e252ff70e8d0a84350dfb28fb0a217e2955c7a5fa6599328643a02fa28ddaada

Analysis

max time kernel
58s
max time network
69s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/08/2026, 23:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 15.3MB
Sample260822-3ll3fa1ape
SHA256 e252ff70e8d0a84350dfb28fb0a217e2955c7a5fa6599328643a02fa28ddaada
MD5 ac3819300c2dd8002d56beb3a0d4aef6
SHA1 d56a42c5d48c7ffe8f3b95c6c47f731d003e419d
SHA512 5c5dcca04887d625cb52fbd2df610856618d1baa055f933244eabeb2c6518797f63b451f7aa37d2cb68bd4d427e7eddea6cbaf319725499cb5e3b532d024c603
SSDEEP 49152:/NQpqPgnqRweTYp2kGYC+O3r8xd2zJQf8xF6DNgQdGxw:w
TLSH
T1B3F6B56BBB49037316F242626B4BA5CAF31EA03F375A1654309CC15C1B7B92483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
652	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134319156904855119"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{BBF82C90-4488-4358-BF82-635EE0981CC1}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe
3488	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 3488 wrote to memory of 4368	3488	msedge.exe	81
PID 3488 wrote to memory of 652	3488	msedge.exe	82
PID 3488 wrote to memory of 884	3488	msedge.exe	83
PID 3488 wrote to memory of 884	3488	msedge.exe	83
PID 3488 wrote to memory of 884	3488	msedge.exe	83
PID 3488 wrote to memory of 3428	3488	msedge.exe	84
PID 3488 wrote to memory of 3428	3488	msedge.exe	84
PID 3488 wrote to memory of 4472	3488	msedge.exe	85
PID 3488 wrote to memory of 4472	3488	msedge.exe	85
PID 3488 wrote to memory of 4472	3488	msedge.exe	85
PID 3488 wrote to memory of 656	3488	msedge.exe	86
PID 3488 wrote to memory of 656	3488	msedge.exe	86
PID 3488 wrote to memory of 656	3488	msedge.exe	86
PID 3488 wrote to memory of 612	3488	msedge.exe	87
PID 3488 wrote to memory of 404	3488	msedge.exe	88
PID 3488 wrote to memory of 612	3488	msedge.exe	87
PID 3488 wrote to memory of 612	3488	msedge.exe	87
PID 3488 wrote to memory of 404	3488	msedge.exe	88
PID 3488 wrote to memory of 404	3488	msedge.exe	88
PID 3488 wrote to memory of 4992	3488	msedge.exe	93
PID 3488 wrote to memory of 540	3488	msedge.exe	94
PID 3488 wrote to memory of 4992	3488	msedge.exe	93
PID 3488 wrote to memory of 540	3488	msedge.exe	94
PID 3488 wrote to memory of 4172	3488	msedge.exe	96
PID 3488 wrote to memory of 3996	3488	msedge.exe	101
PID 3488 wrote to memory of 876	3488	msedge.exe	102
PID 3488 wrote to memory of 1288	3488	msedge.exe	103

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffbcfb4c188,0x7ffbcfb4c194,0x7ffbcfb4c1a0
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,11850297602013172518,4009050086681054536,524288 --field-trial-handle=2068,i,317829331028535494,3785262189130664054,262144 --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:3
  2⤵
  - System Time Discovery
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,7856608677801488896,7071075713552102677,262144 --field-trial-handle=2068,i,317829331028535494,3785262189130664054,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2508,i,630466476555861004,15889379794384917611,524288 --field-trial-handle=2068,i,317829331028535494,3785262189130664054,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,17794523882723451118,5015101993423556298,2097152 --field-trial-handle=2068,i,317829331028535494,3785262189130664054,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,17791723629524889918,17933724457584654729,2097152 --field-trial-handle=2068,i,317829331028535494,3785262189130664054,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4108,i,15258936275086234750,11896806372695271679,2097152 --field-trial-handle=2068,i,317829331028535494,3785262189130664054,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,9029701147726412824,9552415251083876323,2097152 --field-trial-handle=2068,i,317829331028535494,3785262189130664054,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,8840473944422034016,821850402111786879,524288 --field-trial-handle=2068,i,317829331028535494,3785262189130664054,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,16727088987236030033,16824407578231774050,524288 --field-trial-handle=2068,i,317829331028535494,3785262189130664054,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,9445602347128825750,7290399466990757360,524288 --field-trial-handle=2068,i,317829331028535494,3785262189130664054,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,9445602347128825750,7290399466990757360,524288 --field-trial-handle=2068,i,317829331028535494,3785262189130664054,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,7144426610090438886,13670381328348160776,524288 --field-trial-handle=2068,i,317829331028535494,3785262189130664054,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,6468652320906650026,7840583276379840813,524288 --field-trial-handle=2068,i,317829331028535494,3785262189130664054,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:8
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,8308504529816993631,5918567262480303937,524288 --field-trial-handle=2068,i,317829331028535494,3785262189130664054,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:1288

