fc2a256467fb4d4ff72be6c423e5961e98b418554deeec296aded0e757b9a585

Analysis

user interaction
yes
max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/11/2026, 22:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 5.1MB
Sample261104-19dpvseh25
SHA256 fc2a256467fb4d4ff72be6c423e5961e98b418554deeec296aded0e757b9a585
MD5 6b84319ee8a0a0af690273d3d2dcbaf4
SHA1 857ca353e0582d100dcbc6cb6761bb4430d0cb90
SHA512 26f9842bfdb429ef132cc1a930da9187071a339927eda402e8d54b5eb9e03067612cdadc3a2dad3d0977f8e6af18c05eab6ac91720221c6a0104f96638f85a8a
SSDEEP 24576:yd97B+mnLiLsrDy2VrErjKCqzkU98wwg3QeXuh:0P+mLAqHBCuRoeS
TLSH
T1D046D66BBB49037316F282626B4AA4CAF31E903F375A1514345CD15C2B7BA2483FF69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4424	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{D07E0442-A3DF-4BDD-9B91-DBB12512451F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
756	msedge.exe
756	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2596 wrote to memory of 5048	2596	msedge.exe	85
PID 2596 wrote to memory of 1972	2596	msedge.exe	88
PID 2596 wrote to memory of 4424	2596	msedge.exe	87
PID 2596 wrote to memory of 1972	2596	msedge.exe	88
PID 2596 wrote to memory of 1972	2596	msedge.exe	88
PID 2596 wrote to memory of 468	2596	msedge.exe	89
PID 2596 wrote to memory of 468	2596	msedge.exe	89
PID 2596 wrote to memory of 2544	2596	msedge.exe	90
PID 2596 wrote to memory of 2544	2596	msedge.exe	90
PID 2596 wrote to memory of 1592	2596	msedge.exe	91
PID 2596 wrote to memory of 2544	2596	msedge.exe	90
PID 2596 wrote to memory of 1592	2596	msedge.exe	91
PID 2596 wrote to memory of 1592	2596	msedge.exe	91
PID 2596 wrote to memory of 3316	2596	msedge.exe	92
PID 2596 wrote to memory of 4828	2596	msedge.exe	93
PID 2596 wrote to memory of 3316	2596	msedge.exe	92
PID 2596 wrote to memory of 3316	2596	msedge.exe	92
PID 2596 wrote to memory of 4828	2596	msedge.exe	93
PID 2596 wrote to memory of 4828	2596	msedge.exe	93
PID 2596 wrote to memory of 1388	2596	msedge.exe	100
PID 2596 wrote to memory of 3056	2596	msedge.exe	101
PID 2596 wrote to memory of 1388	2596	msedge.exe	100
PID 2596 wrote to memory of 3056	2596	msedge.exe	101
PID 2596 wrote to memory of 3824	2596	msedge.exe	104
PID 2596 wrote to memory of 2156	2596	msedge.exe	121
PID 2596 wrote to memory of 3264	2596	msedge.exe	122
PID 2596 wrote to memory of 1416	2596	msedge.exe	123
PID 2596 wrote to memory of 2644	2596	msedge.exe	133
PID 2596 wrote to memory of 2644	2596	msedge.exe	133
PID 2596 wrote to memory of 2152	2596	msedge.exe	134
PID 2596 wrote to memory of 2152	2596	msedge.exe	134
PID 2596 wrote to memory of 756	2596	msedge.exe	136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ff8cb1ec188,0x7ff8cb1ec194,0x7ff8cb1ec1a0
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,9483888351849895757,245949229561793441,524288 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,366189058529419080,7293817901664217887,262144 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:2
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2204,i,12887755033595251916,15364888748030495848,524288 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:8
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,13748819410857702480,3516104981322634138,2097152 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,7710079969071519817,1385400680216492646,2097152 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,6472167474137828210,2310443337356871340,2097152 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4160,i,18039083360914711790,4532190165595849715,2097152 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:2
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,17655761565960868863,106560311004625407,524288 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,3979878389131027427,3541092717525506641,524288 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,14688743223312070222,16149457898825095786,524288 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,14688743223312070222,16149457898825095786,524288 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,10640204859460922060,12487562759000075915,524288 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,174705316526001634,6367910123727402562,524288 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,3674788934681779335,13582900759678926758,524288 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,10314147181276623837,15646528965693443373,524288 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,7410087980663145196,13253682949114356288,524288 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5316,i,6975226302891236259,6708115770038567562,262144 --field-trial-handle=2844,i,9255144991999477323,6483947021448134843,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:756

