7b8948f3618c4997e8d6048a5d95b8f8affc7708d250f353a03ca3e35c2dbc40

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 06:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
method.html
Size 1.2MB
Sample260810-g6basaee57
SHA256 7b8948f3618c4997e8d6048a5d95b8f8affc7708d250f353a03ca3e35c2dbc40
MD5 92bda6326866189912201b4eebe8a195
SHA1 89cf2842448b54201f8c78e8a63ded24f65cf44a
SHA512 2cfb686aea48eb8a85580d103cf5cca5a04ab130f1b55e5b8e6eeb87ab2e137a837f5ce517737cc6c36eb6c6da0d0feb7990058f562f2784a90710d96f0f8724
SSDEEP 24576:E9+Db/9J9s9N9p9QDb69WDbT9NDbq9+Db/9J9s9N9p9QDb69WDbT9NDbM:JhnrThnrM
TLSH
T137555A44F22655B9A97B133B73CBA58D6220B403EAF2E595B2CC15005FCBEFB141778A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6252	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308166966032747"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{05AF4A57-3DA4-4542-8134-FEAD84602264}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3376	msedge.exe
3376	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4632 wrote to memory of 4092	4632	msedge.exe	90
PID 4632 wrote to memory of 6252	4632	msedge.exe	91
PID 4632 wrote to memory of 7032	4632	msedge.exe	92
PID 4632 wrote to memory of 4628	4632	msedge.exe	93
PID 4632 wrote to memory of 7032	4632	msedge.exe	92
PID 4632 wrote to memory of 7032	4632	msedge.exe	92
PID 4632 wrote to memory of 4628	4632	msedge.exe	93
PID 4632 wrote to memory of 4196	4632	msedge.exe	95
PID 4632 wrote to memory of 4196	4632	msedge.exe	95
PID 4632 wrote to memory of 4196	4632	msedge.exe	95
PID 4632 wrote to memory of 2984	4632	msedge.exe	96
PID 4632 wrote to memory of 2984	4632	msedge.exe	96
PID 4632 wrote to memory of 2984	4632	msedge.exe	96
PID 4632 wrote to memory of 4528	4632	msedge.exe	97
PID 4632 wrote to memory of 4528	4632	msedge.exe	97
PID 4632 wrote to memory of 5796	4632	msedge.exe	98
PID 4632 wrote to memory of 5796	4632	msedge.exe	98
PID 4632 wrote to memory of 5468	4632	msedge.exe	100
PID 4632 wrote to memory of 5224	4632	msedge.exe	104
PID 4632 wrote to memory of 3092	4632	msedge.exe	105
PID 4632 wrote to memory of 5856	4632	msedge.exe	106
PID 4632 wrote to memory of 2732	4632	msedge.exe	107
PID 4632 wrote to memory of 2732	4632	msedge.exe	107
PID 4632 wrote to memory of 3376	4632	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\method.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffc6301c188,0x7ffc6301c194,0x7ffc6301c1a0
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,11419977170327714030,10277671382607732917,524288 --field-trial-handle=2584,i,18339199450271704990,1862584047931784974,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,15558394079587933711,14218740973157924630,262144 --field-trial-handle=2584,i,18339199450271704990,1862584047931784974,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:2
  2⤵
  PID:7032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2288,i,7411194415265630025,17752521142199617123,524288 --field-trial-handle=2584,i,18339199450271704990,1862584047931784974,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:13
