bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d

Analysis

max time kernel
149s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 23:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 7.9MB
Sample260809-3t6f2sda25
SHA256 bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d
MD5 0e3e4362f785aff0b9e1852b1064c0f1
SHA1 a42ccb51e72bdcb5bb905a62efaa28857def3a17
SHA512 193b57efc5f5971fbd9e4ea1a80b34aadcc2a814ff49c4c06afe972bf327e98ff0498217a8bdef984b10fdec6e7858a6fb88c0b14936e0c6b404387a426b87f2
SSDEEP 24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i
TLSH
T1A786942F7B48037706C60262AB8BA5CBF21F903F3B561654345CD1681F6BA2583FB6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3480	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307933686127595"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{D5FC07DD-032C-4AA5-A28A-5006A8062DCE}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1036	msedge.exe
1036	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe
3868	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3868 wrote to memory of 4540	3868	msedge.exe	83
PID 3868 wrote to memory of 3480	3868	msedge.exe	84
PID 3868 wrote to memory of 1972	3868	msedge.exe	85
PID 3868 wrote to memory of 1972	3868	msedge.exe	85
PID 3868 wrote to memory of 1972	3868	msedge.exe	85
PID 3868 wrote to memory of 4616	3868	msedge.exe	86
PID 3868 wrote to memory of 4616	3868	msedge.exe	86
PID 3868 wrote to memory of 1328	3868	msedge.exe	87
PID 3868 wrote to memory of 4792	3868	msedge.exe	88
PID 3868 wrote to memory of 1328	3868	msedge.exe	87
PID 3868 wrote to memory of 1328	3868	msedge.exe	87
PID 3868 wrote to memory of 4792	3868	msedge.exe	88
PID 3868 wrote to memory of 4792	3868	msedge.exe	88
PID 3868 wrote to memory of 2104	3868	msedge.exe	90
PID 3868 wrote to memory of 4964	3868	msedge.exe	91
PID 3868 wrote to memory of 2104	3868	msedge.exe	90
PID 3868 wrote to memory of 2104	3868	msedge.exe	90
PID 3868 wrote to memory of 4964	3868	msedge.exe	91
PID 3868 wrote to memory of 4964	3868	msedge.exe	91
PID 3868 wrote to memory of 1348	3868	msedge.exe	95
PID 3868 wrote to memory of 2284	3868	msedge.exe	96
PID 3868 wrote to memory of 1348	3868	msedge.exe	95
PID 3868 wrote to memory of 2284	3868	msedge.exe	96
PID 3868 wrote to memory of 3736	3868	msedge.exe	99
PID 3868 wrote to memory of 4200	3868	msedge.exe	109
PID 3868 wrote to memory of 2108	3868	msedge.exe	110
PID 3868 wrote to memory of 2652	3868	msedge.exe	111
PID 3868 wrote to memory of 2552	3868	msedge.exe	112
PID 3868 wrote to memory of 2552	3868	msedge.exe	112
PID 3868 wrote to memory of 1036	3868	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ffb143fc188,0x7ffb143fc194,0x7ffb143fc1a0
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,11198682504050238073,2493224554532628098,524288 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,3010127490679257579,8327027512556727509,262144 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2560,i,16176584416279861086,10331496982510253549,524288 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,34153093283977331,9672451469943188770,2097152 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,14270367632320403569,18321773325965760519,2097152 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,18259320057822506189,6353182371434204053,2097152 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,18406688925384844977,13952325463571042970,2097152 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,16386498806428248186,4368972927814017495,524288 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,195499022754510704,13995252948601875576,524288 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,14528220444697194787,18219359203024432094,524288 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,14528220444697194787,18219359203024432094,524288 