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1500

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0359109f-6a8c-4c29-9bed-3a620e03dcc6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0359109f-6a8c-4c29-9bed-3a620e03dcc6.tmp
Size 18KB
SHA256 d616a827d28eaa8e3bcb2483db3d3bad870095ed6fa3dad7ff21aa710c04ce7c
MD5 735c73391f3e6c58d1e4df9b02940a59
SHA1 149c5a966316de1875d876b1700c6677cd169b36
SHA512 443d1e143e98807c19c74508120bd29658cffb907a8bef30473bf9c67fcf55b3ff985baae1c2068a77de1b2fac0205ff37146880e479e1b6c7745ad63e7feee0
SSDEEP 384:FDQkUSv0sNR2wyABC6fYOjTVSSdTHVg2H7vBEkIIlC:Ft03tGrnHNG2H75EkL8
TLSH
T181828E71AC686D3B0AA3A201E08A3547DFB4D167DEC51B50E5DC9B1D01DB6EC334BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0c45a19b-b242-4e7b-8e6e-31e493779800.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0c45a19b-b242-4e7b-8e6e-31e493779800.tmp
Size 21KB
SHA256 4dbb8110228e0da69aadb116af3cf61bf2b9ccc35b6a240c7ce35349d1d159f1
MD5 2446eceacadab74a4bd7965205547eb8
SHA1 65c57d3aa55eb532e29b02dc69774db85edba0e4
SHA512 255dcb4e23e40513614f08f338a95a6eb52f17ff8f8725826647ef1ab5404c1fa7ffbb16f1d40ae865d5b9df8cf4d216565bc8d2e8b77253ff1c5bf71cb39f22
SSDEEP 384:t5iFzQkUSvuzsNj8TUNTUlIl2wyABC6fYOjTVSSdTHV+2H7vBEkIIlC:tQFduSwgQtGrnHNY2H75EkL8
TLSH
T113A27C729C989D3B5EB7AB01E14E3103DEB48067CDC56B90E2DC9A1C00DB2EC234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1731cf6f-6517-4449-9669-651a5633f1c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1731cf6f-6517-4449-9669-651a5633f1c2.tmp
Size 8KB
SHA256 6fd2c26130c40abf974fe7bca1daadf1b8c3648d7433d7fe69b9294d360945f7
MD5 c1bd75dd58fe82ae5eed4087f05c1d41
SHA1 0194aff1749f26b851fb0aff214472477bbcca9b
SHA512 0991ba70b179c29e51a9e374290fc191706ca0695b203d63ef0cd16bb6a8e341e844db0a34579c828be9cf5dfc07e87361d0810660eb83463fde4a2393950bf7
SSDEEP 192:SONK6ygpQmiUyX0tOCTVght+FdVaotzPxivGU6:SONK6lH9tOCTVSSdThyGU6
TLSH
T10B02D934AC683CBB8EF36E45F48726179FD8117BDA962B94D5E85A1C00E776C2343836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46016b0a-ab2d-4c28-95f9-938b39b04e9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\46016b0a-ab2d-4c28-95f9-938b39b04e9d.tmp
Size 18KB
SHA256 7704bcb6d529c3b88cba788d3424426cff663b69d5fc18ed7f717dd94326a609
MD5 50273fb2478af3643ea798acdb550b00
SHA1 dc68da01a94bedee039548a8ed5c5859dd3afab6
SHA512 a97727945a7fc38819f5f8d19e9795d2da9d976497a99783652ad054192f12d7658cf6f3902df1537a9971bbdb1193b88d4db879d7ab7e531fbad226b4c05407
SSDEEP 384:dDQkUSv0sNRLwyABC6fYOjTVSSdTHVg2H7vBEkIIlC:dt06tGrnHNG2H75EkL8
TLSH
T17D828E31AC686D3B0AA3A201E08A3547DFB8D167DEC52B90E5DD9B1D01DB2EC334BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15d659fc-f3ed-46ec-bc39-9c67ceef02da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\15d659fc-f3ed-46ec-bc39-9c67ceef02da.tmp
Size 105KB
SHA256 73d0e97f18eabd66ced5f78af8d0ee3a36d197f120279f6fe22862877514d939
MD5 48ffe64f366166704c21161efe0b504f
SHA1 a6403dde2edbd6b341ad301811396e7d3aea1af5
SHA512 ad78beb367abbdbb0a58e28566138180a03a9826f30f2dc412a05e0ca179742f6e123202adf44a50da1f4b71145ff6cb0cde66f326d4e9b116ce56b2281ea253
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T1B3B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