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,6037864461186828892,6875610083877322617,2097152 --field-trial-handle=2584,i,18339199450271704990,1862584047931784974,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,3370138230826645898,6279922923612712196,2097152 --field-trial-handle=2584,i,18339199450271704990,1862584047931784974,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,12294317840830287461,11648572156712808847,524288 --field-trial-handle=2584,i,18339199450271704990,1862584047931784974,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:14
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,16058463956116602235,16299710606387508397,524288 --field-trial-handle=2584,i,18339199450271704990,1862584047931784974,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,18336372221419101714,12006280781618934720,524288 --field-trial-handle=2584,i,18339199450271704990,1862584047931784974,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:7128
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,18336372221419101714,12006280781618934720,524288 --field-trial-handle=2584,i,18339199450271704990,1862584047931784974,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,8093052417827264900,7913267021908935513,524288 --field-trial-handle=2584,i,18339199450271704990,1862584047931784974,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:14
  2⤵
  PID:5224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,1684504459365999923,8141904699592870601,524288 --field-trial-handle=2584,i,18339199450271704990,1862584047931784974,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,5983233838431606569,11914936486412604390,524288 --field-trial-handle=2584,i,18339199450271704990,1862584047931784974,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,10273709159736086051,1260602421686642621,524288 --field-trial-handle=2584,i,18339199450271704990,1862584047931784974,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:14
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6352,i,2306921129851116178,10414528589834163920,262144 --field-trial-handle=2584,i,18339199450271704990,1862584047931784974,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3376

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6580

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:7144

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

23c101b8-dd62-4f97-b8c5-b856767e4be4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\23c101b8-dd62-4f97-b8c5-b856767e4be4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 6eea2b4356299364efffae89a58d8d80c868913d44956c61f178bf99feb2f3fe
MD5 1592ddc79def27904191774dff9d635f
SHA1 2249aaabadc8853fb906dd194b42f7345be5c084
SHA512 ff39537618dc2ce7aa9fc98a088a648fc1d155842f72ca4cc1737eaaa44dde013bcc0d3c68814fd18673fe1800b145efbfac19f3a9439a757b64fb8ec122bbf7
TLSH
T13041BEF783F4866E991196F0AA18BE2FCE1D0515432C7D6A89E0AE1B93E3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 52c166265aef1aa78dac8e0c5f566f1d439704dd563b7d2905eafa26c89d42b7
MD5 5722a6412efdda55bce3d3a409ca125b
