bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d

Analysis

max time kernel
148s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 13:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 7.9MB
Sample261107-qgq5dacs21
SHA256 bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d
MD5 0e3e4362f785aff0b9e1852b1064c0f1
SHA1 a42ccb51e72bdcb5bb905a62efaa28857def3a17
SHA512 193b57efc5f5971fbd9e4ea1a80b34aadcc2a814ff49c4c06afe972bf327e98ff0498217a8bdef984b10fdec6e7858a6fb88c0b14936e0c6b404387a426b87f2
SSDEEP 24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i
TLSH
T1A786942F7B48037706C60262AB8BA5CBF21F903F3B561654345CD1681F6BA2583FB6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3820	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{1B5FBDDB-EE7E-4A0E-B580-A15604012B5C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1364	msedge.exe
1364	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe
4756	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4756 wrote to memory of 2864	4756	msedge.exe	86
PID 4756 wrote to memory of 3820	4756	msedge.exe	88
PID 4756 wrote to memory of 2128	4756	msedge.exe	89
PID 4756 wrote to memory of 2128	4756	msedge.exe	89
PID 4756 wrote to memory of 4016	4756	msedge.exe	90
PID 4756 wrote to memory of 4016	4756	msedge.exe	90
PID 4756 wrote to memory of 4016	4756	msedge.exe	90
PID 4756 wrote to memory of 1704	4756	msedge.exe	91
PID 4756 wrote to memory of 3048	4756	msedge.exe	92
PID 4756 wrote to memory of 1704	4756	msedge.exe	91
PID 4756 wrote to memory of 1704	4756	msedge.exe	91
PID 4756 wrote to memory of 3048	4756	msedge.exe	92
PID 4756 wrote to memory of 3048	4756	msedge.exe	92
PID 4756 wrote to memory of 2692	4756	msedge.exe	94
PID 4756 wrote to memory of 2692	4756	msedge.exe	94
PID 4756 wrote to memory of 2692	4756	msedge.exe	94
PID 4756 wrote to memory of 4508	4756	msedge.exe	95
PID 4756 wrote to memory of 4508	4756	msedge.exe	95
PID 4756 wrote to memory of 4508	4756	msedge.exe	95
PID 4756 wrote to memory of 2512	4756	msedge.exe	100
PID 4756 wrote to memory of 2512	4756	msedge.exe	100
PID 4756 wrote to memory of 1600	4756	msedge.exe	101
PID 4756 wrote to memory of 1600	4756	msedge.exe	101
PID 4756 wrote to memory of 1252	4756	msedge.exe	104
PID 4756 wrote to memory of 2960	4756	msedge.exe	109
PID 4756 wrote to memory of 2520	4756	msedge.exe	110
PID 4756 wrote to memory of 3540	4756	msedge.exe	111
PID 4756 wrote to memory of 728	4756	msedge.exe	112
PID 4756 wrote to memory of 728	4756	msedge.exe	112
PID 4756 wrote to memory of 1364	4756	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff953ecc188,0x7ff953ecc194,0x7ff953ecc1a0
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,9537682275845875595,10764661533908163996,524288 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,5505449425029466497,9129317425789523845,524288 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:8
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,16041459644196485692,1442883245779483114,262144 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,16858765036826583334,2453566328151794916,2097152 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,2199514849352943580,10480096169149989517,2097152 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,10136530373780850517,2821501415190593806,2097152 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,14562133042955465131,11222682476303447905,2097152 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:2
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3560,i,6772673452106541534,8411504827399486630,524288 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:8
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,5645050883470445161,5066345048496297771,524288 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:8
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,4587043472274000825,11107548373656521735,524288 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,4587043472274000825,11107548373656521735,524288 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,3493640477231066579,17206312298401345911,524288 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:8
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,1813380479367016455,12868455100715388749,524288 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:8
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4792,i,17850590709569615745,4018887585701796746,524288 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:8
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2152,i,8079949061205252880,6221573850082028968,524288 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6120,i,17826780107071521430,1356678774551234410,262144 --field-trial-handle=2292,i,5645278225655056614,17466995414705693140,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1364

