5d67aba37acc9e0e0a88546d940ed23f29ea3441aac7dd06dcc08a1b1c93b0a9

Analysis

max time kernel
148s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/06/2026, 17:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 11.7MB
Sample260621-vre73set2r
SHA256 5d67aba37acc9e0e0a88546d940ed23f29ea3441aac7dd06dcc08a1b1c93b0a9
MD5 0b24e08f0d1dac2ee54364e50fef0b41
SHA1 a4f3ea66556cdcc2e92bc924965e225488ccd94b
SHA512 2beb14f31a87f0df953af26945288f35e916159b114ec1c205c3a58125fa6911b888c2a0b17b593c5b2bcd8e51012d8f2cbe4629f1968335ee3866a19712dfb9
SSDEEP 24576:S9dQL6poq6jBCjK6D3UwRmETlmfTKjZ6ojK6QjZ6UjK6ajK64jK6cjZ6ijK6b6ck:SvPeGAyWPbX8meu
TLSH
T1CBC6A52F7B48037306C642A26B8B65CAF31F903F3B561654345CD1681F6BA2983FF699
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4208	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134265358574032491"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{26747053-71B7-4235-AD9F-75E836511823}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2080	msedge.exe
2080	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4632 wrote to memory of 3928	4632	msedge.exe	86
PID 4632 wrote to memory of 4208	4632	msedge.exe	87
PID 4632 wrote to memory of 4704	4632	msedge.exe	88
PID 4632 wrote to memory of 4704	4632	msedge.exe	88
PID 4632 wrote to memory of 4704	4632	msedge.exe	88
PID 4632 wrote to memory of 2252	4632	msedge.exe	90
PID 4632 wrote to memory of 2252	4632	msedge.exe	90
PID 4632 wrote to memory of 3176	4632	msedge.exe	91
PID 4632 wrote to memory of 3176	4632	msedge.exe	91
PID 4632 wrote to memory of 3176	4632	msedge.exe	91
PID 4632 wrote to memory of 4512	4632	msedge.exe	92
PID 4632 wrote to memory of 4512	4632	msedge.exe	92
PID 4632 wrote to memory of 4512	4632	msedge.exe	92
PID 4632 wrote to memory of 1868	4632	msedge.exe	93
PID 4632 wrote to memory of 1868	4632	msedge.exe	93
PID 4632 wrote to memory of 1868	4632	msedge.exe	93
PID 4632 wrote to memory of 4228	4632	msedge.exe	94
PID 4632 wrote to memory of 4228	4632	msedge.exe	94
PID 4632 wrote to memory of 4228	4632	msedge.exe	94
PID 4632 wrote to memory of 992	4632	msedge.exe	97
PID 4632 wrote to memory of 4728	4632	msedge.exe	98
PID 4632 wrote to memory of 992	4632	msedge.exe	97
PID 4632 wrote to memory of 4728	4632	msedge.exe	98
PID 4632 wrote to memory of 4056	4632	msedge.exe	100
PID 4632 wrote to memory of 704	4632	msedge.exe	110
PID 4632 wrote to memory of 5020	4632	msedge.exe	111
PID 4632 wrote to memory of 764	4632	msedge.exe	112
PID 4632 wrote to memory of 2260	4632	msedge.exe	114
PID 4632 wrote to memory of 2260	4632	msedge.exe	114
PID 4632 wrote to memory of 2080	4632	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffcb7fcc188,0x7ffcb7fcc194,0x7ffcb7fcc1a0
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,14091972034383187051,12563259082916114304,524288 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,18202723628836465541,3764556456100949976,262144 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,14349340027372502164,8339841076327297093,524288 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,17963502471732827748,1215001121953224437,2097152 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,3864891902912194113,5558329785294169696,2097152 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=3964,i,5137884340410350179,13972053356837761492,2097152 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,17289606923470727232,13168723220761221777,2097152 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,8087935461539646117,14678721716281432058,524288 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,15691123493067321401,6159235749924877605,524288 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,2142219477427051637,16165802509584232149,524288 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,2142219477427051637,16165802509584232149,524288 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,728676331379318784,9801182046560355004,524288 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:8
