ad35e72893910d6f6ed20f4916457417af05b94ab5204c435c35f66a058d156b

Analysis

max time kernel
149s
max time network
162s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/07/2026, 13:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 8.7MB
Sample260722-qqxnhsstd1
SHA256 ad35e72893910d6f6ed20f4916457417af05b94ab5204c435c35f66a058d156b
MD5 bd0ced1bc275f592b03bafac4b301a93
SHA1 68776b7d9139588c71fbc51fe15243c9835acb67
SHA512 5052ae32dae0705cc29ea170bcc5210b48e4af91d4ecec380cb4a57ce1c56bc1d834fc2d96e2a0f5f640fcac8cafe4a4fdd0542f26ca430d76aa8b9212ba77aa
SSDEEP 24576:KPQQ/6MP6P5d1n+wRcXe1Lmfpm6k626D6b6+eGnkywBIpv:Cy8OeG8k
TLSH
T1C696A52F7B48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2672	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292008887586879"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2746394149-3500112804-1243524366-1000\{42242A8E-293E-4743-87D8-7872875805FE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5932	msedge.exe
5932	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe
5376	msedge.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 5376 wrote to memory of 4468	5376	msedge.exe	80
PID 5376 wrote to memory of 2672	5376	msedge.exe	81
PID 5376 wrote to memory of 3652	5376	msedge.exe	82
PID 5376 wrote to memory of 3652	5376	msedge.exe	82
PID 5376 wrote to memory of 3652	5376	msedge.exe	82
PID 5376 wrote to memory of 2172	5376	msedge.exe	83
PID 5376 wrote to memory of 2172	5376	msedge.exe	83
PID 5376 wrote to memory of 5296	5376	msedge.exe	85
PID 5376 wrote to memory of 5304	5376	msedge.exe	86
PID 5376 wrote to memory of 5296	5376	msedge.exe	85
PID 5376 wrote to memory of 5296	5376	msedge.exe	85
PID 5376 wrote to memory of 5304	5376	msedge.exe	86
PID 5376 wrote to memory of 5304	5376	msedge.exe	86
PID 5376 wrote to memory of 2216	5376	msedge.exe	88
PID 5376 wrote to memory of 5124	5376	msedge.exe	89
PID 5376 wrote to memory of 2216	5376	msedge.exe	88
PID 5376 wrote to memory of 5124	5376	msedge.exe	89
PID 5376 wrote to memory of 4632	5376	msedge.exe	91
PID 5376 wrote to memory of 5136	5376	msedge.exe	92
PID 4632 wrote to memory of 2224	4632	msedge.exe	93
PID 5376 wrote to memory of 1352	5376	msedge.exe	96
PID 5376 wrote to memory of 1364	5376	msedge.exe	97
PID 5376 wrote to memory of 1184	5376	msedge.exe	98
PID 5376 wrote to memory of 2584	5376	msedge.exe	99
PID 5376 wrote to memory of 2584	5376	msedge.exe	99
PID 5376 wrote to memory of 5932	5376	msedge.exe	101

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x268,0x7ff96674c188,0x7ff96674c194,0x7ff96674c1a0
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,16936420604821297894,13343144280661914822,524288 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,6522447200429933523,559593829831807094,262144 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:2
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2524,i,3327320660229980765,782343292127995357,524288 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:13
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,12467435399743361122,14503530275862306745,2097152 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,12839295504944898048,2537448794928872942,2097152 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,10270068801385911053,4973764692333077220,524288 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:14
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,5236418725071057928,4254506918445097557,524288 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:14
  2⤵
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,12252543634198739509,218652358232522318,524288 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:14
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,14189819774266135206,6730519773312401801,524288 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4632
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1128
    3⤵
    PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,12252543634198739509,218652358232522318,524288 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:14
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,9097816548226638056,18064155705708042388,524288 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,7771809336743174749,11791276527154225013,524288 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,14047298741202236011,1977673566191355646,524288 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:14
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,12891475619179745878,10768583826137636844,524288 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:14
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5420,i,5127924827254455256,9566763012560783440,262144 --field-trial-handle=2032,i,11123913080659279823,15585441485083672396,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5932

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:388

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:700

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 79054d3106248f0ce580d1442e78fcc5cc48ea2a5eb3b58c6aad98c7106da4b2
MD5 89a1e1173735f4835befe22b5e8bb285
SHA1 d6f781e38a6443407276a07888372638a8f2106f
SHA512 1f5c9b3554cf3bce4cd1214982a8df00dcc74324e66dbddb67a94598fbc762dc44d06c78c7a30a27a408611eba6e2715e40527ce854f203815d9515ab7dc00ce
TLSH
T129D0C0363A2D3003D3195331E042C703332704701C43E201E110C00C9D784D1D3C50C3
MD5 SHA1 SHA512 TLSH

