fc2a256467fb4d4ff72be6c423e5961e98b418554deeec296aded0e757b9a585

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 22:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 5.1MB
Sample260730-2wp2ea11gz
SHA256 fc2a256467fb4d4ff72be6c423e5961e98b418554deeec296aded0e757b9a585
MD5 6b84319ee8a0a0af690273d3d2dcbaf4
SHA1 857ca353e0582d100dcbc6cb6761bb4430d0cb90
SHA512 26f9842bfdb429ef132cc1a930da9187071a339927eda402e8d54b5eb9e03067612cdadc3a2dad3d0977f8e6af18c05eab6ac91720221c6a0104f96638f85a8a
SSDEEP 24576:yd97B+mnLiLsrDy2VrErjKCqzkU98wwg3QeXuh:0P+mLAqHBCuRoeS
TLSH
T1D046D66BBB49037316F282626B4AA4CAF31E903F375A1514345CD15C2B7BA2483FF69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5604	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299262334086260"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4046655672-1449839301-2197395821-1000\{6A7B8297-76C6-4D2B-9F1B-AC2D09946365}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4996 wrote to memory of 4952	4996	msedge.exe	89
PID 4996 wrote to memory of 4420	4996	msedge.exe	90
PID 4996 wrote to memory of 5604	4996	msedge.exe	91
PID 4996 wrote to memory of 4420	4996	msedge.exe	90
PID 4996 wrote to memory of 4420	4996	msedge.exe	90
PID 4996 wrote to memory of 1716	4996	msedge.exe	92
PID 4996 wrote to memory of 1716	4996	msedge.exe	92
PID 4996 wrote to memory of 4164	4996	msedge.exe	94
PID 4996 wrote to memory of 4164	4996	msedge.exe	94
PID 4996 wrote to memory of 4164	4996	msedge.exe	94
PID 4996 wrote to memory of 4288	4996	msedge.exe	95
PID 4996 wrote to memory of 4288	4996	msedge.exe	95
PID 4996 wrote to memory of 4288	4996	msedge.exe	95
PID 4996 wrote to memory of 2396	4996	msedge.exe	96
PID 4996 wrote to memory of 2396	4996	msedge.exe	96
PID 4996 wrote to memory of 2396	4996	msedge.exe	96
PID 4996 wrote to memory of 5452	4996	msedge.exe	97
PID 4996 wrote to memory of 5452	4996	msedge.exe	97
PID 4996 wrote to memory of 5452	4996	msedge.exe	97
PID 4996 wrote to memory of 4960	4996	msedge.exe	100
PID 4996 wrote to memory of 4960	4996	msedge.exe	100
PID 4996 wrote to memory of 5280	4996	msedge.exe	99
PID 4996 wrote to memory of 5280	4996	msedge.exe	99
PID 4996 wrote to memory of 1216	4996	msedge.exe	102
PID 4996 wrote to memory of 264	4996	msedge.exe	106
PID 4996 wrote to memory of 112	4996	msedge.exe	107
PID 4996 wrote to memory of 2204	4996	msedge.exe	108
PID 4996 wrote to memory of 5400	4996	msedge.exe	109
PID 4996 wrote to memory of 5400	4996	msedge.exe	109
PID 4996 wrote to memory of 2840	4996	msedge.exe	110
PID 4996 wrote to memory of 2840	4996	msedge.exe	110
PID 4996 wrote to memory of 3452	4996	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffa3b9bc188,0x7ffa3b9bc194,0x7ffa3b9bc1a0
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,11549306349292802886,12285175207508086393,262144 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,1115467634595754211,3932322753772506376,524288 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2528,i,885643480410146526,900367158220237528,524288 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:13
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,14024742617088931629,155510720648014269,2097152 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,17266074762158198471,16862769997813092404,2097152 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,15035715732419807376,5829658824073482897,2097152 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,9766058679072176504,13493272368996359795,2097152 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:9
  2⤵
  PID:5452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,11459294012153057951,3973675600618019849,524288 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,14284034332228943405,12576384949244964863,524288 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:14
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,13096529591315688439,14213041744480427032,524288 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,13096529591315688439,14213041744480427032,524288 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,9100327421726420446,1229954248798649945,524288 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:14
  2⤵
  PID:264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,8632004902131733389,13311976186905674112,524288 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
  2⤵
  PID:112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,12566303499034485485,16951560489765348449,524288 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2152,i,3829667143654679992,12443259640464691695,524288 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
  2⤵
  PID:5400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6788,i,17387784304358775408,4699877564717450103,524288 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:14
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6384,i,5819750385737517271,15920340862450160868,262144 --field-trial-handle=2312,i,6384625396411193028,17953311292874185944,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3452

