ad35e72893910d6f6ed20f4916457417af05b94ab5204c435c35f66a058d156b

Analysis

max time kernel
148s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/07/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 8.7MB
Sample260721-wtnsnsde99
SHA256 ad35e72893910d6f6ed20f4916457417af05b94ab5204c435c35f66a058d156b
MD5 bd0ced1bc275f592b03bafac4b301a93
SHA1 68776b7d9139588c71fbc51fe15243c9835acb67
SHA512 5052ae32dae0705cc29ea170bcc5210b48e4af91d4ecec380cb4a57ce1c56bc1d834fc2d96e2a0f5f640fcac8cafe4a4fdd0542f26ca430d76aa8b9212ba77aa
SSDEEP 24576:KPQQ/6MP6P5d1n+wRcXe1Lmfpm6k626D6b6+eGnkywBIpv:Cy8OeG8k
TLSH
T1C696A52F7B48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
860	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291316472933104"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{941648FC-EB43-4471-8488-E0472840C606}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1200	msedge.exe
1200	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe
2008	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2008 wrote to memory of 2504	2008	msedge.exe	84
PID 2008 wrote to memory of 860	2008	msedge.exe	85
PID 2008 wrote to memory of 764	2008	msedge.exe	86
PID 2008 wrote to memory of 764	2008	msedge.exe	86
PID 2008 wrote to memory of 764	2008	msedge.exe	86
PID 2008 wrote to memory of 2796	2008	msedge.exe	87
PID 2008 wrote to memory of 2796	2008	msedge.exe	87
PID 2008 wrote to memory of 2188	2008	msedge.exe	88
PID 2008 wrote to memory of 2228	2008	msedge.exe	89
PID 2008 wrote to memory of 2188	2008	msedge.exe	88
PID 2008 wrote to memory of 2188	2008	msedge.exe	88
PID 2008 wrote to memory of 2228	2008	msedge.exe	89
PID 2008 wrote to memory of 2228	2008	msedge.exe	89
PID 2008 wrote to memory of 4152	2008	msedge.exe	91
PID 2008 wrote to memory of 4668	2008	msedge.exe	92
PID 2008 wrote to memory of 4152	2008	msedge.exe	91
PID 2008 wrote to memory of 4152	2008	msedge.exe	91
PID 2008 wrote to memory of 4668	2008	msedge.exe	92
PID 2008 wrote to memory of 4668	2008	msedge.exe	92
PID 2008 wrote to memory of 2004	2008	msedge.exe	97
PID 2008 wrote to memory of 3496	2008	msedge.exe	98
PID 2008 wrote to memory of 2004	2008	msedge.exe	97
PID 2008 wrote to memory of 3496	2008	msedge.exe	98
PID 2008 wrote to memory of 2956	2008	msedge.exe	100
PID 2008 wrote to memory of 1852	2008	msedge.exe	112
PID 2008 wrote to memory of 3036	2008	msedge.exe	113
PID 2008 wrote to memory of 3076	2008	msedge.exe	114
PID 2008 wrote to memory of 3068	2008	msedge.exe	116
PID 2008 wrote to memory of 3068	2008	msedge.exe	116
PID 2008 wrote to memory of 1200	2008	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2e0,0x7ffbd8d7c188,0x7ffbd8d7c194,0x7ffbd8d7c1a0
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,18321635060262085458,10035502912559935061,524288 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:3
  2⤵
  - System Time Discovery
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,1034962050229560134,8419489043924339707,262144 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:2
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,4763390065946077970,16951448246725721370,524288 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,9189577325540496854,9485486191381730951,2097152 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,8991220320690341530,12056009575548834795,2097152 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,8877313551080882416,4016048026366723504,2097152 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,16209770817989196300,9390126931650077075,2097152 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,6529188798392806850,1150051090476309494,524288 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,12774940882120538836,13710994693181183196,524288 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,12637186747797123588,3123004372041346655,524288 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,12637186747797123588,3123004372041346655,524288 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,14823323009015453762,10841017306628246873,524288 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4784,i,13443400944379974093,17783770361105811289,524288 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:8