SHA1 8d1ef0057b86c772a85eb042da27e1af0da8863a
SHA512 df870052d35a156c6a3dccb1f51370ed325cfc9fc693a7d087ce66e6475b608d900e85a75be5d041fb9b348b714ab27019804e4f1f494eb6b1ee7a571103eeca
SSDEEP 192:sxRLRtXbK/f1sgcNRZ18zoD8peh/g6+WNIYcC4xlfUsGQ4hG6IgDlCJ:sxRLHK/f1sgcN/1UW/5IW43ssGQ4NJe
TLSH
T14A42C7156D68A93B8CCBD619FB55BF53D2FD513360906E48E6FC9A0C04EB6DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 fb7a05bf4a54bb8f828700c4f0d746595d1abbc4fcb6e13f851cd8c6792075ea
MD5 45ac98af197586a187c5ba0896b095f4
SHA1 dbb73c10a29ca5d1a66dab95f00671e5373bfeda
SHA512 a83ab988dcf1a2233625c09c939b8c2dba1ff5c782232f7094f3052c47534c2b587767b02afd0461de24391a08391746914b3e6ee3ed022a04db8add78c81da4
SSDEEP 192:sxRLRtXbK/f1sccNRZ18zoD8peh/g6+WNIYcC4xlfUsGQ4hG6IgjCJ:sxRLHK/f1sccN/1UW/5IW43ssGQ4Nje
TLSH
T15342C6156D68A83B8CCBD619FA55BF53D2FD5133A0906E08E7FC9A0C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 dcac56c652a3bfebabf9b467e2faa8dbed51606fd3ed8512dbfb69e9f31026b7
MD5 dd8fef3a0fafd7a785c40271946de67a
SHA1 8e02e726aac0c2e038e4bec09901372613b2f585
SHA512 77afe71a51246ba75de46b5189c40d625c15dd35e4deb946b30ac31ddc07855565568e07f2c901165262955c265cb6e65dc85468747fc28f820ff59e39daed72
SSDEEP 192:sxRLRtXbK/f1sgXNRZ18zoD8peh/g6+WNIYcC4ZlfUsGQ4hG6IgDDCJ:sxRLHK/f1sgXN/1UW/5IW4fssGQ4NXe
TLSH
T11D42C5166D68A93B9CCBD619BA55BF53D2FD513260906E48A7FC9A0C04EB6DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e96809f33cbda9260eb6373a89d72345de4ea2dfc1dd75c51bf182b1c8f63ae6
MD5 7b9876740041fcb9ff45d620280db1e5
SHA1 1c465121b2c41e26fe9fbdc29cda2b86ba683a6f
SHA512 59e4f952e9dee0fed6761e6cd7783299309eaec49b11e9b581a62c84a0a539ec4d6eda24ab79e97d1d87db6ce017e7856599ecf0e6656eee3f9e8402357ad0f8
SSDEEP 384:OstWYWDfCtg1fFf9BKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVFd9DdR6zro3KB:O+WYWTWg1Nf9B8F1+UoAYDCx9Tuqh0Vv
TLSH
T1C3B2EB2B600DCB7E9F800A9DAC196FD77D9802C797589D4087FE994C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 d9dff99b396f9b7a2b35a16f94ffaeae90e8032971694d4d8913f936b2457429
MD5 7e473cd680c7b8458e8b1c9f61efcb2c
SHA1 5a5d2fde8d509d29d46c39d402e89c6a080c6a54
SHA512 f8bd74478711945102c1928f64493afce3e22e32982d7846c495b05070f9917aeddb3284fcca2bcc74d98ed1575fdbcde3719e1568fa63459d9a7e94933ae9f4
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9LDy:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRn
TLSH
T14FB25B11713F5680383EB90C81B8D82E96C2B4637519E57F7BA801A65F67E039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

bf6eac7b-41c9-4933-b046-6577e08e358e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bf6eac7b-41c9-4933-b046-6577e08e358e.tmp
Size 414B
SHA256 12d41edab60f4e231b7dcebd15d14b75c149153ed49e650f48821d29420a4047
MD5 2606aececc237ffbfc130d7d375f801f
SHA1 6267773ce83d3df15ea044bc691b18b7e69db228
SHA512 2fc55fa4c125707bb0140cc3fe175dad69e3902f01f89c2455a2b9aef2aadd9d17270a2b19389d40b07d93ee2b84e25f5d78b731a1949172d4c1a1e627bab509
TLSH
T18FE0E5AAC920A82719FC1B1860551646E740135B3B51894B3A3CC16C4FF063B4A8685C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 9b7faac27081e6efed2539e8a4edf30e3a90477c61dc01ec18fad76567de6d59
