2f9bd7e8103b2f509abfcce2eac0a9e6a5e367987b8167dac612fd36fd3c0d9d

Resubmissions

19/08/2026, 22:10

260819-13s6zahh393

19/08/2026, 21:58

260819-1vxt7avajf7

Analysis

max time kernel
148s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/08/2026, 21:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 10.7MB
Sample260819-1vxt7avajf
SHA256 2f9bd7e8103b2f509abfcce2eac0a9e6a5e367987b8167dac612fd36fd3c0d9d
MD5 b00daaa4e23ccb3860d572a0a73606eb
SHA1 a6afe0a0dd6e469870f23a67652ace635879225f
SHA512 9cc36d01722521bddda0e4bcc1ed14533b2af3e0f2548000cd0e71ce413d7b8fcb5fcdd997f32b70cd1f81dc32bbf59452a4d8ec19ad95ed70c0ae836332b39e
SSDEEP 24576:2o9dQj6poj6j1qjK6DZywRFXTvmf4KjZ6ojK6QjZ6UjK6ajK64jK6ZjZ6ijK6e6Q:By8eGp
TLSH
T18DB6A42F7B48037706C602A2AB8B65CAF31F903F3B561654345CD1681F6BA2583FB6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
436	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316506074419367"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{FC5542AA-E6B7-4FE0-AFAE-06E252C2B496}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2008	msedge.exe
2008	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe
5088	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 5088 wrote to memory of 1432	5088	msedge.exe	84
PID 5088 wrote to memory of 5072	5088	msedge.exe	85
PID 5088 wrote to memory of 436	5088	msedge.exe	86
PID 5088 wrote to memory of 5072	5088	msedge.exe	85
PID 5088 wrote to memory of 5072	5088	msedge.exe	85
PID 5088 wrote to memory of 3692	5088	msedge.exe	88
PID 5088 wrote to memory of 3692	5088	msedge.exe	88
PID 5088 wrote to memory of 3324	5088	msedge.exe	89
PID 5088 wrote to memory of 224	5088	msedge.exe	90
PID 5088 wrote to memory of 3324	5088	msedge.exe	89
PID 5088 wrote to memory of 3324	5088	msedge.exe	89
PID 5088 wrote to memory of 224	5088	msedge.exe	90
PID 5088 wrote to memory of 224	5088	msedge.exe	90
PID 5088 wrote to memory of 3224	5088	msedge.exe	91
PID 5088 wrote to memory of 3224	5088	msedge.exe	91
PID 5088 wrote to memory of 3224	5088	msedge.exe	91
PID 5088 wrote to memory of 4060	5088	msedge.exe	92
PID 5088 wrote to memory of 4060	5088	msedge.exe	92
PID 5088 wrote to memory of 4060	5088	msedge.exe	92
PID 5088 wrote to memory of 3276	5088	msedge.exe	95
PID 5088 wrote to memory of 3180	5088	msedge.exe	96
PID 5088 wrote to memory of 3276	5088	msedge.exe	95
PID 5088 wrote to memory of 3180	5088	msedge.exe	96
PID 5088 wrote to memory of 4828	5088	msedge.exe	99
PID 5088 wrote to memory of 5056	5088	msedge.exe	105
PID 5088 wrote to memory of 5092	5088	msedge.exe	106
PID 5088 wrote to memory of 3440	5088	msedge.exe	107
PID 5088 wrote to memory of 2288	5088	msedge.exe	108
PID 5088 wrote to memory of 2288	5088	msedge.exe	108
PID 5088 wrote to memory of 4952	5088	msedge.exe	111
PID 5088 wrote to memory of 4952	5088	msedge.exe	111
PID 5088 wrote to memory of 3552	5088	msedge.exe	117
PID 5088 wrote to memory of 3552	5088	msedge.exe	117
PID 5088 wrote to memory of 2008	5088	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffbd9f1c188,0x7ffbd9f1c194,0x7ffbd9f1c1a0
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,7672478581907180945,1785751247819159622,262144 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,7628966865386377156,11448933402093402537,524288 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:3
  2⤵
  - System Time Discovery
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2648,i,2499779100519459907,17040202700586790338,524288 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:8
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,1142013668964482711,13403255313666718641,2097152 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,826363291808079876,12818541920272610256,2097152 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,3536939536670125210,9644706926276374200,2097152 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,3664040461132817585,4038692177657250341,2097152 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,15434117838755558623,14261605078503505360,524288 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,14093278431338016402,12632982754683645978,524288 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,1428146103295384723,7076485488828147410,524288 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,1428146103295384723,7076485488828147410,524288 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,1580280237263357288,6090030350543060651,524288 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,14788137327312384695,12260305491208666094,524288 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,12649789130108949236,11472562490515065250,524288 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3964,i,4559591543208496040,4454168318172795980,524288 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:8
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,698564366656871849,14778376909280438019,524288 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2844,i,5712710619938093853,1155944267640032898,524288 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6192,i,4079735231219065501,1827942151434968060,262144 --field-trial-handle=2300,i,1035403978006311718,6047832274493390412,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2008

