e6e6b1f9cb0f32235412be113de7716333e88121f9159a0ea0ff3be652021af7

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
max time kernel
148s
max time network
146s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
13/11/2026, 02:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 19.5MB
Sample261113-cmp8daex7y
SHA256 e6e6b1f9cb0f32235412be113de7716333e88121f9159a0ea0ff3be652021af7
MD5 d260441f74fb71b91762f3285b4e8f16
SHA1 e119948a919b733a9e4ffcb4564f4fd0a8427609
SHA512 d7448129690721bfc52fc0bb53c5dd14e6cf0377eb9f52fff1b5b58a66fd61af2a6d6a90bf6e251dbc3e45be0b1cd98dc83d880abab5198176d1a9c45eba7845
SSDEEP 49152:ZehWCrdOOoVo5TYp2xnuCQpc3txsJM+QAFId+Qi4WMEAccr:m
TLSH
T12827B46BBB49037316F242626B47A5CAF31EA13F375A1654309CC1182B7BD2483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
980	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4077919521-2131189092-3796306753-1000\{145143F1-FE28-4F7C-8397-057562E0F80B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1204	msedge.exe
1204	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 1528 wrote to memory of 3688	1528	msedge.exe	79
PID 1528 wrote to memory of 980	1528	msedge.exe	80
PID 1528 wrote to memory of 2504	1528	msedge.exe	81
PID 1528 wrote to memory of 2504	1528	msedge.exe	81
PID 1528 wrote to memory of 2504	1528	msedge.exe	81
PID 1528 wrote to memory of 2472	1528	msedge.exe	82
PID 1528 wrote to memory of 2472	1528	msedge.exe	82
PID 1528 wrote to memory of 3908	1528	msedge.exe	85
PID 1528 wrote to memory of 3908	1528	msedge.exe	85
PID 1528 wrote to memory of 3908	1528	msedge.exe	85
PID 1528 wrote to memory of 776	1528	msedge.exe	84
PID 1528 wrote to memory of 776	1528	msedge.exe	84
PID 1528 wrote to memory of 776	1528	msedge.exe	84
PID 1528 wrote to memory of 5104	1528	msedge.exe	86
PID 1528 wrote to memory of 2964	1528	msedge.exe	87
PID 1528 wrote to memory of 1332	1528	msedge.exe	88
PID 1528 wrote to memory of 5104	1528	msedge.exe	86
PID 1528 wrote to memory of 5104	1528	msedge.exe	86
PID 1528 wrote to memory of 1724	1528	msedge.exe	89
PID 1528 wrote to memory of 2964	1528	msedge.exe	87
PID 1528 wrote to memory of 2964	1528	msedge.exe	87
PID 1528 wrote to memory of 1332	1528	msedge.exe	88
PID 1528 wrote to memory of 1332	1528	msedge.exe	88
PID 1528 wrote to memory of 1724	1528	msedge.exe	89
PID 1528 wrote to memory of 1724	1528	msedge.exe	89
PID 1528 wrote to memory of 4300	1528	msedge.exe	92
PID 1528 wrote to memory of 1432	1528	msedge.exe	93
PID 1528 wrote to memory of 4300	1528	msedge.exe	92
PID 1528 wrote to memory of 1432	1528	msedge.exe	93
PID 1528 wrote to memory of 2452	1528	msedge.exe	94
PID 2452 wrote to memory of 4628	2452	msedge.exe	95
PID 1528 wrote to memory of 2664	1528	msedge.exe	97
PID 1528 wrote to memory of 752	1528	msedge.exe	98
PID 1528 wrote to memory of 3268	1528	msedge.exe	99
PID 1528 wrote to memory of 4708	1528	msedge.exe	100
PID 1528 wrote to memory of 1692	1528	msedge.exe	101
PID 1528 wrote to memory of 1692	1528	msedge.exe	101
PID 1528 wrote to memory of 1204	1528	msedge.exe	103

