000ae5775ffa701d57afe7ac3831b76799e8250a2d0c328d1785cba935aab38d

Resubmissions

10/08/2026, 00:14

260810-ajbjpsxhnh

10/08/2026, 00:02

260810-abl1gaxfre7

Analysis

max time kernel
148s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 00:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 8.7MB
Sample260810-abl1gaxfre
SHA256 000ae5775ffa701d57afe7ac3831b76799e8250a2d0c328d1785cba935aab38d
MD5 1ca87d8ee3ce9e9682547c4d9c9cb581
SHA1 d25b5b82c0b225719cc4ee318f776169b7f9af7a
SHA512 ec07b958b4122f0776a6bded741df43f87ba0503b6a3b9cc9cbe6188756dcde740122314e0578175123aaa61381809b382e7e676815c20c3e671a098f0f39810
SSDEEP 24576:ZQQa6Ne6P5d2WSmwRFXe1vmfpV6k626D6b62vSuSpZ:ZMfTVQ
TLSH
T1D296A52F7F48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF699
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2812	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307940537272766"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{9B08C728-580D-42C5-A7C7-C1966BC9A9E9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3820	msedge.exe
3820	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe
1984	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1984 wrote to memory of 2308	1984	msedge.exe	86
PID 1984 wrote to memory of 2812	1984	msedge.exe	87
PID 1984 wrote to memory of 4676	1984	msedge.exe	88
PID 1984 wrote to memory of 4676	1984	msedge.exe	88
PID 1984 wrote to memory of 4676	1984	msedge.exe	88
PID 1984 wrote to memory of 1664	1984	msedge.exe	90
PID 1984 wrote to memory of 1664	1984	msedge.exe	90
PID 1984 wrote to memory of 4336	1984	msedge.exe	91
PID 1984 wrote to memory of 3828	1984	msedge.exe	92
PID 1984 wrote to memory of 4336	1984	msedge.exe	91
PID 1984 wrote to memory of 4336	1984	msedge.exe	91
PID 1984 wrote to memory of 3828	1984	msedge.exe	92
PID 1984 wrote to memory of 3828	1984	msedge.exe	92
PID 1984 wrote to memory of 4980	1984	msedge.exe	93
PID 1984 wrote to memory of 3104	1984	msedge.exe	94
PID 1984 wrote to memory of 4980	1984	msedge.exe	93
PID 1984 wrote to memory of 4980	1984	msedge.exe	93
PID 1984 wrote to memory of 3104	1984	msedge.exe	94
PID 1984 wrote to memory of 3104	1984	msedge.exe	94
PID 1984 wrote to memory of 1960	1984	msedge.exe	97
PID 1984 wrote to memory of 1960	1984	msedge.exe	97
PID 1984 wrote to memory of 3436	1984	msedge.exe	98
PID 1984 wrote to memory of 3436	1984	msedge.exe	98
PID 1984 wrote to memory of 4120	1984	msedge.exe	100
PID 1984 wrote to memory of 4896	1984	msedge.exe	109
PID 1984 wrote to memory of 3036	1984	msedge.exe	110
PID 1984 wrote to memory of 2340	1984	msedge.exe	111
PID 1984 wrote to memory of 2628	1984	msedge.exe	112
PID 1984 wrote to memory of 2628	1984	msedge.exe	112
PID 1984 wrote to memory of 3820	1984	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x294,0x7ff92103c188,0x7ff92103c194,0x7ff92103c1a0
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,2304226717092685536,11494899547330028099,524288 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,16383942485500758839,7529386964440166326,262144 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,19567574687999296,15209473386591170525,524288 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,11525803646057459112,1011510902190608484,2097152 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,7987740613473166451,1864344033958932034,2097152 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,8311016257726892381,2578666654813266588,2097152 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,12007175121263515246,13606000527431517154,2097152 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,2398331120466086443,10127460628394438467,524288 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,11549605600004840818,12156889000883485522,524288 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,10370567520654746656,15199485319532167285,524288 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,10370567520654746656,15199485319532167285,524288 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,12054696639185900389,3216502663750624442,524288 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,11065900412872523943,17494292104042030371,524288 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,5292137149103608442,17067369852537222,524288 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,5201199354833968579,18172652381290712993,524288 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:8
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5812,i,18164962214607787090,11525075423319886683,262144 --field-trial-handle=2240,i,4730838974927062450,15221784658157928832,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3820

