bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d

Analysis

max time kernel
149s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/11/2026, 13:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 7.9MB
Sample261113-qmapkscs7j
SHA256 bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d
MD5 0e3e4362f785aff0b9e1852b1064c0f1
SHA1 a42ccb51e72bdcb5bb905a62efaa28857def3a17
SHA512 193b57efc5f5971fbd9e4ea1a80b34aadcc2a814ff49c4c06afe972bf327e98ff0498217a8bdef984b10fdec6e7858a6fb88c0b14936e0c6b404387a426b87f2
SSDEEP 24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i
TLSH
T1A786942F7B48037706C60262AB8BA5CBF21F903F3B561654345CD1681F6BA2583FB6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2128	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{071DF23F-4559-4EFC-94D3-2C96A87837A3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4132	msedge.exe
4132	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3288 wrote to memory of 5092	3288	msedge.exe	85
PID 3288 wrote to memory of 2128	3288	msedge.exe	86
PID 3288 wrote to memory of 2728	3288	msedge.exe	87
PID 3288 wrote to memory of 2728	3288	msedge.exe	87
PID 3288 wrote to memory of 2728	3288	msedge.exe	87
PID 3288 wrote to memory of 2208	3288	msedge.exe	88
PID 3288 wrote to memory of 2208	3288	msedge.exe	88
PID 3288 wrote to memory of 2648	3288	msedge.exe	90
PID 3288 wrote to memory of 2648	3288	msedge.exe	90
PID 3288 wrote to memory of 3720	3288	msedge.exe	91
PID 3288 wrote to memory of 2648	3288	msedge.exe	90
PID 3288 wrote to memory of 3720	3288	msedge.exe	91
PID 3288 wrote to memory of 3720	3288	msedge.exe	91
PID 3288 wrote to memory of 4588	3288	msedge.exe	92
PID 3288 wrote to memory of 4588	3288	msedge.exe	92
PID 3288 wrote to memory of 4588	3288	msedge.exe	92
PID 3288 wrote to memory of 1100	3288	msedge.exe	93
PID 3288 wrote to memory of 1100	3288	msedge.exe	93
PID 3288 wrote to memory of 1100	3288	msedge.exe	93
PID 3288 wrote to memory of 2732	3288	msedge.exe	99
PID 3288 wrote to memory of 4292	3288	msedge.exe	100
PID 3288 wrote to memory of 2732	3288	msedge.exe	99
PID 3288 wrote to memory of 4292	3288	msedge.exe	100
PID 3288 wrote to memory of 5088	3288	msedge.exe	102
PID 3288 wrote to memory of 1160	3288	msedge.exe	108
PID 3288 wrote to memory of 4756	3288	msedge.exe	109
PID 3288 wrote to memory of 1272	3288	msedge.exe	110
PID 3288 wrote to memory of 2228	3288	msedge.exe	111
PID 3288 wrote to memory of 2228	3288	msedge.exe	111
PID 3288 wrote to memory of 2372	3288	msedge.exe	112
PID 3288 wrote to memory of 2372	3288	msedge.exe	112
PID 3288 wrote to memory of 4132	3288	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffa82abc188,0x7ffa82abc194,0x7ffa82abc1a0
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,16753583812952629879,6122907340178044441,524288 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,3694784072710280756,8151788671743547972,262144 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2536,i,2199832301890597984,13424612460675328692,524288 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,7004921467119884139,7617721486390792542,2097152 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,5973634330996942119,471745937493392611,2097152 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,9024430235985180924,2940900635233215106,2097152 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,10040725931900588916,8138810540846366059,2097152 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:2
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,16415531638870271533,6870984587556160589,524288 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,15326382944380295453,4596404802259489835,524288 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,17249145139424044164,6751390817743123561,524288 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,17249145139424044164,6751390817743123561,524288 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,11963539713255546027,4134902985190827692,524288 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,9536168377684185284,463657435560873703,524288 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,10917677048176358333,4289697501187475790,524288 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1212,i,10903346708164493760,11841668329445706959,524288 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=1012 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,3875954538107656133,12511062766412543277,524288 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5152,i,6189858535341573657,12267416476894860620,262144 --field-trial-handle=2212,i,1678132228752469651,15960616769276401133,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4132