2121056d-64e6-4fb6-9fdb-77fff2765dca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2121056d-64e6-4fb6-9fdb-77fff2765dca.tmp
Size 9KB
SHA256 7f640a93eb9f5c706ab79a5587860620dc6b1051164cccf829262ad9cd965737
MD5 65871667bb3f6a7dc3854b454ce14f4a
SHA1 804b676fd0135d52c8c2e8de0be823d00ee37176
SHA512 895f4023d89161380bcec39b0d4f63bdbb068e2f34207e2ffde0c1749efded8bd88152cedb8b2fadd711f0415910357a6f6b5d10100608cf4a22021885cc21cd
SSDEEP 192:sxZFaRKWw/fTxsc/IdpdLHW6+WNGYRPnqNJIgrJ:sxZFaPw/fTxscw1HbGmE9
TLSH
T10022B8516E28A97B8CC7D20DBA25BF53D6F9503291941E48EAFCD61C04E76DD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3689c953-5154-4fa7-a0a8-8f4ba7ad64e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3689c953-5154-4fa7-a0a8-8f4ba7ad64e8.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4228a8cd-4c4a-4b8f-9fe6-c55cfefdc1d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4228a8cd-4c4a-4b8f-9fe6-c55cfefdc1d2.tmp
Size 10KB
SHA256 234fc97285a36a4ffa561d87d6b4f66024d210b263146fc6ecb4802b3a11e989
MD5 b4f76b00b81c7d7d93242ca9299de101
SHA1 74facd795d6638c0e198a749665d2fd0569f6bea
SHA512 1d364d7ded193e17da3032a0a68966da57a0d61fec5249b9e1951247b243fc1ce283d61f893e7426129a61de0fe9c2baf31d03bb4eca73b2194fa56bc7fbe79e
SSDEEP 192:sxZFaRKWw/fTxse/IdpdLHW6+WNGYRP6mNJIg5qJ:sxZFaPw/fTxsew1HbGmfY
TLSH
T1AD22C751AE28A97B8CC7E20DBA15BF53E6F9503251941E48A6FCD61C05E76DD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45ba645d-a17d-4fc7-9835-645fd1c3567d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\45ba645d-a17d-4fc7-9835-645fd1c3567d.tmp
Size 9KB
SHA256 75fa1dd3029100e5b36beda41eb0a38b3f1b0e82e148e12b69e49feb5ef99830
MD5 d3bfff12821a2fb698fa7969974d8e83
SHA1 843506650b1949ab1db1676220f3cba824d63be6
SHA512 9d705e72928a0b8d29603cefe023533fcf5d407018bb1ad28e34e34e79bf818bfe89a33d2fc68f9f2c4a042375f1e755132cab2b9ab050873b86e0b4e62a4a96
SSDEEP 192:sxZFaRKWw/fTxs5/IdpdLHW6+WNGYRPnqNJIg5IJ:sxZFaPw/fTxs5w1HbGmEK
TLSH
T11422C852AE28A97B8CC7E20DBA15BF53D6F9503291941E48EAFCD61C04E76DD234780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5eaf3262-461d-4a2b-948f-818da64a2bd9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5eaf3262-461d-4a2b-948f-818da64a2bd9.tmp
Size 10KB
SHA256 1068a490a5e82b0521af55edf3d7f9b6b64e283f2f7bf36a0e823a0355a92d97
MD5 984a16c4c57c14a6f78f7ce6c779ebe9
SHA1 4d061756936cd76fe84d86798aca2b265638528a
SHA512 80af0c1b32f11ad32ffbf90e36f859eafcacc54ac1686bac145f6a270529f8738be4acb83772c93d566d0f48955be9227acebb3d714dd8cc16afa8df0d240d20
SSDEEP 192:sxZFaRKWw/fTxse/IdpHLHW6+WNGYRPXVNJIg5qJ:sxZFaPw/fTxsewrHbGmxY
TLSH
T12522D8526E28697B8CC7E20DBA15BF53E6F9503251941E48A6FCD61C05F7ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