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1452

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8cd7cdcfc64acdb01c1a7f06e1577dcd4ca125e3a64f05cb7349c48e5e94dd63
MD5 44fd149c8189f6af6745e01becc16a8b
SHA1 cf5f694d942a484fd5dc8b26725f8572ad00a071
SHA512 ed79ea0e8fed55e72d2239cc04daaea7b68835d90f8d47d0e2856efdb536ddcdec9b3440d35c0ae4ae6ed2a08834986a69e0f035c8a66c2120ff7537942fde06
TLSH
T18C6170A9216244D3E7633670F0D2C3827870BBBA0B53DF9AC160A87EF5097118FA1C17
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c09d7dd3c21ee3b870f1de4b34f443d39b217ee80f0fa4f39742af5f4c2f1056
MD5 18748403f842f8381d631437d7baab0a
SHA1 2a5ce99cb145b137bb403ca2b6c68354174da4dd
SHA512 c4ba14b0bbc178f21ea8c4e5510131a58e15304ce1153e684a9bd3aed6cf0756a22c1865b22ec88d848740a1d4d5bda57a7d3e35835bf0f0a3316707878468fe
SSDEEP 192:sxZERekZ/fBsnJLGIdpdhHW6+WNGY4w9/DFXIg5XJ:sxZEXZ/fBsnJLnLHbGSJ33
TLSH
T1EE22B8126E38A57B5CC7D209BA15BF53D6F94032A5D11E88EAFC961C09E77DD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b8186c1900ffc9d80d3dd3f90b5940b268ecbba9f9a59a0b29ec710faa684ab4
MD5 46b4bb6c8647bfe7f9b7bce789f7b269
SHA1 466491af35819eca31c4b9025bc5c85dfe8db6b8
SHA512 5d2055388474b3073e2a68325efa74a435016ba8a04b47d6f2fb6c033e428aec2f270386b94963c3350cd02bda3f1b7face59ad5ad4f0ff9c6e2f8d6321469fd
SSDEEP 192:sxZERekZ/fBsnJSQGIdpdhHW6+WNGY4K9/DFXIg5lJ:sxZEXZ/fBsnJSQnLHbG2J3p
TLSH
T1A632B9516E38697B5CC7E209BA15BF53E6F9403295911E88EAFCD61C09E77CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 141d7809000d8dde4cb42cadf242635058de132fe0386e251e983ab567c383ff
MD5 23b2a1a6ba82f19c7b91b4671f1a7adc
SHA1 3c12dd4f38773d9b12d09d60c9eddf4106a08a04
SHA512 cb5b480bbe1acb1be8973f1aa1c5d2205f48e0d59f0df40c60fc097cf196c22775ce343b5abb17498e78649c29b4d8bca56c4e9cde7d22f7d6ac9c6144de2e73
SSDEEP 192:sxZERekZ/fBsYJLGIdpdhHW6+WNGY4w9/DFXIgrJ:sxZEXZ/fBsYJLnLHbGSJ39
TLSH
T14E22B9116E38A57B4CC7D20DBA15BF53D6F95032A5D11E88EAFC961C09E7ADD220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 34c6d0aa209ac26f1c4a30a25d15c512b3bb3c805be27324534034cd1276fb8d
MD5 9f9f3b02063d88cc4b4919fcad2f55ea
SHA1 430a898d242c4ecc680b8fee84ac7f26631a6c70
SHA512 63f8f5f876254a92babbb14784ab3c414588b6826fdd9369f0b372093e2f1b36d10d156ce57c4f9fd44535854f9d126785e7fd3ad21987dd373c884e80398d20
SSDEEP 768:ipqirTNWvx7jr8F1+UoAYDCx9Tuqh0VfUC9xbog/OVMALl6opTproIAKUnk:ipqirTNWvx7jru1ja5ALocTCUUk
TLSH
T107C2EA3B640CCB7E4FC01A9DDC5A6F963EA802CB5B949D4087FA994C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 99e725b031c9db316f878df761460551e48f3d4bd36b3ca044ec4ca0c5d5f31d
MD5 5c1edcb082949176004bebae41ac209c
SHA1 00621a2e2535edc90a7c3cb5d306be3977f56b5f
SHA512 5d98847f8a7d03517d7f1ffa5f7fd9fa4245c7de87f48d8666c971c04538da6bb7da37a64bcfb9b35daa803add9044cd0e8b9d61169ec99f5f027c9898e42e96
SSDEEP 48:K0WoIbKxiMPyvdGxNHzvk/zQPIQVkKpBRPkFt0WwH/sIvKxu0ryD:K0Wo4Kxi2qCUKbCksQKxuKg
