90ba593a72aad7879b22e82a86b3cdc89b2b2e242840a39c1118386c6252a2e0

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 26KB
Sample260729-w2srlassav
SHA256 90ba593a72aad7879b22e82a86b3cdc89b2b2e242840a39c1118386c6252a2e0
MD5 64ce179e121dadadefbb6383cc6d5868
SHA1 a81061649639fd70b93052e8f9f688eee08f3d17
SHA512 b555c63b89f621f4bbeabf3b200378338b39e4a90873fa4ba645ee9ce97d08092a9ad649565de1382f59537c3fff2d4c9c7ecf6f8264832aff92d1edf5668936
SSDEEP 768:RZBsjBjrAyhtbgt4MiIO/5/9SLtl8mVW/8mVWJQZ:DMMZldmdym
TLSH
T1D6C2B36542F21425495320359FBF6F04B6B54B23658CFC08BD8C9580AFAEA778DB7BE0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5032	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298231378104455"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{A9E96B43-021E-4288-82C4-199762E36308}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2060	msedge.exe
2060	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe
1712	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 1712 wrote to memory of 4640	1712	msedge.exe	86
PID 1712 wrote to memory of 5032	1712	msedge.exe	87
PID 1712 wrote to memory of 2320	1712	msedge.exe	88
PID 1712 wrote to memory of 2320	1712	msedge.exe	88
PID 1712 wrote to memory of 2320	1712	msedge.exe	88
PID 1712 wrote to memory of 4168	1712	msedge.exe	90
PID 1712 wrote to memory of 4168	1712	msedge.exe	90
PID 1712 wrote to memory of 512	1712	msedge.exe	91
PID 1712 wrote to memory of 512	1712	msedge.exe	91
PID 1712 wrote to memory of 512	1712	msedge.exe	91
PID 1712 wrote to memory of 4040	1712	msedge.exe	92
PID 1712 wrote to memory of 4040	1712	msedge.exe	92
PID 1712 wrote to memory of 4040	1712	msedge.exe	92
PID 1712 wrote to memory of 2516	1712	msedge.exe	93
PID 1712 wrote to memory of 2516	1712	msedge.exe	93
PID 1712 wrote to memory of 2516	1712	msedge.exe	93
PID 1712 wrote to memory of 220	1712	msedge.exe	94
PID 1712 wrote to memory of 220	1712	msedge.exe	94
PID 1712 wrote to memory of 220	1712	msedge.exe	94
PID 1712 wrote to memory of 1816	1712	msedge.exe	95
PID 1712 wrote to memory of 1816	1712	msedge.exe	95
PID 1712 wrote to memory of 1816	1712	msedge.exe	95
PID 1712 wrote to memory of 2816	1712	msedge.exe	98
PID 1712 wrote to memory of 4468	1712	msedge.exe	99
PID 1712 wrote to memory of 2816	1712	msedge.exe	98
PID 1712 wrote to memory of 4468	1712	msedge.exe	99
PID 1712 wrote to memory of 2648	1712	msedge.exe	101
PID 1712 wrote to memory of 4660	1712	msedge.exe	110
PID 1712 wrote to memory of 1048	1712	msedge.exe	111
PID 1712 wrote to memory of 4908	1712	msedge.exe	112
PID 1712 wrote to memory of 816	1712	msedge.exe	113
PID 1712 wrote to memory of 816	1712	msedge.exe	113
PID 1712 wrote to memory of 2532	1712	msedge.exe	115
PID 1712 wrote to memory of 2532	1712	msedge.exe	115
PID 1712 wrote to memory of 4144	1712	msedge.exe	117
PID 1712 wrote to memory of 4144	1712	msedge.exe	117
PID 1712 wrote to memory of 2060	1712	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8026cc188,0x7ff8026cc194,0x7ff8026cc1a0
