a683de33a700d9b4989416e1cd394169154574e83773e009a71daf9dd8e1ab96

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 23:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 14.5MB
Sample260930-3enyfswfpg
SHA256 a683de33a700d9b4989416e1cd394169154574e83773e009a71daf9dd8e1ab96
MD5 b5e57572cfb5efa08f55f46772a42ded
SHA1 51db84dada057af72e2fb8acca3ee4436e4bd3ed
SHA512 288bcbf48f928866a0d2910fe57cfbc040f23b533bbdf4ef6fa43631edf6035d689ea41643b3afe833cb7476ecb2fbb932f137f3734df8462898c4837f6096eb
SSDEEP 24576:6eBHJjZ6vobjZ6Mt3jK6DCHwR2auHxKjr61jK6yjr6gjK6ajK6XjK6QjR6pjr61J:6er8aeUSn8mMRx5
TLSH
T184E6A42F7B48037306C642A2AB8B65CAF31E903F3B561654345CD1681F6BA2583FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4040	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{7AD20C0D-1A77-40F4-96FA-CD0344902E18}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4684	msedge.exe
4684	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1148 wrote to memory of 2900	1148	msedge.exe	88
PID 1148 wrote to memory of 4040	1148	msedge.exe	90
PID 1148 wrote to memory of 3356	1148	msedge.exe	91
PID 1148 wrote to memory of 3356	1148	msedge.exe	91
PID 1148 wrote to memory of 3356	1148	msedge.exe	91
PID 1148 wrote to memory of 3608	1148	msedge.exe	93
PID 1148 wrote to memory of 3608	1148	msedge.exe	93
PID 1148 wrote to memory of 4800	1148	msedge.exe	94
PID 1148 wrote to memory of 3712	1148	msedge.exe	95
PID 1148 wrote to memory of 4800	1148	msedge.exe	94
PID 1148 wrote to memory of 4800	1148	msedge.exe	94
PID 1148 wrote to memory of 3712	1148	msedge.exe	95
PID 1148 wrote to memory of 3712	1148	msedge.exe	95
PID 1148 wrote to memory of 4008	1148	msedge.exe	96
PID 1148 wrote to memory of 3384	1148	msedge.exe	97
PID 1148 wrote to memory of 4008	1148	msedge.exe	96
PID 1148 wrote to memory of 4008	1148	msedge.exe	96
PID 1148 wrote to memory of 3384	1148	msedge.exe	97
PID 1148 wrote to memory of 3384	1148	msedge.exe	97
PID 1148 wrote to memory of 5068	1148	msedge.exe	102
PID 1148 wrote to memory of 5068	1148	msedge.exe	102
PID 1148 wrote to memory of 1680	1148	msedge.exe	103
PID 1148 wrote to memory of 1680	1148	msedge.exe	103
PID 1148 wrote to memory of 4436	1148	msedge.exe	106
PID 1148 wrote to memory of 3864	1148	msedge.exe	111
PID 1148 wrote to memory of 4944	1148	msedge.exe	112
PID 1148 wrote to memory of 3496	1148	msedge.exe	113
PID 1148 wrote to memory of 1112	1148	msedge.exe	121
PID 1148 wrote to memory of 1112	1148	msedge.exe	121
PID 1148 wrote to memory of 4684	1148	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff95367c188,0x7ff95367c194,0x7ff95367c1a0
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,12655873484029431124,13428168382465368921,524288 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,11805789067553507942,3998051427468689359,262144 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=276,i,18059248119388991245,4305945568822348610,524288 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:8
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,15597682178726776437,7349825016260460563,2097152 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,5171077425194259795,5986480212379440769,2097152 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,10746175887256837710,16125302468337826362,2097152 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,10429424158141760928,11081298989363568123,2097152 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:2
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3560,i,4804082583092366287,10489582894327549596,524288 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3464,i,17101825150139468854,3187362691231793398,524288 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,3007482346205872221,9349304771790863047,524288 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,3007482346205872221,9349304771790863047,524288 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,882980015229577163,108722683199096034,524288 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,9327337088918537507,1555352445390224504,524288 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,4388993350715169589,12868729345735926749,524288 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,7233426359441510811,9255630377617994379,524288 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6196,i,15602680240888775722,11756410459232105997,262144 --field-trial-handle=2220,i,537427585653691356,7205091498061934931,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4684

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:220

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

386368fb-3d04-4f1e-a68a-ea7edcfd86e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\386368fb-3d04-4f1e-a68a-ea7edcfd86e1.tmp
Size 27KB
SHA256 99b15e058904fc80776523167d6fed23bc9a32008175a029360f5ffb36e5e2e2
MD5 3c5774466a0ffb57fdfd75cafe14ff77
SHA1 1352ec86945871e281623b08dd918457075e4aaa
SHA512 7f048b7c944fb701b4aaa05a8749dcf354f4bccb07bd92f67e3c16e65c397c9152444c317bb28892d8811f0300d1da3c13ba5fff954de6285964a97c5370d928
SSDEEP 768:/3Klm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/8roJdL:/3Klm7QWvUYe0u1ja8/L/E/nJd
TLSH
T170C2FB3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512B4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 a77980bc8be6fcd38aff00c2cf42ffe0ea712369ae6f43671f16cc9b36a8f7b1
MD5 fb2b1bb4af58a4594c7c4e8aefe72150
SHA1 49228ce98c7af73d0a6b2f5fee67e379bf7b3d10
SHA512 b555c50953f000b5292a600dc7616437a677bdf034020b9a67872bd739ca6bcd5969ac2e084fcaa5448b2f05dc77252fca4929054dff4972eea73772e5ff732c
TLSH
T1CE51FA8658638BD4FBED61FC8DD211CF373CAD8096830E72A196DE797827795B12C051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5949e0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5949e0.TMP
Size 2KB
SHA256 98406a206e2b99b24b6085989e0992bc9dad795d348a2decc05405620aa5abc4
MD5 3bef08c1762876548ba802a9499193f8
SHA1 3092f6284195779868345b34f0735323ac951f14
SHA512 a760e9d6ba3db4fb9047c4ee7530d27732205bcd21b51617477a8f6c94bf407b0496998976bbb20140c80635f370dce3469f98612f6b05ec25b0cacd58ce8e50
TLSH
T10251D68658A38BD4FBED61FC8DD212CF3B3CAD8086830E72A195DE797827794B12C050
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 2dd10785b3a61c33f19e0b0d810c03367c664eab8b5a44207667cf8534377902
MD5 6d8134472e91cd34e489fda88c674c91
SHA1 50ce4804843e8e77f9aec542fb14546fa95e9768
SHA512 71cb787652744d8ceccd04ceea3665f78aa24fc97015c37e3a2cb482f765865c79c0d7ee7d967ac3cd3121f3ed56b97c253b9f21ee2c9c24c61bbcfb1e74f481
TLSH
T1E4117AB3C3D585AEC94156F05A24AF2BCE2D0606422C7C1A99D4EF2B97E3075E00259B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 22955f8ef7056726a947301cd5aecbcb213c7d8e1d813a7641fc660e2b171ffd
MD5 22ce5aae3a8dafdda7a4ec2994551300
SHA1 8814cf841e9a3d5db35548ac39fc15ed719ecabc
SHA512 5a0084f44821795aba8fb734f8142f980d66c053e591419d732eacba92fc9be003c252423667a3c2cc8d9e51d6989e3a383f50e6306277cabed433c2b727aa8e
SSDEEP 192:sxZCRRWq/f/sLDKIdpdZHW6+WNGY36aM/Ig5YJ:sxZCeq/f/sLDDbHbGXpi
TLSH
T1AB22C8126E38B97B8CCBD21DBA15BF53E6FA503255D41E48AAFC861C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 7c297bd4d888571a36c853c3dd4874243b50c4e32037e122ff347cb9e6b18608
MD5 4d343760c75a76e4a8fbca9fdabbda14
SHA1 ecbd0e8758ba0fa2f50e4fdfab8237f3bd74b4e8
SHA512 9fddec46671f0d658aa17cc5feb8740eb9d48fe8c990b24b1ca7f57f4ea31ad4f0f984a7d477cf56f3c530e7de7d6c00a1dde5c02ff31f7681b68df80e510695
SSDEEP 192:sxZCRRWq/f/sODKIdpdZHW6+WNGY36aM/IgrJ:sxZCeq/f/sODDbHbGXp9
TLSH
T18322C7126E38B97B8CCBD21DBA25BF53E6FA103255D51E48AAFC861C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6a4454077742a80850511f9e34aef757e80f6b989b92938995e63cc1536c46ed
MD5 595c41824f321ef910f94538078e7c13
SHA1 b03cf2ecbca8d62b52d65ad36be5936f61cf3f18
SHA512 89f05eba7626a18269422c2bca2baa66910176363acf529057acc2a11f2665e5fbbb8e02049598ebaf8e2f98822498199df125f1fed8595168cb6e590f4727e7
SSDEEP 192:sxZCRRWq/f/sLMKIdpHZHW6+WNGY36tM/Ig56J:sxZCeq/f/sLMD5HbGXMg
TLSH
T17A22D8126E78B97B8CCBD21DBA15BF53E6FA503255901E48AAFC861C05E77CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 52c78ee58214c71d7fc6b7fc98c2761f9dc29d1fde98d61a06d67916ef6f391d
