6a717038f81271f62318212f00b1a2173b9cb0cc435f984710ac8355eb409081

Analysis

max time kernel
149s
max time network
161s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 11:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 8.8MB
Sample260822-nzpcdsgn4s
SHA256 6a717038f81271f62318212f00b1a2173b9cb0cc435f984710ac8355eb409081
MD5 2675b30d524b6c79b6cee41af86fc619
SHA1 407716c1bb83c211bcb51efbbcb6bf2ef1664e5b
SHA512 3214341da8bf3347a6874535bb0ff8d059ee604e779491780f2b29172f9963e23acbe3c534d888f7a3b99274f46d0628962e1e72a5d3fc6f18ca2b62343df485
SSDEEP 24576:cpD6826x5kSWSsRinoHnmfm646a6N6z68SH4SApTJ:cHSek
TLSH
T17B96A52F7F48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF699
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2136	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134318732673470754"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{2B63C455-D702-458F-A9FA-B6FE1D749419}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3200	msedge.exe
3200	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 756 wrote to memory of 4624	756	msedge.exe	89
PID 756 wrote to memory of 2136	756	msedge.exe	90
PID 756 wrote to memory of 2276	756	msedge.exe	91
PID 756 wrote to memory of 2276	756	msedge.exe	91
PID 756 wrote to memory of 2276	756	msedge.exe	91
PID 756 wrote to memory of 3520	756	msedge.exe	92
PID 756 wrote to memory of 3520	756	msedge.exe	92
PID 756 wrote to memory of 3260	756	msedge.exe	94
PID 756 wrote to memory of 3260	756	msedge.exe	94
PID 756 wrote to memory of 3260	756	msedge.exe	94
PID 756 wrote to memory of 2824	756	msedge.exe	95
PID 756 wrote to memory of 2824	756	msedge.exe	95
PID 756 wrote to memory of 2824	756	msedge.exe	95
PID 756 wrote to memory of 2156	756	msedge.exe	96
PID 756 wrote to memory of 2156	756	msedge.exe	96
PID 756 wrote to memory of 2156	756	msedge.exe	96
PID 756 wrote to memory of 3936	756	msedge.exe	97
PID 756 wrote to memory of 3936	756	msedge.exe	97
PID 756 wrote to memory of 3936	756	msedge.exe	97
PID 756 wrote to memory of 4660	756	msedge.exe	100
PID 756 wrote to memory of 2808	756	msedge.exe	99
PID 756 wrote to memory of 4660	756	msedge.exe	100
PID 756 wrote to memory of 2808	756	msedge.exe	99
PID 756 wrote to memory of 2592	756	msedge.exe	102
PID 756 wrote to memory of 2560	756	msedge.exe	106
PID 756 wrote to memory of 2392	756	msedge.exe	107
PID 756 wrote to memory of 2608	756	msedge.exe	108
PID 756 wrote to memory of 3728	756	msedge.exe	109
PID 756 wrote to memory of 3728	756	msedge.exe	109
PID 756 wrote to memory of 3200	756	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x280,0x7ffeed6dc188,0x7ffeed6dc194,0x7ffeed6dc1a0
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,13242453239151663156,9800228075901191694,524288 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,16465078165364260021,17391575784659440087,262144 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:2
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,10157108233860194390,4370731551411152217,524288 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:13
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3592,i,2219668946391738156,7389864729628180993,2097152 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,87372053465363469,11928404478913642571,2097152 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4384,i,6460561694563196337,15616666821571053744,2097152 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:9
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4372,i,11815692263380671905,16201336701382245877,2097152 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,10926237728925265568,16509230968717495882,524288 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,15898894673414529902,16282117349156873520,524288 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,13113829994266037107,10453412588755308313,524288 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,13113829994266037107,10453412588755308313,524288 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,13269090177155104658,6658727078424272374,524288 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:14
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,12226386129715711657,46037500179904289,524288 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,7304623196317634960,14284695617485877462,524288 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5600,i,11700896449207808149,1639869423394737966,524288 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3000,i,11376931092037730340,4079821588592633137,262144 --field-trial-handle=2488,i,9843636874191897343,1371858356058966930,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3200