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,12073522744931714835,6862712065497302239,524288 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,13670779918486038136,3992074266514892300,262144 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:2
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,10002525311440507043,751971059338001048,524288 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,7875644871413627905,5714649651837484611,2097152 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,2016955203498586539,12482823758510875538,2097152 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,1271756910240964649,193687379535887519,2097152 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,13772269560715782440,7817703120535417496,2097152 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5068,i,7115739779238579961,13040644497740852236,2097152 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,17183969966781513572,8179447302391479524,524288 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,10591949824156056895,8179361165346335727,524288 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,13437828850958352440,9249052136528395393,524288 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,13437828850958352440,9249052136528395393,524288 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6396,i,7906593928894536053,2153334043244802382,524288 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,16915556499674045914,16349785552306059063,524288 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,11129813935043991261,16167979357332791935,524288 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,11339648325198932701,7777113303031659516,524288 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,4651425900164611046,12559616428528323338,524288 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:8
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,15494563096383759965,371194274541257578,524288 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6288,i,7968681086520093060,5642489586272911251,262144 --field-trial-handle=2176,i,11620859526389305151,5133465180279579762,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2060

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2280

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 563B
SHA256 83c48771b5dc423d286fac285162f16b26ace50ba1310972f31fb66868fb0584
MD5 69597f080a1c6d2b1b001b1c4f1668b3
SHA1 ac7f5f9fead1b86549b2a752c8d2ca9aeec253f0
SHA512 56a035d09cca153fa858e178e71d98f528cbecdcfed9741d17a5a783b719624616032e022ae20c35bd8f16418cd7de91a28198751b5897b72c3271f0adf5bee5
TLSH
T18AF0469D56C4C67B5309F187E16C6328225DB24BEBC8D999330CB69A6A0204263E73D4
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 3162af488c283bbdb6565f4200727821b4e60ce0c47948b8d5b3655271a2625a
MD5 7b9f1e9c5ca7be7a0fd051116a616b72
SHA1 8a88b30a2e0c8a2c94e5512f0a5bb56573a6d8b9
SHA512 2c13705b178f640305a8b7685e6b6a7e49374c53b0713e7e54da2205c3c290a3f79ad3280c111728c5383ffc23941c73a23b34049e67b876aa1915e6e2992364
TLSH
T183C08058798C845DC280187FA726F400177155115817962705A1FCD031406A01F2D124
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c6d4130aea6b6839b38551902d17dac34f45be69c9c5c63fe48e46663533640d