TLSH
T18C91314670BF02517C7F250C92A1A62A1B4176A7B12CE43B3BA840B10E67E341DFDDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 09421035a409fc6c5fee551eee8479ec1025eb3cbf6f24f11cfb00fd129ef430
MD5 8505829739c1d62e2d697dc8c5535895
SHA1 38b5b4a9c6d9063896dc42209970b8feab4c014b
SHA512 2ef5c9a64caefb182900ca7752e08b5a3263ddacc6a7e90461654b4f13e056b617b21cc6f43be6ea95bbb9400f4d04905675921f5d288fe6fdd8cecc2b13d5b4
SSDEEP 192:uam+xasuheOwQxMGsN2EQuSLY8mQKQmiU1sIM4k03lKygFNLIsrq5t4/tyAU+aJ1:cZcIhsN2EeYTbDkIKyE67ivU+aJoG
TLSH
T15B828C71AC789C7A29F3A140F54636175FB4807BDBCC6F9098EDAB2D01EA5940707D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b84cf8d232d778522fff7fbda8ca750ee789685e31a1051a2e3b16add718de15
MD5 baec9eff8da0143567ebf7223df5420e
SHA1 1eb57ef073e3dfd468a8755947a0eedb98861f62
SHA512 a39d77bb3a461c2d19a622ea76fbc1d1344b2691930cefcd0c2d1ce6ff1afb721f7ecfa884f40786b570a88f12b9b03cc2b7344a4c23f1054f862f91ce3afaa2
SSDEEP 96:ZqONkfQsjpfmUTmDK5ih/cIPURHl8h4otop5R5DFBhPwivh50xy0SFYKcAxZYDMN:gONf6kDfQmiUyT7Z903lKvQiLRxU6
TLSH
T1AF02F835A8786C7B8EE3AE45F58637275FA5217BEAC02F84D9E81B1C04D764C1706837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 838f284d57e675355a8d8f42493f2973abfc168d72e4ada706f270a36f4e405b
MD5 a367b7035e93882e6fd84c7dd8bf1a37
SHA1 8d0cd008176b32e99cd6030f82b60fba756e3e25
SHA512 d47ad61538a8e8792cedbda3f9bec6521f45ab5ba2f008c584d75646582b48aff783778d3c1d3eb9fc9737e5751d264518e6740d25d13c599e0b6827cbf6bff5
SSDEEP 96:mqONkbQsjpfmUTQK5ih/cIPURHl8h4otop5RJDFB5Pwivh50xy0SFYKcAxZYDMPJ:tONX6kVQmiUyP7R903lKygFCcRsrq5U6
TLSH
T1B2121835A878A87B5EE3A941F48332174FA5812BDFC87FD1D9DC2A1C05DB598130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3d96184bde8dafce3a0ddc080d83ccc5aaf5e4aba8e756629096d0e5f09faab9
MD5 baaea617814e657240673d9f0c47f363
SHA1 b28abcd54db7b120aae60a7b0d0e72a4a55b484f
SHA512 213383db73317b628b1ff5fceeb12d75b2b1255689c280c7bd6bb872ff4c7359449812b453eb86d23c1a712cf5ada08401c88a1d36d66c4923372a917fd6f116
SSDEEP 192:uum+xasuheOwQxMGsN2HQuSLY8mQKQmiU1sIM4k03lKygFNLIsrq5t4/tyAU+aJ1:0ZcIhsN2HeYTbDkIKyE67ivU+aJoG
TLSH
T15A828C71ACB89C7A29F3A141F54636175FB4807BDBCC7F9098EDAB2C01EA5940707D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a671a4f8-5b06-46a1-9761-fa9b87846c78.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a671a4f8-5b06-46a1-9761-fa9b87846c78.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1a136bdd5cb910ad642108fe21937eb2e59fbcb68b95c641b1417e7f033e5336
MD5 27853cfdc83b37255886757bd82910a5
SHA1 e79b1d8516d264e7511220fcca8b5ff6769a7ea8
SHA512 be439c7d3d013475a549c4bdc76661691808f345a982250a9c1ebe59594beabff1d6f59da5e587cbde3f39b1b60a279de21943534592dee998147b43bfbcb820
TLSH
T12041D85CAAEE1148B3B76F4A9BF6687D447FB8732F06D1AD10510E4F4622A40D9B1B33
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads