03f1d245e6a2facca9edbdaad108169e0765dd9101875bc2d123797994b9e80f

Analysis

max time kernel
148s
max time network
155s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
21/07/2026, 06:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 4.5MB
Sample260721-g211msgw7n
SHA256 03f1d245e6a2facca9edbdaad108169e0765dd9101875bc2d123797994b9e80f
MD5 d4a79b5d46f0931b9eb7125fd40baff0
SHA1 3a38fb263dde2251b9fe157b5fddec7acb07c53e
SHA512 17cf94805f11d499ff12d8e42cb262ceecbeb265f56338e0837d291f6a7ed7f8135a025dbe99fdb2e2bb299f2267bed9365976ea51269aafd4c3220cffef9339
SSDEEP 24576:thgBBmnLiLArZ62BrcrnKHq/kUkBAwi9QxruE:rYBmLAehN6KK+xV
TLSH
T1FC26D66BBB49037306F282626B4AA4CAF31E903F375A1514346CD15C2B7B92583FF69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1848	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134290900860126069"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2058276091-3280583803-376660292-1000\{9F2FFE29-4DD9-4FE8-9C74-7AD460D7CB9F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1156	msedge.exe
1156	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 1140 wrote to memory of 3392	1140	msedge.exe	84
PID 1140 wrote to memory of 1848	1140	msedge.exe	85
PID 1140 wrote to memory of 1760	1140	msedge.exe	86
PID 1140 wrote to memory of 1760	1140	msedge.exe	86
PID 1140 wrote to memory of 1760	1140	msedge.exe	86
PID 1140 wrote to memory of 3772	1140	msedge.exe	87
PID 1140 wrote to memory of 3772	1140	msedge.exe	87
PID 1140 wrote to memory of 2780	1140	msedge.exe	89
PID 1140 wrote to memory of 2028	1140	msedge.exe	90
PID 1140 wrote to memory of 2780	1140	msedge.exe	89
PID 1140 wrote to memory of 2780	1140	msedge.exe	89
PID 1140 wrote to memory of 2028	1140	msedge.exe	90
PID 1140 wrote to memory of 2028	1140	msedge.exe	90
PID 1140 wrote to memory of 3720	1140	msedge.exe	91
PID 1140 wrote to memory of 3720	1140	msedge.exe	91
PID 1140 wrote to memory of 3720	1140	msedge.exe	91
PID 1140 wrote to memory of 1112	1140	msedge.exe	92
PID 1140 wrote to memory of 1112	1140	msedge.exe	92
PID 1140 wrote to memory of 1112	1140	msedge.exe	92
PID 1140 wrote to memory of 3440	1140	msedge.exe	98
PID 1140 wrote to memory of 2828	1140	msedge.exe	99
PID 1140 wrote to memory of 3440	1140	msedge.exe	98
PID 1140 wrote to memory of 2828	1140	msedge.exe	99
PID 1140 wrote to memory of 3544	1140	msedge.exe	103
PID 1140 wrote to memory of 2356	1140	msedge.exe	108
PID 1140 wrote to memory of 4304	1140	msedge.exe	109
PID 1140 wrote to memory of 4172	1140	msedge.exe	110
PID 1140 wrote to memory of 4076	1140	msedge.exe	111
PID 1140 wrote to memory of 4076	1140	msedge.exe	111
PID 1140 wrote to memory of 4532	1140	msedge.exe	112
PID 1140 wrote to memory of 4532	1140	msedge.exe	112
PID 1140 wrote to memory of 2792	1140	msedge.exe	113
PID 1140 wrote to memory of 2792	1140	msedge.exe	113
PID 1140 wrote to memory of 1156	1140	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c4,0x7fff853dc188,0x7fff853dc194,0x7fff853dc1a0
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,16209856099782295733,3778203673295711617,524288 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,15562175452014667765,16471306729348312365,262144 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,9748633366981064156,12435499914592472807,524288 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:8