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4040

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

08d48427-682c-4dfd-8e59-f489353368e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\08d48427-682c-4dfd-8e59-f489353368e5.tmp
Size 8KB
SHA256 1ebecc6741135cc88b92476bce9ab40babef51e4af97b380172be6318eb328e1
MD5 3f98c845696aea3dd3e3c22d0c033b6b
SHA1 7078c805f722b290145399c18d295ee43fb98f22
SHA512 31d7d83d1dff1c94fed0cece57763fb0c236f47cb2ceb0e3881fcfd945b9bb7ca2be57893a03b50f859d5fa963fc7dd53529ec3338d2e3e7cd13a47d779d5aeb
SSDEEP 96:5qONkqQsjpfbUVH5ih/cIPURHl8h4otop5buDBBqP4v+Y1xf//ojdAxXRtIorexh:AONK6JU+QmiUy03Mo//F+oV4rNxXqKU6
TLSH
T1B4120935BC78AC3B5ED39991F04736238EA48167DBC96F94D6DC2A1C05DF66C230B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3060d2f7-df6d-4126-8d51-26bfe25418ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3060d2f7-df6d-4126-8d51-26bfe25418ee.tmp
Size 18KB
SHA256 c1a7098a828bafd9cb9a7ef815a9ddee31c1cfdcb7a4ca83f6d55cdb4ee049cb
MD5 8aeead209447320a4098cced8344a4d8
SHA1 0bdd5f0f4b1b4ef165134441e1afbc68f2de1030
SHA512 4fcedc364b7a17157fad54481b42756bb489eda55b123084b62b75fe0378fd0a531873c5f1ca0b5190fe7438c60192887f13987c22695ebcbdceb629b5e49152
SSDEEP 384:SQkUSv0sN/hSyZbpUch//F+oV3JH7vBEnZ4IIlG:K0mAw/txpJH75EZ4Lo
TLSH
T138826C31AC78AC3B4EE39661F14B3A179EB4C057DBC91A94DADD5B1C01CB6DC2307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7843bef7-3be5-436f-81dc-7a467ae4963b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7843bef7-3be5-436f-81dc-7a467ae4963b.tmp
Size 18KB
SHA256 f35533499bf7e81d0cd6338672284ac3a0df9aa9645549bd5558ad3505c34527
MD5 35007a8586c567a51e919152db7df7a6
SHA1 72ece766909dfc917a1f5fd515c47956dc96905e
SHA512 188e8d0eabfc4f4550dc0282158734d3be569d7fee0b69d53f0cf115ab152b9e7b4d80479cb6acc6bc6d054aa2f63c262e063559c0b48bb68c956449c1a3a257
SSDEEP 384:xQkUSv0sN/CSyZbpUch//F+oV3JH7vBEnZ4IIlG:j01Aw/txpJH75EZ4Lo
TLSH
T1B7826C31AC78AC3B4AE3A661F14B3A179EB4C057DBC91E94DADD5B1C01CB6DC2307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

02cbacf9-b0ae-4fda-8fc5-017c0fa0afa4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\02cbacf9-b0ae-4fda-8fc5-017c0fa0afa4.tmp
Size 10KB
SHA256 c86aa54c58dc96e30d82ffb6805c7e2bc27818239f398709fceacff925fcacc0
MD5 b5f7926ffe40e47e6e0ff7ff5d076895
SHA1 ad594eedddb7b7da01ce229b394414b29a32125c
SHA512 69aabbabf15097fe4060f5af58cb5106d1f36248db12ab9f694c3ccad9ba015e1605c699a572e7661fcd97e428641f75711b040b26ad519789f82071a7afce86
SSDEEP 192:sxZhRqWv/fcsnNIdpHsHW6+WNGY361GW5Ig5KJ:sxZhPv/fcsnuMHbGXHc
TLSH
T1D922C962AD28697B8CC7E21DBA15BF53E6F95032A1941E48ABFCC61C05E7ACD134740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

