bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d

Analysis

max time kernel
149s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/08/2026, 23:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 7.9MB
Sample260830-3m3ftatzhs
SHA256 bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d
MD5 0e3e4362f785aff0b9e1852b1064c0f1
SHA1 a42ccb51e72bdcb5bb905a62efaa28857def3a17
SHA512 193b57efc5f5971fbd9e4ea1a80b34aadcc2a814ff49c4c06afe972bf327e98ff0498217a8bdef984b10fdec6e7858a6fb88c0b14936e0c6b404387a426b87f2
SSDEEP 24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i
TLSH
T1A786942F7B48037706C60262AB8BA5CBF21F903F3B561654345CD1681F6BA2583FB6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
976	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134326071329677162"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{D562BE88-82F3-4448-A874-A28DF8C63568}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3840	msedge.exe
3840	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4372 wrote to memory of 2052	4372	msedge.exe	86
PID 4372 wrote to memory of 976	4372	msedge.exe	88
PID 4372 wrote to memory of 2580	4372	msedge.exe	89
PID 4372 wrote to memory of 2580	4372	msedge.exe	89
PID 4372 wrote to memory of 2580	4372	msedge.exe	89
PID 4372 wrote to memory of 2344	4372	msedge.exe	90
PID 4372 wrote to memory of 2344	4372	msedge.exe	90
PID 4372 wrote to memory of 3136	4372	msedge.exe	91
PID 4372 wrote to memory of 3136	4372	msedge.exe	91
PID 4372 wrote to memory of 3136	4372	msedge.exe	91
PID 4372 wrote to memory of 4820	4372	msedge.exe	92
PID 4372 wrote to memory of 4820	4372	msedge.exe	92
PID 4372 wrote to memory of 4820	4372	msedge.exe	92
PID 4372 wrote to memory of 452	4372	msedge.exe	94
PID 4372 wrote to memory of 452	4372	msedge.exe	94
PID 4372 wrote to memory of 452	4372	msedge.exe	94
PID 4372 wrote to memory of 3400	4372	msedge.exe	95
PID 4372 wrote to memory of 3400	4372	msedge.exe	95
PID 4372 wrote to memory of 3400	4372	msedge.exe	95
PID 4372 wrote to memory of 1028	4372	msedge.exe	101
PID 4372 wrote to memory of 3984	4372	msedge.exe	102
PID 4372 wrote to memory of 1028	4372	msedge.exe	101
PID 4372 wrote to memory of 3984	4372	msedge.exe	102
PID 4372 wrote to memory of 4480	4372	msedge.exe	104
PID 4372 wrote to memory of 1572	4372	msedge.exe	120
PID 4372 wrote to memory of 3796	4372	msedge.exe	121
PID 4372 wrote to memory of 4220	4372	msedge.exe	122
PID 4372 wrote to memory of 1768	4372	msedge.exe	123
PID 4372 wrote to memory of 1768	4372	msedge.exe	123
PID 4372 wrote to memory of 3716	4372	msedge.exe	126
PID 4372 wrote to memory of 3716	4372	msedge.exe	126
PID 4372 wrote to memory of 3840	4372	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffb53c3c188,0x7ffb53c3c194,0x7ffb53c3c1a0
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,10912759639632968810,2573442487133164537,524288 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,1035300842258622975,9661249610977567547,262144 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,163246357988843838,683860634982664838,524288 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:8
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,10164085042464533890,9377337709568371896,2097152 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,4126172974651399142,9591084125507810790,2097152 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,1115419923846646236,18280098429830557557,2097152 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,10006951285358442844,18038133749806315713,2097152 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,717304233055384369,8929406645485047764,524288 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,8276253907942435213,13910107584834127763,524288 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,11027302723964727709,16315130883723369632,524288 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,11027302723964727709,16315130883723369632,524288 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,1564570555262701812,2614927343991251888,524288 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,3209594313762780280,10034481785538281063,524288 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,17967116169750803308,6714093399928911217,524288 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,6618724226331856101,8050737980570290114,524288 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,13129599073941803817,4149999053926399820,524288 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:8
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6108,i,2840029445715818120,13726156969502180585,262144 --field-trial-handle=2284,i,16043860780594755348,11846340342062420862,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3840

