c4771c9158e31855293ee565db76c9b2c52f84c8a37eda4700cfb149a17fd7eb

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 00:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 9.8MB
Sample260804-a39kvaac47
SHA256 c4771c9158e31855293ee565db76c9b2c52f84c8a37eda4700cfb149a17fd7eb
MD5 0ff177fbf2a3873dd573077840e0b8f5
SHA1 03d06bc7cd894399a5fc6600a0210f6e3226f92a
SHA512 3264becd3103c905ab7f9cc034320885f18cbecaa45f582a4a9567ca4bcd620d64dc59fb03532964e775c35f07928a4497f5529cf1b9dc18379e4e9cff02ff8a
SSDEEP 24576:K+QQM6Ms6x5d1n+wRhXe1BmfL6k6T6W6b6f6V6GeGj/3BIpx:LUzeGdY
TLSH
T134A6A52F7B48037706C642627B8BA5CAF21E903F3B561654344CD1681F6BA2983FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5084	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302809065708017"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{08EC60D5-4E13-4E84-AE5C-704106CA502D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3704	msedge.exe
3704	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe
3688	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3688 wrote to memory of 4528	3688	msedge.exe	85
PID 3688 wrote to memory of 5084	3688	msedge.exe	86
PID 3688 wrote to memory of 1032	3688	msedge.exe	87
PID 3688 wrote to memory of 1032	3688	msedge.exe	87
PID 3688 wrote to memory of 1032	3688	msedge.exe	87
PID 3688 wrote to memory of 2072	3688	msedge.exe	88
PID 3688 wrote to memory of 2072	3688	msedge.exe	88
PID 3688 wrote to memory of 4208	3688	msedge.exe	89
PID 3688 wrote to memory of 4152	3688	msedge.exe	90
PID 3688 wrote to memory of 4208	3688	msedge.exe	89
PID 3688 wrote to memory of 4208	3688	msedge.exe	89
PID 3688 wrote to memory of 4152	3688	msedge.exe	90
PID 3688 wrote to memory of 4152	3688	msedge.exe	90
PID 3688 wrote to memory of 3936	3688	msedge.exe	91
PID 3688 wrote to memory of 3936	3688	msedge.exe	91
PID 3688 wrote to memory of 3936	3688	msedge.exe	91
PID 3688 wrote to memory of 4532	3688	msedge.exe	92
PID 3688 wrote to memory of 4532	3688	msedge.exe	92
PID 3688 wrote to memory of 4532	3688	msedge.exe	92
PID 3688 wrote to memory of 4260	3688	msedge.exe	99
PID 3688 wrote to memory of 4260	3688	msedge.exe	99
PID 3688 wrote to memory of 4240	3688	msedge.exe	100
PID 3688 wrote to memory of 4240	3688	msedge.exe	100
PID 3688 wrote to memory of 3248	3688	msedge.exe	102
PID 3688 wrote to memory of 4376	3688	msedge.exe	110
PID 3688 wrote to memory of 1888	3688	msedge.exe	111
PID 3688 wrote to memory of 3900	3688	msedge.exe	112
PID 3688 wrote to memory of 4976	3688	msedge.exe	119
PID 3688 wrote to memory of 4976	3688	msedge.exe	119
PID 3688 wrote to memory of 3704	3688	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffdff9bc188,0x7ffdff9bc194,0x7ffdff9bc1a0
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,5969379216935366236,13652863005427995167,524288 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,3291523351953493604,1774391152123923459,262144 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,8074648374287718312,12870756463674304499,524288 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:8
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,7223678526606550829,1604485914473452153,2097152 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,10545861018389342774,15672039542749421750,2097152 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,9148078087491901953,4034636151243281538,2097152 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,17287734174697910722,14365732486424842182,2097152 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:2