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1424

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4724

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

fbab09f4-230d-4bfd-ab03-869caf936a03.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\fbab09f4-230d-4bfd-ab03-869caf936a03.tmp
Size 105KB
SHA256 f0ead82c3c8a4cd9959a8cd1cef74705c67e276b4a574243e75c890cb0b0b8fe
MD5 f8a5a8774310485121aa8917052b352c
SHA1 78542cc17bce16f7d0117a4beed6ae29c39c3042
SHA512 94c06ac4086f7321e54c95657a2fc0769092ed3577572d27a9a75f404a57f6b0c02e9bb5c1e8c0c285a577d89a5801c60face4ebf1cee334d6be346c240f09ad
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T1D5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 743ea81226a1361da37dceab2a371039fadba915697f71fa10beda4b8132497e
MD5 23897fc3527407d2528fde0148d81a84
SHA1 313446de038c49f26f818734ababff5aaeb68ffd
SHA512 397867ba4ab0854bba5f5f8968662663cc3189c73a1858219760bada1af6165e4ff1ced5515ef6f2ff2a1bf59199f39f722d8bf50de5040f1b3281bd3759162b
TLSH
T18F5161ACAB2B3ED9C3314BFAA1D1488837F7D349241F9ED24180F3724AC270150621B1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d16f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59d16f.TMP
Size 2KB
SHA256 853821b3d5102ff1d41c6ebf960dbf3c3fdca355df64a8966827c7efeb4bef9e
MD5 706b81f6490df6ddd489beb45f314738
SHA1 149663f2886ad6eb12aaed4430f79e755ec20f5b
SHA512 3a8618987acc88aeb45f01f456a16656b9f6e82d7feacb42767c985046d08ae68039fa4c03421a64cc7e7c5a076237457b7216630c0c4874b00b7f59a4747c00
TLSH
T1E25161AD6B2B3ED9C3314BFAA1E1498837F7D349241F9FD24080F3724AC270160A21B1
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 aae4791ddb2b6b77f9b074175f2e353b5586ecb52bdac33e8ade62ad28f57a36
MD5 b067eb602bb8a7645b738d889fa6bbed
SHA1 f307e81e03910127d05e2b120df1d1abd68652e5
SHA512 5bbcf4b075b8ae88f794fe1871e9188f809f1ea96af9ebc65d9c46c94d087cf01c529300b3d13309b0cc47b4a021a4d5e34fdb6a061e4157a131d0f5110755ef
TLSH
T14631C0F383B4857E8A1196F0EA04AE1FCE1D0511432C7C6585E0AE2793F3461E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4feb2f1ac4c9b876a0f08094298e667a068ab5694bc103d8413934a9cf6bb3d6
MD5 fad816b6c7bdb2eca79c058796e8c8f2
SHA1 5375776e77a3ebec7930189e422b41b31cb02383
SHA512 da41abf6cc0d6857f81952bbc6d3c9c3d2e86b5b431d14c0652edd5dc797058ba7b56411d7a5a5d439467ef536c6822a32c3bdffcc0b101f68fd79d631c0f80d
