6a717038f81271f62318212f00b1a2173b9cb0cc435f984710ac8355eb409081

Analysis

max time kernel
149s
max time network
139s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/11/2026, 18:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 8.8MB
Sample261104-xgp1msed99
SHA256 6a717038f81271f62318212f00b1a2173b9cb0cc435f984710ac8355eb409081
MD5 2675b30d524b6c79b6cee41af86fc619
SHA1 407716c1bb83c211bcb51efbbcb6bf2ef1664e5b
SHA512 3214341da8bf3347a6874535bb0ff8d059ee604e779491780f2b29172f9963e23acbe3c534d888f7a3b99274f46d0628962e1e72a5d3fc6f18ca2b62343df485
SSDEEP 24576:cpD6826x5kSWSsRinoHnmfm646a6N6z68SH4SApTJ:cHSek
TLSH
T17B96A52F7F48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF699
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3520	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{6A7D5F5D-4FE6-4E60-BA8B-E46858F66127}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4944	msedge.exe
4944	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe
3096	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3096 wrote to memory of 3220	3096	msedge.exe	89
PID 3096 wrote to memory of 3520	3096	msedge.exe	90
PID 3096 wrote to memory of 1260	3096	msedge.exe	91
PID 3096 wrote to memory of 1260	3096	msedge.exe	91
PID 3096 wrote to memory of 1260	3096	msedge.exe	91
PID 3096 wrote to memory of 4924	3096	msedge.exe	92
PID 3096 wrote to memory of 4924	3096	msedge.exe	92
PID 3096 wrote to memory of 5980	3096	msedge.exe	94
PID 3096 wrote to memory of 5980	3096	msedge.exe	94
PID 3096 wrote to memory of 5980	3096	msedge.exe	94
PID 3096 wrote to memory of 2752	3096	msedge.exe	95
PID 3096 wrote to memory of 2752	3096	msedge.exe	95
PID 3096 wrote to memory of 2752	3096	msedge.exe	95
PID 3096 wrote to memory of 1920	3096	msedge.exe	96
PID 3096 wrote to memory of 5004	3096	msedge.exe	97
PID 3096 wrote to memory of 1920	3096	msedge.exe	96
PID 3096 wrote to memory of 1920	3096	msedge.exe	96
PID 3096 wrote to memory of 5004	3096	msedge.exe	97
PID 3096 wrote to memory of 5004	3096	msedge.exe	97
PID 3096 wrote to memory of 5828	3096	msedge.exe	100
PID 3096 wrote to memory of 6092	3096	msedge.exe	99
PID 3096 wrote to memory of 5828	3096	msedge.exe	100
PID 3096 wrote to memory of 6092	3096	msedge.exe	99
PID 3096 wrote to memory of 5232	3096	msedge.exe	102
PID 3096 wrote to memory of 696	3096	msedge.exe	106
PID 3096 wrote to memory of 2120	3096	msedge.exe	107
PID 3096 wrote to memory of 4764	3096	msedge.exe	108
PID 3096 wrote to memory of 6124	3096	msedge.exe	109
PID 3096 wrote to memory of 6124	3096	msedge.exe	109
PID 3096 wrote to memory of 4944	3096	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffe7ec3c188,0x7ffe7ec3c194,0x7ffe7ec3c1a0
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,4158094312358369028,9217561610164648255,524288 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,17960860608778351519,17258693535686062478,262144 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:2
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,628640900570118434,16197573368012443263,524288 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:13
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,1293206113910241149,5164874044959600085,2097152 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3592,i,11560029696575366796,7349311444050238878,2097152 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4308,i,11893179315993729067,14131542581376928047,2097152 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:1
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,18209133940999724954,17945481640997074766,2097152 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:9
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,1242215332220193871,17061697488732821939,524288 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,445408071401899494,10612788611969317710,524288 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,3797663002698840467,6527282117363916498,524288 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,3797663002698840467,6527282117363916498,524288 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,13188163440831849446,6937835321835226991,524288 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:14
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,9877653375487319908,4132590467687024,524288 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:14
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,4537113671738205713,17531389087251350470,524288 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5652,i,11529182771770903330,15627653597719593393,524288 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:14
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6356,i,9447120162464645606,15935186966183249537,262144 --field-trial-handle=2604,i,3900293763633627653,9769214716794589660,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4944

