a25c75451e36c06f53d88867d48cf0741a92ae1315e01fbc43558b1c16b0b0b1

Analysis

max time kernel
898s
max time network
731s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 00:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 23KB
Sample260910-a2ap5avxds
SHA256 a25c75451e36c06f53d88867d48cf0741a92ae1315e01fbc43558b1c16b0b0b1
MD5 ac13b449f35f08029f14c7b5efe93f02
SHA1 bb946ae75290bf3d11ca02836c6f802ab048ba0c
SHA512 828eed6a792874b027298621506c47ce34740682ab52bf19e63a084f773ad799e779f3047083187a0741e4d3924d31573c7939c779f5b7d3910375df55680cf8
SSDEEP 384:XIqJiePa6No9QjOtJKaKAKRKjcK3SevK2K7+sKMHiku:fJhPavQ6JfLU8c/evDpspi/
TLSH
T13BB2122550F5253311E291C137A56F5AEFE6D607CA1F522872AE0BDA2FE3E83CC53528
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4156	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334745299311562"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{4881246D-4CC9-44E1-B6A2-403DEDEF93C8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5740	msedge.exe
5740	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe
5228	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5228 wrote to memory of 1852	5228	msedge.exe	90
PID 5228 wrote to memory of 4628	5228	msedge.exe	91
PID 5228 wrote to memory of 4156	5228	msedge.exe	92
PID 5228 wrote to memory of 4628	5228	msedge.exe	91
PID 5228 wrote to memory of 4628	5228	msedge.exe	91
PID 5228 wrote to memory of 5816	5228	msedge.exe	93
PID 5228 wrote to memory of 5816	5228	msedge.exe	93
PID 5228 wrote to memory of 7036	5228	msedge.exe	95
PID 5228 wrote to memory of 7036	5228	msedge.exe	95
PID 5228 wrote to memory of 7036	5228	msedge.exe	95
PID 5228 wrote to memory of 4408	5228	msedge.exe	96
PID 5228 wrote to memory of 4408	5228	msedge.exe	96
PID 5228 wrote to memory of 4408	5228	msedge.exe	96
PID 5228 wrote to memory of 5912	5228	msedge.exe	97
PID 5228 wrote to memory of 5912	5228	msedge.exe	97
PID 5228 wrote to memory of 1084	5228	msedge.exe	98
PID 5228 wrote to memory of 1084	5228	msedge.exe	98
PID 5228 wrote to memory of 5536	5228	msedge.exe	100
PID 5228 wrote to memory of 1096	5228	msedge.exe	104
PID 5228 wrote to memory of 6552	5228	msedge.exe	105
PID 5228 wrote to memory of 4840	5228	msedge.exe	106
PID 5228 wrote to memory of 5088	5228	msedge.exe	107
PID 5228 wrote to memory of 5088	5228	msedge.exe	107
PID 5228 wrote to memory of 5740	5228	msedge.exe	109
PID 5228 wrote to memory of 3004	5228	msedge.exe	110
PID 5228 wrote to memory of 3004	5228	msedge.exe	110
PID 5228 wrote to memory of 5472	5228	msedge.exe	111
PID 5228 wrote to memory of 5472	5228	msedge.exe	111
PID 5228 wrote to memory of 6180	5228	msedge.exe	113
PID 5228 wrote to memory of 6180	5228	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x290,0x7ff935b9c188,0x7ff935b9c194,0x7ff935b9c1a0
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,11468759027695475737,13490931502499487790,262144 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,4407769940124143412,10026088795209162453,524288 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,1695699722463236655,11516010222888163736,524288 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:13
  2⤵
  PID:5816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,1933187662774795619,17912613957537498711,2097152 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:7036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3616,i,14059238476247676430,8352766589335087464,2097152 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,15316129722155473918,9541652959728820015,524288 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:14
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,1277071174104221312,939865594977424919,524288 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:14
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,15904597091941985711,14384632434824760848,524288 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:14
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,15904597091941985711,14384632434824760848,524288 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:14
  2⤵
  PID:5536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,621681114748486190,17156109453284018817,524288 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:14
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,14152686344810763944,8081227840403085568,524288 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
  2⤵
  PID:6552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,8578713912700920117,18240897371918830185,524288 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:14
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,13496724742572660357,14428129980387912586,524288 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:14
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6112,i,14889769966533139429,11164920175225564154,262144 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,18214020421959185776,14627912022104159868,524288 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=708 /prefetch:14
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,8136790748200539021,3944396806126848749,524288 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:14
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,3395543731880303689,855670443260467877,524288 --field-trial-handle=2308,i,786790469724665602,1195303198920265969,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:14
  2⤵
  PID:6180