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,18426033599861890237,8047761902753895829,524288 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,4601258089688419284,14841698801919069688,524288 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,9302059407157879748,1138820044773132167,524288 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,17261850894928041275,3334321239952871095,524288 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6204,i,2724473426034217163,12208756983994875803,262144 --field-trial-handle=2120,i,10444167584396803375,6717632151971566688,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1036

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4452

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 f32186789ee213531ec433fa1c5cad713becba6a5aa80fa79a3f92353346366a
MD5 a33e0f980e52b6a95a4305365dae3acd
SHA1 71e87ca2a27596079965077beadbd02e4909156d
SHA512 b693c97cb43dd6f64b27f799a07b487cbd1977bf758b2b9b2032c5035a5b2b4972caa7f937242b35349de8ab8db6c77aec1d0001b6d9d804ead4b5b77ce2f460
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7W:fwUQC5VwBIiElEd2K57P7W
TLSH
T199B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4537fcac5ebbd83347312f5b08517931d1e640fd6446c924f78b9dc3395fab89
MD5 177f4101ad35f4819d8339bce714e840
SHA1 af178e01341e846fce0bd1c04c1e1f0e89a685e9
SHA512 248339f49253fe0a1fdaafa4550b61bfe94e6599a6a96f8149c06720ef4cdb309685e6b9a78563adeea544500d656c977792b53c4e704f6d4a181d15de14dd71
TLSH
T12261F93802A2C85CD3AC153CF1D15234743F858A9A1B6E652E14BFFDE5C9B71A1D6C0B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5897e6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5897e6.TMP
Size 3KB
SHA256 5b5a621ea21c080ed7952d65ab94c464cd0b45a874ece91a518010bf786204a9
MD5 83be9044bc72b79fd86ede4feef56c58
SHA1 c81dc8a4603a33c58e9bfc7f233fcdd992a8ffb6
SHA512 10b5c8a2eff097ddeac3334804f396a4a18b3b9173fbf191cccc7aa91cb520ad1e25e2a6a60349fe3e7a554a17d5ad4994166741d76317731c1efd587857cc5a
TLSH
T187610C380262C84CD36C153DF1D15234747F868A9A1B6E562E14BFFDE5C9B31A1D6C0B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 1b4f68647b3d82fac76a1c08c9216206e5b099277fb5c51cc9f8549da49efdaa
MD5 ee59c0b8a9002174774990d239f9f941
SHA1 f67834cd0e735cde805f05e40122b767f76a9760
SHA512 ff47c1733bc4e4ac7d865098fd90257e568b5db7c9e37bd1ecf848166f23f9249dcf921bd04619010a9fe1448f55c7ec4deeb09e91e9403ca3038373574ca246
TLSH
T17F117DB3C3D5956E89151AF05A24AE2BCE2D0515821C7C15C9D4FF2BD7E3075D10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 421d7ebe03d6ccd25ae2a81e4c11ec4e4dffa1bd44224ab424b635e32856656a
MD5 25cb40afa376f545453571ebc2e6f3c9
SHA1 cdd212e5d9a307fdf9b8212ceefa40a3d008fd19
SHA512 480605e6db9cbbdaad170ee6bf347e4fc1ec57b017799ed8cade6193225df67525f14c328ca9bc3f9036eff1e66eb712a946bda47c955dea9c9d1ab2d4da2832
SSDEEP 192:sxZoR/yM/jK1Ml8MkG/fcs3YpVIdpdzYHW6+WNGYHjwUug4IgrJ:sxZolMG/fcs3YpmaHbGr9
TLSH
T1DB42E8156A38A97BCCCBD209FA55BF53D6F50472A2901E44A9FCDA1C04E7BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 bd3f5c416094e26c8da4be0bba1bb8ee6724ec33614bc73770089461eb968939
MD5 46783c1c9881acadde23d20b674ee4e2
SHA1 5ae7334bca199c57e190f557623a3d18c17a263f
SHA512 c13b05910afc6338601ab33a6965ff03110cde4016d287145c2eef3a7787b250395c4a143df57b04779158b1e5a6694928c43ab3f357b13a3802abbffec288b4
SSDEEP 192:sxZoR/yM/jK1Ml8UQxkG/fcsQY8MVIdpHzYHW6+WNGYHYHy0ug4Ig5sJ:sxZolqCG/fcsQYPmMHbGudS
TLSH
T12752E7156A389977CCDBD209FA45BF53D6F50472A2901E44A9FCDA1C04E7BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 b14a8c3350084d7d57cc24349c587c63b739df60e3f4ec00727273ff3a13f892
MD5 239a3b567341ca0278f593978ebdbd3f
SHA1 6fad2c130944be26cc211b6dc707bedb46af7361
SHA512 18ce76006368006cf0fa701a6b34d307389b14a38bc085b2854416556357af2083b6c285b23fe53501773b7d6d1739a618b05ac8898becf950c5ec043602d69b