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1500

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 70902a14af1dd686fa9b96771aa1756aa23fd8db6a81c74db6704c5258097d20
MD5 e00a88b4d1a9fd08bec9710347544255
SHA1 67f7cd6cbf12391a9b59d85d4160b9d9aa675fb0
SHA512 940a389669c7c3e01a6499e6d367aed3352202a052ac7727700787aea4c768ab657b17455983f3f9f49afe3fc95259afee3f01402b99258f61f862a7435920cd
TLSH
T1AFE0268804C8C7EFBA40A78752BC538CC2E03A0E92CCB94A2B05888C7141848F3C37A4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 6afa8934c2569651312aa9f09668be37b5f51911667f9adb79fcab4f076282f8
MD5 2d079fe18822c41f8b37774aaa3f4106
SHA1 505b176b3841940ee2e8b76bd73d4fead0037d37
SHA512 bb9a6de08a6221821f806827552daf2519d759b16eb34c9ab0dbd582f149a8d056c72ac5de70e2ea15878b54d21f15c3c8c8b0ef9dc9652804b5037ab061ee58
TLSH
T14EE04FA919E9C76EAA456587A2B8538CC2943A0F96DCBA4A1B0488857182948F7D26A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 af06496f02c19100923a0c71ce985a55e6cc2122b0f4308004a03d086050a497
MD5 a2e5257eadc7b912aafde50098174e57
SHA1 ab5addd0cf1aed7856cd4af95a8b2869ab2dc400
SHA512 7197152202567f8d7ed4a383b1fbc1184355669e21154031baf956e08e2ea65b8fff09a7388f85448398cba65ac9c052d7667ecc3b860dd4f9da067851de869c
TLSH
T191612C3800554C53E7C52133E4FFC94074B985EAFBA3EE2691336CBD6A0E729814DAD8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f920.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f920.TMP
Size 3KB
SHA256 a9980e580591234a22f63782a792865f798b746571a05c408c65b01b2f581db7
MD5 faf3b58f25f7c88c43396f7fbd4021a7
SHA1 24e78e4d2fbf6468372a8c86e2ece6eeb62adff1
SHA512 1c6223181f2262df3ad43142eddc76f8bb21ca48a67cc9a7a92e23e43de4cd53f11b86d3ad0c9200a78bcd4145ae329783ea54251a340143e29b83a3853ba16c
TLSH
T121612C3800454C53E7C52133E4FFCA4474B985EAFBA3EE2691376CBD6A0E729814DAD8
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 517c53d208657d6aa78518669e248d000d1870c838a4eec2f1c68d49bd5d5850
MD5 be6c10696405ba88125d900eb025059d
SHA1 9f6fedb449b93373643dbfc0e3151d2a650743e7
SHA512 5b42e494b23ef17d6cf62d993f90c2cdf1797f63fe2fea80987dbc6c9d8592a65e1d4e619523a7c5460ecc49f40779cd5e9dfdb423bdcf7bf0c795aeb4cd92ce
TLSH
T1D6117DB3C3D5856E891116F05A24EE2BCE2D0505431C7D16D9D4FF2B93E3075E00255F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ee45986b0e1fe763c1d633b369360c056cf18492d915db011f980a8396ed4755
MD5 36a921e79f11dcea06fe2cd8a351d740
SHA1 dc4516f2d0337b608c5e1be6fd8d5e50b7039c00
