7aed95fb68833d2f9018d1bb7d7fbef6000dd0594706bbf130b518364b461be7

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 24KB
Sample260925-ppntjsssdw
SHA256 7aed95fb68833d2f9018d1bb7d7fbef6000dd0594706bbf130b518364b461be7
MD5 66c1f7fdc0a3af5019e8c65cfd63f2dd
SHA1 6f6d4a46b73af2e77a95d4ba3749789f9dcdf428
SHA512 9a82db25c0f5d2c10ccdf68e6f6d5b2c582322aa11dcab9995371a0b33920f83fc7f1fbb24ae5fd15e52178d1a9359d211a653d60ee0bcfbfb019b3e1e868606
SSDEEP 384:Kmn8yKtLTAXgbzm1PM5JBcPAwtlxqxRhFjxHtgvxHthNCmAjs/QEuZE6ErpeSzEZ:Kmn8yKhaajaKdRZrlX
TLSH
T1ABB20BE143DC5D9C2B699268D7A572E5233F88F13E182CE4B67F28349042D5AB233DD6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3016	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134348130587145726"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{AE886771-2705-4135-B847-641CF0749526}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
800	msedge.exe
800	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3908 wrote to memory of 2752	3908	msedge.exe	86
PID 3908 wrote to memory of 3016	3908	msedge.exe	88
PID 3908 wrote to memory of 1984	3908	msedge.exe	89
PID 3908 wrote to memory of 1984	3908	msedge.exe	89
PID 3908 wrote to memory of 1984	3908	msedge.exe	89
PID 3908 wrote to memory of 2148	3908	msedge.exe	90
PID 3908 wrote to memory of 2148	3908	msedge.exe	90
PID 3908 wrote to memory of 2244	3908	msedge.exe	91
PID 3908 wrote to memory of 2244	3908	msedge.exe	91
PID 3908 wrote to memory of 2244	3908	msedge.exe	91
PID 3908 wrote to memory of 1116	3908	msedge.exe	92
PID 3908 wrote to memory of 1116	3908	msedge.exe	92
PID 3908 wrote to memory of 1116	3908	msedge.exe	92
PID 3908 wrote to memory of 4508	3908	msedge.exe	93
PID 3908 wrote to memory of 4128	3908	msedge.exe	94
PID 3908 wrote to memory of 4508	3908	msedge.exe	93
PID 3908 wrote to memory of 4508	3908	msedge.exe	93
PID 3908 wrote to memory of 4128	3908	msedge.exe	94
PID 3908 wrote to memory of 4128	3908	msedge.exe	94
PID 3908 wrote to memory of 4740	3908	msedge.exe	98
PID 3908 wrote to memory of 1484	3908	msedge.exe	99
PID 3908 wrote to memory of 4740	3908	msedge.exe	98
PID 3908 wrote to memory of 1484	3908	msedge.exe	99
PID 3908 wrote to memory of 3812	3908	msedge.exe	104
PID 3908 wrote to memory of 4616	3908	msedge.exe	112
PID 3908 wrote to memory of 3812	3908	msedge.exe	113
PID 3908 wrote to memory of 3772	3908	msedge.exe	114
PID 3908 wrote to memory of 3468	3908	msedge.exe	123
PID 3908 wrote to memory of 3468	3908	msedge.exe	123
PID 3908 wrote to memory of 800	3908	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffd2f29c188,0x7ffd2f29c194,0x7ffd2f29c1a0
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,15072858417123645228,2489865548762013748,524288 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,5031778685497043697,10545934721733307676,262144 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:2
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2292,i,11410043000374140336,4026161627422286017,524288 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=2948 /prefetch:8
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,4760051872801434068,3594457159651943121,2097152 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,9780846188076386252,18348100860053516339,2097152 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,10584577600059445163,9955929954360791253,2097152 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,16179873451931545169,3523405558187135190,2097152 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:2