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3556

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4352

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1732

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3720

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 a2af8388bc8d7f4ead64c92e1b0ab03b0c63e639ee5d63ba86bbbf142f2872c1
MD5 994df4bcda1aa96ca977cf12cac9b7a3
SHA1 db56787d5c48f4a578e0e4e0e82a86fa3f28d0a8
SHA512 b34973d37c17ebff00ac78e3d5d190479130e3d830b3f4618ee597ef5c4c535a61ceaa917f49dbf1cd32a48d46aef86bdff09bbd0e28c4457d4496e5f02589b6
TLSH
T1D5E0C028438AC5BA8144DD07A020B7CCC9463F8B929CF6843BC574CD2C00510CE292FC
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 677a33db91feae03ac37d15ef5f2872f1d390784a0b34cc89a64c5c427de335a
MD5 1761711d1390b0a2c9306e31edb0cadb
SHA1 cc5952d41d0956b1d89c800f58ca55f50304a9d6
SHA512 414288760c86de5e14a58d7825adf71b5a9bc6e69a98a1ea3e0e97ecce6d4daf4f1ef0b4c70b100e290e28a4529c96ca0bc66e171473a59777175e7a8aed142e
TLSH
T11EE07DA907CFC71FD380644B45AC6B0C92903B5ED7CC6E8E3740C888B506890E6CB5A0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 268B
SHA256 ed9213056ae74bab1723509a60f5bff2d26eb586bac34d2fd71f1ce6e2853860
MD5 a743c3d6de41ca00ccb2cafd2fb5884f
SHA1 f457b825e75a96a9d306a3be49238c0b20ec0e44
SHA512 7edb56dd603f7d38bf5dc4235910af5ad8db833164905db50591542be6a6f2b5ddc6d59e79a0b535a1ab59473a1802e677bd8870886ae79d59bdbf14a68a774d
TLSH
T1B7D0C2A8A8ECA94ED6E409BE97A5F0100F6402820416DA120160F9C136A52E41BAA020
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 f6ada776144a22f0a90945a7fbd706ff70520e3548dec39a27b97c336be61c6e
MD5 a59991c616dc88b10317cd9f9ce932f8
SHA1 7b2035e73060b29de32ebb268f4e8d68f29741cb
SHA512 e412064aa9663ca4dea2c9598a36d988ec5b0dfca08ad646b481c6d2d7d5d7a241e1513d99c234a335eea7973a7fa95a3fef946e9729456808f52e9809bf799a
TLSH
T1A4E02BA9E960BC3719FC1B2861540747E740139B3B41884B3B3C812E4FF073B468AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 943ec5db2bf339b1977b97192be571caad35e65633034e325a42a79cb9df5251
MD5 5b83da41d870d069fad82c52da032d81
SHA1 b09a4140b3c2264512795dcc0c06091e6d23e13e
SHA512 8a0d848968b2464f13c5d864b93e68bb2191e8617e178de6f3ca368ee881746866e91f0cb4fe357ebf9b727dd33fa7f2e00ef46cb7d269dde371aac2e1e0b144
TLSH
T1D341F0F383F4866EC91196F0AA187E2FCE1C0515832C3D5A89E4AE1B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9e3f607984dde6ad5f6570636aa1a30201488b2792677a4825955b8a74d2e8e6
MD5 7b6389a25d4ec2e4dd3c2be52b242141
SHA1 b3291e23452d8e0973a3272eb7497328584d3fec
SHA512 cc785da0f8ba272a60dbfcbcb4c4fe103b13f94f4f68987bc3fb8c5094e83319acabb6efd2c954115e80902b66dc5fcd3a3862a08bfdd6b805ee22596eed058f