Submit Download

35c6aa07-8aeb-4fbd-b29a-8be528d40901.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35c6aa07-8aeb-4fbd-b29a-8be528d40901.tmp
Size 31KB
SHA256 203cce1c4bb7086bf045d43912169a83adc65717c7b46dd51e88ab586e835b9e
MD5 c9821a650e1491ab2fab27fefc745a82
SHA1 3ea8a2b8ff01a01991c000fb740f506901f57279
SHA512 ec28c1925e34ca9914b2b22b4d8ebdbc04e95fecb3a0206730cad06b2a23429bff4d7e4a301a29b943a6e02bb5e5710113a1d59e8c719f29fe83597336591358
SSDEEP 768:ciWKy8Eq2+dWRm5rQW78F1+UoAYDCx9Tuqh0VfUC9xbog/OV3TQLl/Ck0sg3ro1A:ciWKy8Eq2+dWRm5rQW7u1jaKTQLpCFsy
TLSH
T117E21A2B280CCB7E4F841E5CEC266F966EE8018B66A84D5447FA494C03C77EB511A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 f2c1e25a8535094880eceb3c47e7389e11985c03a8004fbca1b060c3239987d3
MD5 dd9ca1e86f992cbcffc258dd1e369977
SHA1 03a52843ef5c321bf963b7628ad4e184f35c55db
SHA512 b68481921cc2a38c441364abc9b6de492e42e62e11011356917d1ed18729423b298171affa5757ec3fe1a69e58680f0dcccecaba3f5aed17562c82af03cef4de
TLSH
T1FFE02BAFC9319C3714F90B1AB45A078AEA9013575680C49F3B3E450C8FB572A438986C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 1e81fdf7d8ad773515a0f24f174f241ecfd1c965f7a5b58164fdc2a8340c3b67
MD5 a9c72b046b23152c62e611455448ba77
SHA1 6ae9142714796bd018e8b796a08b4a19df42e99d
SHA512 8250efaa366c65016e5a919a0d871475cd0b48f2176735697d47d1e64c7043b99fd33a2593ca3400bd29e6a34fde8dadcb2816c489a724194ec3a816b13d07f7
TLSH
T1D831BEF783F4856E8A1196F0BA18BE2FDE2D0510432C7D9AC5E4AF1793E3471E141A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 d1d349a92a4b1286fd7abb6ae513b757573a2c53ef8ee1a438043913ff0c993d
MD5 ab93032c6fccfb26d64c2dd83a8e7ff7
SHA1 ab6019d6dc45a624c1d3a34c82cc039b22cc6217
SHA512 0bf3e021271f3a47c2732bef60cc19094209105cf213559c80eef1a9d16863f4bf50927d89e1409417afc6910f709d8a97e1d80e8494777cb01864fba3a73e7a
SSDEEP 192:sxZ3RmyMqZjK1Ml8UQzFu/fwsE9E0CXU4zodpE5y/W6+WNGY0dAbaQuwIg5oUJ:sxZ3Pqpu/fwsEO0LLYy/bG5vQz+Y
TLSH
T1DA62F81AAA349977DCDBD219F6457F93D2F90523D2544E44A9FC8A0C00E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ac495bd24b56381363081eaa54e07fbce6bf975af148e280d94ea7e5e070fa5c
MD5 64605b03ff299929ebdf3d9bed9d2f64
SHA1 d349ee53b3590c9787b85d2bf599ef2faf665a0b
SHA512 515e7d2afd4be7855398a3821be1773cda9b7c5ddf62b5c768726d3d9d2ba92ea99e4a0f5d120d05c8c1387e103998b8d8d103670fe7ec34426bb2f2a1dba72f
SSDEEP 192:sxZ3RmyMqZjK1Ml8MFu/fws8dJxE0CXU4zodpE5y/W6+WNGY0dRErQuwIgjUJ:sxZ3Pdu/fws8dJ60LLYy/bG52QzjY
TLSH
T11662F7166A349977DCDBD209FA457F53D2FA0523D2944E44AAFC8A0C04E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 8a4da13e3280d827f038dce7d4cc8e9649b2114233e6e7e11045a2098b5ef145
MD5 1b20717c695e1278320cb761e6f0f8f1
SHA1 4549636539176db039dfa43e61631b48cbfd21e0
SHA512 8bcdb042be726b151d193ef881abab17ec59969c509dfa7dce4c1df8b2efc886dc8f3475d2ce16e4a75e2da2b3487f25b85d442446175c4efb8f925dd9da7191
SSDEEP 384:AFBHhTofhno2mB21q3Llbfe3sLDdeEpYt1UHv7cEX:AFBHhTofhno2mB21q3Llbfe3sLDdeEpR
TLSH
T14BB28056717B12023C3D290CA6A69B370E8272A33458A56F7BB900B64E67F215DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 5c41375f2cb99192266641640115a8da8fee9801c5147086c9dddfb35fea1ba9