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 26374662fab280ef96eaa929fd16d9c29e3f74bff1e5cdf49f3940b212c74426
MD5 b3d937ce21fb8a9c36b91767a220b12b
SHA1 792049998f48955661735784aa1a6653cfd6d461
SHA512 05958eec7798844717209ca31b3321bd05988e5248f66df4ba666cf3bbad7c9d2a9fd23d375157547fdb301a268f9f7b0a6a6c7b7c9fa62856f0848ecb862773
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7l:fwUQC5VwBIiElEd2K57P7l
TLSH
T190B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d6c0e70e2b824a1d7b8b0cd8f78ca33c24dca8b0eb1c271756b97affd6117339
MD5 64ad6dbc80acbb6bd56139b807de322a
SHA1 88b3a76fe6d33a910d1af4573c4d6e1c34fd8e42
SHA512 151c3e331fc69b8e610eea0b95b33bfdd688c13785592cdc5e2ef7533225d19b310337ea2d4e6c1504dbd143b3363ab9bb1f5dd637fd1a4c4296cf85981fca72
TLSH
T17171804D09D20492F3E51E31F8D336D7753280B94A470E720680ABBDAE16F2D0CB52F8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a6e9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a6e9.TMP
Size 3KB
SHA256 86d76673bac47dbc54d32ea86bad36cae732792e3de3f637f0f39b9d03b818b9
MD5 6ef98fbe50085a0e3adcd77288f023bc
SHA1 698a50c2001bedbd3897f22cb7c44dfc36e7ae69
SHA512 08b691597a6030ec6bc4fbac91538878ead2fc24c45f6ce94e974891a5a215ef5fb24ef59bd418cbb1655fa6367f6ea9adabfe256c215bbd8d27b5a8d342a3d7
TLSH
T1B971804D09D20492F3E51E31F8D236D7753280B94A470E7216809BBDAE16F2D1CB52F8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 4cefd5f071dd33b4757275493f6d76c1784bd081a3aff86acc8a80e0ab4379fd
MD5 2663c87f7d7ce663fa4c28f57c48a2bd
SHA1 c5115e466cdfb19d9e716f8846b5f16d995efb33
SHA512 6d6222bf7263b7ca7f0031825b06de5bdc75fae3b4574c0c54954c1f9c51bbee769d51aa91ecc62ac5f1d7f2563c15f6ad09f99d923fc8a97a74161884f3d0b4
TLSH
T1BC115BB3C7D5856E891556F06A24AE2BDE2D064682287C25C5D4EF2B93F3065E00255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 94d39f302bb00989cb6be0e96c5e4ec064c3dfa7e09831b7eea54897856db1b4
MD5 2dc5217fa21891a633a05975aef596ad
SHA1 eb116a1e900d0772fa5efe44c0c9424d1fd811dc
SHA512 8fb9ff42eaa80eafbfee8f90372970ea178530b80159a175f46873df8a8f7464237ddd31a2cdded24c495a83c03726fc8eadb1b0199562f128bb868e9dbcc0c5
SSDEEP 192:sxZ/RYyM/jK1Ml8MkD/fEs1ZpIdpd0HW6+WNGYwKzFqIgrJ:sxZ/6MD/fEs1ZieHbGD9
TLSH
T12142E811AA349977CCDBD20DFA55BB53D6F9057292900E48AEFCDA1C04E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9da6f33f686a22fdbb5fc967d7c49c660541105796f7925768c2ed04c8b2bbf5
MD5 629a2e449f6d6ddb987df6e912e273d3
SHA1 d9aeeff6a11d5d888be22df3228d918e51d8083b
SHA512 f41c6fe82a99bc519b989a16528b9ea53bb0fbb080c000b1b46262a60e913cf5ede7559d36d32485f3bdc876e462468355cbea058b6fcb07aaec87ea30719b84
SSDEEP 192:sxZ/RYyM/jK1Ml8UQCkD/fEshLpIdpH0HW6+WNGYw1gFqIg5MJ:sxZ/6qBD/fEshLiUHbGhS
TLSH
T1D252D811AA349977CCDBD20DFA45BF53D6F9447292900E48AAFCDA1C05E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 65ab7b182496db4d1798ec0b47ca48a95796594e0436828cb0df434fa253b743
MD5 67b014cc7b2623c1bfc2d5fe7ba2dfee
SHA1 20b508d6a10bad4f116124b44bfa566927c37d96
SHA512 565ad56b2719f9cca8e24fe9a66b1c376b83a5e3d5a1f5e201560aa4c044550d454d14976bf6837673b89529b49b8aa9d6a9e7e79e3ebcbf320f1987042f2f18
SSDEEP 768:Ml4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+d/rohqcuav7:Ml4jeXmWvmKLEu1jacPLZQdsHx
TLSH
T1FDD20A3B280CCF7E4F844E5DEC26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 fdec74c80237ad5052740e4c551dd2cc6f6ba40ac5e47275aa26d2cf92853134
MD5 de687f3eb98bf15055900c66383ac012