MD5 cde47c7ec748ffa6ae33550a09262844
SHA1 523ecfb50c476c04e47e71437335dea80359b64e
SHA512 e08f9efae728d1a49e187e743f747c7ff563d32d41c5108af26b655a721f78e78f002c8e02b6edf537f7052b3f447a04c84e402d9f0710a571e48b5a99613b30
TLSH
T1B2617FFA061220A3E72C8230E4E38615367BC2551EA72E46CCBC867D79C7F50FF69149
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 320d5d1013f79df73a6b7d6f965fc4855b41fcbb0f9e7e271dc8b79868769813
MD5 78fbbf43c3b1bea20404c88b0ff39f6a
SHA1 b4604012a49acc2da764bd003e07cd59dc1e441b
SHA512 cb3a296340283073b9b68e43a8c9e036dea8f7be66cc19083a0c84a70240794237d57f129eb929c6387db0733a18e7c8b7fe507307bafcbd5ecbe7b320f882db
TLSH
T18D516AB7C2D4477E881622F15A25AD2BCD5D160B422C3C528DF4EF4B63E2571D20365F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 bc1867417f137cb557ebe4d90b82b338db7336a465ce7eacd6cf4169234aad47
MD5 5ed403e6a3942c99b018c22fa6150e14
SHA1 f68dd4b0be518d8012b9aef12a750277fc24ca07
SHA512 23f4b826cd6199af85bcdd202d4cb168f7e210474a85f932baba87e20cad74346eb4225633992de04cabe6f7bbcae2f8089ac06a5db60a1a3f29e33b88a2a2c6
SSDEEP 192:sxZ9RfyM/jK1Ml8UQOk9/fpstMj2IdpHEHW6+WNGYHwXpaIg57J:sxZ9Jql9/fpstMj3kHbGQ/
TLSH
T1AE52D816AB349977CCDBD209FA557F53D6F50476E2900E44AAFCCA0C04EAADD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4bbe2a400d343a8d221a407a587d4b535af976695b48c780ccc4676f0b00648b
MD5 165ca47f18ae2f5e3e48ce0348340a44
SHA1 5fbaf68f3af2fc3b520be6e1505a2225084c4e2a
SHA512 36173a30b8b5e28c0c68fbb4ef6568fe8f097bccc4fb01d4e2f94c6ddae7333e15ca4c2bcf3942ff87dda1853c63a1b6cf813cd290a3ec298d17a108ba702e9f
SSDEEP 192:sxZ9RfyM/jK1Ml8Mk9/fpstMj2IdpdEHW6+WNGYH+craIg57J:sxZ9JM9/fpstMj3yHbG1/
TLSH
T11D52C716AB389977CCCBD209FA557F53D6F55472A2900E44AAFCCA0C04EAADD231781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 957b44ff9a40b3d9928907936cbf150de2c4039ead3457076814ebf6d455cea1
MD5 e04461e5ccd1714b32dbad7c96f53360
SHA1 f2f32c45ae95e0a45093f6cd4ce373ccc35bd4d7
SHA512 5b5d5262cd212e5811befb68b12cea0ef209431cbc7e236095e8952a2e70461f5cb983e29135ca55dc4ebd585ccc4d57c49bc248c24e99b99c3870fb0d98481d
SSDEEP 192:sxZ9RfyM/jK1Ml8Mk9/fpsqi2IdpdEHW6+WNGYHjgraIgrJ:sxZ9PM9/fpsqi3yHbGc9
TLSH
T1C142C816AB349977CCCBD209FA557F53D6F91472E2900E44AAFCCA0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b80c18a24582e6866f4019d0748bf45b816e82dcedb089d9f2e3b94b5cb32465
MD5 cf00e91f682e8fc1da9a6c1ae9b81754
SHA1 5205d49dc4c768441d43a199539bf6b398881974
SHA512 32b78a502dab1c51bf15a2d302e69a8d619291311e1ba71930d9a70ae1311343b617fdabac0552fbf47a50769344687a49fab1efd645d8f5ee36f1182c72331f
SSDEEP 768:ArUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RfroVt0L:ArUZYTMWvg0Pou1ja7eLZmRMIL
TLSH
T142D20B2F280CCB7E4F844E9DEC2A6F963ED801CB5A584D5447EA894C03CB6EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 757f1aa6c469dbbd9500af0c4450c42967e03301e82255c5ff957604202862e7
MD5 d8f71d445b03c1a2d7965dca1f3ae84d
SHA1 ac4df3d68821195f61015272981ff4143e871b44
SHA512 c35f2dbffbf12d943c405d842361688104a92fa6daf40a52af88480ba43d369b7ee5931b677b6c05e8e49f7bb7394e4905e7f734a13ed25235ef0ce04c9baca2
SSDEEP 96:KA1eK2A84YKR+Ou7KKsk/LqK4gyufOKYA0:EWX5JB9l
TLSH