SSDEEP 96:KA1eK2AAv+KAgmiSgKXq8OgKXqSeGbg0GwQxFU1sDsxKr4DmxH+2Nsb:EU1HQHeGbg0GwQHU1gsK4Dm9+2Nsb
TLSH
T1E0D1046271BA02462D3E6B1893D4871FCE4272533058E52F3BAC01B58E67E629CFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a23c1165-0720-4cb0-92b7-0235123797db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a23c1165-0720-4cb0-92b7-0235123797db.tmp
Size 30KB
SHA256 211b8f1eeee4ad55e679e78389d1b36ab89d48240e88557ff943d561d71dd005
MD5 c9f094ca777f6aca36f7f2388a5c7613
SHA1 24951b36f5b02a36162b2566b528905fd8701d0f
SHA512 c7566582e0d349debe512a83a66e933e06103aee4ffc03cc712efe7b85574613d33c5662cec35ea270417bb57602add728b94cdab112acabb1d089f8908ac24c
SSDEEP 768:O5UZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RVroV903:O5UZYTMWvg0Pou1ja7eLZmRuM3
TLSH
T176D20A2B280CCB7E4F844E5DEC2A6F967ED801CB5A584D5447EA884C03CB6EF512B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 2d4605fb1310c58c79b194ed130b423d74ea8501eb176d6aa80acb2098db692c
MD5 da262448c863ac807402dfda99b773c6
SHA1 23e8d9cc8a790dcfd2a5dee2ef5252765b283201
SHA512 c55558f319e9d571c3f36e0429c8b1e6005b209dbc6ef574db187ec2f09eb85faf8bb4b0fee9e58991ee5da7918f5ff33b1bebd62797708eab73360bc67c7cfe
SSDEEP 384:usNytxIOsbKzX5od+hO/VuXd+2bT6HlytEDq1dNCUp:utGCOgO9utlbToy6DqTBp
TLSH
T1D0725B355478AC379EE7A195F48B35139FB84067AA843FC4A6EC6F1C05DB1EC230B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 4a1566595fdf835400efa74028c047b2110238680a6a0ae0ee10ffd52860ded4
MD5 6f2b10dd0843b545d2e8fb1cab216e60
SHA1 82ba403b380e1ff61ea3ff6fd0d31c4f293849f3
SHA512 04d2c792c707f0d5ae177ad8565dc71354c6800d9b27b98d8c44708de60212cbe8b6237ef8f2a74d456f23e436f38ec087bf397c22dd9d7680857c706f805bf9
SSDEEP 384:1zsNyAxIOsbKzX5od+hO/VuXd+2xT6HlytEDq1dNCUp:NKGCOgO9utlxToy6DqTBp
TLSH
T199724B355478AC379EE7A195F44B35039FA84067AA883FC4A6EC6F1C05DB5EC230B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 c7b647202fb400dce351f4ba37e8d1e07266a35ee0652a984cb1e9798bc803ba
MD5 1b74b8718a8bcaec8883e9925f03fa36
SHA1 81d0508ff7189af0caf749825ef1eec9839e3404
SHA512 72438dca88bca9e96c7ef57d698cbdd7f73c05ccd6b106373d60d3a350ed75f1c38c504ebe5fd233b3d4b51e3f1bc06e29578f8f957fd6caa3bff96e744f2556
SSDEEP 384:1zsNTAxIOsbKzX5od+hO/VuXd+2gT6HlytEDq1dNCUp:NZGCOgO9utlgToy6DqTBp
TLSH
T16A724A3554789C379EE7A195F48B35039EB84067AAC43FC4A6EC6F1C05DB5EC230B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ddc104b7e3d63967150f37f2fd5b1ac2c6d48fdc4456bd2d413fac5d8e557302
MD5 b80db8b4239db8dc195eb5f6c0d229ed
SHA1 99d9dc5e7b464ea73ee416d922a5210cfde3e47f
SHA512 dcee465f0cb7bea579fb2b4b11e69264f74dc7bdd07df74ee1853393482d3d1f1515a1581eafd12f962909a35fab9ec14d1c18629e45014f28cf90840c8c25ce
SSDEEP 192:yONw61VWQmiUyaggGX5Obd+jFO/aob/ac836iU6:yONw6WggGX5od+hO/V+aiU6
TLSH
T1A202E835A9286C778EF2AE49F48737139F98206BEA553F84D6E81B1C00D769C2347837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6d01c4c1c619c67a79d7ba2cefc35f2909ef52e59d547b1e5525ba6f12e34576
MD5 503c079bb89f3b2ec81d828d07898f26
SHA1 029d1bde1615bac89fe9fef6d1cd38f991939b11
SHA512 fd9371b0adb4385d2b5a0366b36c4f6d5587034ebf2e84cf9f739a18a00fe162e5c98d41ebbb8dde5a55382c4ffdd07d6b9acd3f4a0d217361a0d7ff7e5e8b00
SSDEEP 192:mOND61fWQmiUymgbWGX5Obd+jFO/aouJFd+2UjJcCqOU6:mOND6YObWGX5od+hO/VuXd+2MTU6
TLSH
T114121B326928AC379DE2A595F48732538FA95167DA897FC0D1EC2F1C01DB6AC230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 ef38779798ff9362cfc8680a95a7894c386875961a629c19c6abdac47fc76891
MD5 17b5e6fd429cab2efab96f6724c7606a
SHA1 b1609a5eff1372f8fa771dca876bbc6bb375bacb
SHA512 2ac999bfd634141d11d031fafb2f46f8262361e4cb01e7656ef1f3e751aba12c65022e543ba25f888ef09fe8287c67ae5c04e144d5fa130835cd9dc038615fb2
SSDEEP 384:QsNyAxIOsbKzX5od+hO/VuXd+2bT6HlytEDq1dNCUp:QKGCOgO9utlbToy6DqTBp
TLSH
T180725B355478AC379EE7A195F44B35139FB84067AA883FC4A6EC6F1C01DB1EC230B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download