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,3276311694481953447,13988071173973446878,524288 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,98907422712406966,3297451891408157923,524288 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,12575316173804945348,14041589183520722470,524288 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,12575316173804945348,14041589183520722470,524288 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,1771172946604201452,7180944933121438740,524288 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4184,i,15172450987747229644,2197442128686677127,524288 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4196,i,4077531306710625591,15549924391327032113,524288 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,6432506162928780069,1126622329253242482,524288 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6112,i,13282510671360875188,5517489450628917379,262144 --field-trial-handle=2240,i,224727580804163408,4087637083386703964,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3704

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8c605a069294252273e8780cd3583a8ae688781cd3bbfb104da743dbc8ec3349
MD5 a8e7775101a6fb7a72b1d795773346ce
SHA1 b9799ea7687f7095b06e80335d2c8a7bf7ff83c1
SHA512 e8db48802db3fbad8d233a135d79e6cfdbd9060a89d8c721205583699814479e9913260c391aba1592a96d4083787169edc78efabcd0d5d7fa9451747cc76d14
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7o:fwUQC5VwBIiElEd2K57P7o
TLSH
T1ADB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9c8c3d1920cc07fe035f43cedace45c688fdeafb9f8f9c61cf7ef486e4df889c
MD5 37850820b9f70c15745f54b0b7a956bd
SHA1 f34a5e2949a4b7b8e4b6d409f086b3c43fe4eb66
SHA512 4c26b0e685643fe665d9ab87929805c83fd9ccb91d962b1964f5b45ab7e72bbc3ba1b14e3cf0a9d7443733297a0e16da6651434714ebf901ebaf715e2550b0de
TLSH
T14E714CBB07F1A8B8E3D04872A0D25545743DC2F9F807EE9AF7D085B92E1172582F8174
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d01c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d01c.TMP
Size 3KB
SHA256 299c3e0782c979e9021d6585234e2c6577564c0022f94d9ed08beb9f6202ba3c
MD5 c04e38b7059fde7c7188a0b4e8037340
SHA1 8dc04ac0398dc996e053c4449a43089d5454ad19
SHA512 63da75a1790533ab087757a593223b836a7ec88f25e6acbefa652d948892211ab377bf6d19aa9eeeb107b464aa32a2ac419bada33007f028845fe4ee8addf787
TLSH
T190714CBB07F1A8B8E3D04872A0D25545743DC2F9F807EE9AF6D085792E1172582F8174
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 30854991ad6ef54354baa72f317e27aa8a414ba0fdfc1483bd32da4720910c7e
MD5 3bfb850eea567936b62753d972aa3a60
SHA1 2941f2d514766f06426a85517871a5d58ecba16b
SHA512 c7a38a2e60b4072b1b03bc08a1f82f19b02e3febe0ebf3148923ae86f2384d052e83505d03d30d243aad7390dc5ac910d4d45c4c04967cb66ace37578fa7e175
TLSH
T1A3117AB3C3D585AE891116F05A24AE2BCE2E0606421C7C29D9D4FF6B93E307AE10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9da1ab69f2592551a5551c25fb35d63463fa7fc3a46d6fe5c05951355bcb3fce
MD5 fb9331f05a008e9dab87df9d136c5146
SHA1 bfdc8b7abc20f63caaef88894bacd148ce15f979
SHA512 f5e50eeb8367a2b1138d9e5fc139f244950441a4d4ff8744438cc8df6578fb020e94e195353132657f7b71ba4b38285d1d9eaf40550b3aaa39f0797b4a3f7766
SSDEEP 192:sxZ3RayM/jK1Ml8MkW/f8sYDtVsIdpdlHW6+WNGYvrwG7NIgrJ:sxZ3UMW/f8sYDdPHbG019
