7b328b8c7463ac9bfc7dc648c751533517c8441a0b5b21047d6c0b2620e60d70

Analysis

max time kernel
148s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 23:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 19.5MB
Sample260930-3ymjqsxtcv
SHA256 7b328b8c7463ac9bfc7dc648c751533517c8441a0b5b21047d6c0b2620e60d70
MD5 142cea93256b2b7824b854c62af026e6
SHA1 265c66c606344122b35f20c68086890017a75505
SHA512 82c7f1c6f17ba0af42ad552062db614bca8cbb6c317a456d15c6199f11b031decf2c0816770b0004326830899264a5640796d1333c524979f9dfcf64d7b57fee
SSDEEP 49152:ZehWCrdOOoVo5TYp2xnuCQpc3txsJM+QAFId+wi4WMEAccr:y
TLSH
T16E27B46BBB49037316F242626B47A5CAF31EA13F375A1654309CC1182B7BD2483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3320	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{50B11685-4F57-460A-A451-5F7E49DFA36C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4016	msedge.exe
4016	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe
3120	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3120 wrote to memory of 1704	3120	msedge.exe	87
PID 3120 wrote to memory of 3320	3120	msedge.exe	88
PID 3120 wrote to memory of 2508	3120	msedge.exe	89
PID 3120 wrote to memory of 2508	3120	msedge.exe	89
PID 3120 wrote to memory of 2508	3120	msedge.exe	89
PID 3120 wrote to memory of 4292	3120	msedge.exe	90
PID 3120 wrote to memory of 4292	3120	msedge.exe	90
PID 3120 wrote to memory of 2192	3120	msedge.exe	92
PID 3120 wrote to memory of 2192	3120	msedge.exe	92
PID 3120 wrote to memory of 2192	3120	msedge.exe	92
PID 3120 wrote to memory of 3144	3120	msedge.exe	93
PID 3120 wrote to memory of 3144	3120	msedge.exe	93
PID 3120 wrote to memory of 3144	3120	msedge.exe	93
PID 3120 wrote to memory of 3464	3120	msedge.exe	94
PID 3120 wrote to memory of 3464	3120	msedge.exe	94
PID 3120 wrote to memory of 3464	3120	msedge.exe	94
PID 3120 wrote to memory of 3628	3120	msedge.exe	95
PID 3120 wrote to memory of 3628	3120	msedge.exe	95
PID 3120 wrote to memory of 3628	3120	msedge.exe	95
PID 3120 wrote to memory of 3832	3120	msedge.exe	98
PID 3120 wrote to memory of 3592	3120	msedge.exe	99
PID 3120 wrote to memory of 3832	3120	msedge.exe	98
PID 3120 wrote to memory of 3592	3120	msedge.exe	99
PID 3120 wrote to memory of 2520	3120	msedge.exe	102
PID 3120 wrote to memory of 532	3120	msedge.exe	111
PID 3120 wrote to memory of 4576	3120	msedge.exe	112
PID 3120 wrote to memory of 1028	3120	msedge.exe	113
PID 3120 wrote to memory of 4976	3120	msedge.exe	122
PID 3120 wrote to memory of 4976	3120	msedge.exe	122
PID 3120 wrote to memory of 4260	3120	msedge.exe	125
PID 3120 wrote to memory of 4260	3120	msedge.exe	125
PID 3120 wrote to memory of 4016	3120	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7fffbb58c188,0x7fffbb58c194,0x7fffbb58c1a0
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,8149128131409532778,4107097731252622122,524288 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,3724877901485878460,13826042675338791181,262144 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,5857203328836282945,4845704907603146510,524288 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,12439767547350594928,1660420332971542846,2097152 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,11138902778698987478,15232226062966814405,2097152 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,4595994519887926018,17636346706441991786,2097152 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,3616775509241844036,11313909126740084893,2097152 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,11122750971027945781,987933212110464263,524288 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,13940858262429576712,4911823936521973020,524288 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,12696044364651613812,15387773024915076959,524288 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,12696044364651613812,15387773024915076959,524288 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,9706729542874377820,15500919321126013476,524288 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:8