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,7491380435140955635,8736265378226226286,2097152 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,5866429716038539757,3688114060847544842,2097152 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,7410771445573670482,8214015659112778547,2097152 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,4778852009479021984,13586542563138430335,2097152 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,13824987059543251463,8898070764506995890,524288 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,17560045347564344294,16380809464456063491,524288 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,1244480937052599833,4407411789243176817,524288 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,1244480937052599833,4407411789243176817,524288 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,1086170016813774931,3904322383804630106,524288 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,10665856547480303460,10198479322560047205,524288 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,4950002674293098118,987683997497670898,524288 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2876,i,11695424700962309216,7915545591298984535,524288 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,13847443460568154698,15937759547969346513,524288 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5676,i,8911338789088483313,10846632842870844343,524288 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=780 /prefetch:8
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5196,i,1737865826576705387,1874730260942628154,262144 --field-trial-handle=2208,i,4974051004205846778,14554232682654092913,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1156

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e091ac4f88db5453fb07661c5eb4ebedb553cc507ac11d855633af4bab0e74e5
MD5 2838a244aa4c14dbe7e2001806498b05
SHA1 1bb0bfd8bcc597bb5720c8093ec3d161d4012357
SHA512 6358674a949e5a667206cc69b328000a2144ad81bfbf5a0bb9b6cbf06ade5970c22882481326552ea44f9f58cdb8985b2fbafe455767bbc68818a67d9a6dc41d
TLSH
T160D09B34B75AE445D5074531582C4711D9199DD014A6C70B5160D41C9BA505C73BF457
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f581ea565cf0ece39a0cfdc05cae1573d34e8544d3d072c3f0598034de5e42f8
MD5 c80cb3ee13f62b490ae95d8bb68bb8fa
SHA1 a3baa3d078eae3e3de53faaf8b92df67f056d9e2
SHA512 f385ff91fe9914b069144548f6f36759de4228b81878118a49bc5d05a8f3055bf5724ef0be68d53b91691f095dc1736b8d3458eace80a0e31689f3d0c8f3f5eb
TLSH
T168D09B34F75AE445D1074531582C4711D9199DD014A6870B5160D41CABA401C73BF457
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 b51ccdac2edb0e99a2843a4ef7e355e3213cfab5cd932fcd897318c0a2519fe2
MD5 0c45fcd72f4cf4e88dae4057c47bccdc
SHA1 0b235fa11efc40eaf8ecec4d86eb7fe0e4a4f9c0
SHA512 d1a6da7754a2372a4afdcba142cc4cb3402961bb97a38e2f91e8157bb205f58b98fb869a13d36f4d4cd06d68aca26e11c17a2a29b0240ef5852dce46cd19cb2d
SSDEEP 192:Gjekf/hRRRR6z6z6zrAM2ggBuuAAAZ+tXBBv3M/LO:Gjekf/hRRRR6z6z6zrAM2ggBuuAAAZ+3
TLSH
T111E1586787E8CB9ADF0510DE8DA4A35C5174371DEBDCE508038CCEED304E49AA6F6A94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c9525d04a2774ec1adeb34346f7efc4d6647b59e58b679cf390e2dd3985198cc