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x21c,0x250,0x7ff97deac188,0x7ff97deac194,0x7ff97deac1a0
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1708,i,14291569320033485120,9555944739914679442,524288 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:11
  2⤵
  - System Time Discovery
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,13647536658928983513,2277449089644360809,262144 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2148,i,16732510815379497689,3765470374879825625,524288 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=2836 /prefetch:13
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,15534001890885640725,143830263972282383,2097152 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,5912455890405465414,13508880387806421328,2097152 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,2445351978310263456,12778034003707512888,2097152 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4164,i,10210168701892205274,17914044675766771098,2097152 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:9
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4192,i,3834384901728398934,8473789480082534473,2097152 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4240,i,10080699468244852644,5403236108347787181,2097152 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:9
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3920,i,2594002769674529110,2563836023751050141,524288 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:14
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3908,i,18017699945207133326,816541256275758911,524288 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:14
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,10979211014362163356,2628679223262756403,524288 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2452
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1128
    3⤵
    PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,8001945949343140544,13833763878719399629,524288 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:14
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,8001945949343140544,13833763878719399629,524288 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:14
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,8474702639317447698,4012394968153348647,524288 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:14
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,5023237737245774793,2411625983007286863,524288 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:14
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,18311406289557480098,406151876643684519,524288 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:14
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5656,i,2747413904457740730,3984151992149484929,524288 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:14
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5644,i,13952900778764316795,14832451664520662134,262144 --field-trial-handle=2168,i,3754377925749078072,4202319232787365673,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1204

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2556

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

40b00963-4eb7-481b-a0eb-a1cd87bb3504.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\40b00963-4eb7-481b-a0eb-a1cd87bb3504.tmp
Size 18KB
SHA256 8fbbb01b39562fd5febd080ca76e9b5ce1c5d6c2d7afe738efab3a5028ed789a
MD5 92c5e0fc3618d0415955f2c92461146b
SHA1 2f2a671dd0bfa68e92b442ecf4995207731ee0c4
SHA512 4c8dfe08f9e52ccbfbea6572442ef6e6beab730f7af706f2b9954da0fe4199173af598ecd0b83cd11a1e663a858907bdb0a4a5fe78eff7be5a957b0091479f0e
SSDEEP 384:/QkUSvV8NU7fLS9zQVpIZ/5tuIuPwZ32BRYx3tld:BVXyISZ/5dkwkvYfld
TLSH
T1CB825C35A8B86C374DB3A591B54F3A039F758567DAC81FA4C5CDBF2D02DA2D8230B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4ba1e671-fa92-4d03-8d50-f007ce4251ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4ba1e671-fa92-4d03-8d50-f007ce4251ac.tmp
Size 18KB
SHA256 3b3a8230314ebedcb70faba87a2a6445cbe98e9bd0105d095fb1baf7b17b77ea
MD5 c6052b8a7e29f4920a9b09962df2d290
SHA1 e3d35ef9a79b0fa9af61722c9451c44d8178e1fb
SHA512 b80ff15d80b5fc86a964ff05df749429d3793140c40416465c421a95b8c9d58a245a1152fbacbd037a0f3b06621bc4ea39790b7763f71d7e48ce95ca09795ec6
SSDEEP 384:gQkUSvV8NUXfLS9zQVpIZ/5tuIuPwZ32BRYx3tld:IV7yISZ/5dkwkvYfld
TLSH
T1C6825C35A8A86C374DB3E591B14F36039F758567DAC81FA4C5CDBF2D02DA2D8230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5fa455ae-c316-48a0-ae74-5aeebcfae58a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5fa455ae-c316-48a0-ae74-5aeebcfae58a.tmp
Size 21KB
SHA256 4c591e7847da129c84d5cc5d7375a7bc5afbd3a5de63337b5d6c1271054a3397
MD5 590da1803c978d415c0d09602aef9eac
SHA1 500432fa4a4b720bedbbdcc78e4d7cd917d276c2
SHA512 bb764bc4d4cadc7cfe6333f6a8f5f16c2272be096e50b7417fde8d7a1b78934479273c2df76de63b2b2c39a6f4eb66a842369253d2ec6d1d81c7275c7dde7ac7
SSDEEP 384:LiF8QkUSvv8Nc8TUNTUlIlMfLS9zQVpIZ/5tuIuvwKwZ32BRYx3tld:mF8vtwguyISZ/5dnKwkvYfld
TLSH
T171A25B3698A89C3B5DB39E81F60E3603DFB141A7CA855EA4D6CDAE1D01DB2DC130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

