6887a975820e73ea490952f40e89315f31a4796fbcb95e7621bd85824c16de6e

Analysis

max time kernel
149s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/06/2026, 14:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 11KB
Sample260622-sbmacadx9v
SHA256 6887a975820e73ea490952f40e89315f31a4796fbcb95e7621bd85824c16de6e
MD5 ad0202be7b91f27a0660d920f71a8225
SHA1 1e581ab0479ccff4362f1d0999bbadc5fdd05eca
SHA512 297f81cc0b14e64cbded648995e3a69d13904b1da614ba484bf30bb9f46fd9677d7f476fc3778bf6b003944d6ea0dc811d202a03ba3fad9c121252d445415308
SSDEEP 192:35crdQZ4MsM6bMRMWMcMm/MRQCgMSP6MCXMcNMcpTMTP+ZnMJMUMkQl2XM6ZbF4B:35cqvBZK3x7RQC9sjC8cucpwrripkQYg
TLSH
T18632972356F6480A7213C1587BE2A35D66389107D20D4A78BD9D39ADCFCE58269F33EC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5888	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266138527936860"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3730367222-316663987-825798519-1000\{B9B36627-EBCC-49B4-B6D2-00071D117981}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2288	msedge.exe
2288	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe
5476	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 5476 wrote to memory of 5684	5476	msedge.exe	89
PID 5476 wrote to memory of 5480	5476	msedge.exe	90
PID 5476 wrote to memory of 5888	5476	msedge.exe	91
PID 5476 wrote to memory of 5480	5476	msedge.exe	90
PID 5476 wrote to memory of 5480	5476	msedge.exe	90
PID 5476 wrote to memory of 5936	5476	msedge.exe	92
PID 5476 wrote to memory of 5936	5476	msedge.exe	92
PID 5476 wrote to memory of 7112	5476	msedge.exe	94
PID 5476 wrote to memory of 7112	5476	msedge.exe	94
PID 5476 wrote to memory of 1228	5476	msedge.exe	95
PID 5476 wrote to memory of 7112	5476	msedge.exe	94
PID 5476 wrote to memory of 1228	5476	msedge.exe	95
PID 5476 wrote to memory of 1228	5476	msedge.exe	95
PID 5476 wrote to memory of 6116	5476	msedge.exe	97
PID 5476 wrote to memory of 2412	5476	msedge.exe	96
PID 5476 wrote to memory of 6116	5476	msedge.exe	97
PID 5476 wrote to memory of 2412	5476	msedge.exe	96
PID 5476 wrote to memory of 5568	5476	msedge.exe	99
PID 5476 wrote to memory of 3212	5476	msedge.exe	103
PID 5476 wrote to memory of 6060	5476	msedge.exe	104
PID 5476 wrote to memory of 4728	5476	msedge.exe	105
PID 5476 wrote to memory of 3284	5476	msedge.exe	106
PID 5476 wrote to memory of 3284	5476	msedge.exe	106
PID 5476 wrote to memory of 2288	5476	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x238,0x288,0x7ffe2785c188,0x7ffe2785c194,0x7ffe2785c1a0
  2⤵
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,9615001063644566381,13837080839619769919,262144 --field-trial-handle=2272,i,7545641086332773625,4213679861060073837,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:5480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,6502533964695042175,243841169811986344,524288 --field-trial-handle=2272,i,7545641086332773625,4213679861060073837,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,11561251445349667053,9133834546933451822,524288 --field-trial-handle=2272,i,7545641086332773625,4213679861060073837,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:13
  2⤵
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,3014946855684920436,10453356716823438523,2097152 --field-trial-handle=2272,i,7545641086332773625,4213679861060073837,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:7112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3656,i,16116167802665934036,6722402090170436408,2097152 --field-trial-handle=2272,i,7545641086332773625,4213679861060073837,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,7507645802895148816,7628281634222895017,524288 --field-trial-handle=2272,i,7545641086332773625,4213679861060073837,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:14
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,6110308575018534688,17973056814778343216,524288 --field-trial-handle=2272,i,7545641086332773625,4213679861060073837,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:14
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,17387955749873195998,4136854469266489096,524288 --field-trial-handle=2272,i,7545641086332773625,4213679861060073837,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,17387955749873195998,4136854469266489096,524288 --field-trial-handle=2272,i,7545641086332773625,4213679861060073837,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,17719349609597242515,14722613468720353918,524288 --field-trial-handle=2272,i,7545641086332773625,4213679861060073837,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6360,i,2782486354964091174,10013111473982792511,524288 --field-trial-handle=2272,i,7545641086332773625,4213679861060073837,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:14
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,12834777748767085525,1452118466085657189,524288 --field-trial-handle=2272,i,7545641086332773625,4213679861060073837,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,12407899442568986530,17712495745672578420,524288 --field-trial-handle=2272,i,7545641086332773625,4213679861060073837,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6296,i,12982578184856884924,18431752260438268957,262144 --field-trial-handle=2272,i,7545641086332773625,4213679861060073837,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2288