MD5 c851a0c518b78ccdb775186da1c034a6
SHA1 a68a5a9160c80ed4eb5fe61c8b05422410f764f6
SHA512 679abe9b629137ff04a40087a60264928b2251810b584b7b9edc867d3371c0ce14eb3cb3a832db5faec2f5484aa0c4c7a2b3f9604877a47c57975742155530ac
SSDEEP 192:sxZCRRWq/f/sLMKIdpdZHW6+WNGY36kM/Ig56J:sxZCeq/f/sLMDbHbGXrg
TLSH
T16222D7126E38B97B8CCBD20DBA15BF53E6FA503255951E48AAFC861C05E77CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5491005f-7200-4271-8002-03eed0d5f092.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5491005f-7200-4271-8002-03eed0d5f092.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e2f1d627e12c8c2e6a2ef858c1de9ef02bd71b0094dff5e22d28da75b024960b
MD5 b0e54a51c9b6b9573599ed4491d80711
SHA1 6ede02153cee9d50929838f28deb38b6ea33ec9b
SHA512 a65b5b73f79d518fb06f662479745869d518f09be07d2517d27daeaeddb49affd4822a036c50ed166640d6e3ec74f73a37837d9fd23d1d537e0f4a9e4fc75322
SSDEEP 384:0ZcIhsNp7+DjibQbch//F+oVS7VZh6DKhHkog:yhv7w/txQ7fYGHkv
TLSH
T100827D36ACBCAC765DF7E681F4433A034EB880679BC95A98D1DDAB1D01DA2A81307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 3613bbbdde284fbbc5e46c6ceecbe0b44996cc01142d71d1655e7d7eab00da93
MD5 87089b3856dda7681f13a09a78f25203
SHA1 3e27afaa9f1c08b2a747c12918981715024aac93
SHA512 dffaa1d5b847999429f56ab11f2db742407f0d067a4e622479b2cc469fc4a50a41b01619a4094374a23ec04e64121b28bcca5d52c0bad0a0b94b4c0441d19cab
SSDEEP 384:FiFiZcIszsNL8TUNTUlIlY+DjibQbch//F+oV67VZh6DKhHkog:MFQQqwg17w/txc7fYGHkv
TLSH
T1FFA27D339CA8EC7BADF79B85F44636038EB480A7CAC5AA94D2DD9A1D01DB1DC1307D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4fe0cb4dd0ff44fea0ac0f119bc8ecb994db66829df2164925a2e48cbf95776d
MD5 7c0dbe9fa497aba827b709738f97abfb
SHA1 f36a8caca89994d00667bb68c59976b82bc43016
SHA512 8d6d5259c65fd1044707ec2508d9255f79a0aa3fb560c14b79555791c3f5a77d45e48f81a5f7e4e5e1105017ffd7d2744e6f1b3fdda6ce409e95f4246b470683
SSDEEP 96:KqONkhQsjpfbUmjH5ih/cIPURHl8h4otop5laDFBKP4v+Y1xf//ojdAxXRtIorOe:BONp6JUm0QmiUym7so//F+o6BCe0U6
TLSH
T11102D839BC787CBB8EF3AE45B04777239FA4106BAA915F94DAD81E1C01D725C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fb18aa0ab8db65715c6fa1a4ca7fe2134793f077ec9a64b626751d1e3e4fd951
MD5 a09ac4da31d9a0c051c4417da849bc41
SHA1 b7c791afb719a9fe93a28ac0384e076eb02d4250
SHA512 519c1d81b85180df3f9ee961c882859eb3d3f3c44f9e617a379a5adb76e73ff474b386ddeaa6781c1f29e1987a0bf49be4010672d6d25c114f45cd1a7c6afb35
SSDEEP 384:eZcIhsNpY+DjibQbch//F+oVS7VZh6DKhHkog:chu7w/txQ7fYGHkv
TLSH
T11D827D32ACBCAC765DF7E681F4433A034EB880679BC95E94D1DDAB1D01DB2A81307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 42211b52adf0ec8c8a2250d86d3811ce6e5d9c78458a6a78b6041b5816b97393
MD5 9307a270ee7d7003395b2bdbe0983243
SHA1 749bf235b9b36145a53cdd61398c58fe702f01b2
SHA512 6e4a0fa0bd21b508721a847e2141460b6b1bffc87cf684ef2be321084ebf6e88f461599f6abf7c24d17f81e7b52dbf459a49897bd25233a3b33e8c0ae1674940
SSDEEP 96:KqONkgQsjpfbUpH5ih/cIPURHl8h4otop5l4DFBqP4v+Y1xf//ojdAxXRtIorexJ:BON06JUaQmiUyY7Mo//F+oV4tNxyqLU6
TLSH
T11C120835ACB8AC7B5DD3AA91F04736238EA48167DBC56F94D5DC2A2C05DF26C230BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1419bd07acf0e73792cc64d55183c0a3ec02537417264c3f84cb8e939b6380c5
MD5 30c7045283051f3e3bacc190247cb400
SHA1 b00ca5bcc8eb31f026a291eae5d36ca42495d744
SHA512 65ce4354b60b58d994d1472faddfd17d6e2c9118e71eebd43c2978b1b3755de9b4f619457b294e8c09efe966fc3a0f71672d7fb0cf5be1faa54308f5d5568347
TLSH
T164411A58A7EE1118B7B36E59ABF6A86D487FB9372F4AD45D00110D8F0A62F40C861737
MD5 SHA1 SHA512 TLSH

Submit Download