78add784-8b7f-45c4-ace8-1e2e23772835.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\78add784-8b7f-45c4-ace8-1e2e23772835.tmp
Size 8KB
SHA256 a92baf5bc460cc0b0ce280958e2e2bd1e025b9be172ce157d5f312918c6b15ea
MD5 a7da012f97619dd6bd16e22fb1125136
SHA1 545a13ff5b335dd9805610e8097fd63b0158560a
SHA512 fa322215ec6969b34670550cefc1d1631d9902d501e7a0c9ee862218b576f8d7054f5201e71afc1b7639afc0d8ad93bce6ec4dba9dbfe710c5549ee802c3d9b2
SSDEEP 192:VGNE6QhLFQmiUyH3ozVZ/5P1uIbOE6eU6:VGNE68Ljc4zVZ/5tuIFJU6
TLSH
T11402D838A8687C7B8EE3AE55B5873B239FE5106BDA942F44D9D82F1D00D729C1307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c9ffa5510bd8eaf647858e337946c3d8551cbdca3d5f58e2d47ed03bf6e04f43
MD5 e2b553a32003f2a232e334c2a7862a8e
SHA1 cac2df4649aee9c08574409d20cc837c1704412b
SHA512 fbd8879ece0c87ceb91747877c9eac2e13992e2df5094b3111703cdd532dce0e6df3dc8256243b2dd5219343938dad7b5cf8c47bc1e74c37ca7dc731914ba4a7
TLSH
T143D02230E3820C80C8C0303A2F338AB300E0FC20C0AB0F000CE8A00CACCCACB0A38300
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6ddfb263c192f12ad316454ee1c617fe2afde1239c1d68dc9e5bf0d864f9cbf2
MD5 925e9d1b6623e8176bdf3f18aa051198
SHA1 d96ce372c5b1b00e786b8b194f0b192ccf5283e0
SHA512 c3f57164fd3f5ccf0bc39a9f6b7e92d801c6e506910373630207eabe860dd8726adad51c883190b5638515adc6c3ca5c456072eff9fcf7751b6f73effcb3c08c
TLSH
T14ED02230A3C20C80CCC0303A2F328AB300E0FC20C0AB0F000CE8A00C8CCCACB0A38300
MD5 SHA1 SHA512 TLSH