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,5331381839057504982,6784085253011153967,524288 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,5625310915115686736,9752806887589864879,524288 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,2404140716201030183,566107544588362242,524288 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,2404140716201030183,566107544588362242,524288 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,3716304353509756088,10761926395377073556,524288 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,15710365224814444939,2858933754731398006,524288 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:8
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,15008825808004364029,1760126363380703537,524288 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,431761898389153060,9307237664362475727,524288 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5976,i,14028939219568673158,4338057967970694412,262144 --field-trial-handle=2896,i,1147092805756012486,1776287610803394826,262144 --variations-seed-version --mojo-platform-channel-handle=4012 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:800

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 25559293c954898f2da344ed5fe3faf3c076ca2a1868befb99178bedacb3d026
MD5 7921e958d547711c39f2211be9d582e9
SHA1 d327f17351a129da59733ef73c24b256addb1b88
SHA512 29c83b34cc319b93140a7156f0e4fd32fca94b626b32f9aa46eb5471603b5bab4338ee0313db91199b04ee0ff93fc3dd5d552299e129f6c1cd750f4211244525
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7E:fwUQC5VwBIiElEd2K57P7E
TLSH
T117B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

2f02cf32-b1e6-48b1-9b6d-f4799e747689.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2f02cf32-b1e6-48b1-9b6d-f4799e747689.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88d4b045-1d52-4f2d-8902-82f1e5f9fa2c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\88d4b045-1d52-4f2d-8902-82f1e5f9fa2c.tmp
Size 9KB
SHA256 52926af28ee238fd92983b50408061779c55a89f801aae8d840021f9d50150e6
MD5 5050d3e1268a29618caa8327fed4edfc
SHA1 f94fe40266068f1a187816c5244c2f364d54e49d
SHA512 6b65b0eb864df253cb86041b2a9d19c95272d2453f9d418835be56e5b232aced7ca100e9b2ce2a716e310dbebd9236c265e22f9a7406af5865ca9fd4671b151a
SSDEEP 192:sxZlRcWN/fCxsZvIdpd7oHW6+WNGYrbrhIgrJ:sxZlFN/fCxsZAuHbGq9
TLSH
T14C12B7566E28A97B8CCBE20DBB19BF13D6F9503251941E44FAFC961C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1379250934adf3431126c3aa59e9b0a350d7666f456e892253ad30f9bc925331
MD5 59713a47f9de0a8d750a9f6b18f02fcd
SHA1 d53ee6a8124616c19df2b2143b9cdedab1d3bdc1
SHA512 f335860cea45fba24a2e6a2a9729bc2c4461d92f78b860a3fcd414115a37504730c87d7a939a35a8a6e0ca3884be2b0d3bae2aca026a8d2c14c648475b366f05
TLSH
T17A41F883E7F5B094DFAB473188D114B7363898B2ED43ED12D4B8C0B97B4EB0692042A3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 a7821d56bf500378bb20853fc2cc0fb25ae95ea47135841b9344894dc7bd354b
MD5 0368fe8120fa6b2fdabc3c819e3084e3
SHA1 2c510f0ef2780626346ecbcfa00bb551343c57db
SHA512 b9c5682044319010eefc867dd2b89a5e7f23d675abd51fc16e12ded6ff0a9649c34d93f6b09d7432893a0caf6862f217dbcadffcb7f7e98a48a20900145e4c44
TLSH
T173117AB7C3D585AE891116F06A28AE2BCE2D0606421C7C19C9D4EF6BD7E3075E10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cb000622a99f481686ee629e3b425bd343c47a643c8b8e202e4a0e9ac4801814
MD5 54c1a5b9dd6abbb0d29387ff5b9c7497
SHA1 597764190c7e83c2a087b9dc04a8023b9356dec9