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,13144701012258731606,18261031498552729556,524288 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,13896767457922539907,12948518329509104203,524288 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6124,i,13514656463847044082,15186231767120231168,262144 --field-trial-handle=2380,i,11484590611658853085,18168393059538779992,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1200

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 d45cdf91192297d42038c70cba4a4836d638f54edb95f4ee6969b8293501a12b
MD5 ddda371d5d3fcb4bb694e8a3edb835ad
SHA1 546a12b87937013d18739791578941f68f103766
SHA512 ab5566c5e7387dda286917bd297ccb8256675a429c7c784441ead4453d9ab6f3385d1c94d26530ad49e670d2729372769217f52b273fb1ee157700963f9356d4
TLSH
T1F241E7F002A35B41DF3006B194F01B00367683DDF9737E18869299BE3A3AF63852647C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 d77650a39d0b3774cff4d0f46558132666460f2f81b80d84208aef6fc1f91b9e
MD5 1a62151534d22885cb4ad4159b9aa853
SHA1 2c02ffa5d2a13b488fba47d35c49d1ef31050d2b
SHA512 501a357a462f14a2e754c2cf750d5766e67260cc26ab4a8fbe251b28ae963cc80a315da8b396904261a5691b68889006de0c994d5869292083ed5e97f468f478
TLSH
T1BA117DB7C3E5856E8A0116F06A28AE1BDE2D0506831C7D5989D4EF2BD3F3475D10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 152539d3a6ef48ef3674fc74636587ad9ecddbea05904de8dfcc606e3d373ce6
MD5 4f6315799442428f79037d80f610a8d2
SHA1 257e6b49e6d14f20806f72ff1e9f2a75f528c0e8
SHA512 6160852134330cc76c2c818e8565647ce1c1c87dc920bcfe24e6a6ae163a3c608b0e064ade827ffbc9f977bae3ccc47f54cb77a98f9a83db389f6693ff3518c6
SSDEEP 192:sxZFRNk8/fDssFB2Idpd6HW6+WNGY9IKD/+DIgrJ:sxZFg8/fDssF1wHbG+w9
TLSH
T18822C7566E38A87B5CCBD20ABB15BF43E6F9503191941E48EAFC861C05E7ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7692beef6ce8300cb7ce268c301f93f854a38b2fa7bb25b7b34a28265783d581
MD5 59fd2d6a79297f6ec89c612fb01f1150
SHA1 0a32a22cc32f9c26e51e7eac94a9ce2496a95eb6
SHA512 860290e3db1764264167b8db2bcea5364aac7d91d40d780459f3f5785b5b8b882ebfd021b3f60b248ae0dae8f45590dc51f9f1f8a7cef094b0463c136b807dae
SSDEEP 192:sxZFRNk8/fDsR3B2Idpd6HW6+WNGY9I/9/+DIg5cJ:sxZFg8/fDsR31wHbGNwm
TLSH
T19432B7566E38A9775CCBE20ABB15BF43E6F9503291941E48A6FC871C05E7ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 dd741bab01f09fdb3d0969138cd95390f2887e115093b3d23869dcbe52e0b9a6
MD5 341f5905cac11e2bc5e846f479c37d17
SHA1 4616375bf6aad69f41cb466f9a9a35a731a467c3
SHA512 cfeabdf3b6f796ddf29a3d399b80940e8fa86a47b3aaa62f5f3cb57981835faefdd1adc6e1230015989f4f376e7c98508f5469423eb0985be4156d4eb1816f9c
SSDEEP 192:sxZFRNk8/fDsRFB2Idpd6HW6+WNGY9IKD/+DIg52J:sxZFg8/fDsRF1wHbG+ws
TLSH
T18B22B6566E38A97B5CCBD20ABB15BF43E6F9503192941E48AAFC861C05E7ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1a705091f1fd095d76158fd7f9ef5b575065010e0b7493519c0b1e6610b918c5
MD5 8380b3eb774fe6f7a5869310d35fa5a1
SHA1 5077e59f77736fd09cb0db66071c115f3885c609
SHA512 c5e11fbe64775b8a7034de4b85f5888377680e16b71e9715cb6fb3416a1636766218419ce65c8cce9f3191c35cd42f573047a2b1bd330d1274bbbd6da0bbd33d
SSDEEP 768:tbyvIZwWvu+Q+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDFLlwmW7uroJbqX:tbyvIZwWvu+Q+u1jamFLeR7lJi