  2⤵
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,5004050064997174154,162498811658412312,524288 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,1392182019240761458,4042853561492504953,524288 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,2198178486723130201,9493542774477467965,524288 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,8344796117759933908,15513142745978765290,524288 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6048,i,17495895459178903524,13744956078601763456,262144 --field-trial-handle=2232,i,6468044306432130145,4389303738805009458,262144 --variations-seed-version --mojo-platform-channel-handle=1216 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4016

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5036

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 8a0393ba820a2a01f83d70f261482615feafa73645337da45518f7f806a44b02
MD5 8afd04fdeb84aba56fab682200e531e2
SHA1 2e950df7862cbe1a90a4ad522cfece85a40afd9b
SHA512 774892c03ee9a527a5c97d3e6e903070e7fa88887bb09b88c78a82eb4ecd893155615e704d611a96bedbbfd38178abf5bb82e3e83eca4b2208ce60fc55ff07d6
TLSH
T1E8E026E546C8C22FA2187687536C930C8380761BDBC4BA5E6704C5887A45690B286BA4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 36461aba2c610c0700ba5dab681a24ac103e29832ce897ac61f5cafd3b4cdbc9
MD5 af151ba1eaf93af88adb098704c8836d
SHA1 eae820108a62493e957e5d16773cd7f21ca7f58d
SHA512 eebbcade0bdf63fa25262e56ac516349cafe94721c62f1cf7a1283356c8ac911df2c7e61d38f368837a6402580c521a088ccbff77f68f94a1ca47aa53b9038f4
TLSH
T194515E8246A2FEC0F7A9073170D712A33730884D80B32E4A11A8CCB9BA0FF56B134C74
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 8c8ef5b79a5862add3c36bda3da23d627ac21c7142bd3993df6ff0ca386a5b7a
MD5 35492b20bd6b3246504d4fb8cf51e6af
SHA1 a9a0a84aec21e137cf2d332483aeb280cb30da4a
SHA512 9d293d4b5303e8ba59049b1092110ae182a14dcf66b8a3346652f28c9d6f7564f144c94a06aeb29939b21e77facf264a0bb7288d3a205de1bf03d28ebd89ff80
TLSH
T1AD11BDF3C7D589AE890116F05A24EE2BCE2D0546421C7D1985D4EF2783E3479D00159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 bde27caa2f8e9efc8f7aeef5955be9eb448f07a81fb75959ea8d2f22cadcbc91
MD5 330b80e1ae085394834fc8e1a28f7dcf
SHA1 4c2b6d4373600c54d19f93062194595aa5f41385
SHA512 c8e673efff5bd34d398c6a2522297684641f412505ba7697786fc4ba3c37a774f9daceb61d7d02a960757ec8a850eacde478c1bd600941ec33bfd586790baec6
SSDEEP 192:sxZhRsWl/fAsAPkIdpdCHW6+WNGYYBa6+IgrJ:sxZhdl/fAsi9QHbGfc9
TLSH
T16F22A7116E28A97B8CC7D20DBB15BF53E6F9503261905E58EAFCC61C08E76CE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 620e4c5db2983b5b0ebeb82b51a054dc336194e969bac7c04bda23c32f97322b
MD5 0534dfde59322d82f01c160f4eeb860c
SHA1 c354d30f2589b209d151d0552d34b9852f2c0f59
SHA512 3bae1701820b0310d11b8521d93c13d0f54c6c64fefc5225fe90505ff5282cbc0ce9a67991fc48295ad957287da07e198054e3e112b60e893e3d64c8bb496f49
SSDEEP 192:sxZhRsWl/fAsoydIdpHCHW6+WNGYYBX6+Ig5DJ:sxZhdl/fAsneiHbGf5D
TLSH
T1EB22B7116E38A97B8CC7D20DBB55BF53E6F9503251905E48A6FCC61C09E76CE220784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4b429f638394f205281aeb1dea9f9b5bfa540465a33869e0ba2eb8626d42e26f
MD5 2c6f00e0659d1c64268286f33d878d0f
SHA1 4ba90b8c3d73ad861809c3f836eb4d9420d4dcfc
SHA512 87b8e03bd402a7a41d229d8ec3246406806ef985c37efd36a29cdcc709ee7b75a8ec34d7a5f9c59c07a181c3c8db29ee222145fa4abc95af880880323a1d3b10
SSDEEP 192:sxZhRsWl/fAsoPdIdpdCHW6+WNGYYBa6+Ig5ZJ:sxZhdl/fAsKeQHbGfcN
TLSH
T12C22B8116E38A97B8CCBD20DBB55BF53E6F9503251905E4CA6FC861C08E76CE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 20f2dbd389b4bd7656ea1a31184e609bae9ff9ffbd2167770378bc3da4034e20
MD5 6b8310d3a9d93e2fff360ac06e443770
SHA1 da411d05e1d3e1c96bd3c1abc75d5ac1a7417202
SHA512 2d4b8a8f3eb647682a3ec0d8298db09ff58197656041f5cee8031fe05e6a4864e92fac5e1614d421261d4c905f62aa93b36b9a70701e31eea16b3724a4200c8a
SSDEEP 192:sxZhRsWl/fAsoydIdpdCHW6+WNGYYBf6+Ig5DJ:sxZhdl/fAsneQHbGfBD
TLSH
