c6080d60736384a4a8fdd23404d59ae2d939e5124d80df89f8fd4e450bb9bd6f

Analysis

max time kernel
149s
max time network
170s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 23:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 8.7MB
Sample260810-3pgxwsbr7v
SHA256 c6080d60736384a4a8fdd23404d59ae2d939e5124d80df89f8fd4e450bb9bd6f
MD5 edaeffe92dbfd973958c9d2267201b32
SHA1 ae43e814d3eea2ff27bb414c9e26ecb1b5c0341f
SHA512 d0e58cf4bc9db25982d726f1ba65924bcef8fa405f06f6abf0ab80177d691805ff228039c5a85c3a8029e4422fd50c3d8e84bc6528771092c79e3d5229f43281
SSDEEP 24576:2o9dQj6p6j6j1WZswRiXj3mfI/6k6mjK64jK6gjK6e6cjK6feGjl8LpH:BWVeG2
TLSH
T1E896A52F7B48037306C642A26B8B65CAF21F903F3B561654345CD1681F6BA2983FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6860	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308791704436355"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{2A68FD89-E023-4854-AA46-A9DB18FBE3D7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1764	msedge.exe
1764	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 1060 wrote to memory of 5620	1060	msedge.exe	91
PID 1060 wrote to memory of 6860	1060	msedge.exe	92
PID 1060 wrote to memory of 4680	1060	msedge.exe	94
PID 1060 wrote to memory of 1456	1060	msedge.exe	93
PID 1060 wrote to memory of 4680	1060	msedge.exe	94
PID 1060 wrote to memory of 1456	1060	msedge.exe	93
PID 1060 wrote to memory of 1456	1060	msedge.exe	93
PID 1060 wrote to memory of 4312	1060	msedge.exe	96
PID 1060 wrote to memory of 4312	1060	msedge.exe	96
PID 1060 wrote to memory of 4872	1060	msedge.exe	97
PID 1060 wrote to memory of 4312	1060	msedge.exe	96
PID 1060 wrote to memory of 4872	1060	msedge.exe	97
PID 1060 wrote to memory of 4872	1060	msedge.exe	97
PID 1060 wrote to memory of 6248	1060	msedge.exe	98
PID 1060 wrote to memory of 6248	1060	msedge.exe	98
PID 1060 wrote to memory of 3012	1060	msedge.exe	99
PID 1060 wrote to memory of 3012	1060	msedge.exe	99
PID 1060 wrote to memory of 6384	1060	msedge.exe	101
PID 1060 wrote to memory of 4556	1060	msedge.exe	105
PID 1060 wrote to memory of 1892	1060	msedge.exe	106
PID 1060 wrote to memory of 2680	1060	msedge.exe	107
PID 1060 wrote to memory of 1432	1060	msedge.exe	108
PID 1060 wrote to memory of 1432	1060	msedge.exe	108
PID 1060 wrote to memory of 1764	1060	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ff950d2c188,0x7ff950d2c194,0x7ff950d2c1a0
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,761457924564964766,3519326998532737883,524288 --field-trial-handle=2552,i,6859231322488064633,11481103711768003832,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,2435982030343638626,5860856960935762315,262144 --field-trial-handle=2552,i,6859231322488064633,11481103711768003832,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:2
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2364,i,14656286454956123940,5582487711970541479,524288 --field-trial-handle=2552,i,6859231322488064633,11481103711768003832,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:13
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,15331532378038529096,16935691721359187962,2097152 --field-trial-handle=2552,i,6859231322488064633,11481103711768003832,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,9568009138784835962,10698818441410290172,2097152 --field-trial-handle=2552,i,6859231322488064633,11481103711768003832,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,16532445178173717156,14890822279247399632,524288 --field-trial-handle=2552,i,6859231322488064633,11481103711768003832,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:14
  2⤵
  PID:6248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,16989667670537205131,12774946224938006114,524288 --field-trial-handle=2552,i,6859231322488064633,11481103711768003832,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,6443076899319489742,15225139900463230694,524288 --field-trial-handle=2552,i,6859231322488064633,11481103711768003832,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:14
  2⤵
  PID:6776
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,6443076899319489742,15225139900463230694,524288 --field-trial-handle=2552,i,6859231322488064633,11481103711768003832,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:14
  2⤵
  PID:6384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6484,i,14506764399283454254,3181884271060986135,524288 --field-trial-handle=2552,i,6859231322488064633,11481103711768003832,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:14
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6488,i,7693306924897697914,11070166887051052794,524288 --field-trial-handle=2552,i,6859231322488064633,11481103711768003832,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:14
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,5471141798488823425,14530845256379949330,524288 --field-trial-handle=2552,i,6859231322488064633,11481103711768003832,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:14
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,7697642291953610504,12210830422269835875,524288 --field-trial-handle=2552,i,6859231322488064633,11481103711768003832,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:14
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1280,i,2017305114515042933,1736927664314494218,262144 --field-trial-handle=2552,i,6859231322488064633,11481103711768003832,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1764