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6048

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1388

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

27765e8e-14c7-467f-8270-e560a04439cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\27765e8e-14c7-467f-8270-e560a04439cc.tmp
Size 38KB
SHA256 06788d7b706f8c6c34cbfc7ba26c2afde446d80fc4f0f3b82ef2657777aae092
MD5 d0acb2684f13a93728c0070b32ea7b7e
SHA1 e798586ee65e15cf79da8e8e0b6c72be335c8353
SHA512 f40bb847c9e8c645221a780aebab2f2ab48e3c55007c64df8d57979ab3e77a62e0abc9b55eebfa2671f14bc9f525361861bda487680b078925b42df547f548eb
SSDEEP 768:E/UxvxjgC+W3E8+c7fZrKN1twyxp5XSwQs88uBkiTzv/P84g:xZj3+W3EGtrC/fILNBZHg
TLSH
T1BF03C039ECD49863BCF39381365B234BAFF06153C4C50AA449EE7A1E028B75D674789B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3ce3b5f2-5649-411d-bdb5-35e61e646e8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3ce3b5f2-5649-411d-bdb5-35e61e646e8a.tmp
Size 36KB
SHA256 2548baaa8f54cac66026386d196a7e11eb356306cd25bd7e0c8495d328447239
MD5 ca7bf3c8de9710769bf88d10c1daa6a0
SHA1 212b4aaf59001b0fdd03ffd5509fd8fe18797eab
SHA512 5786a064949b2f2a5b1bb90dd86585425a9a223c11823d1f284f890f78802fea5db85dd3a5a4da5ec3bfb6a7a79024a6525be6dd4d38eef5b188f25b1cccea9e
SSDEEP 768:vFdD3kwgfWyEc7fZrKN1twyAxp5XSwQs88uBkiT2vE75EUroL3:PD3+WCtrC/AfILNB6kZoL
TLSH
T18DF2AE36ECC0D977ADF29791B75A3307AEF09157C8D40A90DACEA51D01C729D238BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

608a43bc-3e2c-4007-a1ff-b3b6705095f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\608a43bc-3e2c-4007-a1ff-b3b6705095f8.tmp
Size 33KB
SHA256 588517d4b55160d410bd5953d1589f0966a3236adf203368aad395524e34879d
MD5 40e9f452cc0576b2304b2bb89045eb92
SHA1 ac401a853e9c2d99a548c74c9514cc708388e688
SHA512 76ef353fdf6c1b508de4cc7b13419a3b713bdafaad72cb7e45ae1172f3cff015e4be9b9333f247b968f43dc10125ce920788b607a62eaeb607ac9c5904a53198
SSDEEP 768:Rk3wWyEc7fZrKN1twyup5XSwQs88uBkiT2vE75EUroL3:Rk3wWCtrC/gILNB6kZoL
TLSH
T1F7F2AE35ECD0A8639CF29391B65637476EF09147C8C80B90C9DEA62D02C775E778B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6cd09502-a10d-4e9b-9905-d9834065fac9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6cd09502-a10d-4e9b-9905-d9834065fac9.tmp
Size 33KB
SHA256 978fa2df6ef20cc848ce76010ae97fba5556e0dd6e3549b75b6f18534adac074
MD5 970c88c549672ebab73244f9cb77a88b
SHA1 5e6a480d65dff69106a640b09582bc4f2e96f9e2
SHA512 2a8422b3f88532e7611b740230f6f57032861d2eb13478a48437ea3b159b75fa5342ed04b05f7b7615a507d13a19942237c4c993013fee6692ce6deeeea721af
SSDEEP 768:Mk3lWBEc7fZrKN1twyup5XSwQs88uBkiT2vE75EUroL3:Mk3lWZtrC/gILNB6kZoL
TLSH
T110F2AF35FCD0A8639CF29391B65637476EF09147C8C40A90C9DEA62D02C779E678B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