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

14506a1c-33f8-406f-851b-e15076a8516b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\14506a1c-33f8-406f-851b-e15076a8516b.tmp
Size 8KB
SHA256 b3c0332a23e50ca3dc926d90e5983fb01afe10cef69ea41cf3b51795a1b3055e
MD5 83f2edc1c12ff8010a56a51087e8f660
SHA1 6ce27094dc3d0a96aecdc12238a78b21343dea13
SHA512 9747f84ab696d376c8a16a7a63237eecdc8fd8cfa02f56eb37865c5d6308d94b3591ccdcc4d19519fc628bc9d592f1230385089c18c24f01a83b56897846505b
SSDEEP 192:SONV6iDCQmiUyTlvHq5u88PjaSqwcpLU6:SONV6/AHq5u8ijaNLU6
TLSH
T14902F739AC782C7BAEE3AE45B54B3B175FA4113FE6942F84D9E81A2C01D729C1307522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2b6f38f22081ddaa1111b84705bb0452e935cba70ffda2b2886601f1d8df6360
MD5 ec02b779d41e6c7bfde9a979b0a24d5d
SHA1 d7bfaab5e399fd543bd91b28be91cb05e1603c12
SHA512 7039abea8da570fee0fd1cebc7e8feacc30cdd16fd0348ba5146c309f1696c541bd99a85a480ad3c227df6df586718bd26cf483ae0af65010caac2db1bde30aa
TLSH
T156D02BC8D0D43558E01630351027850233CCDD54F003224680450591C4402C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4953eb47ddf8fed591c7d8926a102a58328776c2f8bcb0dcc6c2f6f790020aa9
MD5 4dce79f6f910909bafe5b8817320847d
SHA1 e10678ff1c26e3e9d2f3bf3bb824dc7adf3c47e4
SHA512 9329ecf2bfca29939d71c91b740a18344d0c73d558771b355af8d5bafc3d053fd9c23a07e1db9b22bfa7909d7bb78bb5272f713dbfc950acdbf066383642330d
TLSH
T146D02BC890D43958E41630351026850233CCDD54F003234780450591C4412C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

758d1203-1fa7-4a4c-9187-7446c963bbcb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\758d1203-1fa7-4a4c-9187-7446c963bbcb.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

84fd68d9-46c9-4a1d-88a2-10381e1e3da9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\84fd68d9-46c9-4a1d-88a2-10381e1e3da9.tmp
Size 10KB
SHA256 de54f6e4fb7bd8d75a0f04edbb1515d0259bba89660e8e4120c835a72c6f0efb
MD5 b1ad0694c5c8dca1c4892357dd5c3df9
SHA1 1e4e6f3696d1bfe6070c586a27cd9654786cdb61
SHA512 ede5410a334380a5c45c11bf67e9e3160b33f1025459708b982e1d703452264b7f0578c53ed10d20d6197c9870227ce6354ad53b29aa8ea451ec7e414024a171
SSDEEP 192:sxZORpWV/fcss9cIdpd/HW6+WNGYabevJIg5yJ:sxZOGV/fcss9F9HbGWM
TLSH
T1B522B6156E28697B8CC7E20DBB15BF53E6F9603291D41E48AAFCCA1C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 75ea08066aecff51551d7afa7cd9421c60d16e3c413e86f3329b49fb0fa52bbd
MD5 5ff3ddbb3a4479dd50cac422f724448a
SHA1 15fc8f25d52c0974a008c21cf9eed4d58469141c
SHA512 0944bf9818d1fbbaa58863d9f581694237fc552ba38e730e8a87dd5977049fc0ee2aa2b388a31e1891c1e85c949a84eac0fffa627f4aab9d7610e62af96fb1c1
TLSH
T19DE026C516C8C22EA309689703FC730C82A0371AA7C8698E2B40C8C8B2026C0FEE2690
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 0c0cc9768107665565061e15b4f6920ecce948b39bfe91c39f22c9471a390cfa
MD5 f5252a400c7eb26d3daee21410c754f1
SHA1 350b6ae96727891a05f5943928802ef186ccfe44
SHA512 38b2cd24f3ec856bcf6eda9e3ac1338746ffa4bfeec99c81805b24af0df6e9a69c6399781686e9258340456ace4950c602c369e5d1362059788439fa72b56ea3
TLSH
T1E76142CA5ED0287BFF6865B0C1FD154B3B3034B045A31F5A28E6F8741E8D7892D96638
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 079e09cc7fbe8f9304a5bc7e3720eb856f5f8005cda8fa147e425eb4c567ac5b
MD5 6a517103e3ab213fa670b9891c8f1b89
SHA1 66a6ff128941b5729ebbd997c3f3a07a9e9214f2
SHA512 add8fc26935fe685cec24e5790447603ae340ea63bc3e1eae460ce728856788cc8c7dabb844dc097b4e78a4aaad4486c400c5f8c02782915278b4fb9e14c75e4
TLSH
T1756143CA5ED0287BFF6865B0C1FD154B3B3074B049631F5A28D6F8741E8E7892D96238
MD5 SHA1 SHA512 TLSH

