bca992924af9755a130fca01c891db35809b0274baf081cb126d71282fa0473a

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/06/2026, 04:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1.html
Size 61KB
Sample260620-eqd1mac15k
SHA256 bca992924af9755a130fca01c891db35809b0274baf081cb126d71282fa0473a
MD5 1f8ca773a664a30b21e19928d497273a
SHA1 9815f9f6376c634803f79f875e5f4bb884ebe239
SHA512 b457ed4449a56be462ec2019e4d8c5de341695e63fe0ebf0e06a80dd5aa52b38a9d4cb9e187f79ae632cf99cefe201ec07c39b3970bbff72051a9ae65db79017
SSDEEP 768:ySW92zuxmuPzCWtgEDSMbTOOnOXXDh2J6Zdyp6jDgu5l2uo0sC3Ex/JBgqG:X2+OlYkJCypMDgu5l2mEx/JBgqG
TLSH
T16F530A32A1F5003A359BC3E9D265B328BA55D207DA0BD625F0FC12646F86DE748F726C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1448	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134264021147824357"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3246620872-1649211507-2285877732-1000\{6D256313-6792-4AF3-91B4-96CA3A6A4600}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5600	msedge.exe
5600	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 2780 wrote to memory of 3180	2780	msedge.exe	89
PID 2780 wrote to memory of 5800	2780	msedge.exe	90
PID 2780 wrote to memory of 1448	2780	msedge.exe	91
PID 2780 wrote to memory of 5800	2780	msedge.exe	90
PID 2780 wrote to memory of 5800	2780	msedge.exe	90
PID 2780 wrote to memory of 2560	2780	msedge.exe	92
PID 2780 wrote to memory of 2560	2780	msedge.exe	92
PID 2780 wrote to memory of 3948	2780	msedge.exe	95
PID 2780 wrote to memory of 2260	2780	msedge.exe	94
PID 2780 wrote to memory of 3948	2780	msedge.exe	95
PID 2780 wrote to memory of 3948	2780	msedge.exe	95
PID 2780 wrote to memory of 2260	2780	msedge.exe	94
PID 2780 wrote to memory of 2260	2780	msedge.exe	94
PID 2780 wrote to memory of 4404	2780	msedge.exe	96
PID 2780 wrote to memory of 4404	2780	msedge.exe	96
PID 2780 wrote to memory of 3760	2780	msedge.exe	97
PID 2780 wrote to memory of 3760	2780	msedge.exe	97
PID 2780 wrote to memory of 2092	2780	msedge.exe	99
PID 2780 wrote to memory of 1712	2780	msedge.exe	103
PID 2780 wrote to memory of 5772	2780	msedge.exe	104
PID 2780 wrote to memory of 5436	2780	msedge.exe	105
PID 2780 wrote to memory of 2312	2780	msedge.exe	106
PID 2780 wrote to memory of 2312	2780	msedge.exe	106
PID 2780 wrote to memory of 5600	2780	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\1.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffcf8fec188,0x7ffcf8fec194,0x7ffcf8fec1a0
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,12885993827447457787,10002119636785290709,262144 --field-trial-handle=2264,i,10922151891537772392,4683559551285844068,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,7047361454850445819,18430916080886886037,524288 --field-trial-handle=2264,i,10922151891537772392,4683559551285844068,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2524,i,4944216291977985556,6306012792293322740,524288 --field-trial-handle=2264,i,10922151891537772392,4683559551285844068,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:13
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,13327250504063984380,12895597040010858058,2097152 --field-trial-handle=2264,i,10922151891537772392,4683559551285844068,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3536,i,10275402583709571887,13862403117433618262,2097152 --field-trial-handle=2264,i,10922151891537772392,4683559551285844068,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,12218467349422357948,12355112571833476555,524288 --field-trial-handle=2264,i,10922151891537772392,4683559551285844068,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:14
