa18fd7ffe8e5a93db2aef9d8dd5ff885
MD5 4acaa1200b8b3ca5eddd2d80e3b7eb4a
SHA1 940255d754f47cb4758f463927910a683bb0c35e
SHA512 1a3e4465b8e4ef91ecddd538ca1fbf288cf0996b303643b27942f3dd6e0b5f2d5f174e3195ae88a8e134b67d8e09e2b27ba89f4827d1cd70edc86f461e05a303
SSDEEP 768:uAKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/lro0+:uAKlm7QWvUYe0u1ja8/L/E/e0+
TLSH
T138C20A3B740CCB7E4FC04A9DDC5A6F976EA802C7A6588D4047FA994C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eed49b46-9ec8-44ff-9d96-0dde65c7c1eb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eed49b46-9ec8-44ff-9d96-0dde65c7c1eb.tmp
Size 10KB
SHA256 442c0906878ecc23bbdf1fe9c01daf309655afd72f43ebbf68db060dec51a0d5
MD5 ebb3426ad21c75d73a54aad86ce026d7
SHA1 141ce5cd1141c22f5c201e94813acebd6539c03d
SHA512 b635811488ff7c0e8ce572d370eff360da2b6288c55dfcba513a8d1396462ce1aaa8f33321ea0621960bb9e343fddea6ee59b769cc934a37c92f8bb40d69f7c4
SSDEEP 192:sxZbRwWW/fUsEBRIdpdYHW6+WNGY36OnZX3Ig5OSJ:sxZb9W/fUsEQKHbGX01
TLSH
T1C322B8517E38697B8CCBE609FB25BF53E6FA503251911E48AAFCCA1C05E66CD120790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

db89003f-2ec5-40f6-937b-ec5293e5ff2f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\db89003f-2ec5-40f6-937b-ec5293e5ff2f.tmp
Size 18KB
SHA256 848f8a5e6d334ae25e20b9f8e5f4a3a8bbc5201c758871b90e1d73dfac51b084
MD5 08d9944e6bb37ccad547e16f08a01bfa
SHA1 937cb6f897157dada2395b7b419b999977801ded
SHA512 658d401229bb1ca117f846b2033968a1b806d7b9b6eab260d33090c463bb0dbeee4496fccb0b565ea356e4b251bf27fdfad9b6dc0ec71db6ce84f8011efd6ffd
SSDEEP 384:9QkUSv0sN+VTAQ3kbLQOh//ma7EY2I+uEIIlU:n0H9Vu/uPY5+uEL+
TLSH
T180827C366C78AC778EA6A551F14B3603DE748067D7C85F94DADDBB2C02CA1DC230BA16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e38e9146-b9b3-40c2-b447-77bf7115e97b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e38e9146-b9b3-40c2-b447-77bf7115e97b.tmp
Size 21KB
SHA256 63c855acbb42dedc5d08f7c8015a2dba05015333f6ff35281f91d39d3aa26452
MD5 e599ed83f7aad63ab653eaf526effe93
SHA1 aed381695edff5b2e3dbf2be8a20ab871279acfd
SHA512 5b05990b67c83d19736c3570afaf8f82712e3e493cced0bb6761506cebf85b3f16b2965c183e24870e36453ce532c783b10edaffcb8d294be7700add0527349f
SSDEEP 384:2iFzQkUSvzzsNO8TUNTUlIlVTAQ3kbLQOh//ma7UY2I+uEIIlU:dFdXXwgf9Vu/udY5+uEL+
TLSH
T1A5A25B366CA8EC7B9EB69A51F54A3203CE7480A7C6C59EA4EBCDAE1C01DB1DC1307D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4a08fcdd-bdd0-4013-bf62-8b943df93801.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4a08fcdd-bdd0-4013-bf62-8b943df93801.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f1fd99a8-31cb-4f4d-93e1-41593b17922f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f1fd99a8-31cb-4f4d-93e1-41593b17922f.tmp
Size 18KB
SHA256 62ee4e9ccfd030eeb1fcbe1b5171fed6af5f023a59b72fc2f6d1abbf57a1acd1
MD5 87e35c49e162028039c1211d407783f9
SHA1 d2af7150e6a9e22689817790753cf519124523b6
SHA512 65d19dd4e762184d4d169e545ef9d41ee60b039d8113f573d507c5649402cbff4d94c2f20f03d973395477df9e2b29f2a89891e444f732ea148406b816e3ea73
SSDEEP 384:XQkUSv0sN+ATAQ3kbLQOh//ma7EY2I+uEIIlU:p0+9Vu/uPY5+uEL+
TLSH
T1D2827C366C78AC778EA6A551F14B3603DE748067D7C95F94DACDBB2C02CA1EC230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 16355fe734bd0d106641149cbab1823b737eedfed586762e235c61e6d9d09b3d
MD5 1f6d5d576175d89a2eb1890d56fa1258
SHA1 aebfb6b66127c3fe76f6856a2d89b73bb2a92a1b
SHA512 34af557bd20acd3f5d5ebaa393061e2e02ad6033b8abea4ca0e45af731af47cecbd1bfee107a62c0c2cec3ffc240f0cbd1ce4285de3e76d055c11697b998d310
TLSH
T16241E948B6F91158B3B76E5AABF7A87D497FB9372F06E45D10110E4E0A32B40C862737
MD5 SHA1 SHA512 TLSH

Submit Download