93171140-9d6b-4d39-a536-3233fc8dac71.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\93171140-9d6b-4d39-a536-3233fc8dac71.tmp
Size 37KB
SHA256 aa67e6a1f4b03216c61b66a8277bf2ee68770f313fa8cc8bdf90cf12b8c8a7a3
MD5 058f3c9090fcb4ee48a7d5d8dd3742c1
SHA1 b767306345207a26d348e1925e9ebf68fb0f64b1
SHA512 ec5cf615d1ca84338d7a64a75676419a28bb748290f4233d3dbde745d8742e49fe3a3453738fecfeb8747ffd83356a7b748e6f26a59949fd4d772382528b1043
SSDEEP 768:R/UxvxjgC+W3UyUc7fZrKfp5XSwQs88uBkiTCw/P84g:kZj3+W3UGtrMILNBJHg
TLSH
T18303D039ECC46863ACF3A385375A275BAFF05063C4C41B9849EE7A1E028775D6307897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

0a88a600-68f6-477a-822e-1987d7732b6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a88a600-68f6-477a-822e-1987d7732b6a.tmp
Size 11KB
SHA256 3c4d8f0f78cd92f395cecc382ad0ede62304f26a5ea422b0267e3f0bdb97b5c1
MD5 554b015494e9e4cee8799d9e0ec39a93
SHA1 4ab8802e8b65b12faa4fbdbaf780c0659d518002
SHA512 c3c41d8bf930afc14c6b61c057432f010507406df70e7b4e50d4c4d500c754f2e9ae2887a579840b19234ed63e1e543e3f183575d67eeae7f89d71d53394186d
SSDEEP 192:sxRnRobD/f9s4HRyczoA8p4+/g6+WNIYEGfI+GH3IgIJ:sxRngD/f9s4gj/5IDdXs
TLSH
T15232A615AE68A93B8CDBE21DFA657F53D6FD5032A1901E48E6FC8A1C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f94ce04-d96d-4be3-8643-8a3246f7d4b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6f94ce04-d96d-4be3-8643-8a3246f7d4b4.tmp
Size 23KB
SHA256 b654b8b84b573131e04c3c77632d508e7b17cd0df90fbc4adc133c02b25092b5
MD5 8f767b1bca1ebe3ac5d16038fc4c2739
SHA1 24eda4e306899caac176ba8a79fc0f024ba358b8
SHA512 4d0ae55a5575325d78c5b7d78a6926d8343fbd3e484527d31322700059cff96d1ee5ed3a69f4d56963e55a73b1a974ad3e1a303718573bb7e6ce55acb37bc084
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXkroJeL:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0VX
TLSH
T147B2D92B640CCB7F4FC04A9EAC196FD77D9802CB9A588D4047FE995C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

