bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d

Analysis

max time kernel
148s
max time network
168s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/09/2026, 13:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 7.9MB
Sample260903-qpl6dstyhx
SHA256 bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d
MD5 0e3e4362f785aff0b9e1852b1064c0f1
SHA1 a42ccb51e72bdcb5bb905a62efaa28857def3a17
SHA512 193b57efc5f5971fbd9e4ea1a80b34aadcc2a814ff49c4c06afe972bf327e98ff0498217a8bdef984b10fdec6e7858a6fb88c0b14936e0c6b404387a426b87f2
SSDEEP 24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i
TLSH
T1A786942F7B48037706C60262AB8BA5CBF21F903F3B561654345CD1681F6BA2583FB6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5796	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134329158332414386"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{85E12137-A503-49DF-9BA2-933A6159FDF5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4464	msedge.exe
4464	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 1988 wrote to memory of 2320	1988	msedge.exe	88
PID 1988 wrote to memory of 5796	1988	msedge.exe	90
PID 1988 wrote to memory of 4204	1988	msedge.exe	93
PID 1988 wrote to memory of 5868	1988	msedge.exe	92
PID 1988 wrote to memory of 2224	1988	msedge.exe	91
PID 1988 wrote to memory of 4204	1988	msedge.exe	93
PID 1988 wrote to memory of 4204	1988	msedge.exe	93
PID 1988 wrote to memory of 5868	1988	msedge.exe	92
PID 1988 wrote to memory of 5868	1988	msedge.exe	92
PID 1988 wrote to memory of 2224	1988	msedge.exe	91
PID 1988 wrote to memory of 2988	1988	msedge.exe	94
PID 1988 wrote to memory of 2988	1988	msedge.exe	94
PID 1988 wrote to memory of 2988	1988	msedge.exe	94
PID 1988 wrote to memory of 5908	1988	msedge.exe	95
PID 1988 wrote to memory of 5908	1988	msedge.exe	95
PID 1988 wrote to memory of 5908	1988	msedge.exe	95
PID 1988 wrote to memory of 4748	1988	msedge.exe	96
PID 1988 wrote to memory of 4748	1988	msedge.exe	96
PID 1988 wrote to memory of 4748	1988	msedge.exe	96
PID 1988 wrote to memory of 1268	1988	msedge.exe	98
PID 1988 wrote to memory of 1116	1988	msedge.exe	99
PID 1988 wrote to memory of 1268	1988	msedge.exe	98
PID 1988 wrote to memory of 1116	1988	msedge.exe	99
PID 1988 wrote to memory of 2920	1988	msedge.exe	101
PID 1988 wrote to memory of 4648	1988	msedge.exe	105
PID 1988 wrote to memory of 5804	1988	msedge.exe	106
PID 1988 wrote to memory of 3932	1988	msedge.exe	107
PID 1988 wrote to memory of 3460	1988	msedge.exe	108
PID 1988 wrote to memory of 3460	1988	msedge.exe	108
PID 1988 wrote to memory of 2428	1988	msedge.exe	109
PID 1988 wrote to memory of 2428	1988	msedge.exe	109
PID 1988 wrote to memory of 5864	1988	msedge.exe	111
PID 1988 wrote to memory of 5864	1988	msedge.exe	111
PID 1988 wrote to memory of 4464	1988	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7fff9614c188,0x7fff9614c194,0x7fff9614c1a0
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,11851554752744923963,1455516858737587812,524288 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=3328 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2132,i,13520132624993657211,16236584362341432670,524288 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=3052 /prefetch:13
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,11653884113898079258,15726185055268160025,2097152 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,14785802262444443142,10753933632858358336,2097152 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,508914040033583457,14345604054441871059,262144 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:2
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4392,i,6980236860516218190,8896952001149376288,2097152 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:1
  2⤵
  PID:5908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4396,i,7542257862956329635,17130983732035231612,2097152 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:9
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,5600117365363866573,10895823937480847744,524288 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,15486246090244795753,2868594838665906467,524288 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,15203152550599400296,7563437049246791030,524288 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,15203152550599400296,7563437049246791030,524288 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,7721923751029201040,17072093283959535075,524288 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:14
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6684,i,13273096624284577672,1539006731215344909,524288 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:14
  2⤵
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,15568306344562386712,13254452899243479472,524288 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:14
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,11118043720341140859,15289670067742318404,524288 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=1864 /prefetch:14
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,11001747057388599041,16466400247258067334,524288 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:14
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,10505172215296382196,6221764770190037450,524288 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5424,i,18049669719966392276,8855647534059301306,262144 --field-trial-handle=2708,i,12024662446291999624,7105553572219050989,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4464