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5492

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3248

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7250e4ddb51fa53ec8c4b9199831864f7ff3c5cca1fbf2e4e5086ae0576d31e1
MD5 d67d9caab78f31b2ab2ae61fc88b12e8
SHA1 c439af9d2a4c79b1936d0b654cdf2b2a6da22a5c
SHA512 f8e3ffb5bbcb1740ce2b25ded24b3be72c6285c98433cf97d12acea2ff455dd8da18d81f9348060457962fde88e3e33b5654dc94e329100848cdec215f571788
TLSH
T1C3D0C0513B2DB402C1241330882343706D09C503E332C10635BD140CDCDA4C4A3C1547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fbfdc6639449912c7c98b931d8190c5dc58f3c2a0bf5687e437a1f10d8fb4d03
MD5 0648a8cda5509f4d21f145a8d2e85107
SHA1 0098998314a76ff86c61b0ea846ab42ba2d245f1
SHA512 d12c9f38e4b1be9f515149cbec2d53104d76f99eb87ea993bf787c888cea28fbc81e79244b64386a0c5a5111415c57c4251ad0e5528252f3302570bd3971bd56
TLSH
T1C1D0C0513B2DB402C1241370841343706D09C503E333C10639BDA40CDC9A4C4F3C1543
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 bbbdb9184d367e532d9334af00bf09ffa419919a4ea3523d64cbe2dc165e397b
MD5 31ba5ee1f451bb97f30e961c484e98b7
SHA1 4ecadae59809f9220c621b578094989956d56ead
SHA512 5910fe88e3bee197eec8e1d4401addd26a955d457b9510ef74dca251a3dae9f92dc20ec80ffcc5f85873fc76ecfc5e8c72073df50f0f624848ad63a0841db8e2
TLSH
T1D9E0E5AAD831DD2B1CFC17189490074AEA51130B2B50845B363E8A098FF5666458586C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 d4de69249b810fea7e961e38f5f7b6009cf5c64c016353173f979cc7ab99a8ad
MD5 1d15116d25716e6ca30ab9541dcfa1c1
SHA1 9f23d03e2e33ee564b87071193307a49e67e804a
SHA512 c448467b4862731d33f5f2aa6ad3c387ca84ac11b7ec7ab32919caa2d6dd38cdb6dac29b846d91d036b8db93b82a93bd946d9209421d05166367c39095ef0502
TLSH
T1C351DDF7C3E8866D891146F0BB147E2BDE2D0915432C3C5688E4AF4BA3E2471E24165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 8983910ed4c603c3ad61e543cd03fd81ce73a0656098e1bdf489ff4b3c715efc
MD5 073ed15f571f5cb14db5fb5d0dcbd39f
SHA1 fcc2ad54718101b93a1c60d0f1b9666740aebb7c
SHA512 e17dbe7ce4f32202e3d81cc8221d127955f8004eb38004edd03392e44d4cc6de35b3be636406816f46626ee9aa5b1e0a4d03a51d06649f1b93ade08dc952d424
SSDEEP 384:sxRfSbz/fos21z7Q3cK0/5IATDfp5JjHn:sT+z/fS1gcN/5IAHfPB
TLSH
T1A662D8166A38597BCCDBD209FA417F53D2F91563E2905E44AAFC9B0C10E7ADC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 1af5394c7a5317861c62db708ea3c61f1bc0a2705be2d34f3bba20cd82750704
MD5 57b2dc4b28650569f67ad0e04c3f06b5
SHA1 343d57628c0a95e505c54c873e4caa5718c03524
SHA512 a17a2c90ea3b855437f763c0685abe201e7be97bd11d47c40a06523038ee6d8360bb6bdcb7eafe756fb7528e2b7c1d60f5e004e26100af3faa0c8604e1d67c41
SSDEEP 384:sxRfSqSz/fosCCz7Q3cK0/5I9TDfp5JWHn:sT9Sz/f2CgcN/5I9HfPe
TLSH
T1D762D81A5A38597B8CDBD209FA817F53D2F91573A2905E44AAFC9F1C10E7ADC211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 cd858b5e07df625d5928f4a1caaf04d26e04c8f6ddfad6da14cf5e2e5d69774d