MD5 22c56ed427bd4e206f12844ee61b83b9
SHA1 5170d6dc0f0d28f0b21351066a9ec8a0c5c3d0ac
SHA512 70b238d449e1a6260141bb8ab892ac8f67aa3ccbf0932d99ea4469a8c93d9ed61ae43891f509d9acb8920cbfe5c9a7819b8cec66abcc08d99fb762b78df950d8
SSDEEP 384:nXiFZtNn/s3n9ST38Np8TUNTUlIR1yN8sBdjf+8o/64QmOW7HdScjmwwzoHy/7IN:SFZj+9E3uwgy9o/JQCHd1j0y
TLSH
T155D24C36EC64D9B7ECE64AC9B70A3607EFE042A3868C5AD4D9D85D4C00DB1ED430BD69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 6aa96f63d8b3a807c0a7c04b025ea5f199272083dcc36843da530f891f2e640f
MD5 16a0414dc35ed0ca1ffbc6f78e455697
SHA1 01bd2a0da1b8e96ad7dbeb8cdee15fdd9ce3d164
SHA512 8738727c0acffed6071936a4d3f130e91edc0c98fd897e941736993186545aaed17199f00cab7a0f0937b8997086e3c90e2ad7c2e4e759e23ecc57ce396dcf60
SSDEEP 384:n5BiFZtNn/s3n9ST38Np8TUNTUlIR1yN8sBdjf+8o/64QmOW72dScjmwwzoHy/7i:qFZj+9W3uwgy9o/JQC2d1j0y
TLSH
T127D24C36EC54D9B7ACE74AC9B70A3607EFE042A3868C5AD4D9D85D4C00DB1ED430BD69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 34ca8bd5435a17a2aba7b66e55dde55130f907a0d7a63526fa6cd3b1fecdbc44
MD5 a4fb83491e0b724fe72aee51d0b695fb
SHA1 dea3e6dbf0062929ed1aca3a61a0dd0900bd814c
SHA512 7323f9301a958396c7cde54217eeffa863f3c92f0dfcaf5c25982b677ea6bdb1b48e08553e9ce5c7f90fed91091c87d703613e904066e441867a3e4c8f886164
SSDEEP 384:n5BiF1tNn/s3n9S438Np8TUNTUlIR5yT8sBdjf+8o/64QmOW72dScjmwwzoHy/7i:qF1j+9h3uwgA9o/JQC2d1j0y
TLSH
T12ED25C36EC64D9B7ECE64AD9B70A3607EFE042A3868C5AD4D9D85D4C00DB1ED430BD29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 29f4608212643d9d36a6e081a4db2c15f3bdd55c04d806216e8c32fec178a03b
MD5 849262d53ef188050fa39191aa0a3085
SHA1 e0acb9a4c8df46f0288ccc7f97e2377cb06c927c
SHA512 958f64063352407a77372ab6604c2c657f2f7d3485aa251326fecedc658aa4f346dfd67e00a04851989ed5b3ffa427906e6c4b1da1c7b6d675fe59731da9f44b
SSDEEP 384:nNiFZtNn/s3n9ST38Np8TUNTUlIR1yN8sBdjf+8o/64QmOW72dScjmwwzoHy/7IN:EFZj+9W3uwgy9o/JQC2d1j0y
TLSH
T116D24C36EC64D9B7ACE74AC9B70A3607EFE042A3868C5AD4D9D85D4C00DB1ED430BD69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 d76df4c1a3a7f8a36198565b3fc769eeb786611977db99ff84a20295e4e0ac4b
MD5 4de4af67d48cfc90bc13292cf5f5047e
SHA1 b582d95f9bd1a67c1a8073b08748bf6a3961a579
SHA512 699a508b1751078957125d0bdb46d5065a3567718fedbde824486a05e8dfbcef32204ad3d30edd4b87952ec2b3cfa7965466d3ff5281fe196f37ebd7221378f2
SSDEEP 384:n5qiF9CcmyWCs38N18TUNTUlIxBydv8ooTadjf+8o/64QmOvehkP+lFYS/vkHy/R:HFccps3OwgO+Oo/JQdehkoFYS/F
TLSH
T195B24B36ECA4DAB7ECE64F8AAB4E7A07EEE01163C58889D4DAD81D5C00D71DD1707C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 e11c91064d8e72a38ea8b990ce241a54cdb2d8778b336066464ed50c2da1cc25
MD5 63f1239d87612a23c1b804191c4250eb
SHA1 795b87e7bcbe9233c5b12b25fe975a73f6bd9ed5
SHA512 105a051409179978282e8560dca39e2bc286fb2f6f41f4eceae748eae5dca85bce1ddb27af4f42fbb9da3804e4d7e609c683cfcbce960b5aef797738b8a40bb4
SSDEEP 384:n53iF9CcmyWCs38Nd8TUNTUlIxBydi8bidjf+8o/64QmOW78dhkP+lFYS/vkHy/R:4Fccps3+wgkWo/JQC8dhkoFYS/F
TLSH
T1ACC24C36E894C977ACE64B99FB4E3903EEE04263C68C9AD4D9D81D5C00DB1DD570BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download