985147ac-858c-4e5f-8fcb-15ffc108a0ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\985147ac-858c-4e5f-8fcb-15ffc108a0ce.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 6d1effec4d716c1205e416414455c8462af9b56279c1979ddd80d1e134c97844
MD5 03b6819fd39793191db0209a44e59129
SHA1 0aaa902e7f6c5a374b2925418915c2ee1a476349
SHA512 c37179473116e0f58a553997d848a22677f76846b5ca194d02c871cb0dba34d9ed790d985746c77d6ee58f66c7b569c8645e08f4a6f84a579ce435927bd5b6b7
TLSH
T11AE0869505D9C32EB248744B03E8934CC6A47A6B97C8699E1F18C4C5724AD44AAD6EB1
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 d0582631ac9180af51e09e495c38e051cf9bfd5268a9ff2b098abb617f06db3f
MD5 a06484a569531178382ef325b0329e84
SHA1 6ef59aff15b9d3ae91233c42e61f18772513ea49
SHA512 4172b59976d9c39905c9fd4c9a21ff61627ec1fc82b2b8f91cc686e97d4826ff811d1a8a83881ae6f01ed3c3e994ba8e838e126ba488aec859cc8d88822e8290
TLSH
T164511C828FCF50A9F7B59175C6D813BB7A3829835A8F3E5301A0F979940A7C551B7054
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ba8cf6dc37876f43b507e9089ff66554b9107bf3c6cd78e1212458e939c96d01
MD5 bcb61644836e4d9ffb1aa5c295b3b9a5
SHA1 e93932009e72fd41168c77b970c37b3d06a2051d
SHA512 6741de912586e5981e22d4f9e3b39431ab1d137e8ad549ac5b17b15f282bdddce05278d6067bff99921032cd760cec5c634cde96e37c00883946c6bfe26b306b
TLSH
T199512D82CFCF50A9F7B59071D7D813BB763829835A8F3E531190F979940A7C152B7054
MD5 SHA1 SHA512 TLSH

Submit Download

9eb70ca7-8bdd-43dd-a07a-9c59b5d7d416.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\9eb70ca7-8bdd-43dd-a07a-9c59b5d7d416.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0bc6c804-afc4-4d09-ba80-c9c8c5e80a3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0bc6c804-afc4-4d09-ba80-c9c8c5e80a3f.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

90f69702-1f9f-4f0c-a313-9e6d4270952a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\90f69702-1f9f-4f0c-a313-9e6d4270952a.tmp
Size 949B
SHA256 b20dabb81a802dd741923af0d7d08671f1925ab4533236e8f204e2637aec73a2
MD5 0ce161ef1069cc6fd6e239db9f13b723
SHA1 de19e0586855d7356186c00f6ead0c63bf101ec7
SHA512 1a2af8c9ed780517e2dacccc0f3f583d980a10914ff99cc7618d1fa8d1063bb0c714b941b66f6cd0ca27a418d03c4964e2851d12fcc598628f10589a77c6bce5
TLSH
T186117AB3C3E5856EC91516F05A24EE2BCE2D0A06432C7C59C9D4EF6B97E34B5E00295B
MD5 SHA1 SHA512 TLSH