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:440

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3856

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e488b2f1643091a82b3fa6f3ba4581d1420b5a016295323cdb5c6a34d711eded
MD5 1146e196a18c1af074efe36b4ef14d2b
SHA1 210c122820e11f4901bc396a392bbaae8633e61a
SHA512 3e124996afb57da6f7dd5e7da96e7ed58c5552e248385fe6458d7a5387af371fa060a3de039b2aa7b4e63037371615b4c1890c86c63cfa1d8ba70053f99803ee
TLSH
T147E02B55C860FC2759FD1B196054068BE750131B3B418D0F3B3C826C8FB063B4386C5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 4820076dd66ce631ffee464fb681fbfe301c1d6e6ae72c47f1ecfb915a52be04
MD5 e711feb9f3269175d5894af4de3e8eeb
SHA1 e167d5d5cc97ed3bd41fe3ca698bf3564b91210f
SHA512 b9c9921d40c4fb8f78bb279d46cffe66a9c1671d94075150394dd6ab40291e5fec3f41af9bb81df6588b8090d28f46b50f95f8d9fbba5ba2e81e891910b23db4
TLSH
T19E41D3F783F4856EDA1196F0EA18BE2FCE1C0515431C7DA9C5E0AE1793E3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 f35f893c8273bdad1b7b254940552532446cfdd690efa711111718571dd8dc79
MD5 72bcb982c684fa785d05d95aa2d6adc0
SHA1 b00b668c95271e84e9db464908893fdf8223b1a4
SHA512 b926ae70771396f9aaeb5bb5cf73d36dd79365ed5c30a60ac0f1e0e8045088ba7e1d1505a95748c0a6625f61bd4f2ffe8e618a3adf06e6105fcc027452c4eec5
SSDEEP 384:sxRv0lX/fhsI+VN/4VYy/5IW4UsGQCjQo:sTIX/fPEE/5IW4UsGQDo
TLSH
T16262D915A9349D3B8CDBD219FA557F93D2FD1133A1945E44AAFC9A0C04E76EC211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 712d5dcca7d6ada57188021c72869b55a3a8196167f44e4474280468724eda1e
MD5 4c624c09a7e9cbc18c3f154b0ee7b4f3
SHA1 b00551d567e010437416026ed61b285c42162604
SHA512 380d315fb4e1da06ef55122d6678e20c9855d7fcb65e9644272e0b1c00c20928f99c8280720580493b5db694536c029d48a31ebf9f0c56596a69a04155b4256c
SSDEEP 384:sxRv0qvX/fhsv+WN/4VYy/5IW4wsGQCLQo:sTjvX/f07E/5IW4wsGQ1o
TLSH
T16172D915A9349E3B9CDBD21AFA957F93D2FC1133A1545E44AAFC9A0C04E76EC211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 d6a615ea969d02cb73ba3acae04a03ee8a6a16e046877b7ee543a5323387a91f
MD5 c655a8bd0165056b401d11b541c03c99
SHA1 0b5df8f5353cdb5e7ca248da45ce4c0e67196bca
SHA512 dce4e5aeb81a1df4a9b159fbc4f4790513fc3eb1ba2abc5b0b41a19db1326a66c41129856688613041fb0b2e5bd58be15eea9bffdc51b15503400b92b9902a9f
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9EkRC2kyCtmfyuIwB0ns0X+CJDsf:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRI
TLSH
T102B25D51713F4280383EA91C8578982E96C2B4637519F52F7BA801A65F6BE03DDFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 844f2f79d6bef2e3d3910dc63a2bcbf28828c2b9c335e7722812e5da5bb38a84
MD5 6e155c42d9adb3278e481d1b9c438990
SHA1 d5f0837137660d530eb57fd276727ae542dd909b
SHA512 0b05f2a93a886b3410caa5e78401bcdd570581c23aaaab1aa7d1b2799a6883aea008cfe566faefd996f402ae8dfc46db9f8f2e34e0af279c8b6450868b460578