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3460

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6092

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 79279b5d9c6eb56b8e33670eb2077487e572dee50733ca6d8717ae2b0aeeb549
MD5 48aa20acbd2baa32c67ed819fe16437b
SHA1 9b130706f73eff66eeae0edb2c6fcdbe309da83d
SHA512 555a58d5c71286f2e97cea8078018541cd7410e90f0225c50f0b03265501eee0b9c0aa0efbed464fe31c073441324a430e41138df9a2aef5c566596dee131886
TLSH
T166E020D918C5C71D5204A54B516C674C83C13F0B92CCEF0E3700C8C5795355467835A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6330721188941fdd7981f1e5505f20940ffda890c4cf61afd43fceb66b79a03b
MD5 520083ee316345adedbc75390c3351a7
SHA1 c92d6c7de9f318541108d61181207f7e20b96907
SHA512 06530832062da29ddce72c919c4c703e65e5f6fd15c81734ced603c9698d39628de65266a42d750af4504c5639ae1db68ee5495d567f2eea9a3f42e75d1f3641
TLSH
T1CA615F15332E16C3D724B8B265FB969837FCC8B792CFEE6065006E764A06F17A5E1413
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1cef.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a1cef.TMP
Size 3KB
SHA256 6d27183c77313cbc9021330472053cb70e2c24ee47f8c93d236b2e8f1078b3b6
MD5 052d3f515c70f0428cc34d5fcd83ec83
SHA1 2db92e834538dcd5c4f0f8d27a73b50cf6d8614c
SHA512 bebba552676487b550c51c6704c794e3d056b9bdf1b39febbc07c83050092d1680fb98994052d3b8cce71c5cc2abcc5926cc7eacd5a6a4db2cd496ac1a5a676d
TLSH
T1B0615E15332E16C3D72478B265FB968837FDC8B792CFEE6065106E764A06F16A4E1013
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 eb8773a0db7a18a64b2423b726971fcc24fba09a99a58db834bf3de8ad6206a9
MD5 8db6a2511edf3b42c4d53ef42c6b48b6
SHA1 56709073ad7aa8115f3936d4007d89d99a0733a2
SHA512 ea67faa7ff384ade4553de5a13d2c2f0b1b356272157b3ee6b2ab2212f37fa50047177bb5e831bff738f0883e60749085101943e522b820b22378a9843ee9d49
TLSH
T15331C2F783B4957E8A1186F0EA14AE2FCE2D0515432C7C6585E4AE27D3F3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4fbf185adfcc8c1f2d5fa8ac8d594f66917dfbbcd87fe23b60dffd9ebf9a34de
MD5 26282632d2319b65596a60c284b9ffa7
SHA1 351987e2d6074f69acd251d53918476b4b78cb76
SHA512 fd66ae01f27d5931cb1ee960ff565d324fd95388aa36b9a115c3094ea0c2701d7663ee5128e80f0724a64d342758e85a0f1f366dc34325786522126cc789a382
SSDEEP 192:sxRjR/bY/fTsmp3AtyzoA8p4y/g6+WNIYZFLKVZG+IgDrJ:sxRjJY/fTsmpaL/5ISWR
TLSH
T11C32C8167928A93B8CC7D21DFB55BF53D6F95032A1D02E48A6FC871C14EB6DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3071e9ca1b629864702932eb3f8f517d0a2cc32136adcc12ba2b5a3219ceeb14
MD5 7ee80ee866adb50478eb51551e001138
SHA1 fb8385edab3ec2bea9f19848fc967df2703e1eef
SHA512 1fff8ccf36565394558387a3b367c20fc0c0cab1eb25a876e74d98117f2ce18eebb2cd8c80ac107961d14089ccc9a8aca3d77260301e75c0d5491a5e5f428bf5
SSDEEP 192:sxRjR/bY/fTsma3AtyzoA8p4y/g6+WNIYZFL6VZG+IgD9J:sxRjJY/fTsmaaL/5ISI7
TLSH
T13A42B8167928A93B9CC7D21DFB55BF53D6F95032A1902F48A6FC871C14E76DE220B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8ed0f08ac073becbdc501d7a6102f5a8abe2a6d9765236cd76d74345cb9c2cb4
MD5 264f861d666ad4ce0e638991bdf84ed1
SHA1 c162cff430dfe75457317808f8e615980e33a58a
SHA512 029fb1750ea19d09ff6bcc0c65af05f6100134cee6b1d005ce2e15514d4ed051307de1b7b34f9dba5432766d4b02c11d175460e70f81394f72cc9cd113577930
SSDEEP 192:sxRAR/bY/fTsBp3AtyzoA8p4y/g6+WNIYZFLKVZG+IgIJ:sxRAJY/fTsBpaL/5ISWs
TLSH
T1CE32B8166928A93B9CC7D21DFB59BF53D6F95032A1D02E48A6FC871C14EB6DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 72efd81fddb65e3ed3afd3ea51bcaed95d76720a1f53b6efbc18d2a1c78cef09
MD5 febd62f39da1413e151a8ad1ce563d6b
SHA1 92ad8887d26c4ed6a5c0522c5c13bdd70f4000f1
SHA512 c9b87bd2af136689b9ea4dedb393c9791ebdb3194ad8dde32d21b9b4e7ce238d7017d3e328a19e06c2749b6e6c5f6661a313fa18d3148aed8bfeec0550ace282
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGnrocm5:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0Vi
TLSH
T178B2CA3B640DCB7E5F800A9DAC196FD77DA802C7A6988D4047FE994C02C77EA911A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

06e90089-b0f6-464c-a3f7-1b06d4a483b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\06e90089-b0f6-464c-a3f7-1b06d4a483b5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 67345ee176ef20e1aa140a0519a188eb09ff340fcc4948748cb8dbdddef0c732
MD5 4f400b23309662730f9f78790a205a89
SHA1 2d35646f9498f6e15bfdd62ff54118f4cec003ac
SHA512 cc6a9a993532ac2599ce925fa8c697ee69c19d60da757c2044a33acf3a9829523fec0df50b4a97a05c2d4ef99ffedcd46d9868e14727fe74a8d47ef37f98d732
SSDEEP 768:fa3pl+S+LeSFOUehxX4fouOToPvB2thtA9VAgdMgcx:fa3zBsnnwthttoMgcx
TLSH
T17BF2BF72A8A88C73DCD6D398720B72525FF0812395D42F889EDD6B1D048BA9E070FC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 53098cf548f5e84a989bac37a25be03805fc11f248b8d9c2e03fdab041db40b5
MD5 4b7e10fdcf036066238fc1aa19da91b9
SHA1 a5eca4ecf4105264aced7c55319194ac1ac67359
SHA512 b5879906bfaf4c651e29548a12d41fdc57710fc6f1cf6038bd3a35cc2f7992da1a020fe7ad30d8841defe9f5b8b37e7562e05647c914c971511c14dcce78d437
SSDEEP 768:jFQO3jwgFl+S+LeSFOUehQX4fouOToPvB2thtA9VAgdMgcx:GO3xGsnnwthttoMgcx
TLSH
T180F2AF73AD98C977DCAAC7D8B60A32129FF0816395D46B989BDD5B1D00876DE030FC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 ce3fb66005c97a1bdbdee8c1df566ced92a001f3eeed647fa7a7cd80961cf021
MD5 095bb938e405a11184d9358047b75d8f
SHA1 20d7a20c0cd59b343610c1dbd5e1ad6e1c2ce579
SHA512 62037be8d7626cf44c2c8c0823d22210eb702d2bbd3b6549c0f2362ceb1fc4a49bb8f70ef12dfb06c4f138f9acbe5723ebf403bde6cac53e2e36a7df2694a4ac
SSDEEP 768:/rv+4UNbdB35dc+S+LeSFOUehxX4fouOToPvB2thtA9VAgdeVH1Sl1:/bsbv3LcBsnnwthttoEH1i
TLSH
T19F13BE32A8A88933DDD6D298710B76532FF4912395D00FC89ADD5B4D068B9DE130FC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 998b19b5ee2e60b14f96f218ebe2b66107f38a5c549c485bbdd7fed7266a89d5
MD5 03a819d44a5031764b1b8569a4ef16f5
SHA1 1bf688dff055b9ce510caf90c4fce00f689011ca
SHA512 a00e756aed4663857a91fdaa383301f9fef116d568ca9117e7662f35dfb0943ca2fcf83a673f81c34f0293c7d59acb12201c15a8bc7f6d474cb95e60dbf0a639
SSDEEP 768:rrv+4UNbdH3WsQ+LeSFOUehcX4fouOToPvB2thtA9VABdeVH1SlX:rbsbh3WqsnnwthttjEH1Y
TLSH
T1BA03BE72A4A88933EDD6D398710B75432FF4916396D00FC49ADE2B4D069B9DE430FC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 09cf2e3306b8b3680fc2cef80753a7db5ef8f1c0ce82f74340e08b36a04eed28
MD5 464d6fbab4134c533235f9d8b3e56ccd
SHA1 764d77d24610f0a535b8b5f342d02273602a6297
SHA512 6a0656fbfca82a9756f92680541878e12f8f6801c8c64a59d210a4b9d32ac7a18d06028d55f5aac57234cff795e4502110406702f55d745b3377a7cf18e41fe7
SSDEEP 768:grv+4UNbdH30l+LeSFOUehvX4fouOToPvB2thtA9VAwueVH1SlX:gbsbh3+snnwthttbEH1Y
TLSH
T1E603BF32A4A88A33DDE6D398720B72533FF4916396900FC49DDD1B4D069B9DE070BD6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

045f8acc-160e-4881-ba4e-68d479cc5d26.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\045f8acc-160e-4881-ba4e-68d479cc5d26.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download