MD5 fb6fd750eef51e0998c05087e64f272d
SHA1 f188174f30009b2be557e1d96b666d8370f0d5de
SHA512 2c777610c1979ae2c8acc64177072749067008dc2c60164de0a3d7f00aaa44e5d7d29838af6b5f81a89661026848d87d255f8ce53713dbcc7755dfa7143ba1ec
TLSH
T19571A5B6117157B1E390903EE0C02619763698FEBFCB3FAE2178573CA10C75519838CA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ccc1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ccc1.TMP
Size 3KB
SHA256 6f1af3fc2defeb8bd46595d020c7d54114122ccac67fa486fc7236f425853471
MD5 222b7b7bc9106fcb55bd7e56e0699056
SHA1 8d1d4c65094db203fbd2dde3c76191d8fd0c1e67
SHA512 2be002254d3387a29fc4f01ac50e4d65b4377868f4741960e18626e70497e2e2163b5f11fa3ef24c7ec23649c850b0b8ed47bc4b2a9462a7fb50fcb614c250a5
TLSH
T19D71A4B6116257B1E390903EE0D02619767798FEBFCB3FAE2178573CA10C75529838CA
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 71614a8b41c978cd697ce0c19f6ff6995caa27b9f2e991004d64f67559ecec11
MD5 063a845cbbb1d7eb232c07ce9785c3b0
SHA1 b4e68b166e0d1d76ab1e9b9df1cbbe1bee9ff2d9
SHA512 ee6d75a764c8efa2be544017d7bcfb808145f1041e8542918f3847fac2f2782ce428d369e67ceec49a9dea83bd851f18e6112761060217b903275713ebe85db0
TLSH
T125119BF3C3D5866E8A0116F06A28AE2BCE1D0602821C7C19C5D4FF1793E3075E10255B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 3fb1a98832920609c6178f6ee484283e1729978e3c178ac83fd5f02eef42e677
MD5 d337b87c82f9393cd79c0002333a1588
SHA1 5760811b3c8bbd3aa746d016c8d45bfc0ac6b88b
SHA512 880ce13db4c43628a82c55b3fdc3ccc13c322c247777638b095ef2188514eb897ff09074f385ec38a8de0ef836e7adbcc5d293c92afa14510a81d249990858bd
SSDEEP 192:sxZbRpyM/jK1Ml8UQTko/fCs0mPZE+IdpH5HW6+WNGYrrZYs0eIg5zJ:sxZbTq4o/fCsdPZQZHbGK/TL
TLSH
T1C052E816AA345977CCDBD209FA51BF53D6F55872D2940E44A9FCCE0C00E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9ba8c737602726ed43b83e307743d9714244020ee0d347708687aa70e047832a
MD5 07ca08a66e0129846faef7b64e8885fa
SHA1 34cac2c7aa3e76f933e780186edecca58ee938d8
SHA512 a43886a673b417e71e0969367d4a6fac016ea873a7eeb504c1439e7d4208c37dc7a051248285b86ff8a39301788dca0d82bf792973a6171d77308a48a55c2335
SSDEEP 192:sxZbRpyM/jK1Ml8Mko/fCsoPDE+Idpd5HW6+WNGYrXZJs0eIgrJ:sxZbTMo/fCsoPDQfHbG2ET9
TLSH
T10242E816AB345977CCDBD209FA51BF53D6F90872E2940E44A9FCCA0C00E6AEC221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 16dafd041eaefe6a5f16e90c9dd8020fbdabd91ca5d78d5ac8229561b2e92bd1
MD5 b8c54be2970390fd9ea45d4fcecb3442
SHA1 d309c8c5dbbb2f09136e19f1b98dc6e7bb7be84c
SHA512 5e3f8a8d7bf8493c8b77516f5e8bc1377d3cd5718e61fe5ab6ac20fb456275a0bd4033cee13f75d8d925452b6e228e4e39dfafd3f1ac9e42a688e10389d03a6d
SSDEEP 768:jAgL6XeWviSZq8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXJLlZzaRFroWZ0T8GR:jAgL6XeWviSZqu1jaSJL7+R+WLGR
TLSH
T1C3D21A3B690CCB7E4F840E5CED26AF876DD801CB6B984D9447FA494C03C77EA512A49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b21368d53a709b6340c7148c49befb55cd51511b4501d9d3efea7de915296498
MD5 f071b552bf52372be2f7aae2bdaabeba
SHA1 cf480b6b10ab388aa71f2b3e6338ab61b90e4e72
SHA512 3551cc53dbbf38d90970665262131f3c32b6a89321cc7ba9917f5b3f9e6c38783793966ac8e3cc48389ee927c1deb123317fae625656c403102dbae34026c05d
SSDEEP 48:KsWT8Ae0k1VIRIIqo1K3E/u1r2lQ5cxIlK6go3y1fIRKQQUw8:KwX+KUsCxGK6gSOfmKQQL8