SSDEEP 384:nIiF1tNn/s3n9Sn8NgW8TUNTUlIRiPvuTllMBEnf+GGrpNdshPWmBp+FWkFOObjY:TF1j+9SXWwgUu/MwGrfdsvPefF29MA
TLSH
T11CC25A36E854CEBBECE74ED5B24A3A57EEE04263859C5AD4E6C82D4D00C71AD8707C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 9d14427d515eac3e569e71e8ff28c423004063fdec6e4019b124927374b79b5e
MD5 e979416e4ed3640e9d6d56f40e46d8b4
SHA1 6d46f4fc959a571961bf4f4f607bb1f4329e1e91
SHA512 a47e019fd31b0a9e78659bf1b3465a15a74a71590b17a465e207b6dd5ae1417b64a204f9dd08056812a94bd80f558f73f77a3d3c1fbf0963bb3ed62b70ba27e0
SSDEEP 384:naiFrZcIj8NLW8TUNTUlIRvPvuThgMBEnf+GGrpNdshPWmBp+FWBFBeRs9JKgqi1:RFzjQWwg1uiMwGrfdsvPeQFTjKgqmUa
TLSH
T1C5D25A32D860DABBECEB8EC5A64A7617DEE04163C5CC9AD4E6DC2D4D00875DD470BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 78ebaef8a733c164b10b630b87d89a602c686563c5f0e43add83cffed72baa50
MD5 87869cb02ae30ef2576dd052c670915d
SHA1 26931a7c83a875706a7d385e6b34e565b9e6c32c
SHA512 de5440c7985ad8f07a0e53d8b42fa8f7b5902f5504e901f8df44b737bab618341d2d0ac09a3d8b932ba78b5994599f4859fa2505308c372aac6440e8932565ac
SSDEEP 384:nAiFiZcIj8NLW8TUNTUlIRLPvuThgMBEnf+GGrpNdshPWmBp+FWBFBeRs9JKgqi1:bFQjQWwg1uiMwGrfdsvPeQFTjKgqmUa
TLSH
T16BD25A32D860CABBECEB9EC5A64A7617DEE04163C5DC9AD4E6DC2D4C00875DD430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 7e12c5eec53edb33dc0f752db8beafed12e3a657a3edcf50dca7e49445a98066
MD5 1e7895a0ee9e4140126d16216172160d
SHA1 ce131c1099203e7d02ee21edd780953fba5af4bf
SHA512 6b7759c4bea704ff18ac37b88984f0af65bf46483e96dc38fef46ed145f14e6e6b80f2b49207817cbbf0acc8263487365449cdd2f7b8fb64b20fa85fd8566e77
SSDEEP 384:nAiFrZcIj8NLW8TUNTUlIRvPvuThgMBEnf+GGrpNdshPWmBp+FWBFBeRs9JKgqi1:bFzjQWwg1uiMwGrfdsvPeQFTjKgqmUa
TLSH
T12ED25A32D860DAB7ECEB8EC5A64A7617DEE04163C5DC9AD4E6DC2D4C00875DD470BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 be80965204e0247e6126b07f99c1eaf7ffa1fa0e59963cd1fbffb26ac6b52390
MD5 e5592ac7894b6a78280ccb0466920b27
SHA1 9acd7e98cc973c185c1c6de76b8aeb7112ab7361
SHA512 043edc7c89e35af897a8e752c8a110cfbd2fe54a2a2ab01fa6033d96079104fd69e36a80353e3083f9f5de59af85916d9b4c55413e49598a42f4fd893f196375
SSDEEP 384:nbiFrZcI48NLW8TUNTUlIRvPvuThgMBEnf+GGrpNdshPWmBp+FWVFBeRs9JKgqi1:2Fz4QWwg1uiMwGrfdsvPeYFTjKgqmUa
TLSH
T1FBD25A32D860DAB7ECEB8EC6A64A7617DEE04163C5CC9AD4E6DC2D4C00875DD430BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 9548e311b97f3791785734d02ffc2f55779c0d8a6284377f7c8644d59442bf07
MD5 6f053e91c78bcf8f2374c276a2bda0c0
SHA1 392037c152ffee66422d5d2127327d8a1fb6a557
SHA512 8b4814741c5626af86292008ed602913407fd5a422b8822cf49626ce6f87a0bc9577fd2ba9ce5f246867ab3ace9527ad993c644dc052a5dbcc6adb03391a05a0
SSDEEP 384:nfiF1tNn/s3n9Sn8NgH8TUNTUlIRiPvuTufREnf+GGrpNdshPWkL9OObjI9G6w7A:qF1j+9SXHwgUuWAGrfdsj929MA
TLSH
T113C25B36E865CEBBECE74F99B24A7A17EEE01167859859C4EAD81D0C00C71ED4703C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download