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4616

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 afd7a3f5bb855e46499056e8878ac895b59448293dad23ec2268c7a8868760ee
MD5 e3dc0581c55313ad635985320e995f28
SHA1 7caf46af7d7dc10ebd4be94d70e8393751b990c2
SHA512 34105008785b906fa6accfadfe120c47e3deb702e2a6facf3c03ed4a6788d0274ff5a651c0b5768f46d2275c3497b1ca0e9d9d982529eebeda9ce254bcecc054
TLSH
T14D51B5380D118865D760CAF1A1F0E24F7B70FAF2F973DEEA545354326A1273143D6298
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59528b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59528b.TMP
Size 2KB
SHA256 4b707cb38e277bac18fb12ac70a6502020a6bf5b3830d923228f80749a7da14d
MD5 9bc3f67bd96d84301249530c8f4c01ab
SHA1 00316f10b6ea09d238c6da816b859ebcbd91c5ca
SHA512 34491746c99e6c58b09b9052d0fa6759de4bde2b3026464ac824049bc4a8fb437b6f0c8b1f71ccc17d368d74ca50d705d3f4ac7126a88c63b7aa6207b9a67dc6
TLSH
T14151A3380D018865E760CAF1A6F0E64F7B70FAF6F873DEEA545354366A1273183D6298
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 fd508434fdd60afb90cfe4039e01d6e7346fa75e1ef8b85dd6670e4cd73a2e3c
MD5 d2a5b15f77fd338bdb802e3c0140eace
SHA1 42e29597be91246e423fc0304f5f8abcc48c3396
SHA512 5c344ea6f70359a154e75e733b4b6aefd94df64a510e75617ea1e594314b47c0b02ea501e22bdb51ac7d64a4447cc47c8f4abf5b571a5dabde2b6783544e6951
TLSH
T17C117DB3C3D585AE890116F0AA24AE2BDE1D0506421C7D59C9D4EF2793F3075E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 1dec4c2dba842165fc9e47c6f48373ca84e6d2daa707ba21a2ddd3dda0122b30
MD5 c1cb091751e92f8450efe2f552dfe553
SHA1 2c62e1c1db1b9a86b02b2c64bbafb855a5dd3fdb
SHA512 5af2dee5dbe97576d2fe8e9275d2b27197ce3d01e099a932a2bf9bd25c4507e2366adc98691c40de05f6945b26642361b226925f5f295e16742275cf63b752fe
SSDEEP 192:sxZTR3yM/jK1Ml8Mkz/fIseSypQhIdpd1HW6+WNGY9IKrQtIgrJ:sxZTxMz/fIse1fXHbGh9
TLSH
T1FF42F8016A34A977CCDBD20DFA55BF53D6F9447292900E48AAFCCA1C04E6BED621781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b4446358e49d7b5daac0b70d1afa12c1409153450b1bf012191681bb7861558b
MD5 86418597a651a590e6975f42b6e4e9d6
SHA1 5316f21fd77057c70dba832edc4fb0a5656bd232
SHA512 59b7b9f5d84dbb99b12a0656aa708272fa7409d8cd45295dfc130b7819bcb0895f009ca9f876e3def1128b12063720103cbee2a9ba3a986f8da907850e7e3298
SSDEEP 192:sxZTR3yM/jK1Ml8UQkkz/fIslSupQhIdpH1HW6+WNGY9IFTcCQtIg5Q6J:sxZTxq/z/fIslVfVHbGdTev
TLSH
T10A52E816AA345977CCDBD20DFA41BF53D6F4547292900E48AAFCCA1C04E6BED621781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 f25459f25ad148aeb4e0095194b778df63433feef534487acb543bcb1f8b9a31
MD5 df534fab632e4ed53dbc733329bfd607
SHA1 ff6c4b657a7728287ecac51f05238de6f712bcad
SHA512 dc36fa9e954615079c145de6a6fdcf05a15423a1d8666f268dd6831dc555cac6c92fe1e5b87c2407b88c06ea129c61846d4ca53c7fec64e4d5e3dd0505be655e
SSDEEP 768:3gcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNoroig62:3gcv21wWvu+Z+u1jaeFLeRNTim
TLSH
T150D20A2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 1f9bf6e28c3c34aea6303e9b95043aa60e296cab8aee1caf8a07c2154402f8f2
MD5 d59c0c36e1f16a66a742eab12f6228a5
SHA1 b33737ed242e16f0219c614eda6c90e3e99e84b5
SHA512 cc37d824455400b1d4501059c4c9c8eed110d92ae390f011f28f8aab3cc8cbf0e8e6e0a6a780c8d2caea4f0c5c348f7ed25e89ec5adc38b0bfc670164a47a20b
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDygha+IOKb5azq/WbKni/kbTgYbyqomJCKn:mTdBJVnsi5GiM5
TLSH
T113B1E236723B1252397D6948A39586374E8132633814E5AF7BFD00A24EB7E216DFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 5ee6b4633e841b6f23f57a75758791dead679d295debc14ec2894463663cf717
MD5 0164307fea5d264c2dee1d3ce3e4c3b1
SHA1 b4a4dca07f5a6f0686b372ad2c05f4b0a2ff67ca
SHA512 f434c092dddbf86182d087149744424b3b6c00e37ec083415ca45aa6f515d157c2b0f00675f3c6d49e0c9fec33f76291a1243663d0d6d111954b0b8c6be15113
TLSH
T12C2123C0E3FE50D97E8AAA85D21D5423A4E13E6A150D98B6373D44F48F84C154E6ED39
MD5 SHA1 SHA512 TLSH