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2896

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5104

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e35119268ad2455b6ec4314361db946ee09b095b28e62d25bbd7542d6be959b9
MD5 5c633da04aeb5bea485c08ea28f57d24
SHA1 1c5287022e764ef0bb6d895cd993be007ab68eba
SHA512 341697613439896bbdc5bae2e067bf2b52fd4ee959460166157f5fcf5f0647d000c9824a7394abad2ea244ee761164649972236a37dd919e413ac011474bb4b7
TLSH
T12DD09B947B50A50CCC41703229E5535579155461581D45450055F0799C646C246175BF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e75f270f1371188bd7f350113eee1f4d141652add7af8e5f7af0ab47dac6d1f2
MD5 e0e7da4c84e8882b494037c575bd294c
SHA1 04d43c383ac5d232ee362aad151519414dc6db2b
SHA512 70d9ca23de3befb782d3d04a586490c626e7c63ad00fac39b0fd9adeae2c1d8413a5d2474e847fabb4f48bbf1384f1fcd10e67765d21ed94ac67795b274b3c2e
TLSH
T122D09294BB60A90CCC81B0322AE66355BA1598A1182D868900A5F07A9CA8AC246179AF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 24711309ac29e4cb7bc6cf25c2ef5aa20051e800bc5987f23f0a2aa19a559a11
MD5 fd29e2951255a4934f2f1a14a6d001ef
SHA1 d0d8815cab0c571d68480c2bc958c66c6ffcbfc8
SHA512 cf2e7faf95c4c852d9cb4ac4063571d7c1f3ebff1a5ddc25661ab41e0264fa8f211ad57554effcef440c09726c1be07bde4274550726fb3abd11315225eb2ba4
TLSH
T1D6412DDB4FEDBAF9C331867239E1055FF3FA82AA450B6F1440432DB0A906F0810D1027
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