Submit Download

1b37763d-a1dd-4323-990c-076f390012e4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\1b37763d-a1dd-4323-990c-076f390012e4.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

452e6707-33c0-4aa1-bcf1-ca24dbb6f756.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\452e6707-33c0-4aa1-bcf1-ca24dbb6f756.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

883c83a9-0d0b-4b11-b9ed-393cef21f362.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\883c83a9-0d0b-4b11-b9ed-393cef21f362.tmp
Size 949B
SHA256 05242330c7ef31f685bb9826663a6dd2965ae3d3d224f4195798085566aa97b7
MD5 c56ce4b0faee9198077563b99af600c5
SHA1 1b0214158d8d183c442a9aec42605531a30ca892
SHA512 e6fb94eca211854edf5b186ba71c63bafc3c52cc3dbb31dc9fed9a13f58a2c681bff11087aa94d633d45b11094a867d86b044ef90ae1642eeaaf765e7539f2ad
TLSH
T15311BAB3C3E585AE8D0117F05A24BE2BDE2D0A06821C3C1A89D4EF6B93F3475E00255F
MD5 SHA1 SHA512 TLSH

Submit Download

d19066ef-5fcc-4edd-a3c2-b526a606f544.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d19066ef-5fcc-4edd-a3c2-b526a606f544.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e150f61ad53eafbed2a5d453c05286962656b725dcf6456548982e9966b3c5e6
MD5 ade70bf8505e9ccdbbb77aa194de73f3
SHA1 ef09a43dcbb8ad9f5fbb651bfb146cb1a741509d
SHA512 bf46c31bb1cf8af2e8ae29382cbf5aaa4a753ebf3b6cb7721436eda6979a79a5ab421afcf51c4940cc48855673fb00e263930b815734e19c02666199d201cda4
SSDEEP 96:KgHmKQou6ucK3q8t0BdnDfkvDePh1kKJBh1N2K+kl:AV3lt0BdnDfyDeJ1pBhYM
TLSH
T12E91301130BB064038BE3598857B8A5A564131F33018E66FBFBC41E65E6FE191EFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf57fef2-1a2e-4257-95f0-ce8ee5978d1f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bf57fef2-1a2e-4257-95f0-ce8ee5978d1f.tmp
Size 27KB
SHA256 a05acd8c09beaed413361e7e5cf14cb6e3e4b7b67a754b45627c68841af7d2c6
MD5 ac4895ba01ede8230acbb491b3c22e7e
SHA1 26f992e73bf47281a5859f9d50986583871796da
SHA512 ed27b2734f6bf55eb9838e0e02f9dbb094a25f506adec7b26a7610ee9b223c837e4358d85e844829e5ea926f02beb8e0222cf8dad93ba926d03f87cae72f8952
SSDEEP 768:2LyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3VroNZp6:2LyQRbrWvvlpZu1jaXKLf33uNZp6
TLSH