MD5 2a137e936e7aa7bb778ecf4073ac0e12
SHA1 05e8f2f718a770967fc375000fe98eeff6fa8537
SHA512 f45d925951f4b16aa8d6f201b8bcf0810420e4b6d1dbaf9a84a0bba5f9309d1201dd00b51bdf5b798a6487617b55566c117b09c36262189581a9b3c3c3ae7156
SSDEEP 768:hDiNNidNi/ODiEWg5Niuf+Xi08F1+UoAYDCx9Tuqh0VfUC9xbog/OVZDisDXihNV:hDiNNidNi/ODiEWg5Niuf+Xi0u1jaCDO
TLSH
T19AC21C3B144CC77E4F844EADEC29AE976DD801CB9B988D4447EA494C03C67EF921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 cc09d06bca0f9e80748a7fff5636b038176b6ea1e7fb0f99e59ac5075a01d001
MD5 0e5c0d3dfc92e82febdb08135785f806
SHA1 528e7cc76411bdfba9082b40bc733188295a0c5e
SHA512 473a444130dd5ebca9816d53d164cdb0ef297e7be2ef5581fc882902930b551a606c5a9f4b5c512357f0a7852516fb72711ab0639a5b3538f73380b6fe59c8b4
SSDEEP 384:TFUxVXrvC7WZd5J5PClV2Hlftp113RFJlbDNOz9Bq:TFUxVXrvC7WZd5J5PClV2Hlftp113RFL
TLSH
T12FB22710797E224138FE690CE195951F274230B3306AA63B7BBD64E60E67E005FFD9E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 5175acf3402833a482bb95c7b009483176a6d82a9beb20332bbd9d44a777d199
MD5 21d8f85b06998323601fb6ca4413cc72
SHA1 4dcf0cd4d168bcd11238934363525e27890f4fc5
SHA512 8eb327781a01a83493e8b1f4b3280752adcd10f4afb2541f0dd1ab948f1197ad0ff6ad8c6b230c108690a4235ed67f4a3859da1363e53e995431cf2947dcc511
SSDEEP 768:CF1j+9LBwgS/tGF++CeFrVEwO724GAUvK:39LSHEJEwOnJUvK
TLSH
T13EC24B36E8A0CE77ACE64BC5B70A7A469FE00293D5C89AD8D9DC6E4D00DB5DD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 e488bbfc834d275d1a353d4f55ceb2e6b3c51959ff674b19c4e7b277a77269bf
MD5 4826d7b8918bf482e80e3a42460d2560
SHA1 ae11cfe7ca42fc2b548563a0fe7c397f89af397a
SHA512 59b24a1a537ff985f2501fe76a228319d8d521120f0bb937baf4f0871dc49ef60001478dd3abbf3579308809f7dadef26951fdc055a2842d3f3e766d03f02f6c
SSDEEP 768:aF1j+90BwgS/tGF++CeFOVEwO724GAUvK:/90SHEmEwOnJUvK
TLSH
T184C24B36E8A0CE77ACE64BC5B70A7A469FE01293C5C89AD8E9DC6E4D00D75DD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 203fd13c0309a54429216531f8d8719ae0503ef762bfed76ef82e949dbe541fc
MD5 73c0f4b90987eb92fad46a52f0b12354
SHA1 a97aa53d2dee7db97239ecee08d8f648a283deca
SHA512 29e4756f0482c55c2e6daa9f4e3b432dc68298917adc45a4c39b27047d793ad93badec2b5880861aa87edfe71bed7f884ffd91e1ff05d0b1c31c7b41b080a48c
SSDEEP 768:IF1j+9LBwgSQtGF++CeFrVEwO724GAUvK:l9LScEJEwOnJUvK
TLSH
T1CBC24B36E860CE77ACE64BC5B70A7A469FE00293D5C89AD8D9DC6E4D00D75DD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 6e7a30f0fd4cb33ea8d48b50957b4539f6ad4a66ada3a71f2713dfa089db209c
MD5 3f8820467fe411ad26bce0163c3ec452
SHA1 76dcf41ab40cfb8582abad58ec78b4c9c68890fb
SHA512 a00d9998e04c8cf0d96f1d114993d8b8d68346c1f105738cf22c82299c10532aa111da0483d14e0eefba6af95ae7516bd832dfa5b31188d1a2e02d2912bf54d3
SSDEEP 384:nZiF1tNn/s3n9Sd8N78TUNTUlIR5Pu64ojRXfLFGFE066FPy+jCITGT0I9aV8Lkf:wF1j+9YWwg/G+TGF+eCi+0aaAvy
TLSH
T1A0C23A36DC64CAB7ADF65F99B7097B46AEE002A3D0D859C8D9D85E4D00C72ED1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download