SSDEEP 384:sxRv5TsIqe8e3/fhNseVdfD8PjFNF8P/5I9Mt/HjMZjhG:sD5TsPe8e3/fh/VdfD8PJNyP/5I9Mt/x
TLSH
T12762B715AA249D77CCDBE20DFA417F93E6F85573A2901E44AAFC8A0C00E7ADD211781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3b38927a5b8f17d84803b96229a24db80df0388a94ed5e9f79035380cba88668
MD5 88e9f8ee91b3ea5ceba441df9d4e5b36
SHA1 c0e20d09c65ceb03542166203308644eacc30ece
SHA512 192f79b4c98f87f1a36050f4d93f8fe63bf330a0b0a82add41da71c4517c38c506696fc28582b8c31a5a093d509d464451745eb9962aa522b48809e024f67630
SSDEEP 384:sxRv8TsIle3/fhNstI8PjFNFuP/5Ie6CHjMZjs:sD8Ts8e3/fh2I8PJN8P/5Ie6CHYZw
TLSH
T1BE62C7156A34AD77CCDBD20DFA417F93D6F85573A2901E44AAFC8A0C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 960d61a8233450b5bb1d927c220f76e557f39d98754658a1971e7f310d228717
MD5 c113d53b483ec5ca04c091ebc6813cfe
SHA1 0ba47eaf3573ae244becd6f82ea387af12b64873
SHA512 dc66e7e722ec84aeee112a7d45c35fc330f8e7cfb8a5324c9411f0fa658df3c52ed6b0e4b64ce0c98b67ab8a6b9988638d955cb893c8910dbc2709f7be3953d5
SSDEEP 384:sxRv5TsIle3/fhNseVI8PjFNFuP/5Ie6CHjMZjhc:sD5Ts8e3/fh/VI8PJN8P/5Ie6CHYZtc
TLSH
T15462C7156A349D77CCDBD20DFA417F93D6F85573A2901E44AAFC8A0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 665332bd39ec5887405b546846b2b772038440c49a3eb028e75d0de26518c51d
MD5 9dc90ae47cd39d9bb933bf16794e4abe
SHA1 b0700a71914fdb576aae4e4465cd7511eee12556
SHA512 b3e28908f05ee8c26812207f9944719b6874604252fff2406ba177577e5c1eb1abc54995974c1a0678696798880066a0bcddc0d9a62bec548d8885dfcd33495a
SSDEEP 768:dhRACxWgg+fAJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVL13feXroPc/i:dhRACxWgg+fAJu1jaulfeE0/i
TLSH
T12AC2FC3F640CCB7E4F844A9DEC29AED76DD802CB96988D5447EE890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c158d3ea1943b0bf7d2b304a67ae89343ee7a9f5c96a6909f82e93fabcff47a6
MD5 bb59ba9e0114704519b6f47fdc93113d
SHA1 259c7d0b849d9635eca4663ced5b706928e11451
SHA512 447e8cbb3d7571b808ed1162efe89e08a892d2c3b6c9f8d68717b280322cfda115df8f6b4df8447b5d8149f5bb8d7c1d9cdb9e4bd41e2c09d863babc54490526
SSDEEP 96:KRlH0lHVlHAlHElH+lHilHmlHkWlHilHvlHPglelGK4lDglclGclWl+l9lMl+lXi:ClUl1lglklelClGl7lClPlYlelOlDglr
TLSH
T1CE915511B6BB828038BE755C91B8846F468370723458683B7FE811776FAAF024CFE5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