T18E22A6116E38A97B8CCBE20DBB55BF53E6F9503251915E48A6FCC61C09E76CE220784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 131a02a7f903b4e8e1835af9fb49d89ae0a9bf8056604044077a3f75c45f3d7b
MD5 4eeabda0ccccfaa7931298f05bf9dc4e
SHA1 005c18571ff91ad6fda92f22a36f4e6093e4b0c0
SHA512 4272cff41309b21269256f265e21c94106adab53b2234d612dc4d2a04cc2bcb3e4b4f7ebb9feed016ba2d020f15b2b5cc7a972a38baa4dafcdb44e3b722878ad
SSDEEP 768:rMyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXxropi9g:rMyYR7jWv3NpBu1ja/CL8OXKb
TLSH
T1DDC2E93B640DCB7E4FC01E9DDC5A6F9B3E9802C7A6548D4047FA994C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0c0abf79a1226d9b3262ae146230b76dd893846140215fe61d4de411e206fe01
MD5 7919c81c0c914a8e065578569d19b5ee
SHA1 55d870df5221df6c78b7946a3ece0cb30c0a2252
SHA512 dd9518394ef486a4c27b818c1a9c254a13814dd38697285ec23c3403fc828b82ecfea6be320138721c9f7fd1638f297965f1c6d4dbdb0d29f8df6d59dccb0f75
SSDEEP 48:KgLuvL1ttOb9wVISrOK9715OxjeY4JbPyLgvmqwaOPbmdGISCPK9e1kPxYfYlWeY:KIogKV2qOPyKQEXEYKJeyF
TLSH
T1D3914561317B020039BD288DE1A5871E929171B73059EE7BBFBE11754E6AE080DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f72b4d3-644f-4652-ab00-a74bedce4f84.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6f72b4d3-644f-4652-ab00-a74bedce4f84.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e6901da95baf43fe73aff24a5d4f66d128976f84fe3e386faa60b5d0bcb50b60
MD5 a611dfd4cf8ba3b562326dfe79d16b29
SHA1 b93296faa1f186f0e6cc53dc2c0ef15ea90c18a7
SHA512 3f07cef1bc87e85812fd51fa2053168d657ae4ac713686463d683bce7264c205ba27689ef61ecd59524ffa9265a1de0a4445257c6a53d70089eddc08b5d88c59
SSDEEP 384:2ZcIhsNQa107iWKRQX5+DtXO7y8P0MWVZh6DKhHSroq:khOCsGkDdO7dP0jfYGHSr1
TLSH
T1F4828D32ACA8AC7759F7A685F44636139FB85063D1C8AFC0D1DD7B1D01DBA992307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 95b210c867ce857fd2bdebfc340a4a8d03b4936517dfa19f0c66489ece04b6bd
MD5 1056fdfea8def6b989719b3210c7f094
SHA1 302ee9166713e9282633dc9608c82c72bacae125
SHA512 d48ab4041296eff522c5ce8ce178185301c6a8a77950c58aecc4c93843aa0ca1732d6522699ad18f745d310633e61746f16569a1feedc79995572047d1493e7f
SSDEEP 384:oiFiZcIKzsNQ8TUNTUlIlz107iWKRQX5+DtXO7y8z0MWVZh6DKhHSroq:zFQCRwgHCsGkDdO7dz0jfYGHSr1
TLSH
T1E2A27C339CA8DD7BAEFB9B85F94632039EB55063C5C5EBC0E2C8AA1C019B5D81307C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2be4e619fd4f42a91ac3c93c9ae40586aecddc4ca8bb6fea92a3639b55a9ac7b
MD5 68b56bd2b4d3566fadb8a9806959e8e7
SHA1 bd93ea4419f9648610a0baf63592e31b5c29864b
SHA512 e5cd7992711e4771e209f572f78179c0c73b1d220fe6d91a37871c285a525f94fe707863e34541523bf3b95faed907133bf190caba8db7fc9e7c600b52612bc6
SSDEEP 384:XZcIhsNQz107iWKRQX5+DtXO7y8P0MWVZh6DKhHSroq:fhxCsGkDdO7dP0jfYGHSr1
TLSH
T182828D32ACA8AC7759F7A685F44636139FB85023D2C8AFC0D1DC7B1D01DBA992307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6fbe14142cc27898b70604bf45e40865790b432093411688cca7e6aa34b4f43f
MD5 01dd899ff73fe32559e40564fc93b9c5
SHA1 3c9c8e48142e1da2ee245e8a9f60714284c7e8df
SHA512 161f174a314aafcac3c71dcebdbe1237fdfc03a5942a6b3bec8e409435295a88d6d5bdeeaed7200f1fe3b5599267133cf6e2c92cd780aadc427e3d2e83888153
SSDEEP 192:EONK6nnHGQmiUyrcQYcX5hQDP1XOEMcmyHU6:EONK6nCPQNX5+DtXOgdHU6
TLSH
T1D202EB34ACA86C778EF7AD49B4873313AFA5217BE5846FC4D6E85E1C01D769C2306C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 68e092004ac2c41f0a61730690ac513480bb4192e20348fbed31dd1060945c8a
MD5 9944436ccda0f31d503e98c81e3e405f
SHA1 9fc77b573a96bc4c53d3d525b63267a7e50f2a15
SHA512 788c9dd731fc635f3f2989311fec49391d4d7ee9ab98fee9a6bfcc32e66740abccb47ecc687e77d2fa1528fc841303773fa97328e65fbf747a5f0fdbec11d55d
SSDEEP 192:EONJ6nnHPQmiUy8cjYcX5hQDP1XO7uFfENg3rrq5MWU6:EONJ6nxCjNX5+DtXO7y8S0MWU6
TLSH
T1CE12E931ACA8EC775EE2A595B0873253AEA51127D5887FC0D5EC2E2C01DB6AC234AC52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d19ec36-eea3-49c9-975e-40169095731f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9d19ec36-eea3-49c9-975e-40169095731f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download