SHA1 5156d34ce656d85f0c943474f24e166c710df6a0
SHA512 82bcd4114487e082dd409081755313fd255ae7b3e9667c8e30b77221c648a7651dc7e4c4a963621ae88dffb91e8ffe5392210962d8540a4a882428c85f22635f
SSDEEP 24:Kd9f4LiandPrD4bf+yIj3DKiMhaZD1ElTSmtMI8LAyXY0fbwRaudmWy4uK+BIjcl:KsiIfKnKQDyN1IRK+0M2GInKfq4nyJt
TLSH
T15391B65676BF06017D7E2D0C91588727AB41B163309CA52B37E844B28E6BF268CFC4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5942fb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5942fb.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 c951d715bc1120e680f34bf798947868232a6a92b01ad541cf5b5b8ebaa3a1fd
MD5 d7ca4cb1a9e3b13b05024d13f98f6996
SHA1 894f9bcc209a73e32f44d50d737184253f4a8559
SHA512 7fabc73d8bfcedacb9a88546c015b2556f76f1e32ad840dc314897c2e30e3ff1d9dc9f75fc2554308cfa3204206887ec009d36fd453defaaad17f29bf46cccb9
SSDEEP 384:FZcIhsNpg3XrUqf+xOE1hpxJrlF1i6HlytEDq1rCUJ:9hZUyYOshLhf1ioy6Dq9J
TLSH
T175927C3159B85C375DE7A585F48A39038EF84123ABD46FD8E5ECAF2D00DB6AD130B815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 0078296f3812b7b70c989069e6502df29e5181184a1cafd30bb12d8c28891bb1
MD5 fec70ec7f42e1723191b9d3b4a1920e4
SHA1 94915dd9901bee3abdb19c3717e08320ba14a87e
SHA512 b068169d483a6ef8384840ff1084207771fb43496656a7defbeb50b55825536468c2371c317d31c87e3bf2ec5a6a665b72c2ea0426a56de239ad3098a27efd28
SSDEEP 384:iiFiZcI2zsNL8TUNTUlIlR3XrUqf+xOE1hpxJrbF1i6HlytEDq1rCUJ:pFQGawgvUyYOshLhJ1ioy6Dq9J
TLSH
T1E2A26D3248A8993B9DE6AA85F44A35138EF84173DAD4AED4E6DCAF1D00DB1EC130BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6c66cf0f627a54896e6119614c1a91f536417a62b829da6271c5fe66466ebf6d
MD5 be423c57e06c48411d8bfb0f54fe5f63
SHA1 8ecddb2159e8688c7a13f85a7179c03e18bb8969
SHA512 22abc16aed7c60236885dadd9b0121de6462ec587b187a7a8325e569d984db0733abfa6558bb523d4f59fb642849cf17db589a9238467a26a30c0e3ab9ba98c0
SSDEEP 192:EONa6hZ0QmiUy55pc/+jVnO1u1m5wOZG5fvU6:EONa6okpu+xOE1F2yfvU6
TLSH
T1C202E835686C6C778EE2AE45F48727135FE4213BE9916F84E6E82B1C00C779C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 93b5fc8876eae6c9489180d9cd22eba03d2ac9b2ab0f2ec8080fc48d078b837b
MD5 fcacdf0039fe4a771d46cf2b78b82091
SHA1 dc14cca1dfa299fd764f4820abca854b34627c29
SHA512 2512e1574b8801060763e3083794920eb230bf0d71df771c165acbbd56b6e3a86001356840e80fb4163099cb26b58b8d0478e5a58d2f5e28760fc07db4cbfe74
SSDEEP 384:TZcIhsNpR3XrUqf+xOE1hpxJrlF1i6HlytEDq1rCUJ:LhUUyYOshLhf1ioy6Dq9J
TLSH
T197927C3158B85C375DE6A585F48A35038EF84123AAD46FD8E5ECAB2D00DB6AD130B815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d621be511fb7ed627b26dede7094e82e4d37a8685fa082c5c71c26199790ea5f
MD5 5c72bad1bbda99dac030f37e0c3c7bab
SHA1 0a976804c849c8c8c1e8e5cda5f72f87de09f853
SHA512 923efbb99a5124541218a200c0830453411c5fbfadad7751977a254ff01a81ce625398089a4698329fb559ba73e9a7c6ba049b601ffa299a44c8af0f72747a50
SSDEEP 192:PXONs6hZT+QmiUyg5Pc2c/+jVnO1u1hjFuSJrr5cOqiqViU6:PONs6iHU2u+xOE1hpxJr291iU6
TLSH
T14012F8316868AC375DD2A695F48732539EE95227EEC57FD4E5EC3B1C00DBA6C230AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 656f3f4c3338eca8ee6838e92790a4835ea39d154dfd648d65c2c386e41bdea8
MD5 41cd71cf838dbde249034af1db7f7ce1
SHA1 549868f22fe3998e5db266d215c4d0484ce451d6
SHA512 6f2357ba15a67dc1415c755a043c61668c3b56a4e1a067ab2472d0a3e070d025b658c3ee0a9559bf235662da1a9f7c2b1df083ad92320cf7c2431b66b3082d2e
TLSH
T124413799B6FA1148B3B37E5AABB269AD047FBC733F0AD05D10010E4E0A63645C861737
MD5 SHA1 SHA512 TLSH

Submit Download