ad35e72893910d6f6ed20f4916457417af05b94ab5204c435c35f66a058d156b

Resubmissions

22/07/2026, 09:04

260722-k12sbsywgy10

22/07/2026, 08:59

260722-kxtbsasbpc10

Analysis

max time kernel
149s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 08:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 8.7MB
Sample260722-kxtbsasbpc
SHA256 ad35e72893910d6f6ed20f4916457417af05b94ab5204c435c35f66a058d156b
MD5 bd0ced1bc275f592b03bafac4b301a93
SHA1 68776b7d9139588c71fbc51fe15243c9835acb67
SHA512 5052ae32dae0705cc29ea170bcc5210b48e4af91d4ecec380cb4a57ce1c56bc1d834fc2d96e2a0f5f640fcac8cafe4a4fdd0542f26ca430d76aa8b9212ba77aa
SSDEEP 24576:KPQQ/6MP6P5d1n+wRcXe1Lmfpm6k626D6b6+eGnkywBIpv:Cy8OeG8k
TLSH
T1C696A52F7B48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2152	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291845610446218"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{5278436A-137E-4483-AA90-4795FCAE7E73}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5528	msedge.exe
5528	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1548 wrote to memory of 3860	1548	msedge.exe	88
PID 1548 wrote to memory of 2152	1548	msedge.exe	90
PID 1548 wrote to memory of 2988	1548	msedge.exe	91
PID 1548 wrote to memory of 2988	1548	msedge.exe	91
PID 1548 wrote to memory of 2988	1548	msedge.exe	91
PID 1548 wrote to memory of 632	1548	msedge.exe	92
PID 1548 wrote to memory of 632	1548	msedge.exe	92
PID 1548 wrote to memory of 2176	1548	msedge.exe	93
PID 1548 wrote to memory of 3804	1548	msedge.exe	94
PID 1548 wrote to memory of 2176	1548	msedge.exe	93
PID 1548 wrote to memory of 2176	1548	msedge.exe	93
PID 1548 wrote to memory of 3804	1548	msedge.exe	94
PID 1548 wrote to memory of 3804	1548	msedge.exe	94
PID 1548 wrote to memory of 2656	1548	msedge.exe	95
PID 1548 wrote to memory of 2656	1548	msedge.exe	95
PID 1548 wrote to memory of 2656	1548	msedge.exe	95
PID 1548 wrote to memory of 3712	1548	msedge.exe	96
PID 1548 wrote to memory of 3712	1548	msedge.exe	96
PID 1548 wrote to memory of 3712	1548	msedge.exe	96
PID 1548 wrote to memory of 3948	1548	msedge.exe	100
PID 1548 wrote to memory of 3648	1548	msedge.exe	101
PID 1548 wrote to memory of 3948	1548	msedge.exe	100
PID 1548 wrote to memory of 3648	1548	msedge.exe	101
PID 1548 wrote to memory of 4332	1548	msedge.exe	105
PID 1548 wrote to memory of 5608	1548	msedge.exe	115
PID 1548 wrote to memory of 5616	1548	msedge.exe	116
PID 1548 wrote to memory of 5624	1548	msedge.exe	117
PID 1548 wrote to memory of 5756	1548	msedge.exe	118
PID 1548 wrote to memory of 5756	1548	msedge.exe	118
PID 1548 wrote to memory of 5232	1548	msedge.exe	122
PID 1548 wrote to memory of 5232	1548	msedge.exe	122
PID 1548 wrote to memory of 5528	1548	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x280,0x7ffbd902c188,0x7ffbd902c194,0x7ffbd902c1a0
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,6206813796025501022,5676016061397845878,524288 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,800184512103134774,2100653160481928961,262144 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2540,i,9782864590871535256,5691553380893987178,524288 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,9471411992474577474,12921776535259843301,2097152 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,10632278190545146499,14036530992955617238,2097152 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,4417575209092220727,3589284639442215511,2097152 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,10860573932442473682,12319092724260231915,2097152 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:2
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3792,i,11406991703120608370,3509624939625142372,524288 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,9087924915372712836,11429389966523610575,524288 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5568,i,10828810774468776108,14773698181760483847,524288 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5568,i,10828810774468776108,14773698181760483847,524288 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,12395775247075482838,17917554252140749334,524288 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,11043189126649632198,15477038755539529021,524288 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,5442089510024214378,12739004186212841764,524288 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,4092673801908504166,10214417691581407201,524288 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:8
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,11438579132769345182,17085215177390438317,524288 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,9367658031459339194,669814717162891272,262144 --field-trial-handle=2464,i,3826362279824444195,13864254418500335627,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5528

