c4771c9158e31855293ee565db76c9b2c52f84c8a37eda4700cfb149a17fd7eb

Analysis

max time kernel
148s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/08/2026, 03:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 9.8MB
Sample260825-ef52csswbx
SHA256 c4771c9158e31855293ee565db76c9b2c52f84c8a37eda4700cfb149a17fd7eb
MD5 0ff177fbf2a3873dd573077840e0b8f5
SHA1 03d06bc7cd894399a5fc6600a0210f6e3226f92a
SHA512 3264becd3103c905ab7f9cc034320885f18cbecaa45f582a4a9567ca4bcd620d64dc59fb03532964e775c35f07928a4497f5529cf1b9dc18379e4e9cff02ff8a
SSDEEP 24576:K+QQM6Ms6x5d1n+wRhXe1BmfL6k6T6W6b6f6V6GeGj/3BIpx:LUzeGdY
TLSH
T134A6A52F7B48037706C642627B8BA5CAF21E903F3B561654344CD1681F6BA2983FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3308	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134321038361509258"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{9628A025-0A37-4F8D-8216-D2BD2EF1BF7E}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1272	msedge.exe
1272	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe
344	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 344 wrote to memory of 4952	344	msedge.exe	85
PID 344 wrote to memory of 3308	344	msedge.exe	86
PID 344 wrote to memory of 844	344	msedge.exe	87
PID 344 wrote to memory of 844	344	msedge.exe	87
PID 344 wrote to memory of 844	344	msedge.exe	87
PID 344 wrote to memory of 1556	344	msedge.exe	89
PID 344 wrote to memory of 1556	344	msedge.exe	89
PID 344 wrote to memory of 1908	344	msedge.exe	90
PID 344 wrote to memory of 1908	344	msedge.exe	90
PID 344 wrote to memory of 1908	344	msedge.exe	90
PID 344 wrote to memory of 4500	344	msedge.exe	91
PID 344 wrote to memory of 4500	344	msedge.exe	91
PID 344 wrote to memory of 4500	344	msedge.exe	91
PID 344 wrote to memory of 896	344	msedge.exe	92
PID 344 wrote to memory of 896	344	msedge.exe	92
PID 344 wrote to memory of 896	344	msedge.exe	92
PID 344 wrote to memory of 936	344	msedge.exe	93
PID 344 wrote to memory of 936	344	msedge.exe	93
PID 344 wrote to memory of 936	344	msedge.exe	93
PID 344 wrote to memory of 3276	344	msedge.exe	97
PID 344 wrote to memory of 3276	344	msedge.exe	97
PID 344 wrote to memory of 1172	344	msedge.exe	98
PID 344 wrote to memory of 1172	344	msedge.exe	98
PID 344 wrote to memory of 3860	344	msedge.exe	100
PID 344 wrote to memory of 2676	344	msedge.exe	109
PID 344 wrote to memory of 4496	344	msedge.exe	110
PID 344 wrote to memory of 920	344	msedge.exe	111
PID 344 wrote to memory of 4168	344	msedge.exe	113
PID 344 wrote to memory of 4168	344	msedge.exe	113
PID 344 wrote to memory of 1272	344	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9dbf4c188,0x7ff9dbf4c194,0x7ff9dbf4c1a0
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,15604236511506643334,17163108326541125350,524288 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,13090455356412403318,178739253662529394,262144 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:2
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,2352054722595073795,17024451190518349176,524288 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=1372 /prefetch:8
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,17487245525269249051,14404304618644794061,2097152 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,10572713460707959229,1898449531575877893,2097152 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,9786282757711811137,11997926041808144891,2097152 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,501645865321101561,13004366514417974979,2097152 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3560,i,10514646248720291838,8122395799898583205,524288 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:8
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,14919928970617348990,4470850128058288498,524288 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,17464643483162595048,5537730664460950829,524288 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,17464643483162595048,5537730664460950829,524288 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,8257284780922724695,5549664848130935961,524288 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,15786788399714286915,16912769839386722840,524288 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,3482180609827605213,11320932669538984721,524288 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2936,i,7141131336021061465,13414764579077347765,524288 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:8
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5704,i,11035585488766070656,11219044027079558200,262144 --field-trial-handle=2188,i,7094036539087431489,10615983164907304606,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1272