MD5 669d680941d2dc8f976de8bae7b3c5a6
SHA1 3b35968783167f6c88e51dc6115e1b91b393483b
SHA512 82840b17b7770d2847b614041e5853f66021f135e257605e7c2a0d607c0e8f678cfad92fbcf3488bcef426088b6d954cb1b9390e963bd89b0151846c3f6daa2a
SSDEEP 384:n6iF1tNn/s3n9SD8NLz8TUNTUlIRXLPvuTEy9Eqf+GGrpjBslRcpP7FiA8LEEIzQ:xF1j+9KQzwgtuFNGrlF7A
TLSH
T16EB22A32E865DDBBACEA8FD5A70A3647DEE4426384CC5AD4D6C96D0D00CB2ED470BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 360d4402e0c050bbef9719903a485a83e988c2990d23c2119855586abe523f69
MD5 26746c8e4783a96f83635814b6c266de
SHA1 598a365d19ab1e030126e6565c8fc71507878c3c
SHA512 d2ee5de1890ea184276dff3bd2db8edf1a72b9dca6cc6024241a819fb16b21465e1e414f00b3300a244dd0f790fd1bbe579fb86e5480cf0fffc5277fe54734bc
SSDEEP 384:nriFiZcIl8NLz8TUNTUlIRXLPvuTIy9Eqf+GGrpjBslRcpP76HlytEDq1PW88LE4:GFQlQzwgtuxNGrlF7oy6DqlWx
TLSH
T152D25C32D864CABBEDEB4FD5A64A7603DEE4521395DC9AD4E6C95D1C00CB1EE030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7e0291ca2c7c5fcd43d21549812dc7b04c2a3c417df4082c9b080864260a760e
MD5 c1e83efa75580f2df2c38695895972d8
SHA1 3b3cdf616a457c84d4ffb4c6332de8e261ab4378
SHA512 2ff9c083763153c8ecc3c07300c428f3a00d105a0bfab212eaa46cfceeb230dbf825f4acead57af816655bc51143121ded2c5a93a9aa44a8c62f26438bc4c8c8
SSDEEP 384:n9iF1tNn/s3n9Sn8Ngz8TUNTUlIRiPvuTbP9Eqf+GGrpjBslRcpk7OObjI9G6w74:0F1j+9SXzwgUunNGrlu729M4
TLSH
T1CCC24A36E855CEBBEDE74FD4B24A3A46EEE04263859C5AD4E6C86D0D00CB1ED4707C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 a72547512980b944c86022335e3c89dce6f078b4c84b7d43f29144f11211e7da
MD5 3ac40bf49d802f25f815f9c4e3bcc8b8
SHA1 7620b6ddf937ca0f473f2c689e8e2b7468422348
SHA512 846d4826860258dbb352e020e31516d7cfffe431fda42e5870675e6a9d433d6126bcd6ad71aa43ee87fbdae914974ad4ec65f93de2d571291a2aea5c265ff31d
SSDEEP 384:n6iFiZcIl8NLz8TUNTUlIRXLPvuTIy9Eqf+GGrpjBslRcpP76HlytEDq1PW88LE4:xFQlQzwgtuxNGrlF7oy6DqlWx
TLSH
T134D25C32D864CABBEDEB4FD5A64A3603DEE4521395DC9AD4E6C95D1C00CB1EE030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 a5209dff06658b1c7cd3e0a45d25872cd0bb2dd5ed62af582a5cdcb57326bbd3
MD5 87c206e3af40b6fe2e8fa4bb0e65f0c2
SHA1 2db4ed82ad7c2de4cec85f0d219b3f8ca80ed3bc
SHA512 50df3c03ac8cc7476f0b3a256f3e32a0551b960b8fb6d234ccb59d2ed556a70b6995dccbc9cba988ef6e4c47c704490a75960eae924cc6d9672e96e09cbb6b54
SSDEEP 384:n8iFiZcITZ8NLz8TUNTUlIRXLPvuTIy9Eqf+GGrpjBslRc8776HlytEDq1PW88Lx:nFQNQzwgtuxNGrlk7oy6DqlWx
TLSH
T12ED25C32D864C9BBADEB4FD5A64A3A03DEE4521385DC9AD4E6CD5D1C00CB1EE030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 98312f5d464fdfae862758bc499b2bae9c23f3dca532231c84658dc88244aced
MD5 802254f32500b9d245ecd72512ae30c9
SHA1 d3c0604c65c95bfbe77b2d6ab9ba1872fb13a22a
SHA512 7261ff9ef25b9612dbb21ce1f18ba8db48fdf44ea34a4640bdf5b092c24a35444dc0e711f36c6f094a1097ffc9182ce12d98d19f6805e5fff6b066b7f216b3e6
SSDEEP 384:nwiF1tNn/s3n9Sn8NgX8TUNTUlIRiPvuTuhREqf+GGrpjBslRYLDOObjI9G6w7hq:LF1j+9SXXwgUuoZGrTD29M4
TLSH
T193C25B36EC55CEB7EDE74F94B34A7A46EEE01267849C5AD4EAC85D0D00871ED0707826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download