TLSH
T14E41E1F783F4866ECA1195F0AB186E1FCE1D0515432C3D5A89E0AE1793E3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 356B
SHA256 269f6f03068ebe570e122b3457a8f59c524274b2e7ca9f3ebfae4e63968604f2
MD5 db4d3b778387d84760d2081902bc7ac4
SHA1 b5b0c3deb0a5e5c8614f319a4e5772094865eb19
SHA512 97861b77fb00fecea47699f62ffa2d216c24519f6935044d6351f2679a6c9043fac6be6c0d1f7943135e612f1b341b15ed56040bb76289f7550c28a0cd1ebb59
TLSH
T135E026B780BAF47310799A7A0E4078822B36A434845258F1DAD6833C70C01FBAF69035
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 f2412c63ff56a558d3799314c6a9ee37bd39acfd47ce18a319512d8f65e8260a
MD5 61367338058ed7b5c5b3f111b19993b9
SHA1 eef5aa6d592c44d17653ca8ea38c99cec436e356
SHA512 58b859c776f376b0161b4275b5131a498a0e9fba452064c51ba754f288c68047a6b7484cf10bf9d74fb99c143a253f615b39cad75672c3e1d86ac9dfdcbb8143
SSDEEP 192:sxRbRmyMqZjK1Ml8wbs/fPsC1sNRZHMzoD8pe5Y/g6+WNIYcC4xbtsGQneG9IgjX:sxRbjls/fPsCqN/HkV/5IW4/sGQnfjX
TLSH
T19562D8156A349D7BCDDBD219FA95BF93D2F91133E1905E44AAFC8A0C04EA6ED210381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 0be7efe597d1da5ae4979a5fe703e292c21ab9ad7b3fa57dda70c1902763c28a
MD5 c28900a390614e0f0f3bffe80461f56f
SHA1 68414aa11dd441ef508e907a930cc5bd25583471
SHA512 64308ef0142262108e6bb6805a55642b810cbcbfac566474963bbfa9088f97d0a871c29fdabde8c0889f14d2d55ac5a275a3486f24c8fa25db8adfc80b8eec40
SSDEEP 192:sxRbRmyMqZjK1Ml8UQFbs/fPsP1hNRZHMzoD8pe5Y/g6+WNIYcC49buMsGQneG9A:sxRbjq9s/fPsPfN/HkV/5IW43sGQnf2X
TLSH
T18772D715A9349D7BCCDBD219FA85BF93D2F91133A1905E44AAFC8A0C04EA6ED210381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 271B
SHA256 2109d99093b65c1d8cf153fb2a8e400601eed3c9c3569241aa76f7f433998ba8
MD5 0dafa5722e139a107ef5adb911b61ed0
SHA1 2b2c22b0e04bc271a3b15209230aa845ecf08d90
SHA512 6b76b7fa8a2a9d97aef8db4ed66eed742361377aad76926ef7f51fd21fe4648511246d2f05584fd7c236f592174a8411a0ae69e6eeed813c9f6181b44f61b99f
TLSH
T134D05BB718E70414FD7B97D5607144E5450178A99945BC9E643883C718D17253416C26
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 bed78e3e5416870f29a3e6d1569b2ffe6205775fe50b6f6495e670fca6418a9f
MD5 ffdd97f499c851655b1f0756019efc07
SHA1 35dfc727d544b7c1b889a2f2f03878840704bc95
SHA512 ca10e5ba5fe1ddd17aa23d66c716056ba5638dd6ccebc705e61d45b4c59ad11ec4fd3b3a19f79e333aba3341c53e1deb7ed218104308297cae5ca91a9230aea9
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9pFJ:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRs
TLSH
