2ebd43ada254c0b142f3d1c7786024e941fa4270511073d865cf0e20b5fe7ce1

Analysis

user interaction
yes
max time kernel
898s
max time network
798s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 23:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
popup.html
Size 441B
Sample260809-22e4dszzcz
SHA256 2ebd43ada254c0b142f3d1c7786024e941fa4270511073d865cf0e20b5fe7ce1
MD5 6355faf63f6fddd47e37708bf0356a88
SHA1 54e42871136adf2fe818f50f32d416955594963c
SHA512 0a3e215c143b5ca5076432ca84f1532f91ec8101fd3a3d884295d73d51d832ca6b8384e7f1ce0d847b1429147ad2229f52854130596c2d23e67a89a8a096f61b
TLSH
T1FBF0A34D9D09AF17112C155D1ED0920C12DFF94E5500887315CB467AAEC1344CC165FC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1328	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307903077099820"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{C231FFB2-EAD9-4A1D-993D-38EEE8E5A84E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3700	msedge.exe
3700	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4836 wrote to memory of 2596	4836	msedge.exe	88
PID 4836 wrote to memory of 1328	4836	msedge.exe	89
PID 4836 wrote to memory of 5408	4836	msedge.exe	90
PID 4836 wrote to memory of 5564	4836	msedge.exe	91
PID 4836 wrote to memory of 5408	4836	msedge.exe	90
PID 4836 wrote to memory of 5408	4836	msedge.exe	90
PID 4836 wrote to memory of 5564	4836	msedge.exe	91
PID 4836 wrote to memory of 4088	4836	msedge.exe	92
PID 4836 wrote to memory of 4088	4836	msedge.exe	92
PID 4836 wrote to memory of 4088	4836	msedge.exe	92
PID 4836 wrote to memory of 4684	4836	msedge.exe	93
PID 4836 wrote to memory of 4684	4836	msedge.exe	93
PID 4836 wrote to memory of 4684	4836	msedge.exe	93
PID 4836 wrote to memory of 4372	4836	msedge.exe	96
PID 4836 wrote to memory of 4972	4836	msedge.exe	95
PID 4836 wrote to memory of 4372	4836	msedge.exe	96
PID 4836 wrote to memory of 4972	4836	msedge.exe	95
PID 4836 wrote to memory of 360	4836	msedge.exe	98
PID 4836 wrote to memory of 3724	4836	msedge.exe	103
PID 4836 wrote to memory of 6024	4836	msedge.exe	104
PID 4836 wrote to memory of 1332	4836	msedge.exe	105
PID 4836 wrote to memory of 3860	4836	msedge.exe	106
PID 4836 wrote to memory of 3860	4836	msedge.exe	106
PID 4836 wrote to memory of 3700	4836	msedge.exe	108
PID 4836 wrote to memory of 6940	4836	msedge.exe	109
PID 4836 wrote to memory of 6940	4836	msedge.exe	109
PID 4836 wrote to memory of 5700	4836	msedge.exe	110
PID 4836 wrote to memory of 5700	4836	msedge.exe	110
PID 4836 wrote to memory of 3108	4836	msedge.exe	111
PID 4836 wrote to memory of 3108	4836	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\popup.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffb88b1c188,0x7ffb88b1c194,0x7ffb88b1c1a0
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,13265079419372285095,1458634677722545739,524288 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,11609520915264927748,2653289231084401375,262144 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:2
  2⤵
  PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2416,i,1724963627005407170,18375232660971318636,524288 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:13
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,1813256600464455909,518270468046240958,2097152 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3276,i,5436406039265064178,4288917111387155664,2097152 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,4998312748294996272,8268438139689489469,524288 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:14
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,17874391706716552021,4278277868674530326,524288 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,9672487930213582518,1615508218771074225,524288 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:14
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,9672487930213582518,1615508218771074225,524288 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:14
  2⤵
  PID:360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,3336931172855519594,7451278905105270293,524288 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:14
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,14365128909603415620,18423272998587482632,524288 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,9287727915071100372,8210498310919405893,524288 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:14
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,17961038373413159497,563994444670385140,524288 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:14
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6412,i,3317003909033923685,3205958974667750193,262144 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,3352001856746543331,17276883165594876447,524288 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
  2⤵
  PID:6940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,13274199825778659761,887028942853458560,524288 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
  2⤵
  PID:5700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3340,i,9202073419867994178,1120769963396652191,524288 --field-trial-handle=2372,i,7548523723395107496,5433710132198292398,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:14
  2⤵
  PID:3108