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:496

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bd5dff6b6a2953b678276fe774acb1020dcf956eee918258c4fbcebd9799de50
MD5 ad9e9cc59d40b3c4a865c23e526c194b
SHA1 ec6e5c23153f46461256dc2ee3316df628e2eda9
SHA512 781d6d2d74c84caa1d22367f03cb2eef3a2125624c47277182248dc2b092992ad8756b1ea9759b2d56ee2b90c008cd691688382416e421209d33f546892f8550
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b23adf635243e8666462a57cf49cb7fa4b45e8c1755b4aefbcd0993cbfe09bdd
MD5 40d6817ebdb90f9e04a44c9161e231de
SHA1 eb9faa3bbb187bb142da3bbbe1f2982cd0a70794
SHA512 34aeda66b5d7b7f576754ae2a7e69eddb1035f3a959a3a2614fdcd9214cccc9cd9f619f370fc4f6821cac801ca5ce5ee3e8b2951ed0346bfb7d92f636cb2e047
TLSH
T15B711A584696499DD3503230EDEE1F5671318BC41F5B4E023F74D8BCA5257F789E28E4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bbd9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bbd9.TMP
Size 3KB
SHA256 c7c1b164f24ace9f4c023a4a6498b9d612605fcc3baff598e95f1435c2f4c3ac
MD5 e52b8621bc18b2885e4301ce90b9c8f8
SHA1 efb83e81e2f728a79342edc7de375a83194e39be
SHA512 0375a9bce96ed891d4e81dabc8fbdabda439bee5ae4e95c248969948cabeaa273282be2ad07d554c26c509eaf343a9a4dc35545b499f1d2fa63f082bf96a7991
TLSH
T180711A580A96099DD3513230EDEE1F5A71318BC41F9B8E023F7498BCA5257F789E28E4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 d1f2aedb51fd687302961d2206af6b5cc7068fd4c262f992d48b82cb20f76361
MD5 e0f1ad17073fa3a3e2a589cca67de251
SHA1 d72469fdbaa26df9bc914b8c0d1cd5e1a6b4388c
SHA512 ddb583b7a76a4a2e9ed6d75fe4c082ec4e72d80e0be24c75982bdd686734c148421c686e20e131d6c925ab82344c9aeeeaff2b6efcf6abb0ca1ace98925fc7af
TLSH
T157115BB3C3D5956E890516F05B24AE2BCE2D050682287D1989D4EF2B97E3469E00659B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9db09b1921a317be92148cfa531ff1ea4ca99794c384b62bf6411503e6c65c3e
MD5 96b1ca12dbb61a4d3ee25aa1c3980cd9
SHA1 b8f3ba1786ccfeaa9ac4499be6c2c97eef2c2253
SHA512 444d733c7112f0365d9740c4a79db07e26297aae7115fb9c28ef8c6785ba423c4bf95634a4c8d895ac4ba5bbd9e59472084040de99e874c07aa1436071931c27
SSDEEP 192:sxZ8R6yM/jK1Ml8Mkx/fgsw/B3Idpd8HW6+WNGYLziCqIgrJ:sxZ8oMx/fgsw/BYuHbGp9
TLSH
T17842E9116A34A977CCDBD20DFA55BF53D6F5047392500E58AAFC8A1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 bef91431b785a411490533a13f925b442f2259dc407ba4de0372d37227525b49
MD5 910239596be2cdcec5102e254157e3a0
SHA1 23d6211a8ee584185d5d942bcc5f842b4057ec93
SHA512 ddbafaa7784f5f1be2793155a5bdf47c29c0db28c4d72f8b8784621026663a7bb4f58d99eba87a147801afd7f14fcfe26f07771ce2e003f48dbb8ab0a4c2790e
SSDEEP 192:sxZ8R6yM/jK1Ml8UQxkx/fgsW/W3IdpH8HW6+WNGYL/R8qIg5+J:sxZ8oqCx/fgsW/WYcHbGm8
TLSH
T12252D7116A34A977CCDBD20DFA45BF53D6F5447392900E48AAFCCA1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 c017aace162750b6f8097725275c77866cb5f3f59dabb06451756978ca96a9b5
MD5 bf113db9716bba1c2244a7068010aba0
SHA1 ffc277b3b8bc91e9c9392cba23bd7a54f7a013dd
SHA512 e14c3c534f9ef39ca6bffd6ad303f816f23c12ab6986e4aceb782c7c9e0ab7d239fda725442c3f6c83855aef263a4d80a6019cc1abf6bb97160ca1eecf7c8b0e
SSDEEP 768:8Gs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNnroUM:8Gs6pD1WvxzWju1jahILIsN0UM
TLSH
T121D2EA3B680CCB7E4F841E5CEC2AAF967DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 8bcd111d66034f6dc3e96671eb87606f12dc426ace4d08fffb2abe7fefb924ad
MD5 44b22abffa0675fe03c2093818203a62
SHA1 e3a936943b7ae28855ae92409d3a21f0043f563b