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 517a24e289ed2c4a2e9c81fb1a84700d73a6ca932193c62d7f7182700e7d6cf3
MD5 1830f022cbee72d3bf436ad0e5ae85cd
SHA1 e59df49ddd1baa04d6be759cc2ae2de5d79cd2fc
SHA512 8969efd6ffd8aed773e884012320f231bbc512599396d9dfbf4ba65fd23e18eb46cf749b6d916dae505fb16eab497dafe503c206a73dcc2908608dc32a1622a0
TLSH
T1C8612D3800554C53E7C52133D4FFC94074B585DAFBA3DE2691336CBD660E725814DAD8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f99d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f99d.TMP
Size 3KB
SHA256 4b50dfea211f0a28396ee0f00cde76785b8af786b27f4292918796e6a69945c9
MD5 85f541a33285fb6292f39e2dd8d36008
SHA1 38306693c1cd030e8a8baaba409e394fe86ddc2e
SHA512 7f6d43a3104bb0d63d14f37df003470ce9ddbb29f55f56226d37816f694c440164cf95a30d3140c51cb20f1e68bc248b3367bac91019cb9dee06241711691651
TLSH
T12C612D3800454C53E7C52133D4FFC94474B985DAFBA3DE2691376CBD660E725814DAD8
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 f1a72f1b980d040078166e11ddd5e73f8ea1013dd750153f7043d82788a09885
MD5 1f8f0d4d09d6aa695aa1ff4ec61e85a8
SHA1 0bdd2a5ba6321a1d9195b19cf02cd359f13119b6
SHA512 16e855d25819bff8ab185f5fae4a860afd38e42a839aeb6a411245e0b9353a2a42b033633adfe60b9a29b6ee92b5b5371e66a66a5e8839ac64ef070a90db367b
TLSH
T10C115BB3C3D5856E890156F06A24AE2BCE2D0505821C7D5985D4EF57D3E3465E10155B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 445fb10ba0726fbbd712dfacf01ef0cf7cc20850605edf1720d5fdc76ef10e87
MD5 b451b6a5b1ad8f6dbede35af14a8f8c9
SHA1 2b72f1a754f9158a884108255622469463dcb6aa
SHA512 38b6f382c0970f4c214dd8097d59ba0a7c396ddb80d8b2518dd0b508e5f1739ce53994b388b0f1d8fe352c6c1bc1b5d289de84dd71bfdc90949960b34c9c2b8e
SSDEEP 192:sxZSRJkI/fRsgtHgSEaKIdpdIHW6+WNGY9IKR/QIgrJ:sxZSYI/fRsgtHgXcCHbGH9
TLSH
T11522A6166E28A57B9CCBD209BA15BF53E6F9503191D42E58A6FCC60C44E7BDD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c90312629117672366ac88b4a246eaf553dac65e608171c69047aafb3ab13546
MD5 97b84d1dc67334fd3244d5f15281e53b
SHA1 c6fb270a9792098dc405754534e53d9e2ea3bee7
SHA512 8d468be8f99377d19d7d05f4efd071ec4bbc2e68099632fadb33cb120ba5c052320a2e9903bbd311fb86220abc68facd4a9ccd2c457a1156f528d1c498d9a79d
SSDEEP 192:sxZSRJkI/fRsDtHgDEaKIdpdIHW6+WNGY9IbH/QIg5QJ:sxZSYI/fRsDtHggcCHbGY2
TLSH
T19522C7166E28997B9CCBD209BA15BF53E6F5403291D42E58A7FCC60C05EBBCD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bacb19f9fbcfcff8248f99dee580cd261ac5f9965218e337bbe16ad421276ad4
MD5 b0465e924761b1ef4d4bca505aa86a5b
SHA1 6fa5000c02af806df44e3f1e95d1bff354dc70d7
SHA512 9220471e8eda404984826c756198c18b0dc5e5d36cb65abdebec8023ebd68a94bbc69b9dd07e57149dcde1e3d39ec2d4a5e9f1546bec5b9ce028a8c9f7b8a4aa
SSDEEP 192:sxZSRJkI/fRsDtHgSEaKIdpdIHW6+WNGY9IKR/QIg56J:sxZSYI/fRsDtHgXcCHbGH8
TLSH
T15B22B6166E28997B9CCAD209BA15BF53E6F9503192D42E58A6FCC60C44E77DD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 861d298b55959e7d541798d1ce66bbcd1055f70c5aa1cab6814f401271c1d6a5
MD5 8020b899a3a99e2914a42960d906b8d0
SHA1 ac75b2deecb2c4dd2942aac166b4c234f30d9d7d