Submit Download

32649339-4681-45fe-8657-1628c6eaea3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\32649339-4681-45fe-8657-1628c6eaea3c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 db17a9ff6cad69cc19acb6c74376c57a11a9416ba1804b2a3e310e02cf8a527a
MD5 c850e133b864ef36db065ef14c5796ad
SHA1 7b6393ac8afd9d7bd65b3bc4c66cad36f159052e
SHA512 e6f9eb061bb96b1e5e53cd3df6bb0adba1e7692721a62d261ca21b28d20741d94833f61116a7a542f17744a70960e94a89fcea7daca6d8e54d7e43044892e153
SSDEEP 384:eZcIhsNkDGghi8zipFgAje+CLOztuZoet4/ZuTve2:ch7F8CTOztRe68
TLSH
T111827D71ADB46C7B09B6B544F84B35139EBC8073E6C5AF80D1D8AF1D02DB2A8131B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 b65f0d651ecc6ad84bb7a92485d832447ebb58c48eb739b0cb3beda850fddcfb
MD5 1008fbf3449ff5e93828376f32163240
SHA1 0a25f36e3b83cccf5baa478acded3a45b277aa8b
SHA512 05e733ebf2ea92b216c6bd30c8348fed844a8b7b1abffb753468e35629ce45be2f9b7a835dc9d920852f3de49c2a86a285c50a3d7662bf5fd2bda4803a2a9fa8
SSDEEP 384:1iFiZcILsNs8TUNTUlIl2Gghi8zipFgAje+CLOztue8et4/ZuTve2:8FQLtwgUF8CTOztye68
TLSH
T183A26C725DA49D7B5EB6AA44F84B32139EB840B7D5C1FE90E3C8AE1D019B2DC130BC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 bec62e2c251d111bcc88e963bdf7a4cf7eedec7b6686c7070ecaf1bdaba24b62
MD5 a324f428ec904e38a94b830391a03c01
SHA1 00df729dba34b281d17e53c99af0a1f56f9955e8
SHA512 2fe835eccd1f276f6c6f95a82955689f6d299c04c613bf68c6f890cc87d96cfdd0df87b86fcd09f986b60fcc048510a9eba183a455f76bcfc57e975db96e99ab
SSDEEP 384:VZcIhsNk2Gghi8zipFgAje+CLOztuZoet4/ZuTve2:thSF8CTOztRe68
TLSH
T1B6827D71ADB46C6B09F6B544F84B35139EBC8077E6C4AF80D1D8AF1D02DB2A8130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dcce6539c04bf2a20978a82bca591793a57d286a4c0189c4004bbc596dc234ed
MD5 37d3318d1ddec230f33856af99a855e8
SHA1 8172c85406bbde428c92be343ac2e7ce18464b3e
SHA512 ff1b52beb2d2292481ba6039e4e17d019e2fa029109e91f2b3eaccf27bb454c724eedeb1bfd11765a48268298d2368108a6d8727b522cb2810ec554d5b37d79c
SSDEEP 192:JONl6v+YLNQmiUyo9Zh+CGWOFmRMusWrU6:JONl6vz/fZh+CLORYU6
TLSH
T18402F9357D682C6B9FF2AE45F48737175FA8217BE6952F80DAD82A1C01D774C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1594a81bb4c9760031bc5fbc25c187beaf181574629fc5bda0c61f36fa995a8b
MD5 29272ac5fc18f80cefe5a833ee16b53c
SHA1 7e85bd74a62ed1302000cc09c850008e1aaa060c
SHA512 79c07f4f9a76f8d43c6b9d84cd71110b80c8461b3c96cbd3a97e627e6856d30b56e5230d528e9b90d4f36dfaab8bfcbd435965c4794a82342209d9a048a094e6
SSDEEP 192:CONd6v+YLMQmiUyeu9xh+CGWOFmRetuoCHEq8U6:CONd6vz4Boxh+CLOztuJeU6
TLSH
T1B5120A31BC786C6B5EE2A944F48736179EA85177EA857F80C5C83F1C02DF69C630A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8fa9a94ae45eb4ebf3dee0652e5d233d1681fced1abb2e584243f83bbf3b981a
MD5 fd5231fad8f75e7af11a117747a41744
SHA1 6ecccfb77a0d18bd5556e7a4536959c07f7915a7
SHA512 9f9bc04fe02f0161f5f91477ca2eb7c02a689ad8591511e23835f12e093ed7e805e41774b5bbedfe82c39fc5e6b28845f391ce6d678e96e3b55f96474ba3a21a
TLSH
T1DF410958B6F92148B3B76E1AABF6A86D447B78732F06D59D10110E5E0B72B40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download