258ae95c-5233-450e-b118-1769ee11b51c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\258ae95c-5233-450e-b118-1769ee11b51c.tmp
Size 9KB
SHA256 cd98feaa1be1ce2eb295c739dcaae45b110526d6d6947eec16759b0692ca8ee7
MD5 a95fe01197dc2ae935979c54a355c9df
SHA1 281b2a131aa80c63e29efb11068166fb11bd8662
SHA512 5bf39452477a0bf23ec4ea8a7486ffe0af7de196dd2614ceb085df9cffb01349099ae0e33b77700abcd4e6707f1f5f46f339f52be0b7d0974db18d6d000eb1a3
SSDEEP 192:sxZhRqWv/fcspNIdpdsHW6+WNGY36WNW5IgrJ:sxZhPv/fcspuWHbGXd9
TLSH
T15422A811AE28A53B4CC7E219BA25BF53E5FA5032A1D51E58EAFC861C05E7ADD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3df0fe16-2a67-4d06-a690-842a3ca0fc9a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3df0fe16-2a67-4d06-a690-842a3ca0fc9a.tmp
Size 10KB
SHA256 6d2ecb5bcff890b9e235c3092dd8b72d1353552bf8807e1da4df681fb3898559
MD5 57a03c65dd65ba3a7ef9bb638b009441
SHA1 4f3610a79f73cf1640ec5371016e7023ae7ebc56
SHA512 e8dd5d636f8d1ec48988a31d9d0c1248edc01075cf5174326135186b2e999a33cc8495d37b3c80bc1cf5dcc43f29c4da96641f56fafb5eb3ee9273dcc9c4750c
SSDEEP 192:sxZhRqWv/fcsnNIdpdsHW6+WNGY36xVW5Ig5KJ:sxZhPv/fcsnuWHbGXic
TLSH
T14E22C821AE28697B8CC7E219BB15BF53E5FA5032A1951E48ABFCC61C05E7ACD134740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4007756c-de9f-4ec7-b712-782351045b9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4007756c-de9f-4ec7-b712-782351045b9c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5aa826eb-dd8e-4e08-990b-ddceaaf8c9e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5aa826eb-dd8e-4e08-990b-ddceaaf8c9e9.tmp
Size 27KB
SHA256 13ba68511d4b6d0253df67109081d30545748964aee8a4468a75f3f92321c39c
MD5 ac7b67f8a6627832b47a7ca8e3f45b7f
SHA1 65f5bcf1862b18eab88558172c7fb0ffa983a800
SHA512 69f82dd2d2ec0507e42108f9adcac443d97aa375f7f972be452ca83ba0221c70ebc32c65cdda90a4e24f59aaf6a7173a76379bc57e4314a222791335ce67ac75
SSDEEP 768:1FKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/yro9k:1FKlm7QWvUYe0u1ja8/L/E/p9k
TLSH
T151C2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 86b39604b106db5afe93f7e42ec182b7ddfa59f2146e7ba41f3b682fcfff03bf
MD5 9b9a29a2dda4a4a2f60efbbda4846fde
SHA1 2df1148beb95e6c6c2e61f0f533e90e8c6ad06f1
SHA512 71977d672d5c3791facaa7a82b992a7c48bdaf73994da1923a140855689dc29a5d30c6457b713db875751ad362bc043fb6ca44947845a8afc6abb96c1b1b29ed
TLSH
T1C351FA8654638BD4FBED61FC8DD211CF373CAD8086830E72A195DE797827794B12C050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 5613a9eff18351e9c9e6b481790a0662cea8389821047b6e703fd212011a0fde
MD5 ff16e8aefc04a923570c0bc571037047
SHA1 c7cc60609aeafaa2c93f798635203fdebee20f88
SHA512 2823ec27ee3a93d3c5a01bdd5eb2c725dfff5eb431186294d168f28f28ab8c9df0b5f9fe83f1aedc7088920a17fed1641ba752faa6e7ea12a3dcc10e31576f76
TLSH
T1B251E78658A38BD4FBED61FC8DD212CF3B3CAD8086830E72A195DE797827794B12C051
MD5 SHA1 SHA512 TLSH

Submit Download

59d76d93-733f-4f71-86cc-ecd547f08b0a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\59d76d93-733f-4f71-86cc-ecd547f08b0a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

62cfc582-84fe-4d04-9ba8-d72c36e11b8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\62cfc582-84fe-4d04-9ba8-d72c36e11b8a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

87e72aa4-a421-4b9b-a602-ef034673f710.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\87e72aa4-a421-4b9b-a602-ef034673f710.tmp
Size 949B
SHA256 f38b62a9aa3b6b6a1a7fca1b61af3ca971cc804b6dd8ec297f33a923cda2e109
MD5 139134ef3e9652b17d859ae5e9fbb482
SHA1 bae93926f1f43b1b8b25249ea4c966dcd4a2b786
SHA512 14b5bb8c77f1503ea71ce9be71e92ff4defb6f4935987362b28d37b6f44b87c27edbf45ab205e6c955091ef4a7fcfe55ad1ef3a58ff72cee0c2a9d1cc34b0ebd
TLSH
T15B117AB3C7D595AEC90116F05A28AE2BCE2D0A06421C7C1989E4EF2B97E3076E10255B
MD5 SHA1 SHA512 TLSH