T1A0C2E93B640CCB7E4FC01E9DDC6A6F976EA802C766588D4447FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c8d81062-72ab-40b0-940b-5d8a9fedcb9e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c8d81062-72ab-40b0-940b-5d8a9fedcb9e.tmp
Size 9KB
SHA256 7915380da5faef9bcc2bb53d25e0bd44b95ad0b37c99b13a5349f55cd1a8febf
MD5 64de721e951ee5d7a6c524337b5ce4b2
SHA1 93f002c8b01dc36eb5ad2b36033e103f0fc69242
SHA512 9520547d6cb3e04a6f2047e093497986dc00e95e64a196ec9c9af4224ce10dd2fbbc18b1a39f1f6d5079b9b5656a93b3d8d542f754c18dd4b7f963efd8265919
SSDEEP 192:sxZORpWV/fcsS9cIdpd/HW6+WNGYaJ6vJIg5AJ:sxZOGV/fcsS9F9HbGoe
TLSH
T17C22B7156E78A97B8CC7D21DBB55BF53E6F9603291D41E48AAFC8A1C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f5aa97c9-7e3d-4eff-b6ef-540cad786366.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f5aa97c9-7e3d-4eff-b6ef-540cad786366.tmp
Size 10KB
SHA256 d25cda83bbdb410df8051eff5b3983ef4dd489b7cd10f4ccb9362bca7941602b
MD5 31b7cc6d2bd784229ce326491f7a28bc
SHA1 300827b74dacd1ff5fe022c8bb4335c02bed18db
SHA512 e64c34693e5b7470abed63803ee7ea31aacf837b4a98ee166c8a0171f46fe074f618c7e4bf3f136f1b07cbd339eb09983a68e78aa12a00acb680e2732bafe2ef
SSDEEP 192:sxZORpWV/fcss9cIdpH/HW6+WNGYamVvJIg5yJ:sxZOGV/fcss9FfHbGAM
TLSH
T1B922B6156E28697B8CC7E20DBB55BF53E6F9603291D41E48AAFCCA1C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fb625295-2caf-43f3-81f1-b6760e1637e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fb625295-2caf-43f3-81f1-b6760e1637e1.tmp
Size 9KB
SHA256 a619e4d6300e695e8cfe8f0833b0d1c370eb77c78a3cdadf3bcb9213832eab8c
MD5 dd131af58b80741988ab068ce55d0228
SHA1 579c22635487cda1eb6e16abed137968add18e77
SHA512 a5e21cae6bdca2a7917e4c76cec3914546518ab3d4a74e5ec96553ed0b710e95d507c689f79b471b57124313a0ddccb3d237aaac1877baf553f354a7487759c8
SSDEEP 192:sxZORpWV/fcsK9cIdpd/HW6+WNGYaJ6vJIgrJ:sxZOGV/fcsK9F9HbGo9
TLSH
T11622A8156E68A57B8CC7D21DBB25BF53E6F9603291D41E48EAFC8A1C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ff353eb0-b458-4832-9dcb-ff62625e0c3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ff353eb0-b458-4832-9dcb-ff62625e0c3c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