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3752

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5632

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2508

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:1704

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 adaad128579f78fbd7065f75d62eab7d4d2535a747e0d2d35b8107229ccaa0dd
MD5 926b8b3681d2faa9a0e0a5916c613732
SHA1 0a6273c7b25b408bf22baf8a47dcdfe026cd9ca1
SHA512 f731faa36c0e96c18626687cc1b8d2754680a55082de57918be8818a9f239406521341f35b48f4b867bf0dc857c18fe7eb9ddb5e54a77390d39ba3b2df0125f1
TLSH
T17CE0D8670EBDC56ACE82BA47D074932F6A5D744597C8FE5933C660CC3C44403D957C82
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 be7c63270121c65ad12e904d83ff989b6d7fa095413b419a9f5e1de4d80a1bf2
MD5 6db8d271f455979f329e276a17303c30
SHA1 f54579aa4c01b6a7d453dfd39f193fc450f3e503
SHA512 4dd9a7110e48c0786a89a754ad1da9f18b21819a6df8a8292c112f8a7f9176cae0582dd012bb80a99a59a17b9fb35c121c1ea5fcc079b9df85f97d0f0031ea1a
TLSH
T110E026E404CCC29EEA40B4875274434E92C8364B97C8FD4A2FC8C9CC7605480EACBD94
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 268B
SHA256 ed9213056ae74bab1723509a60f5bff2d26eb586bac34d2fd71f1ce6e2853860
MD5 a743c3d6de41ca00ccb2cafd2fb5884f
SHA1 f457b825e75a96a9d306a3be49238c0b20ec0e44
SHA512 7edb56dd603f7d38bf5dc4235910af5ad8db833164905db50591542be6a6f2b5ddc6d59e79a0b535a1ab59473a1802e677bd8870886ae79d59bdbf14a68a774d
TLSH
T1B7D0C2A8A8ECA94ED6E409BE97A5F0100F6402820416DA120160F9C136A52E41BAA020
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 285d7269c10daa5a103721f8538e94f6f8b8a3f8545ce0a82a8be4ab58342722
MD5 6e0ba8f58b1300e0d8e4f5dfd5c69888
SHA1 068739f8c88f07739d4557950fddad1e435aad07
SHA512 fe7add439356c161a7cbe7645c1fb5832fa8030b4b3f76b36eade8c2c36e5df0f98ba1f1ea8968aef1ac2fa43d3d826c0837ac5f4bee94e49740c721899f2b4a
TLSH
T19CE02B99C920BC271DFC1B2C60544687E744131B3B41C91B3B3C952D8FB06374686C5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1d7f624f1efb75773a673b61ecd2e64f0567f5acd780443d0ad666cc60d4e55c
MD5 273c37a8d0e380987afa743bda4bf960
SHA1 ba3755fb857ec811a44e66f99494d29e5f871348
SHA512 73c403c0fd8748898b65cdd657e917858ff3b17797643064f87e0bd98177fb148226f891598a73bc06412e060b7dbc5efdcfca3c22fff1744de2a04cd97a8025
TLSH
T1D041D1F383F4856ED91196F0AA18BE2FCE1C0515431C7DAAC5E4AE1B93E3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e16f528fc1e4d85af27de590a3388a9ca5317cfb69e527de49d238b1f2f56d0f
MD5 191938bc12823734decd46ccf0afcba8
SHA1 20a1257531cb3ad7135a64a36149d8ba0a3ca5a8
SHA512 9b9bf06333518f757aaf4de2d0abd43fa064688389e3092eb23f7cdd7c94d5f934c407308f3cfea0ad1c1450f3e13291db2ccf5467da86430896fad297b215bd
TLSH
T16B41A1F783F4856EDA1195F0AA186E1FCE1D0515431C7DA9C5E0AE2793E3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 186B
SHA256 5c1bbd1edf932ff18e671703697b049cbbbaacc40f62e76d12f022342647c211
MD5 f13b8ab38708355582b490b8ce2c253c
SHA1 13f52f70224491ddb692f53d0e24462dd4986f35
SHA512 37d10b31b8686b6e93629c55c1e56e2b2305552513d7e94bffef7d9ca7c0759c1f60471dab73e861acbf286a4b12bc9ac4e0d25f43eba2627f8dab51fb8d248d
TLSH
T125C012A388F9E476202589796E84AC82B675E435109194F0DFD5923CA1D00FB6A52029
MD5 SHA1 SHA512 TLSH