b82eb406-096d-4d16-95bc-5bf9f3ceb96c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b82eb406-096d-4d16-95bc-5bf9f3ceb96c.tmp
Size 2KB
SHA256 3f8bdb54cbc823ef41d926d93d18fa495f2f76d9242fc1cd24c4c51174789cca
MD5 c58f796651a6ac0b148d67f937721995
SHA1 7296c74470be3e3269f127b8e5b0f233d95e916a
SHA512 65d77b76f07ca20a4bf4a440b0eb6cc445c1f3ef53e6ee60416ba67be7eb5ee472926059b72bf4d37056d4fca5002feff673f68e8692012ba9c6e874dc7f408f
TLSH
T1A341DFF3C3E8867D890146F4BB146E2BCE1D0915432C3C5AC9E4AE1BA7E2471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d764134a7f029ff48e8a6ab6c8d95ad1b166b6f78a92caadfb47c9cf57302ef1
MD5 abc2d338af41503cc9a13c972bfd2ed6
SHA1 a67a6b1b9f74944e4dbac3d6dbe258e5779b4f5e
SHA512 149842cd58f53029ba87b0e2cd0181199267bdb6fecd85dbe0b6a5fbd784f85b1df08c679aa0d7b770e4cefaf0ea07585d61e224a45641c9b5123ddbb6800b60
SSDEEP 192:sxRZCR6bUj/fHsrrWKrjDuzoA8p47/g6+WNIYEBhK/GgIgIJ:sxRZC2w/fHsHWUC/5I7ms
TLSH
T12732B7166928993B8CCBD21DBB657F53D2F95132B1946E48B6FC860C04EBADD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 cb67327d61a04c1e7d40a208d57f703b81694756f01ef4df2c52a492a173161d
MD5 1af7b2fe91a56f71c73c74f432633ec5
SHA1 f8a6b31b5dd3a4e6fdc4e0063d5b81591d5f3d66
SHA512 07f15c39715c079ca96331ff0a132a0a62e731b5f61c63d447e7129836e0e2739836e71507ecb3dd6fe32942a01040e55cf26fef1eb87aa5e180a8e04f0e4b21
SSDEEP 192:sxRZ9R6bUj/fHszrWKrjDuzoA8p47/g6+WNIYEBhK/GgIgDeJ:sxRZ92w/fHsvWUC/5I7mG
TLSH
T11E42B816A928993B4CCBD21DBB657F53D2F95032B1946E48B6FC860C04EB6DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 00fc4fb96ca1c90a4485b655f5faf61513ad38e0005c77bf12137c1eda72551a
MD5 4562195830ac3cd503a1b5a01fce9565
SHA1 7e155aa7bae261d297e83933b9b4feadd2a022f7
SHA512 5e52b906856769dd13dc5cb31f48f740ced46c79fceb7608a61ed3e431a3eecaa4a8b0ef71a15b59437fe727746d81c898d8fd9ca94682246874f09e38b767ad
SSDEEP 192:sxRZ9R6bUj/fHszrVKrjDuzoA8p47/g6+WNIYEihK/GgIgDkJ:sxRZ92w/fHsvVUC/5IimU
TLSH
T18942B816A9289D3B9CCBD21DBB557F53D2F95133A1941E48B6FC8B0C04EBACD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 8f6b22f4dccc9325e1c8ca2c81597ddc17b3580f6f8dbaefcec064ba4c83cf83
MD5 b272d7ee37dfdd4d77b6f4fa83332681
SHA1 0b28a57383b8f481b5d41957b575ba1b7b47ab28
SHA512 d92765905bba5fedc119ce9b1417b9150e504cf56fc8e45e028f928e494a64aaa66df1d73800efcd6f42b9eef43108ddb7029306530a0f166b72523f37a2c513
SSDEEP 384:0OhQi3gfCtgHZFfeQKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwY9VHRAAroZCG:0UQi3aWgH7feQ8F1+UoAYDCx9Tuqh0Vr
TLSH
T1B0B2FA3B600DCB7E5F801AADEC296FD76D9802C796588D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 63b7488e74694d04cdcdd88c83c64e56b7b07aa5bdd1642e011d69094347dbec
MD5 938645f07026e776a5d5a5a3b45c5c56
SHA1 d4ebb4e0d54d4fce99f1414d2840ed90d9903c11
SHA512 fe3555f19097ed365be5c887e72b41bc92b2f5e4abf57a43b196b7448d5f76b0c6a0f666dec28893bcd64212fa33a06c3741ab8c4f5f3a44b7e296af18a56e21
SSDEEP 96:KRxOf7JrvbWf8qgjbK4igtbcx50HPoH0VAE+imkWivPgMkK4BgGkckEP+nUgK9y3:CxOf7Jrv6f8bjhigtIx50HPoH0VAE+i/
TLSH
T10191E310727A0691783E7B4895B99C1FD2D2B4A27058E42F7BEE05E50F26E0B4DFC8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a46ce.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a46ce.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 54f9fd4e70955423561392478754cdbaf5ff66ad68ae9548dd54418143d0ce8a
MD5 f32afcd52ab0cf5e5c721450bd386353
SHA1 e9bd8b66eb6b60e41ceb8e6cb6e09a1272c001df
SHA512 4af9589ec6dcca5209518592c90ec6a81b4f22a19fff848fc8e313e6214cd18c494ed8b55858f9926857a0bc6f78f85c2ccd06c692dc0cc17024362299bac7e2
SSDEEP 768:urv+4UNbdk3OqG/ND5PtsK48dHeByERRFzjK3YRoas:ubsbW33GJ5PT48dHSyw/DG
TLSH
T12103BE30A8A85EB34DEBD289B5477653BFF0421385C81BA8D5DDAF0E458B4DE130BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 537e8fee63a682fa8795617614f7b0b7d873e6a3b798f96d957974bea810527c
MD5 c9d9b64f191bdaf2b802ee50c0b42076
SHA1 1035be1a47def3bddfea8105202e3acbaf7b6641
SHA512 8c615fe5325b1bdf05a6351bc0d0d03fe9001ea80422dc350a3527a908b65014b4def9b09fa082cd9f0df58e48aa80f4d0438b9a2d0d74472a8a40f0c6805190
SSDEEP 768:3T3KqGLND5PtsK48dHeByERRFzjK3YRoa/:3T3LGd5PT48dHSyw/DN
TLSH
T1CEE2AF70ACA45D734CEBD28A7A433657AEF08213D2D86B68D5DDAF0F448B59D030BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 e81338b3b57f787c758baaa2ddd2c6122719df80bef7ebf5b9d63c9ce913c4a2
MD5 573e216af001b92cbafbec96fffe11bc
SHA1 45b8bad05d54846dda2045e4ee2f75d26a4b788f
SHA512 886d6eecc728ed1d6dffde440e7eff1ae1f5a75870118048475240a8e63515e7a0fb92c078c4a3dca93a4a30378d934ef7c1a0d686be8fc9e0c440c732d06c79
SSDEEP 768:oFQs3CwgLqGLND5PtOK48dHeByERRFzjK3YRoa/:Ls3ZGd5PZ48dHSyw/DN
TLSH
T16EF2AF729C948A775DFFD78ABA573213AEF04123D5D4AA64E2DCAE0E40871DD030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 211da770e9475e0c35f75f2e268ca2d957565449967fe2a4ed311654c0fe805a
MD5 d0b623b4463c25d834d66f90778508d7
SHA1 e5dfc672e15a61da6741e12efc5372fcc8376a06
SHA512 d1db48aaeb7f8f4938ab6fdeb8d0a865d595203ebfa29569e6c41a1a382aa33fe8d04c8a59d7c4c81787564d48434c39bba33a24a99326cb4b4862979ca0b24a
SSDEEP 768:Qrv+4UNbdf3wqGdGD5PsK48dHeByERRFzjK3YOeVH1SCj:QbsbJ3RG85P548dHSyw/8EH1Z
TLSH
T11C03BE31A8A85E734CE7928E76837617BFF4411386D41BA4C5DD6F0E868B4DD130BE2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

613c5788-42db-44cc-9626-04085cb014a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\613c5788-42db-44cc-9626-04085cb014a2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download