85c847d4-bda8-4e0a-8410-be9220685d3e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\85c847d4-bda8-4e0a-8410-be9220685d3e.tmp
Size 11KB
SHA256 32e836593ca40eb4cc87b9d0360774f338a1ef0ac6ff2a58434c9cb28f27b4bf
MD5 a352a18cb75ae64bf7c99c09c5d9d824
SHA1 bc690076f358e1ec0d54db22fe06251200fe5874
SHA512 36269b28a37041ade0240e21b81331bb928cec7ff0024ea8e1f9242363e4eab4eb6003a79758fb65dadd36dcb008881fccbd8cab99cf6cb3771de4a6d59cef8d
SSDEEP 192:sxRwRobD/f9saHRyczoA8p4+/g6+WNIYEGfI+GH3IgDxJ:sxRwgD/f9sagj/5IDdXP
TLSH
T11B32B615AE68A93B8CDBD21DFA657F53D6FD5032A0901E48E6FC8A1C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 05dc7b5327d7f7ce64611998ba636ae3149ddf2954b0dcd0caf1ba48938f8cac
MD5 230802e605660593a26972d99e121645
SHA1 219c076f895a6e41154b8505da84a044fbb64c9d
SHA512 e177df2b91d3f8dfba65f0b376ba76b52f66a7df85540e256f4b2b2677aea6ff70d576134028c5c591aeacdeb63ae731c87774bf85ef71ef47a4ddb36b33eb0c
TLSH
T15751A68D50C18AE5DBC884B085D010A3393EB572C7C39E1B0DA4F57A4F7673322660DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 2f8183206201e602183e9cebb97321a82309a11ea075a158002346760dece078
MD5 b4c6ada628d612375692abafda0055e6
SHA1 a0650a087e9280c699f3fd01f2a00b7f88c0e857
SHA512 9b979843f5ee9912a442c6805a2c97a8020d6dbbb3cc1b1d485c4ece530e4970eefc419f8abe3ba7607decefe049ee48ccb9fa7f97487e9dfa824941fb12f39e
TLSH
T15151958D51C18AE5DBC884B085E011A3393AB572C7C39E1B0DA4F57A4F7673322A60DC
MD5 SHA1 SHA512 TLSH

Submit Download

947ab882-e012-4f4a-85e6-875058ddcaa1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\947ab882-e012-4f4a-85e6-875058ddcaa1.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

29a5f529-e18a-4c5d-a155-65012e4f01fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\29a5f529-e18a-4c5d-a155-65012e4f01fa.tmp
Size 1KB
SHA256 ce59a1bcfebc3e14bbe4c5fe0dde42e167fdcd8917197a9337a536f621560fee
MD5 008d0ed9daa5171c1ccf0eb1a4edf57d
SHA1 04a395568d24d88d90439f39eb5d6764c81d045f
SHA512 1457c3b86cf80aaa1dc5e2264cfc17032615d15b7e9ae6a07e3ccd7ba4fd74378b8ceb9855ef6221ec3938c7c1727d0db9f8d260943c99a11347fcf2b734a9c7
TLSH
T18E31D3F787F4857E9A0196F0AA14AE1FCE2D0515432C7C6A85E0AE27D3F3471E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

40c15995-4015-4b98-bdb2-5edcb52a4b61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\40c15995-4015-4b98-bdb2-5edcb52a4b61.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c3687bfa-5bd5-4c60-9293-cd25555cfe77.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c3687bfa-5bd5-4c60-9293-cd25555cfe77.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a2a4cd13-5e86-4145-bee2-b2177041d988.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a2a4cd13-5e86-4145-bee2-b2177041d988.tmp
Size 11KB
SHA256 e8c8860445f30fcfa828d0c0ef1b81bd38cfaf94632f7524f4d50d8e3eba0680
MD5 c92ca1b5f09759b186e242b5772d4a27
SHA1 b282243dc65a281a55818b13ec169af922a1adda
SHA512 33f3128e2b9f5e4543818ce5dc22d5003c249efb9c927e6451d0d9c63ad903f1ab0301f4cd1a6f034c20f91abd89d9facb022d4928f66cdbbb6f42223eae1b5d
SSDEEP 192:sxRwRobD/f9siHRyczoA8p4+/g6+WNIYEFZI+GH3IgDHJ:sxRwgD/f9sigj/5IMdX9
TLSH
T13932B515AD68A93B9CDBE21DFA557F13E6F95032A0901E48A6FCCA1C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba4769a3-5d25-4c72-8bad-ad8779d22e96.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ba4769a3-5d25-4c72-8bad-ad8779d22e96.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

19de4967-13e9-48cd-b6c3-0111389c51a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\19de4967-13e9-48cd-b6c3-0111389c51a3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

05794d1d-205f-4991-abe9-4123e42077af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\05794d1d-205f-4991-abe9-4123e42077af.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download