Submit Download

acb9251b-698f-4002-b9e4-3dd1f6f7f7db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\acb9251b-698f-4002-b9e4-3dd1f6f7f7db.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 849B
SHA256 cba693521362d24ce78393db2663c0f3a9bf5fd7456c029e4eeeea12379e55c8
MD5 b8fa006d623db63c91782c642effa020
SHA1 7a1ebc15f5d14de684de067102f7a33928c603e0
SHA512 2c1731dfa287ff3bc9419bd5fc16866125ca17e61ea97d8dfc15c513d1b9fac695c3632fe83d0df47bb7ee2917bcd368e2f9921267baed05196cbff5c9b8f119
TLSH
T133014C51332E01C13FBD750452A8C917C65520F53424F46F3AADCCE919B7E584FBA4C9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 15c2ec0739de912b5f093a8f5ad55b58bf72f344b05888fd8ce31b84ccf8451f
MD5 a44418e17ba81ab9bb81a58628e3a0a5
SHA1 380d8b7bbd27d037bf16e97cc53dd977200e7a5a
SHA512 1ad6e7083779b4a0293f27940b215649adfee0661411eb6a8a5674eb6447e24d96be08d9644a3d850e13e61da17700416e35b1634cc654ed933e41e4aceb4b08
TLSH
T119213851732A02813FBD35086268C857CA5620F63024F46F76ADCCF91AB7E685BBA4C9
MD5 SHA1 SHA512 TLSH

Submit Download

c2e91b72-f48e-495c-9c58-209899070a8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c2e91b72-f48e-495c-9c58-209899070a8a.tmp
Size 9KB
SHA256 9ef7215a5fe2ac7ed04eaa6269cbdfbf07bd7ea103c20184492dea545b6df265
MD5 e6de7f275fa0e1b5673a431526d9577f
SHA1 6965f512b0e1d5eac13ef14e65f5a2ab61a0d210
SHA512 b5acb140057238c75fe9cfd05f7c8f0b1cf8353c39aef3c70b2ae5bf009187e52faa944acb34bacdcbdf9c5388a3ae92af450669e794279ef294b4ae87003beb
SSDEEP 192:sxZhRqWv/fcsbNIdpdsHW6+WNGY36WNW5Ig5oJ:sxZhPv/fcsbuWHbGXdu
TLSH
T16422B811AE28A93B4CC7E219BB15BF53E5FA5032A1941E58EAFC861C05E7ADD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

f1ddf8c1-61cb-46fc-ab9a-8aabec355199.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f1ddf8c1-61cb-46fc-ab9a-8aabec355199.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2e1d1d2435c4de121ff87453e30dbea0c64bd623cbf3fde63834a67624d64113
MD5 d2e73544c8a8737a376a73a9fc8746a6
SHA1 d12f64fe273bfff27141aec91a1e6d82bf749f69
SHA512 3e096c97b4e46d4f4a47f50adb427b9b166e931e937372bfd5987eeb785e5f4e374d7a346d12c080a15a14dceaa066787fbce8c5e0c7b4a066a05691a072195b
SSDEEP 96:KqONkhQsjpfbUmjH5ih/cIPURHl8h4otop5baDBBKP4v+Y1xf//ojdAxXRtIorOV:BONp6JUm0QmiUyI3so//F+o6BCL0U6
TLSH
T13202D839BC786C7B8EF39E45B0477B239FA4106BE6956F94DAD81E1C01D725C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a29e335a-963b-473c-9b03-01f68f8c38a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a29e335a-963b-473c-9b03-01f68f8c38a6.tmp
Size 21KB
SHA256 c4694747eb696e3fca13e78f75484d5f72cb9975217e1f9f58e873582c51a0fe
MD5 b13b159e52dab7b292f3b4b8fbe07c65
SHA1 c9d270f2d1a8a9e87a256bf96addc20e36078d32
SHA512 bc100f7f9028b325793e6aca40a97d2c2c33bbbec69899364184d9ee5bbc7563dcdd8b56894a996f46a99674b8246143d737435bcd6501ac88f03b80e4669d9a
SSDEEP 384:HiFzQkUSvzzsNh8TUNTUlIlCSyZbpUch//F+oVTJH7vBEnZ4IIlG:CFdX8wgSAw/txRJH75EZ4Lo
TLSH
T158A24C33ACA4993F9EE39B51F14A3617DEB481A7DAC5AA90E7CD591C00CB1DC2307D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1689f7fb-7e69-48ff-b544-ae13f7bbad93.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1689f7fb-7e69-48ff-b544-ae13f7bbad93.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d68b39aacbe5d1c48bef2fb6a31c11ff84601b446922f52d3802afbe52f67fca
MD5 8c969e4d5a559d9cb43d303f78f3f956
SHA1 4978a30408288ac3ba17382227418bbd0ea893b5
SHA512 2cb84b5f44077a3adb628c2aa03f7a8da4ea3bdca038e0192fc1bd364a9df1da4b596b37317a138e94b8a426d57bf09e0a38004984ed54f28639c5a2becc3934
TLSH
T1F141285CA6F91148B3B76F5A9BF6686D487FBC732E0B946E00110E4F0A22B40C8B1733
MD5 SHA1 SHA512 TLSH

Submit Download