SHA512 92457ae127e4d6a8795e71db0309628bbe606ba32809e454396942ecf5355677b822261119c79b04baa92e78940ad81f87c48e1c0fa571fc47718df4a123e1f9
SSDEEP 192:sxZLRzkd/fDsuPCUDIdpdIHW6+WNGY9IKDtN9IgrJ:sxZLid/fDsuaNeHbGIh9
TLSH
T1B122B9126E38A57B8CC7E20DBB25BF53D6F9503191951E58EAFC961C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 85e4feafb6fdf818d762692d68a740f2612ae13986475fe54be4138051aa513a
MD5 508c25a81236acd3de6aa906fce6101a
SHA1 d8adc3f54c093af4779992d73618a90461374717
SHA512 48de0bfde28d6a8298b1f7eca05c0a34aa76d04b1ab592f71e4b8c2756cbf47d4d9e44a37b143f763713eadf1cf0d80aed2d17a002e57c63d2125ed2527a5710
SSDEEP 192:sxZLRzkd/fDsfPCUDIdpdIHW6+WNGY9IKDtN9Ig5MJ:sxZLid/fDsfaNeHbGIhK
TLSH
T13622B9126E38A57B8CCBE209BB25BF53D6F9503191951E48EAFC961C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 dd3e5e8fde1b24de3f5da91854b0a2f4255bf2f83ff8f7725002432a2dc59df4
MD5 803af1971b86a7ed27d64a6461403b2a
SHA1 80c7be481c5f6d9a87df91a271676e177255a112
SHA512 709c942e56a4e75979a9d9432d653651ad6c54e67580341953a2d0d7c8b8315b4a50b0a9a6199e755cdcd8f22cf8263c2acbbc47eba6937f9259d024b4811894
SSDEEP 192:sxZLRzkd/fDsfPUUDIdpdIHW6+WNGY9IW9tN9Ig5+J:sxZLid/fDsfsNeHbGghY
TLSH
T12822B9126E38A97B8CC7E209BB25BF53D6F9503251951E48EAFC961C05E7ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 cb2b178a611254b2c1a528b77d7ad30912ce85c05da05a1f0405c279afb19a0f
MD5 5f4e3af304007456e3919ed3c5819a6b
SHA1 7f182b0e7695750567961819e222d1c4b057f2a6
SHA512 a59748d7fd8ce67b75c80f8c529e479e44de6417af0b13d46b07985afa74dde40a4e9771e17b57bf8266cc94287a4ae4980957b02215717232ac27d3f75409ef
SSDEEP 768:w8yvIZwWvu+Q+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDFLlwmW7froQSbqN:w8yvIZwWvu+Q+u1jamFLeR7MDE
TLSH
T1EBC2E92B240CCB7E5F801E9DDD5A6F9B3EA802C766988D4047FD994C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59962b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59962b.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 4a5669ced0b3a941f7655f29e02eea09442bb35ac3f99bc62fe43af63bb47fae
MD5 ecc480deaee9c539f73dc8499086518e
SHA1 6f82d967e458c57c776dce8520f32e5102b78c0f
SHA512 296d82e6eb1a09952d55b38b7cb1fdab147058f134a3153102690857ec52617875f64c2772f819f5484720899a87d7e4cd82856cf8a1f70cbaaa357773e5aac3
SSDEEP 192:uPLsNNlQfql3w+YLeVtQmiU1k+c4e+CGLOD9ojhOyJi0t1qLM7XBz:IsNNl8qqzidxze+CeODejh4OiMV
TLSH
T130421936AC386D7B5EE7A281F94735138EB88167D6853F90C9DC7B0C05DB69C230AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 e467020ebe543a9675bb3ada7f83e08396c995711820b707b463a7036966bf2d