Submit Download

62cef510-82a0-4c22-9e73-18dacd37a7a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\62cef510-82a0-4c22-9e73-18dacd37a7a8.tmp
Size 10KB
SHA256 dd26cb74e159f5820f045bf229a6e1e2af864a3b322c811c41c548426ce40c50
MD5 8f1abd9d9fbf0ec760965f85c4885bca
SHA1 97c146776224f11d33cbc06b8b179cac7cba3d44
SHA512 89917bfd870c058c627f5e33e47d02dc65f8b21e36127bd8deef2c08daafa03e1b83c363d42e7f0165a93b975e2bfe19f871db37c3fbbbfb3eaf85f3b119ffb4
SSDEEP 192:sxZGRAbI/flscLxIdpym/W6+WNGY0tSlOSIg57J:sxZGAI/flscL6h/bG5aH
TLSH
T11322B715AE34A93B8CCBD209BB55BF53E6FA103291D51E48A6FCCA1C05E76DD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7255f948-85d0-4cad-b488-116e9372efa5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7255f948-85d0-4cad-b488-116e9372efa5.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88da9a78-fc85-450e-a6af-8a482c3d2a3b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\88da9a78-fc85-450e-a6af-8a482c3d2a3b.tmp
Size 10KB
SHA256 f45a0ea7d3b0bf4badaad95cf8543e360ff2e48ee436de77b6dea65d069aee3a
MD5 4296eb665b74ab53f2a57ab7b34ed44f
SHA1 e452562979657484dc024760bf87706ad880c408
SHA512 2bb87823c8e73ad2b35965d56019e001c5363f131e251962bbd9aff7b491ce70c7adc8607def63b756fb07c5b27d54cdbd68861a196c29a1b37a2679f2a18794
SSDEEP 192:sxZGRAbI/flsc4xIdpym/W6+WNGY0tFnOSIg5ZJ:sxZGAI/flsc46h/bG5l5
TLSH
T1DF22B615AE28693B8CCBE209BB15BF53E7FA503291D51E48A6FCCA1C05E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 aa6642eefc09a100ff8f9ce02951487389976214f8ae0e0962cd8af3bf056f93
MD5 e0bba4c2ae16ca239f0b8232b5416b3e
SHA1 2cbad1e6dea4afab311f73c5554d2faf0401fa47
SHA512 bf9aeaac0906a07bcf9940a942a809d01246dc0cd6945b6526eaccc476d3577f71abe5776d7ca51f7a0fe4c40dcde6268c5866baf149018d7e13c0c74f885f29
TLSH
T124516181C94088B6EBAFACF4E5C420FB7AF7D982F6830D56155CEC3A88BE355250C844
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 f65732f688df80617331f4017e412bccf2662bd478d5fb091c91fbc92e2b10c0
MD5 b9226c2d95c292f999ceba5280000fe4
SHA1 303a2fc124fc8b98b05f21ddaadd323fdce98f0c
SHA512 33bb1c6c6d2a48f34f206bc8b611aa3dac3cfbd14e1f902bbdfda20efbd5d3fbcd2bde0eac942facb83b45f3450439969bd0a474c275b8ecf251e9311a371ac6
TLSH
T100516081C98088B5EBAFACF5F5C420FB7AF7D982FA830D56155CEC3A88BE355250C844
MD5 SHA1 SHA512 TLSH

Submit Download

e3be56bc-16ca-4313-82ef-fc55e9616b00.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e3be56bc-16ca-4313-82ef-fc55e9616b00.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

57e61541-5bdc-46a5-978b-919ef9cf3dc5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\57e61541-5bdc-46a5-978b-919ef9cf3dc5.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

a8df08e7-17ce-4f91-bb42-e540fc5378ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a8df08e7-17ce-4f91-bb42-e540fc5378ab.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

acd8e2f2-59e2-4491-924b-574e66c38a0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\acd8e2f2-59e2-4491-924b-574e66c38a0d.tmp
Size 949B
SHA256 c32c5b7ceb2d3a076788a145e7e2353c82c18e74251213b0eecc7fc9fd521600
MD5 f4da673ded1174945d0979095ec9ad25
SHA1 77857895d04f3603ae2a5a39bc32329c3f802126
SHA512 117ef6780787edf437f92c55c5464634ad7168ab784ecd0c53dabdaa6a5b2ddf614eac2e478f28c0188e3cd141c96f768d481554dcff41bf6a5f020ef615a903
TLSH
T1A2117AF7C7D585AE890516F09A24BE2BDE2D060A821C7C19C9E4EF2B93E3075E00295F
MD5 SHA1 SHA512 TLSH