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,409938371382160574,15580893836826522655,524288 --field-trial-handle=2264,i,10922151891537772392,4683559551285844068,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:14
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,5179891502983007467,8562907082889911900,524288 --field-trial-handle=2264,i,10922151891537772392,4683559551285844068,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:14
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,5179891502983007467,8562907082889911900,524288 --field-trial-handle=2264,i,10922151891537772392,4683559551285844068,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:14
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,834315497882067591,3995066803439436395,524288 --field-trial-handle=2264,i,10922151891537772392,4683559551285844068,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:14
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,217733646040986675,579042051497316922,524288 --field-trial-handle=2264,i,10922151891537772392,4683559551285844068,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
  2⤵
  PID:5772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6544,i,9564479964218573749,10149116363464686924,524288 --field-trial-handle=2264,i,10922151891537772392,4683559551285844068,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:14
  2⤵
  PID:5436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3356,i,12818740756230881156,11977609198410020320,524288 --field-trial-handle=2264,i,10922151891537772392,4683559551285844068,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:14
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6348,i,7680926534552125227,14724589544529471443,262144 --field-trial-handle=2264,i,10922151891537772392,4683559551285844068,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5600

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2844

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6076

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 01fc33638563dc8ab1a7b28573704bed2449b99eedc9bd38a25b21316506e8a0
MD5 11027c4e8a2219c9ce2e898ab0ee23b7
SHA1 035426b9d83735103c3507c9017885546a4bc3f1
SHA512 a538fa52093c0e8ae9c8760749e2905603b5390edd667d6d7eed03fc52795e15b07573b9fb01fe984851203afcec62a80bbc50d6e99f5fbb2fc0771ec7bb014b
TLSH
T1B2D022213628F001E22A10B34D20831012198A0629A39A0A3C90D04AE8A6080B2D2447
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e4519ee111087f538c263265602f50ded4fd0a8d30a1eb29782923b7ecf6f706
MD5 d977ed51ddea169ff3aaacb58cc9fc88
SHA1 1161e22350839b669f3e2b6cb5cee6ee9c25e467
SHA512 3be5b17585bc96cf349403e8b57f50691da3e8f841f657a12d21c7bac323eb584bb56037d190cf5f25e30923fa75219cfff261e56df71e06f9d9981a3fd990d4
TLSH
T187D022213628F001E62A10B34D30832012198A4A29A39A0A3C90804AE8A6080A2D244B
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 032dda1487d7a4e04000744afa72472e25cabd40425855a8757c7169f41dfc34
MD5 7da6c730f27c553640924da7dd3cead0
SHA1 de08b3bfdfa5262d963e9a879e0bb5a89a398d70
SHA512 e072cbea66c5183f6ac74d90b8dee2c7a81cfe31b400a31d1a5e0c5b201d6ed31dd4e56962dffed087afa10f08578eb3b55a4fd79bd3e2e420fcfcc43a2b6908
TLSH
T194E02BABC8249C7B04FD1F59645046C6EB1013576B40455B3A3DC20D8FB47FF5681C5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 d5cfb22e5e60dd27f4f902f9277ae8be68ec285da70d60eb24c87e0eece8bf41
MD5 c5b39e789c51ee1eab13df774ca743a3
SHA1 7c509980e679161637de289d0ce63c07599fa6a0
SHA512 67339a5a6af927141490fb3d8f6a8f0a0cad8dbc72b366bd700cfa0674c9ad9471ddd571fe808f9d3cc9f2640366cabd694de6fba4e541cc8d2823b84ade3596
TLSH