TLSH
T17091AE06703B964238FD281992E695379D8331A7352864AF7FB474A30E6BE114EFD8CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe596d27.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe596d27.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 1f98b1b10a47c78d875453feb6e6eb6e578c0435c257dd3ee339ab36bd5e69da
MD5 173c2891e6910b86548c496b68e81bfc
SHA1 28cc5e0965a0889f6eec6f0bfb3e548cc9ea4cb6
SHA512 37724476c5f002e3790d4cee5d7185134b91a0eeeef389649046c085d13a0d35953bcdd6800a737780d021eba4f74c20633c6bfa11f4d1d86d17aa925f6e6301
SSDEEP 384:3HiF1tNn/s3n9SyzsNg8TUNTUlIlkSyeA+mg8LyQ9uO8iY3FDVcl1lIO7w/svw7n:yF1j+9xVwgtA+V6nfY3FDVcLCO7w/Im
TLSH
T1CBA24A3794658D3BAEE6AB81F507360B9FB49067C6C17EA4E6DC6F1C01CF29C0306929
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 92d4cc1ceac5848e4d363887a3272e3d2dc15cc7cd7b818b1f3814cdaeddb735
MD5 9a4160de6035f36aa9ed2296579bedc6
SHA1 55fb43acdf5f2682f049fcc1d6c897c469b9b839
SHA512 3d2fe385f3ff609ccc6b21eb0cde1678b3204005d4db2397a9d0bffed204abd3c16d22cf29c457e99bc32cbc3a976a9fbdaa9da65788217babfad9825e50ccfa
SSDEEP 384:stNn/s3n9SfsNgknyeA+mg8LyQ9uO8iYoFDVcl1lIO7w/svw7WM:sj+9UEA+V6nfYoFDVcLCO7w/Im
TLSH
T15B927C3AA4369C379DE2BA81F4033A0B5FB8953796C53E54D9DC6F1C01CF65C1306A29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d321cba84d73bdbd3ad2b33628fd4db515611d473f6119fb133e44ae5d276c9e
MD5 6fa0d65faf3a116167be5dc1ff4bebfc
SHA1 0c6671609fe4b80f66b200a8e8b5f4f2e2a4b174
SHA512 2f0a696587ee575b1599fdfe34ee7dc31691396250ed652c09257913f93e3c7bdd783e537360ef3c19975e8b82401775e37a98eb883de474d5d9abbb9329d3a2
SSDEEP 96:RqONkTQsjpfVC10tOJ5ih/cIPURHl8h4otop59RDBBOPPvfzSuOaPzMvWfGqsb+J:YONn6LCWtDQmiUyP3ILSuOCzTRsEVBU6
TLSH
T1C302C83AA9686C779EF26E45B48737275FA41027E9903F54DAD81F0C01DB64C2306936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 1cf379a66e8892748d81c45cfa7bf8a3178a8dac7ceb446c5defeed52f6d1fa8
MD5 1329c3e55700e594546c4af479a4e2ef
SHA1 8958a36cf703823df468d19fca68c07179e2cb87
SHA512 2dd2d68d51195a0874ac4d372e4e562005d064de38a5bc75d749732807cfb4379fd8bc16c364477843aa2aec6e1f5e0b41ccd59d2fc1478e2c8fd3bdaca3bfbc
SSDEEP 384:ztNn/s3n9SfsNgkSyeA+mg8LyQ9uO8iYoFDVcl1lIO7w/svw7WM:zj+9UHA+V6nfYoFDVcLCO7w/Im
TLSH
T11D927C3AA43A9C379DE2BA81F5033A0B6FB8953796C53E54D9DC6F1C01CF65C1306A29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 53db4d939f6fd84b82f5b1cb84e0e5e65b7a61de4e6bcb7628419f814d1f5a53
MD5 5fbac0b20b48620fe1cf667bea99c26a
SHA1 b13eaeab5f4f9839fb942e18242b5197c8939cf7
SHA512 0afd5dfe234973ae7f78e6f6709e5edf62905ee423dd1d996a111fab5e6cd1b38698aa2571bafdb78a720334ce3c1aab15be05e2b94138cbb863a6873f14f13b
SSDEEP 192:gONx6LCWt7QmiUyJ3QLSuOCzTGYDGGLI/qq9U6:gONx6mgtGQmuO8iYYFU6
TLSH
T170123B3764385C77AEE2B981B48736175FB45127EA843F50DADC2F1C05EF69C130A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fd384ada966d19978dc97577375176b2b851dccd4f1c4a0894266c4069dd2f74
MD5 d99731d45e9166d47b5486fbd9a00328
SHA1 343d4fcc3806d37370fd38f7daf723c2cc4c3d9b
SHA512 80081cdddbb5e689e39bfed53c8687fd03768c7ee977d2014c2520402bbc9b2267ff1ea866a11ff9d82ec1f6374c932bb7943bbfc4931d04ca29ce04a5898d53
TLSH
T118411A5CB6FA1144B3B76E56ABF6A46D947F7C372F0AD46E00110E4F0A72A40D861737
MD5 SHA1 SHA512 TLSH

Submit Download