Submit Download

aa8a6fa5-3841-4547-92d3-4810d8df134d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aa8a6fa5-3841-4547-92d3-4810d8df134d.tmp
Size 28KB
SHA256 d573730ed49bc1728137c71fe5d9afb86437939ede648cf87442db4baa045a27
MD5 4d813aef789d3c7cb7ca9ffc71b8c2a9
SHA1 ac4fa739e7440c6ddb8c9a8e65a8fdf0e37f5481
SHA512 19de8f2be130f5d8b71d82e6a1051dffb5ee2eedf65e995ce112d1ea3354fc2c0bf91f07ae5a8cbdb51cf921940342750c026635b902c854883039aeb1e16d0c
SSDEEP 768:IubN98wh2cYWRmYQQOs8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3mHLl/eA0ZxvrojF:IubN98wh2cYWRmYQQOsu1jaKmHLpehZK
TLSH
T1DDD21B3B240CCB7E4FC05AADDD566F976A9802D766688D4047FE884C02C77EE91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c9b79213-201b-4fca-996d-0a17a98a1920.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c9b79213-201b-4fca-996d-0a17a98a1920.tmp
Size 10KB
SHA256 3d3460e46b5163e59ec11129b04ce23926367b1d33e58f17064c4cc246ff4353
MD5 26215f1f70827865cd23e65898b40cd6
SHA1 eef82c401293eb710c7567ac7f76b6ec2f2ed1c6
SHA512 ec665ee142eebb97e3d3eb770442f51d222f57b0c230a944407d01a61984026bd33c374efb536c5d32ace9634b8e0eae00d2e53347424db159354778d6fe1483
SSDEEP 192:sxZGRAbI/flsc4xIdpEm/W6+WNGY0tesOSIg5ZJ:sxZGAI/flsc46L/bG5f5
TLSH
T1AF22A715AE28693B8CCBE209BB55BF53E7FA503291D51E48A6FCCA1C05E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee3f1dfd-4647-4152-9880-5400e2977ee2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ee3f1dfd-4647-4152-9880-5400e2977ee2.tmp
Size 9KB
SHA256 1eb28cb666aee3becba50bf947b3a6ec20a94b5ac679fe7631afe74a70e5ed0c
MD5 014a976baab9b54eb167e237617a391b
SHA1 8e0a4634e6ae7b0a03d58758fc5a002254e1604a
SHA512 0578bfb208b9d0d9e60ed6a2d19489fa2037753816fa150e843f0d273c6bb8bfa31124e3107552b5080704f27fa3a0d1c02429e037bb76f8a3ecaaec1219fa34
SSDEEP 192:sxZGRAbI/fls1LxIdpym/W6+WNGY0tSjOSIgrJ:sxZGAI/fls1L6h/bG5W9
TLSH
T11422A6156E38A93B8CCBE209BB15BF53E6FA543291D51E48EAFC861C04E76DD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2abaffb0-0fa2-4a85-9239-3df96cb756ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2abaffb0-0fa2-4a85-9239-3df96cb756ff.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

b98f3533-88ef-46c6-aa46-15393287a20f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b98f3533-88ef-46c6-aa46-15393287a20f.tmp
Size 18KB
SHA256 1f2da8b3288e3888e7bb066cb272121e79c9c38e20f945774d3c68432a27bfaf
MD5 c712c63f4c8313199923a96eda8ca352
SHA1 d5ebd4d6c42a4a96caebc4c19ca07e26c4c8ac91
SHA512 08d72f16c07daf213467edc754b4886444635cc5ed280f4061b84705ae3fa56b389b7002591ba930ca328faa2471533b5c14e0de0f0b00e5dd64904d75e11ea3
SSDEEP 384:rQkUSvV8NUMfLS9zQVpIZ/5tuIuPwZ32BRYx3tld:lVEyISZ/5dkwkvYfld
TLSH
T1E7825C35A8A86C374DB3E591B14F36039F748567DAC81FA4C5DDBF1D02DA2D8230B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2ad46d8-fbf3-4e5d-ad5a-17542134ae83.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e2ad46d8-fbf3-4e5d-ad5a-17542134ae83.tmp
Size 8KB
SHA256 6f9ab34e9140d0b5fdbba0b302df9d1fcad60a43bd2cec03602f3be942e03a58
MD5 09eee8e0e04ea612ea61645cc5c75baf
SHA1 11a9c1c1e1e4fe180dbfd0684f7b7ff607088411
SHA512 02153d7697ae690d901236296b4587bae88d5dcbd3034babe2960d548b1f4c19486a8edfe1ceb0ff2c84093ec057538266e211299960e5e880ed34088fdbba4c
SSDEEP 192:WGNN6QhL/eQmiUyioLVZ/5P1uIuUYlH6/1qxU6:WGNN68L/auLVZ/5tuIuiwU6
TLSH
T1B9121A35A8B8BC7B4EA3A9A5B18736139EA14127DB886F50D5DC3B1D01DF29C530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f2ac3a94-7989-4964-8ea4-39e11618df5b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f2ac3a94-7989-4964-8ea4-39e11618df5b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download