Submit Download

a0d989d9-ea8a-4bb0-ae8c-0230439b4724.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a0d989d9-ea8a-4bb0-ae8c-0230439b4724.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 a7d49be3b2c0a3c20d5a2605272a202bfe21bb8ea46bc33b03aa54de94b4dab4
MD5 eaaf20f6bd91276b00cc127c7dc45000
SHA1 f08b5f68d3b5fe6e96d07ff892faebd2aefbaf50
SHA512 4f4b7159bc78d43d3c1b5ed58bc07f1e611963d19624449a6948061ef984fa7f32f3ce04467ab0915a882e5defb552e4f9ed0b3e90e6220f122d764003280340
SSDEEP 48:K0mImLuvL1ttOb9wVISrOK9715OxjeY4JbPyLcLq2EGqTba5iISuTK9K1oTxMDYn:K0mZ84KRiy+byKIwau1yKOAh
TLSH
T156B1020571BB062479BD394C81B49B5E968231B33518F62BBFBC44A14E6BE080DFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ae5333d6-77ee-4958-89e4-d7b80457f504.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ae5333d6-77ee-4958-89e4-d7b80457f504.tmp
Size 27KB
SHA256 2f59216db26fe4ae596eba29cdf756636c825e803661d259961e5624376417cc
MD5 1c00bcdcfed68ff54ec493ee9f6e28c9
SHA1 14b437df00e571b552868503ee24655476c06603
SHA512 42c3af09d3d6971f7fbaa2e549da44960f26c8328baf8abc2976680460f5049fa1dd29e139040fff973c408367260fca1ef3284749095ad426542aadfac94dc6
SSDEEP 768:xVK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3qrot+LT:xVK9uzYWvcQWsu1ja0HL7Q3Bt+LT
TLSH
T131C2FA3F640CCB7E5FC01A9DDC5A6F973E9802D7A6584D4047FA944C02C77EA62264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

603093e2-f16f-48fd-a74c-c504736cd511.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\603093e2-f16f-48fd-a74c-c504736cd511.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20179053-1da8-460f-89fe-b99764b2f1ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\20179053-1da8-460f-89fe-b99764b2f1ff.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f830ded9-8c7b-4f36-b55a-74a08a6f5471.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f830ded9-8c7b-4f36-b55a-74a08a6f5471.tmp
Size 8KB
SHA256 2c99ae94618ccbf7eb08011e264a9e1cee86e04c77e136e9f18dcbad83531f12
MD5 893ea1d78c134fc6ade8614e15a18cde
SHA1 68f7de9e551dca8852b8ab452e3ccdb33dc9041a
SHA512 c1052b6524ac7b1f42937df38a6cfcc34db69cc228336b124402887636dbfe8b798b7fe8dd4530bb56bd061b54944fb6229906ac5c5ef0a156ebd7da52990506
SSDEEP 192:YzONs6yYwQmiUyc0oOCTVght+FdVaoHhpNc3UxVqtU6:YzONs6lwQoOCTVSSdTHVR2U6
TLSH
T11D121935AC687C7B5E93A541F08735139F989277DE863B90E1EC6A0C01EB7BC2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fba8b9869d9a05c70a727e3581f1630a62f51d247c7f491e7597109130b2ebcf
MD5 ea0600377775d1996090d6a02c3e5f48
SHA1 263ae6d93d1fe5412d1431c18dde8915803b9ee0
SHA512 ca87a4dcb442ca5f60b5d061022846570d46b8a4be1f3f2924d6ebf712bfe7f7e57f99d422359da84e3c8d6b7fc3ab2afba61c836624e4758c22f8fba02616a0
TLSH
T10A413999A6E91148B3B77E5A9BF6A47E847BBD772F07D49D10010E4E0B22A40CC71B33
MD5 SHA1 SHA512 TLSH

Submit Download