T10861CCB7C2E8826D991156F0AB246E2BCE1E0516533C3D9AC9E4EF4F63E24B0D10164F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ad561417403908dac85478b7bd325c5640519b51bea75bb581a927d6821c64a6
MD5 a906a4c71ddd3feb4af5f04689fa5c9f
SHA1 ab88cff24aeff8baf316523b40f73d8aa22ce554
SHA512 84b2c87722033bbb67081888f2ba554153a80aafb4752e80e9b97dc6b15acfdf83549a93f9e903919fda232a1ca9c17e1bccac0fa7d0fc3dd170aad09672446e
SSDEEP 192:sxRnRjyMqZjK1Ml8wFH/fXsb731ZuEsqzoA8peuY/g6+WNIY1FZD4GyIgjMJ:sxRnkbH/fXsb737QnZY/5ISD2jw
TLSH
T12D62DA1569389977CCDBD219F6957F63D2F81563B2905E44AAFC8B0C04E7ADC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 489d034789c8359f59c125a63f4be40149aa83c187d4678555dad781d1b8287c
MD5 e3ee059b5d0c1ede11cb1e058979cc92
SHA1 a361c51e41662668863636c3683dd391cef4df69
SHA512 14a4ca6cca890a111271a40e1e6f04b11a3fe707f8cf81e0ab72315b60534eef16c841bac15c65dc32d4edb3f9533135cb2aad75b8bc582e82245a8cf2277812
SSDEEP 192:sxRnRjyMqZjK1Ml8UQBFH/fXs6l1ZuEsqzoA8peuY/g6+WNIY17ZD4GyIgDaMJ:sxRnkqHH/fXs6l7QnZY/5IAD2uw
TLSH
T19762D91659389977CCDBD219F6857F63D2F81563B1901E44AAFC8B0C04E7AEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b2b6579a64c70455cb6d9657e5ba62cccd8e9ad90ca814dee2f3cccfab7ef1ec
MD5 e61b10f566e744e4ded39f5cafea1480
SHA1 73fca2d3cf096c084874ad88fb0d08b5ff9d2e61
SHA512 ff84888255462c8c64fde100912e3cb6ed5d445b9e2c01765cdf4b8976ef22645caad4816b1e4e0247cb9c9f74c6a7bd4370761395a0fdb8b56e2071f009e349
SSDEEP 768:z2SIQTWgBdfLk8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhbgZvro1u2:z2SIQTWgBdfLku1jaskZ8s2
TLSH
T1EFC20D2B640CC77E4F84496CEC2AAED66DD801CB9B944D9447FA894C03C67EB521B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 44c97296e0898359752d4ee5ee4532a393e5c974940ded8ab5a6352af32ad739
MD5 b0de5f91d24dbd4836e39ea78951d8a1
SHA1 152b3c52f3169249544695ba5f2c0546885c01e5
SHA512 270cb7976d7b7f828ee39ae63ee1e5a035010a91b2b94bc50505d714c7838f3b9883dd076902780db18c2d3d1199ffa4131a9fba85089ceb0bf082114bee18cd
SSDEEP 96:KcucKzSmmD+KsoPjWKQsKGpSKSsx8gKVGeGbqKEEfxGK6giOrOKs4MduK2E662wQ:ijdt9ZpfpRBNwVnqxpJFBTPLYJl9
TLSH
T194B239117A7E224138BE250CD194966F274230B3701BA63B7BBD20F64EA6E015FFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 ef6f581b38415142c74e478ca8588e4af0a09b8b77afee368be4209089367457
MD5 3f1df4ca97f9e92598aa700d0cf8a443
SHA1 ee6e2d9503ee0d69ceea4c3a1cdd78950b4fd417
SHA512 3e265fa0688325a4be63aba65344f8f7c7473bea628a2b95809887652dbe96f8b6e94ab105aaf434325c3c131366d339cb4330ef74e5bf65af78336106286595
SSDEEP 384:nxiF1tNn/s3n9Ss8N08TUNTUlIRWLqYBs4mpcAfLpGGrH+qHBycHfAuoJiZJ8LkA:YF1j+99Bwg85mpGbayCfAuoJRvt
TLSH
T15DB23A32D855DA7BACEA8AC5B74A36479EF0429385CC6ED4D9CC5E4C01DB6ED030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 60a30cb10c12069f2ece7637d3990d13f305cbc9bbbdf1c284b2faa02ca380d6
MD5 8640fb14628a398be0b476bface62d4c
SHA1 5954d58012faf20b67d383c36d46827183f22106
SHA512 ac93dfbc938685cff8f55daf771f359625db096670091006541ebd0aebc84c4b4ea8213dca1a547c1c4cca253042215f57fb68172a802dbacddf876ed3df88ad
SSDEEP 384:nfiF1tNn/s3n9SD8N08TUNTUlIRiLqYB+4mpcAfLpGGrH+qHBycHfCuoITGT0Ig9:qF1j+9KBwgYvmpGbayCfCuoi+0kve
TLSH
T1E6C25B32D855DA7BACE64AC5B74A764B9EF0029384CC6ED4DADD1E4C01CB6ED070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 229b7b7b7d2c4f886321b4fe36caafea2309da84a1721f6b67073a4104129b2a
MD5 fc204328371a67a3444f6c835ed1b670
SHA1 a05ac84d5302032a53e5a02c4006e678d28e6cdb
SHA512 c8335ad5c1ec6c4d25c76d28673863747078e1106263ab95464c1f852e4bbec5b07e1970af7eaab17823bbee0a5953ce1208ff1c0215952fe2822895892d38f6
SSDEEP 384:n5iF1tNn/s3n9S58NN8TUNTUlIRYLqYBavUmcAfLpGGrH+qHBRXeITGT0Icat8LQ:QF1j+9sEwg+4UgGbaRXei+07aNvp
TLSH
T1D2C22A32D855DA779DFA4F86B70A774AAEF001A380D86DD4DAD81D4D00876ED1707C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download