38c14b99-47b6-48a9-83a1-60477ebf6809.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\38c14b99-47b6-48a9-83a1-60477ebf6809.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 aaa523ffb04b14cc84f2262b4c479e9e8411a3607366b4eb98d0fd3c103e708c
MD5 061a23fb004933936b6197b3b41315fe
SHA1 84d2c0fad047874b9802e4558b7e30d72a0e27a6
SHA512 246c995b5e878d15119e01ee7947baaf10ea34017ce62b67f2640afeea1737e45d26d16bf4d08f1b0b50f5cf2980108aebd2397274cb3016b26744861c387bf3
SSDEEP 768:rkrv+4UNbdM3aVn7rHxDiJjzxNHXmTWTbc+eQveVH1SvyZ:rkbsb+3ax7rRDIzneWn1fvEH1dZ
TLSH
T16303CF71DCA99E33ADF696C8B44BBA477EB8116385C80A94C8D96F4D428B08D131FD37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a0a692aefa678289d23e3b24ee4f1482bb78c65ab7fe17aecd9690c51ecd0f24
MD5 94cdd3c43159ccf0ef6e94110c7076bb
SHA1 03e68d4402b13e48b86c9979f8ad5a4c5ec1f87b
SHA512 4086b266cf715db9a4e7d54f00c7a97fcbc44d97e0a8d56b78dc97fffd4e1392422368d92a5b59b1c511edaf45494bab2042484d510f20fa97dcabd565ab75b1
SSDEEP 768:Perv+4UNbdwX3z3ijS90dc4xxiJjzpNHXmTWTbc+HQvo+MqV5:PebsbiX3z3i290dc6xIz/eWn1wvonqV5
TLSH
T19403BF71ECA9DE339DFA9698B40B7A437FB8116385C80A98C8D96F4D018B1DD131BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 be8bb4c26f3b6a84c0259b64ce520a0528260eb5c015c2b2aba8e4f82595e2c0
MD5 76bd082c4751c50cd37699a1f564a1ef
SHA1 f75d3c1084ef959df1ee6bc8718a591c82ed212f
SHA512 a57fb3acec2e9349ad6dbea8d2baad7c9f56ac34ada212141aa577eeabed9eaa985fa5927efcc23baca72b9b05cff13a86f962b5b4e070cdc8af2e6a7b335aff
SSDEEP 768:FA6ylX3zcijS9nd+4xxiJjzpNHXmTWTbc+HQvfkuadTMv:FA6ylX3zci29nd+6xIz/eWn1wvfkxdTg
TLSH
T18FF2BF709CA6DD339CE9E388A50B7A46BEF8417395C81A84C8DDAB0D018769D171BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 efee84ffeb6b49d8cbc1bb65e0e75d893729de0087600b38dcd3f47b72a3b9b5
MD5 88c6dc38a3317ecf3272738165892005
SHA1 86c4d8f74a398536384da9829d2a270f7968148c
SHA512 a1925e012f52bae3db7ba19d3254abda8213741f1b69fc88303db10d67895a4123ff08c416308dfd9c68bb922afecd09cc6883207f25d343b6231d3fc403015b
SSDEEP 768:PylX3z3ijS9nd+4xxiJjzpNHXmTWTbc+HQvfkuadTMv:PylX3z3i29nd+6xIz/eWn1wvfkxdTMv
TLSH
T119F2BF709CA6DD339CE9D3C8A50B7A46BEF8417395C81A84C8DDAB0D01876DD171BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 254916fc054f1c5cd8da8bea932c934c165f4817caaf8a480bc3cd76e2a2af1d
MD5 71a1ad75387d212ed5f66c500eefde74
SHA1 1b07023ef30e2a59b17aa5994bebd611bf6bd856
SHA512 b8b7a455688241a176809b053ef000f1de03deeea6d9e1e602c15d28be246ac92908b6cf886c2a47df928de8b4bff5f6f5c8a686e55dd692f4947670d5b96459
SSDEEP 768:dA6r1XFQsxX3zqwg3ijS9nd+4xxiJjzDyNHXmTWTbc+HQvfkuadTMv:dA6r1qsxX3zmi29nd+6xIzDeeWn1wvf/
TLSH
T18CF2AE728C95CE37ADFD9B88B60A7646AEF80173C5C86994DACDAE0D11471DD130BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 efb350689de9524bad418e93153e43cd6bed65b05c6bc1275e65734f6ca95337
MD5 9e55822c3976744dc7eb9ad3ff7218d5
SHA1 beddf3acb3558fbe6ff6f5710207794eb11faa94
SHA512 35c675cdd3c3799013bc827e711d48744392fcd53c0cdcdffe14245840f5929813b5c6f865cf09fcfde4690cf733a211f90ea86b0e55a672724d42d7c7a062a4
SSDEEP 768:arv+4UNbdM3EESHCiJjznNHXmTWTbc+/QieVH1SvyZ:absb+37SiIzxeWn14iEH1dZ
TLSH
T14403CF329CB98F37ADF69688754BBA573EF8116385C40B88C8C96F4D429748D170BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c09a2f75-c7f8-4401-a11c-8feee5e63209.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c09a2f75-c7f8-4401-a11c-8feee5e63209.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download