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3968,i,10727098969618145320,11043568490838438785,524288 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,18323542476434980661,466622841244196419,524288 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,5076054980630501759,9478325255581095508,524288 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3712,i,15080491679119590730,10859845014189242852,262144 --field-trial-handle=2264,i,819423654153945162,10879607086216983499,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2080

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

83fe4e01-0c8f-4bf1-94d6-e7c36bca6754.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\83fe4e01-0c8f-4bf1-94d6-e7c36bca6754.tmp
Size 12KB
SHA256 8608eaad5561ff4c0a7ffbca52b6821c54ef77371dd39b2aed179cf19b39e681
MD5 fd3a0e5288f5b18ab70e163da076b11e
SHA1 23cbd4e5139a4a7926d191a35e5c8bfd245490d3
SHA512 9eaa88f21cd0ee77e6f6f666f31abe9ba65f626e054b1adca509f57a3052d31d0063398d7bced7fc9d49b0c47a942df88e060d3f7cceffc031e12917bee02127
SSDEEP 192:sxZwRByM/jK1Ml8Mkq/fKsn0uIdpdAHW6+WNGYLzVEXIgrJ:sxZwfMq/fKsn0/GHbGd9
TLSH
T1C152F9116B34997BCCDBD20DBA55BB53D6F50433A2941E44AAFCDA0C04E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fbe1d637ad2d5347299b1515902c4b1e97bb7b6fc5a1371da7f27484deac6c5d
MD5 679eb65ea06e46d140e73c37286d8d65
SHA1 d2eac2009bf5b153a5ff471b2308c023ae018942
SHA512 a7ffdb5dabb2633d48e446e9942306d2b4822629dca7b4c7bfadc9a0dd692180a166099464e1a73f1d519ae7200ede83be7753951fd42b3f3bdbeeea8775d2c7
TLSH
T16A71160C0012CCD1E3E256F1C0F2F245B4B0B26F3B779AA12274C5BC6519F726369C0A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e78c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e78c.TMP
Size 3KB
SHA256 0955afd9e9be1ff159627b613b4ee9490367421f5c6e607541c8966d065170da
MD5 ceccd21546ceb27f008e2d808fd507db
SHA1 ab32a05102d81e04997aba2933a6c3c576bc8d77
SHA512 9a946c93de1f41d240de6de2b5d5e93ee9739f15a035056d3e9cf2d07c5000a0e2a78e631bc54daba5cd19a852016c3169b24d4b06e2b839bb054c768ee5da94
TLSH
T1C271270C0122CCD1E3E256F1C0F2F245B8B4B2AF3B779AA12274C5BC6519F726769C0A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 599B
SHA256 756f3a54833d0b7cfa7f8a6fa2fdb545d4d73e6103949696bd1de1a8ab90e98d
MD5 450454721c1b140f1919230d9272d943
SHA1 30357f952295a1405cc2ae05700d870a0a78c13a
SHA512 ff90d858c64f7824ce00b5bb3f33af82b730ff01dabf997c4b7f80035e3687c76b2602c4238ad2d53259c4a666330c4fb0de494c8db47c7c118ca99df2557937
TLSH
T16EF0ACF3C3E4896E8A1012F06A286E17CE6D0941531C3C1BC5D4AF2F97F64B5910044F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 458c35b0c62de63bc87ecedbc48a0cc5694bdc519172e9f363cb317474eba363
MD5 6d936b69aa91304f313ce6cc8b6faf1e
SHA1 0c8ff8e67145149cc30819af7f47ef63c9b9d51f
SHA512 cffba9fabad7ca31767f7aaafdaf393e3cc9343bb06f68aad38108013ee00b88a16bb5e81c5e1e6042094f3c9ac8b35cb1fd5daf68572bc524974daa8b680714
SSDEEP 192:sxZwRByM/jK1Ml8UQIkq/fKsDduIdpHAHW6+WNGYLI86XIg5jJ:sxZwfqrq/fKsDd/gHbGzX
TLSH
T1D052E9126A345977CCDBD20DBA51BF53D6F50473A2940E44AAFCDA0C04E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 776477661d42f2aa723b8ad8474b3026f307f89ef930240c5630405227530d67
MD5 2f33156702fce5c3671d67978fd0afbd
SHA1 f72708d353d5405ea5b2f1440a92a700c87bfb8e
SHA512 538c263b59f1d06f65efa409b6468f6853a2fa507e9a60ca66db07e895451186ef407d6d3d0137edb2bfe883735e1c4196b9967ee47dcd8b0b5677754216642a