TLSH
T1424209156A34A977CCDBD20DFA55BF53D6F9043292940E44AEFCD91C04E6AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f60fbad6d8add138dc5d088cb2f617c363b01114979b1aa9f4e394dc9cc23494
MD5 4bea5385d4b96eab83ad835f329dbad8
SHA1 09312f6bfc59a6cca08fad9ccf9dad0af0f491c4
SHA512 5e195d069a9d67ef816199a0d3ca2a0849078225acdd533cd1723a227f00ddcac2dc02133a833b4cf7ff669f9e4c68f22c1c449b22f3936a64fb917849cd1c23
SSDEEP 192:sxZ3RayM/jK1Ml8UQZkW/f8srntVsIdpHlHW6+WNGYvvn07NIg5yJ:sxZ3UqaW/f8srndFHbGH1s
TLSH
T14E52F715AA34A977CCDBD20DBA81BF53D6F5047292940E44AEFCDA1C05E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 df5f9b7045ccf7e9dc9a24f862b1843e2cbf29f47fa8692878eee271944658f8
MD5 0fb0fc7d5b9c3e2a61ec241a4b036d22
SHA1 c99363a21b28d51f399158acc57782bc2f50aba5
SHA512 31f71a7ae1205c3a9fc2d1dae0847b1f1268ec9ddb3066967e8c5dd78d27a77f9aba1886237bb6df0216ffe72528d4d80de5043c8fa92c3475dd161c7c5e0ba0
SSDEEP 768:cuseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppzro8y7:cuseJ3xWvhfynu1jaVcL88pAj7
TLSH
T1DDD20B2B280CCB7E4F844E6DEC266F966EE801CB57984D5487EA980C03C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8037370e2e61fd09fc79d660d6da111e64958a2326e97caac5e000ade4067f65
MD5 4ddda49dd0aad67e37035c43982d52e7
SHA1 10782221217c6ddbe4bfe6843ab4cc260a54f53e
SHA512 466079631c7db0ee2d562a1a63c608f71aadb07b2f91df81d7db74f152829276ef2c1d90e17ddd21a43a6afe9cea4aee4ee357a8c0c77b18032ef570d380b004
SSDEEP 24:KdxwLfxwyxwRxwIaxwNdxwBxwhxwx4xwlxwB+xwsIjxwdxwxKixwOhaxwzxwx1E4:KYHIhKggkXyi0InKxmUTyNrIlKkswn
TLSH
T186A18F0B343A0A123CBD298CB69196361F42319B3528646FBF7800530D6FD566EFD9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 0a5fdd4c1b1e7346eb2eff985521ba8c9b887fc7990267ec2ef3eb33fee7680f
MD5 9b76197c13a36a58697d2a4d0f88d8e6
SHA1 5eab14540163c2555b60232da7efe46b2a9dd028
SHA512 901d73d080025a4847f2fa74b686420b80a6e3157bae6f43f6603e009bf0dd8760426e60d0435e955598631be7db4a6393cf0f622bac698ce7a22552c63d1a4a
SSDEEP 192:uVLsNg6QUR5oM72+8QmiU1rJeB4MTQv+FdLYxTkFd3EB8z1NDqW+n:WsNg6b757FMPeuQdExMdUmN1+n
TLSH
T137422B356C745C779DA3B685F08A37135FF0816B96C82F94BAED7F1C01DA2AC130A91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 83a3aab92b8c5f5b22dc38bfd48a948618b49534c40ea6324572043c904ff4ca
MD5 c272686a69510fe023e3b5142c8742ad
SHA1 7ecdc8e689081d4aa8d9690739d1ac2fbf283cbd
SHA512 975ce1adefc60d0751ebb09766eb5f82e8df48996a833ef1dfdba214ffec7fd7261116c19893acda0e9d465ae2c867aa409eb7aaa9a9ba7565d558f2363979be
SSDEEP 192:lONw6vMtPQmiUyNGThTQv+FdLYx5847N7U/u:lONw6UtRPT3dExB5U/u
TLSH
T151021735AC786C7BAAB3AD46F08A37171FF4116FA5D05B50EAE82F1C00D765C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 2d1623003a096f5d2e5e1ca9562b6b99e9798dff0465375f28645b2409eef255
MD5 19b14546f87f8d1e695aa5e5527077aa
SHA1 a0d538ac51e9d0c52d90760282b9dcea471c1e9a
SHA512 257de59f2bd997da58357bd5826d7844b6351ba05d2ff5cdbbaa54b0571481dadfae1928ac9e385fa46aea7bc91718a71dc47c6b3728efdbb12b5299f01770ce
SSDEEP 192:urm+xasuheOwQxMlEzsNg5QUR5oM72+8QmiU1rJeB4MTQv+FdLYxTkFd3Er8v1NL:zZcIRzsNg5b757FMPeuQdExMdUMN1cA
TLSH
T100726C716C745C3BA9F3F245F48A37134FF4912B96C86B90A5EDBF1D01DA2A8130B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 636eb193dad330ac1101bd64aa80232394ab717bc8b3f3841984f6093ca1dff2
MD5 3ed9325d0268cfc42e6e5b17eaaae877
SHA1 98bee545e9b96d899b6dee534fb840d70a3ea53c