Submit Download

bd8a7cc2-aa4e-40e5-aea2-2ddc2dda79e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bd8a7cc2-aa4e-40e5-aea2-2ddc2dda79e2.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 40e7335c040f1774db810effe57cf07e4b177ba0b4467c739723fd6763d646d3
MD5 a6f921432613301041955e868a64e003
SHA1 fc39ec5674b77a2e1404b993674ab8cca706aeef
SHA512 cd76e800bd0589626a901fc50f3c7af725b3873349dd16d5f7ad207c00fdecc0d4da72ce0ef1bbe7148172a5c01f7597058f736e9dff1ec89b35b0c7c5548ff4
SSDEEP 192:sxR1RRyMqZjK1Ml8wb6/fustryNRZm0zoD8pev/g6+WNIYcC4xfWsGQP+GTIgjsJ:sxR1ul6/fustryN/mc0/5IW4wsGQPxjQ
TLSH
T12862D815AA349D3B8DCBD209FA95BF93D3F91133A1905E44AAFC9A0C04E76ED211381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 2d31df64ba2cf8e1a5474129e861bade74771810e3f8a120feeeccaea8068e2e
MD5 f8a2b1d2ab6ffc37d6e75224e10402a8
SHA1 68874b8ab436d950f5db200362e117425ad25abe
SHA512 f51a836262db2de8e06d449371604b5b35382b333adf7fb736c2673f866b050e472eb5476e09372f72ac100ada71b623ee82d506dfaca5c1dc9db0328029accf
SSDEEP 384:sxR1uqK6/fuserKN/mc0/5IW4gsGQPxXQ:sBRK6/fM4W/5IW4gsGQPu
TLSH
T1B662D615AA34993B8CCBD219FA95BF93D3F91173A1905E44AAFC9E0C04E76EC210381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7ccd8cb8-d752-4cae-b371-3af63e2c6564\index-dir\temp-index
Size 1KB
SHA256 d68d0cf7406951a24665eeda7d41ff37003bafdd83a3349165530ee7bdbcd291
MD5 df7abc27c208b9cd23868d4719dec2d5
SHA1 46dd013f9f9bfe738155f2233658df61a9c4dfbd
SHA512 e01321a29de8c1068c3b8e76c503dc39a2178f2dc2e752ac21c9bed53c56767b9901a5c19a0495e4e8a946fd3fc2f38a9c448ca1d00e211cd8e8ee733b78182f
TLSH
T1BE31720BCCD266CBDCB258F22A3914CD7B3AA7EC1A5BEB8B142CB0357C9A7207655144
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e5458.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7ccd8cb8-d752-4cae-b371-3af63e2c6564\index-dir\the-real-index~RFe5e5458.TMP
Size 1KB
SHA256 4ea3151953289a7cdac0ce88dadf72f8d2295a2e0172a874169854c2eadada5c
MD5 6b8497caf56e4f19e637fd7f8fcd12cc
SHA1 041a1aaa7b2945ef435cc9a3feab14763b4ea8c8
SHA512 0e01e0dfc34db4fcf89e544c42c0ce334b482db9953b005f307502bbc9516ab78f108b938445612944c68a61bd329181e542ad9802d761fba32a97d7d1598fe1
TLSH
T11931C8678082EE0BDD3950F1621D109E773FD470236AE35F217EF8382C957289EE5585
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 3d9b8c0a26bf4280a09ab326a81412c26ede5f0ed8ad532237f9ff3d2a9987bc
MD5 aabece4fed26ae1b4075557b9cd36a5d
SHA1 2ceeac025c812996d873a625eeca7ebfc4b6dbb4
SHA512 68d1ba169655c58a38b9d75d0422f17d96c96d193d66ffded0947bae97d69c995914deccc83a7571772f67c191f1c813b0aeb711768f86cbff07ead4a17b6313
TLSH
T1B2E068BB39F31400DD6BA7C1247280A2095975908901ED0F00199AC718B1781382AC63
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 ae9016304e056e1492db213ea9e07907a939160e39ea9f30a43ae93a879c8889
MD5 7c4ea05f6ee5eb8d12db3f6e8ce1eb33
SHA1 d6587b0e78c62d52bf6b4b2159819b8b0073b7a0