T18EB26C11713F4690387EB90C91B9981F86C2B4637119F52F7BA802A65F67E138DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 50bc5fea9d5bb017c95abbd118d0d922b198376dd0a9b3550f75dc4a42f353c0
MD5 cbc7b2daa54f137de48da72cb3b0a6b0
SHA1 7ec62811a59947caee15fbb28d136cfef6143364
SHA512 56152a4a7a0d24a22727bdcba94c8b50e4d2015af6d8b10efa524258932efd186f3a089313c54fed153c789a8d5e3dbf9f1b664fd3ae79c003ac94b56482676e
SSDEEP 384:n6iFiZcI/8NLa8TUNTUlIRaPvuTZLuenf+GGeuXkdLPb2sa+VYY8LEEIzko4:xFQ/QawgsuhDGeuUh2hgcv
TLSH
T171C21A32EC54DEB7ACE68BD5AB097606DEF0526385CCAAD4D6D95D0D00DB2ED030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 8e3cc1a5c31a9fd3aa1768e271bf44afb5040dc0b273462743e958c5e2ad1837
MD5 c398e637ea03075efbb02cd5dade3d2f
SHA1 d77b9ba36bd015b4ea3f7a0fdfa203f3e34b92e9
SHA512 3e6e80be843359b28f456c399967a815bbf5bb788c4e456271477a67a61827475e2c4086687023268608ec3461e553f45f74d272d6375318d5827dc31c40a6dc
SSDEEP 384:nJiFiZcI/8NLa8TUNTUlIRaPvuTPLuenf+GGeuXkdLPb2sa+VYY8LEEIzko4:gFQ/QawgsuPDGeuUh2hgcv
TLSH
T1C1C21A32EC54DEB7ACE68BD5AB097606DEF0526385CCAAD4D6D95D0D00DB1ED030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 5471bbfde7ed58e6659b720382420ca290df5b50b8d367d167d27c9199ab9957
MD5 e9baa6ed8de08d3a2155a5ab638de9f9
SHA1 80070ed2d8a6cbcbd44fa8e31072314fd710890d
SHA512 2d2e54d43514b8166f33b6de62480c1cbd7bbea27ac66cbe51bc61feb81a3abee0b7bd38b7e5f72f6d7ae2029b0877afbce160cd4072710d2b854f248f23c4e2
SSDEEP 384:nyiFiZcIc8NLa8TUNTUlIRaPvuTPLuenf+GGeuXkdLS/2sa+VYY8LEEIzko4:5FQcQawgsuPDGeuU82hgcv
TLSH
T1FFC21A32EC54DEB7ACE68BD5AB097606EEF0526385CCAAD4D6D95D0D00DB1ED030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 04942077b20d3c957c6b3f38255f80983d09659ae904ce3521f073511ecd81fc
MD5 5b19cdaffc47a618c7eb645a423e2bc5
SHA1 3c05a3f29e0724f4a090830abc01bed453c97fcd
SHA512 f159a527dbacc24fa305151e344c9f28a8b2d19c35288a536daeb5d71692b38c3947c89618584ded94808343d4d3b5c8da6732a40f88def2c228e86400450c61
SSDEEP 384:nQiF1tNn/s3n9Sn8NgP8TUNTUlIRiPvuTutRenf+GGeuXFL7OObjI9G6w7tr8LEk:rF1j+9SXPwgUuIyGeuh729MZM
TLSH
T1A7C24A32EC59DEB7EDE68FD8B70A7A16EEE0126785D85AC4DAD85D0C00871ED4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 2bc25a3495f61d853a12a94f283a3b35157dda8b1f0e533164b5f89244709008
MD5 ba1e1912e215200813bb1ba07ba54658
SHA1 cc824498443326ca81ac4383fec0b33614a833ee
SHA512 bda6664e0cfafbdcc2898df22fbce8e05b4c60041bc7046550f26fcdbb82e60a3da45ba8897f559a5f113bcd677938ae5b4f91eb2e33fe72baf0996b977eef9b
SSDEEP 384:n6iF1tNn/s3n9Sn8Nga8TUNTUlIRiPvuTsfuenf+GGeuXkdLPk2OObjI9G6w7trU:xF1j+9SXawgUu8DGeuUS229MZM
TLSH
T1CCC23A32E854CEB7ECE68FD5B70A7A4AEEE05263858C6AD4E6D85D0C00DB1ED4707C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download