SHA512 3a8e64242ccf3cbe75ff7de0eda585d515bc114f8ae6a1a157828a6ea5a99927d78e7939eedf7873c00df3b322a5059db9e575b2a95467b4bde848b76e5d51d3
SSDEEP 192:NONZ6vMsPQmiUyUGxhTQv+FdLYxTkFd3Es80INDqWU/u:NONZ6UsRwx3dExMdURN1U/u
TLSH
T129121B31A8746C6B6EA37542F08A36175FF0826BD9C46B90FADD3F1C01DA66C130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 966cb1356b0a7f3ab783c432382d98e52b94b517373a5c18f15641249edc1dce
MD5 20fa294c1811dff6d510a977ab49d43d
SHA1 cfddeda7753aebccfebd23fb07d92933d076d02d
SHA512 0ccc4cb5e176dfb42dfb9f821bc4f091212301cff30fd1a3312779fbf755d48a835ea82ae634e26b3e63a1f60dddfd1a229437406c7211b123ec5aa3a8293a95
SSDEEP 192:uVm+xasuheOwQxMGsNg8QUR5oM72+8QmiU1rJeB4MTQv+FdLYxTkFd3EB8z1NDqQ:jZcIhsNg8b757FMPeuQdExMdUmN1cA
TLSH
T178626C716C745C3BA9F3F645F48A37134FF4812BA6C86B90B5EDBF1D01D92A8130A91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 996e5e8d59de7c64e3da4f6b8bff8f6013380ebb80fc85d6c1b7fafb597018c8
MD5 02b1724a3a8af9f620e0bacafe68fa51
SHA1 4c02fcd7c51948c26bff89b57c902b0907df4ee2
SHA512 a91232cce942816edd22dc5291f984591cf398ac2659bc3553cb3136178eedc12ec154ea8d12cd6556073660367c3e73e9a25fc5da815f459deeef3d2c2fcf2c
SSDEEP 192:u7m+xasuheOwQxMGsNg5QUR5oM72+8QmiU1rJeB4MTQv+FdLYxTkFd3EB8z1NDqQ:9ZcIhsNg5b757FMPeuQdExMdUmN1cA
TLSH
T1D1626C716C745C3BA9F3F645F48A37134FF4812B96C86B90A5EDBF1D01D92A8130B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VariationsRuntimeSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsRuntimeSeedV1
Size 484B
SHA256 9fd2b7fae87c2d863b486a425834283f19b1444749c84650d5a48c9eadb12e2b
MD5 e9289cc1f579fdfa9d46acfae9b38330
SHA1 7eac8e241d8c35d873280d6b9dbc1cca7a9b2231
SHA512 b1f37da50e387c8408a960ef5276a51336510286c1db7eaea4cde65af4efc343f8ac1d9de65df1fd0818513823a485733e5c155da615344bc044f46021ecf586
TLSH
T134F0543C33D821A4F08C46B23596ED8B88BF313247DC2631CA50F550315387701B5095
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1
Size 2KB
SHA256 b30c332e9b8e33d00a4761486c1c0b740f2cf893d5a6d8ab7b0301b25b57696e
MD5 68dc9adeb8831557cb7b5295ea13ed77
SHA1 8beb2a202e62fc6a37c4b2d0d132679c91426cb2
SHA512 0b56fcd388b209ea743df6faef33723816cc80a128394f4ac27486f0fef2b30e4563ee7217adba353bf1fe0d486a71dfa73bfd22f3f17128e12ca91cfda07e9b
TLSH
T19D514C450AE112BB6BB7BBF04E4195CCA33B3A0FE2E994CF54D04CB565738A355D44E8
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1~RFe58ce57.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1~RFe58ce57.TMP
Size 583B
SHA256 a5ae1f4e55eb7efebb71e4b250d3aa47be7bc0b1a191efe0e25872d10e1bd5bf
MD5 eae8ecd1b84a2055a3020e2b35e3e505
SHA1 20e88654ab222866b88b5d1cd80570c91a0efbaa
SHA512 bce8528fcb3d2c2421679ada45cd64481014d4ff9adbed2f55dcd812e7fe236047a9cf7da35dc7f4cd8559fc4e125576f131a2f358ade1b49225e06fc95ae7a6
TLSH
T165F00C30370996E4E1B1802900FA9A92352A88AA860848FA181B823DE319F9C7081B38
MD5 SHA1 SHA512 TLSH

Submit Download

81e31402-828d-43cf-8e77-d4fc0a065b38.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\81e31402-828d-43cf-8e77-d4fc0a065b38.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 18f9be51bfc72c2191c4bfb3f94099be901cf7df63f30811f7b02cf275dfb784
MD5 d0cf70105365535aa6060042674db874
SHA1 2c7a3e70f43b6d4340a2345f926578f570730ee2
SHA512 fa3a57151e37d06e09553e3541ad718f000f4a01879636eeea18cf05cd433dc1f711f62e9da0948d70ffd2fa52ccf59c0e405923ac8139f943fddedde58cf70a
TLSH
T1A2411458B6E91148B3B36E5AABF6646D98BEB9372F0AD45D00110E4F0A22B01C962737
MD5 SHA1 SHA512 TLSH

Submit Download