T112D14A4A70BA02423C7D2A588394975A8ED275533028B42B7FAD01B55F67E31DEFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 dcd07b13d88b104483e0d54f24a8588e9a90fb291e49085948a8cfb477a2fbc6
MD5 20384fcca8cd686b9cbe57455eb7cea7
SHA1 7a7c76875e7c4a6636ee8975b24cb85cb3f30314
SHA512 edc6e9ea7db7337e4d646c7fb3840a7f93dbd3065fa72c1b1326766749c4d67b8774acfa4ed83afb426ea18f0cfa034fe22295418fc0a20fc3985056bf1d23c8
SSDEEP 384:gZcIhsNGuDQhO6fEzX5od+l8yBX0d+2DCFScjmw5zr:ehL1fcO+clDCF1jFf
TLSH
T120927D37AD289C669AE7E146F84736139FB850B7DBC85B84D1FC5B0C00DA5AC031BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 8b19e237e8c03f6aa8ae115eabff497194f2553d2462a4c7b31896d7d515cb39
MD5 3888d1bf2099db42647ca999d7724387
SHA1 906bc02d152940fd21f82bea7527f8becccc976d
SHA512 2ef10af7dedc0d264acc93958523f1253b016495ca2a230933efb6068c24bfd8ac9c4a39a7b90bbfad22f75b3f14c20e7f69b08e14a4397aa863e3bb12c7d3a5
SSDEEP 384:EZcIhsNGBDQhO6fEzX5od+l8yBX0d+2DCFScjmw5zr:ihE1fcO+clDCF1jFf
TLSH
T18B927D37A9249C669AE7F046B84732139FB850B7DBC85F84D2FC5B0C00DA5AC031BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 bbf4a77908b81a04da2bb8cc7080fb9878c9777ad9cb2b6a00696cb4e0a8c63e
MD5 4853325cc303bfafc62e3d05ac0a429d
SHA1 095ea4cfbc42c3a93ee772edada3228005396407
SHA512 b1d8ecc0e0ed45fa62f799f9a105d93ff0becc3d6ff9624bf0530a245ec6c274b7703a0651de3782e6fe954b27ba16e3d3b9f432223793b327265f8b50dc6ed8
SSDEEP 384:RZcITzsNGBDQhO6fEzX5od+l8yBX0d+2LeFScjmw5zr:53E1fcO+clLeF1jFf
TLSH
T15C927D37A9289C6699E7F146B84732139FB850B7DBC85F84D2FC5B0C04DA6AC131BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4296247bf4ed0d58e0eafb27b9032fa5255e0fac5e3257dc5c8b07c7b383c93b
MD5 ac5f9d0e79f59bb9165b1df018cfcccf
SHA1 7dc2a5d363cbb05e0ee086587bb6b3869a7240dd
SHA512 cd241eb545f08ebfbbda90bd505b20b6c0dd9d8902311439d564864576b4461f1cd4c9e9a090919a45063dd435f167534225e7c2abe02adf121f9d9216b0413e
SSDEEP 192:yON261VWQmiUyvwgGX5Obd+j9jzoryMmM/aY3Q0U6:yON26WZgGX5od+l8yZn0U6
TLSH
T19102C735A8687C6B8EE3BE49B48737135FA4217BEA946F84D6E81B1C00D765C2347C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fe95c75809a65747504a94a3b606978a3fb6857c6ded647d7d78816951ac398a
MD5 fe6e660bbb3466b8d6570475adb76f72
SHA1 e81e01b4710969ec937c2f0c4ee786e6be3d6ce1
SHA512 cc300f743ab87b25a4af2c401a221e785e072ff980cf4c209886c9356169e9a6967a9283c1f1a485fc3b5f5e418ca7676d4f8d7da84e44822043adc4cc119cd4
SSDEEP 192:EONP61VWQmiUy6qwEGX5Obd+j9jzoryMmLXQFd+2FjJSq1U6:EONP6yPBEGX5od+l8yBX0d+2XFU6
TLSH
T16C120B36B468AC675DE3B545B48732135FA5116BEB896FC0D2EC1B1C01DF6AC231BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

668599ad-96db-4722-bc86-783ec82813e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\668599ad-96db-4722-bc86-783ec82813e1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7a53fa787343bfbb67a060bce46243cdc5c9dcf0b838e324923571449e879e03
MD5 0c867a5c36204e6371b86defbe537842
SHA1 562bf9371a1ee8f385f180be6b16ad69b08c6a72
SHA512 ea018ae650a0adb17428e05b765ea126349a0b80120bee1746904f1374d09bd0f50ded1ad114bd7e914c5242b057e27d2c33e77795f383735e844b984780fd9b
TLSH
T19A41F858B6F91148B3B36F569BF6B46D447BBD772E06D49E10010E4F4A76A00C872B37
MD5 SHA1 SHA512 TLSH

Submit Download