SHA512 c6cd3789306ff3a1125dd1fbdb49f24a0094227e526e71ca9e3d0d433b7491f84fea2f470e0f3f3c9d59da18073b8d0e407a00d44097b0b03622851195735bef
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9h7P:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRg
TLSH
T174B24A11713F4680383EB91C91B8981ED6C2B4A37519E52F7BA801A65F67E039DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 d149361547b8332508f6c1e194e1c843af0dd0a20d5844aa558e2930182ec557
MD5 2a57c3ca0dd385a840bf17bef621e6bb
SHA1 43603d8a42129156fd2563e2bd58a6de5b4d1397
SHA512 5c0096543b882b2725fe0de91d6a3ab3a176d4aef815c087e75d2abe12c1c552580445a0958b87d3fe4ffca4374cb7b33ab9025f66c043a96ef788ee943d60b6
SSDEEP 384:nqiFiZcI28NLo8TUNTUlIROPvuT5+TuEqfbYG8oqGqrP216HlytEDq1Z78LEEIzZ:hFQ2QowgUu4dG8DGUe1oy6Dqj
TLSH
T1DFD23A32D8A4CA77ECEB8E95A64A7606DEE4516395DC99D8E6DC5D0C00CB1EE030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 d948cb0400cced75d71e8917e2e93c952974ac4e54b5a72389be615f2a1d1b7b
MD5 6090c758b1b9b84e3483d52d904d5049
SHA1 553d34586f0c579d3ecb40bbee9890f8f51c85d9
SHA512 9b4b75c8a7eddd0f6cb9ff8e5d94e851b68ee2341d5dc6175d162c2729fc59c8a2c36527bd50b0a6279b40453b93d87ce64621e5c167faf0517b86794e377afd
SSDEEP 384:nCiF1tNn/s3n9Sn8Ngo8TUNTUlIRiPvuTZyTuEqfbYG8oqGqrPk1OObjI9G6w7aR:JF1j+9SXowgUuAdG8DGUM129MaWa
TLSH
T11AD24A32D854CEB7ECE68FD4B24A7A56DEE0526385DC5AD4E6D92D4C00CB1ED830BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 fc9e377dd85399f53887d6bce6c930e64440ba8d8e0a207709fa8ebdb511427a
MD5 067e33223d87f91317aa61af9d2dc37d
SHA1 5f85fae2f8fc8a11425aed8a7578bd00b37bf10f
SHA512 8dc86a31ae61df641f615b77d60a4243293cb02f3ede9a261ee27a34e7bb2d9225b856987b18de4504439c24748fd9542532d02591f852bfa0442997a499cdbf
SSDEEP 384:ndiFiZcI28NLo8TUNTUlIROPvuTnE+TuEqfbYG8oqGqrP216HlytEDq1Z78LEEIt:UFQ2QowgUu7dG8DGUe1oy6Dqj
TLSH
T12DD24A32D8A4CA77ECEB4ED5A64A7606DEE4516395DC99D8E6DC5D0C00CB1EE030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 e56513ed6233dfe1cadea1362f6a785ad894bc72a098dc477be18f835c0eeb3a
MD5 8079216cff881574c9701349129da490
SHA1 94e806253f65a20ceb4f04570a36b7fe9f6c73d8
SHA512 2070e8d9aaf0697f6c10f80f9609308e77f14646acd7404957deb36e1ea0fdf75efaf1d98181e4c5136de4d971873dc530250b589531973c91ab00258a11feb2
SSDEEP 384:nNiFiZcIC8NLo8TUNTUlIROPvuT5+TuEqfbYG8oqGqrwu16HlytEDq1Z78LEEIzZ:EFQCQowgUu4dG8DGUd1oy6Dqj
TLSH
T163D24B32D864CA77ECEB8E95A64A7A07DEE4516395DC99D8E6DC5D0C00CB1EE030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 0e458692195d1fa67bcac6e1bdbc1e2c43feced35b5fcc325252010a12f3c3ad
MD5 ac4f7fef383ae9639789caf075df73b0
SHA1 2d47c6d276de32d9d07a4d7eded227c32f13b605
SHA512 b6ad132470f8ed681a78f294f0a8e3f99a5298b07094a46a6a22a3309426166818511e27551c3ad13bec5a4ce2f5b564595c8c87d2a4f7937b013660ae9f82b6
SSDEEP 384:nhiF1tNn/s3n9Sn8Ngc8TUNTUlIRiPvuTuDREqfbYG8oqHL6OObjI9G6w7aijh83:IF1j+9SXcwgUuOUG8Dr629MaWa
TLSH
T12DC25A36DC55CEB7ECE64F98B74A7A56EFE0126385D85AC4DAD81E4C00872ED4307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download