TLSH
T17AC2E92B240CCB7E5F801A9D9D5A6F9B3EA802C797588D4047FD994C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 52d5e323d78100c5f25eae9608d1da2dee2debc2bb79280c56d87f0f793f3409
MD5 84b3d249dfcb3816818277ca592af834
SHA1 8b248c8e72d91ef9a5b96180d98bde7a890128bf
SHA512 4824016331909ca5d952ac6306f3615211437371cbb7f2a3b9761b81e027dada582e52e580d2579c3102e56b2326ab92418e7cedc953105ff664bcda6fab6d0f
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDaAYKhy+iVoZFf7Xkn76P59kKBB53ktlFaH:mTXjiVoZFf7Xe76B9hB53ulFaff
TLSH
T13D913016B13B02D239BF681DA2A189378E5131637918E9AF7FB800658F27E125DFC4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 952272341416baa3623d56857b0deb8ffa6a4ee693b4fdda646d9038ca80f51d
MD5 3ad962a7331ce7a478f0ee6c2ee07f54
SHA1 4b7d2652202b20eb06111adbf63ba8b65fb2972c
SHA512 5a6a07448acc2aecb5d37e7dbe5b61ae178fd94e066c005f5a184467f31d9e26646bbd93df87a2bc135de1ab18a8388cbc82670b070968d7f090c871feb54e2f
SSDEEP 384:dtNn/s3n9SfsNXU9dziIFVe+CndHeReI5TOObjI9G6w78m:dj+9UbTEfE35T29Mx
TLSH
T149928E36AC281D674E924996F1473A1B6FF48677D2C93F84E5DCAF0C01DFAAC431141A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 0ce5d00ca6d2f502c02325ae6ea9635edcc4f71b405db298c4ad87518c400f2a
MD5 4e1ae2c45cb67db0a9afec8784e03dd5
SHA1 20ed917d0e34fef8df536b71022a8a3c3e4e8eb4
SHA512 870cba25dc95850a9ccbad1357bc7185e3bd4fccd5562db60df3ed72fe3e680920b9ee9ad8977b4fed56c06ce2e06f2ecf5af3613db1dbe119c798ecb7aaa3ed
SSDEEP 384:TF1tNn/s3n9SqzsNM8TUNTUlIlkdziIFVe+CndHeRed5TOObjI9G6w78m:TF1j+9VlwgITEfEs5T29Mx
TLSH
T1A8A26B379C688D6B9EA24A96F54A361B9FF481B7C6C93F80E6DC9F0C01DB5EC0306915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1a98ba49540d4bdfdb2b5eda79dc63a5e83964733dea1b0b7b26a9783d878c2c
MD5 abe19102a266faf1bdaaf157462b735d
SHA1 ed27875206faf943436a5e0cd1e4c8103da15208
SHA512 28de230bec7f47d5e646beffe9bb157d4622d8dfad68a1a46f9c4f45f1602ff2b754086f05d99f13fb68571e874ef5e64532db63a1c8871c2d22dc7036d01e98
SSDEEP 192:rkONt6v+YLwzQmiUymEWch+CGp+Fdes9omOQNbCH5jq8U6:QONt6vzGGnh+CndHeReo5TU6
TLSH
T197120C366C386C6B5FE26941F08735175FA89677DA8A3F80E5EC6F0C01DFAAC1306416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ba7ad866bf27feda57ca155facd2fcdda09561c53ae9cebe31f38887f11c6d79
MD5 56d66e4ecd3ed4a93c3a4331f1d622df
SHA1 c6b0ca8a412b416e72be16239561c5b32666aaab
SHA512 afac5336c0e06d3c2269a799587647a981e95990cdbaa364c51ca36629bf1802b51369a085cac635931c40ea49f7431aa6ced80151f9849e8712f81d09a477bb
SSDEEP 384:PtNn/s3n9SfsNXUkdziIFVe+CndHeReI5TOObjI9G6w78m:Pj+9UqTEfE35T29Mx
TLSH
T121929E366C281D674E924996F1473A1B6FF48677D2C93F84E5ECAF0C01DFAAC431151A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c4798008-96c9-44ba-bf96-0af79ec7efbe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c4798008-96c9-44ba-bf96-0af79ec7efbe.tmp
Size 8KB
SHA256 d38dc11a7d50140037f6911d1f218369a4639620a8f0580d68a4e78f21f1d8f9
MD5 e6d474fbe9f84c5fba660e9af9771db7
SHA1 b80ced31b8ea01e94ac51a03058064a400f5cc6d
SHA512 6f58237dc59643f89f20f9e9c59f74dee1c297a31b2d09da44cb25b1e614e1a238a9eaba1875bb16db83910b434f57d11aec31e69ba38e65240d44ce714cd931
SSDEEP 192:JONii6v+YLNQmiUy9EZh+CGp+Fdes9odus5oPU6:JONii6vz/TZh+CndHe95iU6
TLSH
T11302E9356D382C6B9FF2AE45F48736175FA8117BEA962F84D9E81F0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8991318ecb9b863f2636080ced56985d8990c288dfbb6c44e422c98a637ea2df
MD5 0470e633c92db4bacd2bdab837975261
SHA1 0c98cb110b8d316603c72cf0d22d2129a3b50f50
SHA512 0890949682baee53d96f917493e19f048f93487e4c589ec7d548eb09a1790df36285c3137bcfccbcc438f9733e32ac9eeda9c8aa5b4b9baf91632ca0fae870d5
TLSH
T1B4411D58A6FE1144B3B76F5AAFF7A86E447F78372E06D45D10110E4E0A23E40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download