SHA512 b0597266a48609f208f841a0f492020154ca97e79d39f5f31312882bbd10874e8ddd3573beb552c11fe00336082286fb81215ab5cf0d7309ac480f315f03fb20
SSDEEP 96:KUAAKtePe9OKW06aMgKtS6ioK3K+qKcKD6LgNcg6Z:iiRlHWr30
TLSH
T11EE1480231BF06123DBE6B189255877B4B92B563301DA42B7BE941714E6AE380DFCDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595615.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595615.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 eee66b3cefda9c428d3709bababa3ffada12e30725253b1040223b0e642ea77e
MD5 bd25902f0793d4f0a0a024b318ac7941
SHA1 d4cbc3f323ac66aecfc8e1efd27251fbbf7c216c
SHA512 0f26d80c0f6baf6c6e75d90d9e3d5213c50ace77d58893a35503811211ea5b456c6af9536d3460227ad714c61f1b1444d97f6a1b8b9221af89afade7178bbdd6
SSDEEP 192:u3m+xasuheOwQxMGsNeiQY37+3ve+QmiU1cCe4atb0sO2b/H5EjLMIq9Gt4/tyAN:9ZcIhsNei7EJhBa9xOsHekWiv24o4
TLSH
T11D828E312C786C761CB2D185FA8B2A179F79406BDACA6E40C4DD9F2D01DB6AC230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 058a3ec3a4b910fb7e50052a6b06e512b3e80cfb7c548b2a20e503c697541d81
MD5 902f7798be379cd8b33d82a097493fe2
SHA1 606ac1ce2ec9c70b9bbf0b61a516132024aae31a
SHA512 9f710a90c2afebba57f0ea623244bdbc9c60a283c7753ab538c2be9c46f06e5d7d7c3b62183aadf4053852eda1ba5d0a5d2d5cc2ad621d866cbaae3dc0fe55d4
SSDEEP 192:qONQ6O7+3hQmiUyq+Gttb0sO2b/WgGLrU6:qONQ61IGt9xOsIvU6
TLSH
T1C402F83578386CB78EB2AD45FA8727279FA5117BE9962F40D6E81E0C00D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 db4678f0b475b61a7385a3987ae16d0aa345cd60e7b2eb563601f86aa26fc674
MD5 2115c755c6ca95fc7d86ec7f670200f4
SHA1 5f7a666ba124c0f4c7594281971809ce15597a1f
SHA512 9fae48eacdef3bf2f2300e1075b34bfbbab03a958c31565da5b44cda09542912b858300bc594e47db882db09495fc20517e94a36208bd0ce9f524cf004d3f146
SSDEEP 384:qiFiZcIDsNu8TUNTUlIll7EJhBa9xOsHexWiv24o4:hFQDrwguUrOqexWidP
TLSH
T167A27D321C689C7B6DB6D785FA8A26078FB500B7C9CAAE50E2DD9E1D00DB1DC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7fb6af03805039edc4282ffded72fdc2365855ac9ad7159ff7e1241f7cdcb1c7
MD5 89ad1a5ca01c6ed064fe4026d8e24993
SHA1 f8c535c31b35600396f6405d78b7519a1de6f20f
SHA512 aa41cb1f3293c116097a85e017b1b25b5b62d6b6ac37fbd5906e2f711e0e06c110434491453177491c589afe00701731c4059ee0aaed61553436d7e5bd36d648
SSDEEP 192:ugm+xasuheOwQxMGsNelQY37+3ve+QmiU1cCe4atb0sO2b/H5EjLMIq9Gt4/tyAN:eZcIhsNel7EJhBa9xOsHekWiv24o4
TLSH
T1C5828E712C786C761CF2D185FA8B2A179F79406BDACA6E40C4ED9F1D01DB6AC230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a73b8958bff2199342fd4a4601ffe13357e82962e4e44c92c30f7b06dd2bacfe
MD5 faa38e33c8585b44d793bc54fc7fa7da
SHA1 eb3915a9bd24b352eab828d07ef9a83dd78217e4
SHA512 4836d5ec0e8e821a7b3fe13131c658413602dfc73aba14444e1235610442c0a1af15615b9433b388ebdb543eb5ad44fa582faf27686c5208e00a53f3c4a69cc4
SSDEEP 192:LONv6O7+3rQmiUyX+zttb0sO2b/H5ERcNIq9GU6:LONv6Dbzt9xOsHeWWU6
TLSH
T15B122A3678687C775EE2A585FA8736178E75016BE9462F80D5DC2E0C01EF5AC234BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

363af2db-6249-42f2-809b-754ae853bb17.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\363af2db-6249-42f2-809b-754ae853bb17.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 20bf5a05b857d89f0d5dbca08a6ab032b440510da2a0c5531badeca5601e254d
MD5 dea51ec04ce06d0b89aae4f0f60e3a4b
SHA1 701c6652ae8194a08224e964e9f3cdf50afebe41
SHA512 f2b6bb038736bedc0c1560918b3c37c2b71dca92cc486bd655a319f821e3bcd9af0485c463cd826a1406a69f476f1fef1d2ade7ea82d3260b05091cabdfca3c6
TLSH
T1BA413D58A6F91148B3B77E1A9BF6A86E587FB9772F06D45D00110D8F0A63E40CC62737
MD5 SHA1 SHA512 TLSH

Submit Download