SSDEEP 768:Sks6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNtro8a:Sks6pD1WvxzWju1jahILIsNG8a
TLSH
T11AD2FB3B680CCB7E4F840E5CEC2A6F967DD801CBAB98899447FA454C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 2c385913b1cc546c7e3883e53d79279a14493c57ef5ba7dc6cd67d4e46c31881
MD5 5187d647073f8b369705548f25d2c08f
SHA1 3176c4ead9a4dc72f42a7d2df9ca48857bedb175
SHA512 2f444c8a1e6cc652cc21020011d05d59a33be2c07aac2424e14cd2eae3bea12310c06885c7faf624b1c47ea8abe03b6e4d370f9176dad2f251db3abc8c34bcc1
SSDEEP 96:KUAAKtePONWKuYKaq4KHqQhyKiQCWByKCk+:ii9J3aJx3
TLSH
T182E1031232BB02133D3E691D935987676F4276A33458E42B3BAC10B21E66E344DFD9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aae50b5f-fbef-4c03-9578-f6a02252ec6c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\aae50b5f-fbef-4c03-9578-f6a02252ec6c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 03508fa938ea7fa56cc00263dc8f3f2b78e04e59d729019aa428cb7ac2d5dff3
MD5 3a8cefd2736dd8d2ef511acfe2fbd057
SHA1 fa984e40903c5e38376c186ac20e0199d19fd4e3
SHA512 801e87c2938e7975bf4fc63748e382c9d2ebacbb1eafe182fb66f90fc5a0140faac9935fa041d625f86f7c3eff198cd7ef032932206ff03486d64c4fffc079c3
SSDEEP 384:ytNn/s3n9SfsNYA0YBSa9ndQcMdIITGT0IJx9o:yj+9UCzRGNIi+0Ivo
TLSH
T14E927D325838AC7B5DE26486F50B351B4FB441ABE6CA3F84D6EC9F0D00DB3A8135691B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 65fdd5cd785bb90b26ce80cb97a8b64e95b1d5e906c66c6fb417b54823820349
MD5 b1ba90a30802c61971f17a6529269320
SHA1 e335a9e61ad4a720b2a48a7ca6b7ee600d5207e6
SHA512 401402133e03bbd69cd762a2f31a101fe562d6c29afeed372f29dcf0e90c0cf5a80807e53d24b1129f214e15bda1bff467f7df242717a81c9798b58219ffef80
SSDEEP 384:riF1tNn/s3n9S9zsNI8TUNTUlIlF0YBSa9ndQcMYIITGT0IJx9o:GF1j+9ClwgdzRGIIi+0Ivo
TLSH
T18DA26C335868DC7F9EE25A85F90A321B8FB401ABD5C67E95E2DC9E0D00DB2AC1347D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8df8de13ec474a5a97876f7d6131a1850f684dd23b0d08288c5c882945c1a9eb
MD5 b928c62b0646f0379f867e0e210ce244
SHA1 79c21500ece19b77e2ff8aed891dc0816ff9abcd
SHA512 8965f73e856dc7297885892f4686fb0d09cb393869d2abd6bc2040dac215698db1893ba877a9949c5a5c998ee252038a8a741d0fb9dd51c3b1206058f432b5e0
SSDEEP 384:TtNn/s3n9SfsNYF0YBSa9ndQcMdIITGT0IJx9o:Tj+9UfzRGNIi+0Ivo
TLSH
T18A926C325838AC7B5DE2A486F507351B4FB441ABE6CA3F84D6EC9F0D00DB7A8135691B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f657103eda651b50c68b422c802376a50f3893d09a7f5533a38da81716bef4ef
MD5 1d3ecae61b5882557ffc07c1bd36040a
SHA1 ae1f184fe3317db495169b7fdf15c3a267e51235
SHA512 b34a8f636f625544cd91125a6ae14d5e8eb623f46ffee08b8cccf4e7ab20c9d40eb54b8c1e4134830b8540313b15670f78767b02e4b995a89d7f7e4410694fc0
SSDEEP 192:qONa6O7+3hQmiUy7tGttb0h+FdPougGfCU6:qONa61iGt9ndQw6U6
TLSH
T1D502D7396C786CB78EF2AD46F58736175FA8117BE9962B80D6E85E0C00D765C2343827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 195693992b687d89005df9995a69ca8dfc78e7ba8de54f40ca9786fe1c8e5126
MD5 f683a65e78c65cf35d121b1c92cac95c
SHA1 25499b4bdbd4df760223066e381e358da1aa3f88
SHA512 253cc109a02449f8e68313e5bf4ddc9eb40293af875265e9c022d3e820a82043f3f349f793635d46281758e38388f3ae94e03a00f4ca18cc9239f2a245d18ca1
SSDEEP 192:iON56O7+3mQmiUyKtOttb0h+FdPoYRh2vLcNIrqyZU6:iON56ktOt9ndQcMoIU6
TLSH
T15712E9356868AC7B5EE3A545F58735178FA4416BEE8A3F80D6EC5E0C00EB6AC2346817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9cf849778ff4dc9260ee25f9c109ab33bfd8c4f7619d4e71fc57c6d2ea7f8d2b
MD5 a6feb2aa23fd083b0658d17c2af7f96d
SHA1 f375994ea6745479e8fa4bc6d24817c8547cdb2a
SHA512 6d28c206ebe6a0061a109f6932083ead34fccbfac6511ff2d753df6481f8fcac721583088e06b04b72feda6ac5a3f6410cc9dd0ba43cafde12cad8dd87ebb76a
TLSH
T17F412D58B6FA1108B3B76E56ABF6A86E487FBD372E06C45D10110D4F4663A40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download