MD5 c629ced8ba346662d798b534033c8ab7
SHA1 1495c8fdb47eca4e335379ac272e9700ba7f85a9
SHA512 224d0abdc896ab14d1cda81c7a65b248f09b939d3a7a46dd0075c69ab94640d4f04c49b9121eed19cfd31ce394a7004fc722f7905522f533f0b41dde19f0ce94
SSDEEP 384:uiFiZcIrsNX8TUNTUlIlJ8qqzidxze+CeODejh7OiMUop:FFQrSwgYzyS2Oijh7ONUa
TLSH
T15C925B339D689D7BAEF6AB81F94A31038EB881A7D585BF90D5CCAA0C01D71DC130BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 88d4118e1acab1d9c3ccf9e9cd52b77fa7228fdbb4686d5db0b3f3845fdfd8b0
MD5 5d51a59c0303eb6bff5dbfa6fe45ba3e
SHA1 ac8fc46a2f232004a8daf33af810c264c4ef751c
SHA512 919ff82978cfab68f2aef969c4e2bde85732c179e762f7a8f84500ae0049e834dab556d9d586dff7c625ee86238ac99dea0171b08df911ba0e1f858445189765
SSDEEP 192:JONj6v+YLNQmiUyC+Zh+CGLOD9oqus0t+ZU6:JONj6vz/SZh+CeODeMOKU6
TLSH
T10202E935BD382C7B9FF2AE45F98736179FA81177E5952F80D9E82B0C01D769C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 dcf6fd6757d492ecda12b968b9949b5d352d361918308aed3a596c6406742bc4
MD5 570283bb3d99229bb22004aca2e689dd
SHA1 1aab86aaee602ff24f54bc91e3b5888be1e1b18c
SHA512 d5dd776fcc393432163497c9708f4c95f834b2d909577c164295c00301d41afa4430c5c48580538b5b135769da86aaf6e0ce9262640ecf5a0109854a93e1682e
SSDEEP 384:eZcIhsNNJ8qqzidxze+CeODejh4OiMUop:chvzyS2Oijh4ONUa
TLSH
T182725C326D786D7B5DF6A181F98735138EB88167D2853F8088DCBB0D05DB6A9130AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 68cd94a81d0b69984c0d90f8c8cff4cbc4b14f9db3a9829003c9b1411cc3119b
MD5 04f80a5f60317215991f77ae698d71c8
SHA1 12969375a6efdca331dc22ac8797afb6687bdbbc
SHA512 4db4e3d5ba358a5ac67b0d65adfdd6e64797f28deb33bc734feb2179003735a0e7b39e2cca7a1031eab1c49fb345a5039c657f564349660f16741d13aa651881
SSDEEP 192:dONQ6v+YLwQmiUyK+hh+CGLOD9ojhdCH0t1qLMU6:dONQ6vzU0hh+CeODejhKOiMU6
TLSH
T181122C35BD786C675EE2A585F48735139EA98237EA863F80D5DC3E0C01DF69C234AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8bd265ea-20ed-4c28-8db9-523a74f744f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8bd265ea-20ed-4c28-8db9-523a74f744f6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e1211315b001bfdd4c2641a5a3904a591d61d58046e609c2c1fe38d108672d9a
MD5 236354bbd146f0a881713ef7976598c7
SHA1 9b43ec5fb5c605ca9ff199e0d1074e46858d8a0d
SHA512 4bc7a8b298857e55c0921c4182cd0634ad8ba1bb1d27a38cf44e4a5a571cf468647071f6fb311acdb8bea35a1fe7668de3b8a0ced9ee0137b96905cd9e1ef552
TLSH
T184411C58B6EA1148B3B37E5A9BF7B86D487B78731F4790AD10110E4E0772A44D8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download