05a9d252-52ba-4510-9efe-ef912334994a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\05a9d252-52ba-4510-9efe-ef912334994a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0764c131c8d093d17da25fa490c836b54588ea8c9ea4586801bd7e29efd7bce0
MD5 93a37b96d83947f98a4f1078b7b23798
SHA1 532ed4d8d7c62d23a6ff9c3a1a1195c5b826ef2f
SHA512 cc679a2adf6d739b903af124a0400593de182c65d16e6d88e40bfa2ebcf032f6898bc310506ad3a4799d788c4f3fc13b1c21d1a023a90eb3cf4d0ef65f0cee16
SSDEEP 384:+QkUSv0sNfUoxp96oHp5u8ijOBFRH7vBEoUIIlP:u0a7fk+RH75EoUL1
TLSH
T14B827D75A8A86C3B49E3E540F24B3B539FB48167E7D82B90D5ED9B1D00CB2DC230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a7683e21-8ad6-4314-9f5c-2782f57a80dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a7683e21-8ad6-4314-9f5c-2782f57a80dc.tmp
Size 21KB
SHA256 cd705b957335124e1857177664f3cb986b0268d1729009caef37cf68c6d43378
MD5 f88d7ff0373658cafe8c1063064168b4
SHA1 b063b2d1b322c259a1bdaec1fb9678df1e65c0fe
SHA512 2f481d7cc01233974395c3c24ab573b726116fda23669f72823656334c1eb502eb8e9904f6d685b5a79df5c01f611205088cdf863607cb4abf9fade41637887a
SSDEEP 384:+iFzQkUSvKzsNB8TUNTUlIlUoxp96oHp5u8ijOBURH7vBEoUIIlP:VFdC0wgR7fk1RH75EoUL1
TLSH
T1ADA25C7698989D3F9EE39A40F64A37138FB04167DAD96B90E6DD8A1C00DB2DC230BD11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf2e92d5-1d72-49a8-81de-6dd800f5b60e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bf2e92d5-1d72-49a8-81de-6dd800f5b60e.tmp
Size 8KB
SHA256 e44f77809c159e2cc43d5bcf418fbd8013f324a02415e2313e8454fbb7fc593d
MD5 d8c2c658bc0d0a0c65c1b2f5c75dbd39
SHA1 a1d0e4ffb8eac24a76cdc385c1ab1bacb519d6fe
SHA512 48ffdb7d01ff91a11296187c69a5cd6ca46b6bd1880813e4b0bdcf2b864fa1b7ad96a95b9b8022d59fb489739c5f07ec51c9968a59108bbe8f5f856b257d3868
SSDEEP 192:ZONq6iDDQmiUyQlv1q5u88PjO7FmuZLqyU6:ZONq6kB1q5u8ijOBZRU6
TLSH
T1D112FA3668B86C6B6DD3A950B58737135FA5423BE7C87F84D5EC5A1C01EF29C230B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c9bdfb63-1471-45e4-8f7f-f9080fe3f21e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c9bdfb63-1471-45e4-8f7f-f9080fe3f21e.tmp
Size 18KB
SHA256 d6b1796306fd540d104e7eb212ad09ade81d91ffc5bcd2c2b36c786f16be7c0d
MD5 a4d13a46ee8e48d5520a5fe725ee29dc
SHA1 2fbe4c6faa16d6c5c70a2b4765726a5ed2479d40
SHA512 4a45f1cab0a1cb50ca528bf91670fdd523ae8b4ce6858039da03a5c467d81b212e7ab1393e64ff0a1dbd489f1265fbaa4bbfe3b925d699d74ae4e70a6d9e093a
SSDEEP 384:FQkUSv0sNfdoxp96oHp5u8ijOBFRH7vBEoUIIlP:f0l7fk+RH75EoUL1
TLSH
T1D6827E3568B86C3B59E3A540F24B3B539FB48167E7D82B90D5ED9B1D00CB2DC230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56d7db1b-c0e0-46b5-b626-c4503db15901.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\56d7db1b-c0e0-46b5-b626-c4503db15901.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7bf91904317cc25c0656c7d0d2f009d504a1261c01f999ce69d36c57ebf6674f
MD5 5b4edf2de0d2074643b1125fb73e3ec8
SHA1 933accb26db9460ba4a4bfe74cdaa25e6e964a8d
SHA512 61a5083d766b7b048b23f646c1aee39cb5607511bcb36a536625f4012f9e4e5ea2cdfe06a0e39bd7c7f35055f7ce5ecd294433c778da35fc072f5c28d61e97ba
TLSH
T11E41285CAAEE1158B3B7BE5A9BF7A86D487E79772E07D46D00110E4E0A22F40C861733
MD5 SHA1 SHA512 TLSH

Submit Download