SHA512 b1f28c7759baa5b89f8545eb54042445631bcab1c74e8869f3032a5c45e597007bde7c4c4e9d999b101481d1454c6176cfc583147440799eea8e89ea45970277
SSDEEP 768:r5yvIZwWvu+Q+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDFLlwmW7kroPbqM:r5yvIZwWvu+Q+u1jamFLeR7vP5
TLSH
T1D0C2E92B240CCB7E5F801E9D9D5A6F9B3EA802C7A7588D4047FD994C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59937c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59937c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 674f3fefb9aea2931ce0bb555dfa24643aabb1bbedacc0c398befe0e04a1d450
MD5 0014978093b61daffe18dc70a41cc9a2
SHA1 ffe8afbb0070a50bc56900b1dba7f926a5a0dd77
SHA512 ffc691d209f6196aceada4a1c00724409c7d94d3248b1696110b1d8fa1408a8a4aa39305c11ad08c4b0b684a312d6ae29d77c3143160d16bbe83815130b652e2
SSDEEP 192:uALsNDfQY62BUR+YLetlQmiU1JJL4e+CGLOD9ojhCbJiiqVU8:dsNDfXYzitNUe+CeODejhr1U8
TLSH
T1B7322A36AC389C766EF2A585F44736139EB54127D6893F84D1ECAF0C01DF79C230692A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3ddeef5f5f653b530446ea5d4e5d7ab631dd6e6de5e1678dfefb4b00e433cfea
MD5 a11f3140a0c9df31da4247adacfe067b
SHA1 604fffcc66763483bebb220590c1e6c4d056fc74
SHA512 ef938658999543735a94adf4ad319c7389b24278384888e112abf75907d0a54698a539335d90f1ac7aaaf4506c6e9d2ec005541d3e4ead4e1abc4fac28898d81
SSDEEP 192:JONj6v+YLNQmiUyhIZh+CGLOD9oqus1ZU6:JONj6vz/rZh+CeODeMrU6
TLSH
T1B202D735BD282C7B9FB2AE45F98726175EA91177E5952F80D9E82F0C01D764C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 acf52cd73090d37f8040fe68047af8c6d4633980356cb1470ab84ecfe9e09ad3
MD5 b86a874a1a6a84522387bc98350af183
SHA1 3347b4e37bf7d8c17f88a6b5f4bb390868a9a3e3
SHA512 b1adfd702b23d145e6303604a527acfd71102f16c283fd9d3822334bf0a2169a1f911278b4f8827516613e8489cc1011a3d83f49a53ff9690c7a3b926efdee34
SSDEEP 384:CiF1tNn/s3n9S+zsNd8TUNTUlIlHXYzitNUe+CeODejho1ScjmwAYU:JF1j+9B8wgyMf2Oijho11jTU
TLSH
T188A27D375D648D6BBEF28A85F94B36178EB441B3C5816E80E6D8AE0D41DB2EC1307E25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 4b0f194421b66e28946801d51e8be5df9d064524bf4cc264eff5d765bd8b61d1
MD5 e5cf4f17bc409d800f54d8d445ff89f0
SHA1 2422ca8a8bb01be17cf9b28d50da0b585c614e59
SHA512 54847762acf3fd4ea422e8440ed0ea3a7e3bde1a590fd4c4fb31bc6a27b38c575d93c00e558d06f8eef71b8d803916107ac076d87a0dd0b8ac782c22cd427cfc
SSDEEP 384:2tNn/s3n9SfsNDHXYzitNUe+CeODejhr1ScjmwAYU:2j+9UlMf2Oijhr11jTU
TLSH
T117928D366D349C666AE28186F54B36578FB88173C6C12F80D5ECBF0D41DB6EC1307A25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dc52441cb7831a44c073feb1f8e3c828971cc326a71d05a2c6f548d34daf1bc8
MD5 2377279045422d39b61a1511b1a06f3a
SHA1 7f0476fa1189c9b24c92c0332d863fb41c7d11fc
SHA512 2e865e2b7800673342195d4f7871a9897f185f600b4ee75c2142b2cf2ba37d5e31a8efb9c67c1a0bd96da3d34b64284f3521d7e8b8cf75a5708c384b2dc7abed
SSDEEP 192:cONG6v+YLJQmiUyVI0h+CGLOD9ojhZCHiqVU6:cONG6vzrx0h+CeODejhe1U6
TLSH
T1CE121B36BD385C676EE26585F48736139EA55237EA863F80D5DC3F0C01EF69C234A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download