SHA512 8ee83ee9dd8337dd6b8a3575ef9015ca79ae6ab4ea79ac2d798ef2415eceac6bb7f1e9f67315301655d9834170d788d238414011328725ce31b481b626f8567d
SSDEEP 192:sxZlRcWN/fCxsBsvIdpH7oHW6+WNGYrRrhIg53J:sxZlFN/fCxsWA8HbGuj
TLSH
T13F22C85A6E28A97B8CCBE20DBB15BF13D6F9503251941E44B6FCD61C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 2a194619666d1508a1d5bd2018976ac76873ab3cc8a4711ec865c3bd78633bad
MD5 c28157f741fc688dcb52acbef558d2c6
SHA1 26f06bd82ce21b29f8ea8de69c6929b1fca2c95c
SHA512 51fb62dc50e121623bff168a73cf611a3ef8fc76a214d528b69b25b23a43097db5b8cd5dc9f7e99732b036391b9299845808a8cdd6d5f4cb5ee041faee85ddf8
SSDEEP 192:sxZlRcWN/fCxsB5vIdpd7oHW6+WNGYrbrhIg5dJ:sxZlFN/fCxsbAuHbGqt
TLSH
T1A422B8566E28A97B8CCBE20DBB19BF13D6F9503251D41E44B6FC961C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 633e11687123032cb039367812d3ae34ebfc332e8c3874b6c07cf044021296a7
MD5 acea8255a4e362d58e5df5b3ee20c4be
SHA1 d1418f319f996ad5d01cec86faa3d33d6d6f4a21
SHA512 51993ae605aa8fe7eefa7e16acce0e3f7585b4e571d26f684dd8d8646c54376be5e953eddd83a8567ef867b20485d4b85ffa95d61ab74a8f72d7fb7ff9ae9b2c
SSDEEP 192:sxZlRcWN/fCxsBsvIdpd7oHW6+WNGYrorhIg53J:sxZlFN/fCxsWAuHbGZj
TLSH
T1CF22B75A6E28A97B8CCBE20DBB15BF13E6F9503251951E44B6FCD61C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 c144d48525c25b42321a40d593fa50bf1ec4dbe7658ce0871dfb5460d86963da
MD5 183785ff4ce2524ad650c05bf63b6a8f
SHA1 b9cbbb572845d4eb45930360be8d999ed8e8e709
SHA512 97815b64a3d1da1f7eb1b4686ee681b6c7d0e1bbae7d73859b734600de64cbce71e7551316979f893f501b2f88b207032fa9bd930ee229860eb7a0364fc7d889
SSDEEP 768:hGy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbSroRNB:hGy4J/DWvbtBhu1jajiLm0bJLB
TLSH
T130C2FA3F684CCA7E4FC00A9DED5E6F973E9802C796948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 5ac5d5d5a7feb7a70bab4709276c689d3c399b4f2d4431f45e5110017ccaa2f7
MD5 6de52dd86434c2dd05cbd96564503760
SHA1 95c71f0e9f84c67fa8324f6d9453e82d1de0435b
SHA512 6e4f2d512291b0754255cde3d89833b80e38d0d0417f119c47a00af947c84c935c90c390b8c75e810726f1bade59907c1e90e396e058f874b10518a491c5ee6e
SSDEEP 96:KIDCKs0+aCYKjilmBA9xvDnk3DePdJkKlBdHk5Rx+vzR6KaM6qEQKxyt:E53smBA9xvDn6DelJFBdHKRx+v21vq
TLSH
T154E1D05234B7020038BD769981B5872A52433677305AEA3BBFFC40A68E6BE445DFE5CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a36d0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a36d0.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 24c6ecfbf46b5b4b71153bddf3abd82db8d42ec360817a4708efd941b2c4118e
MD5 3f4cc8497e4355b0e49704f3993eb855
SHA1 aeb773c2f4e7ed79777c2947c50457af8193ed54
SHA512 71235f5ca5976a9487bb7929e1d688aeaf352a1a48f11b0c5a2a067564e5d742e201c50477245f56ceb618b0c56b734d77d86b4ffa9c8a5c45e68d9c45c1a24f
SSDEEP 384:1ZcIhsNKD5YOCZLR0HX58EzO/AcJtgOIwZOyz+oI:NhMDbaakO/PJXsjP
TLSH
T13A827C36A9B8AD372DFBE144F58726039FB86067D6857F80D5EC6B1D01DA2A8130BD06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a7060603197fc993ef347616e63dfa98b44889e00c53c0edc6d2a96bdeac0381
MD5 953d377770e7f7730721127a8702ba1e
SHA1 194528fd7797047f09531bb2ff7daa2418bd3a33
SHA512 71ac4d529f9f91a1562cced5bd1004b557525880715c346bd1c935f524271a57ef8f2b0b7296142aec7cb5a8b91609af230d5bba20b6da7b056484f80d6963d8
SSDEEP 192:1ONz6wlDnQmiUyoTU4X58gZrvOKGPaNfveN/PU6:1ONz6kJJU4X58EzO/A+JU6
TLSH
T18F121836B9B8BC3B5EE2A544F48735039FA95127DA4A7F90D6EC2A1C01DF26C130B913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 1f76d0c11ed3db3ec81a5b309878551dc0ffa2dfe1e0bec6563d316cdf958734
MD5 9853d598160894eca15b3f7746cbf9c8
SHA1 6b67f957797678be07b6311a96e8f32461653223
SHA512 e61e2cfc7eb25a9b28a8cfb9f206f477d99f8a1eec1a1a1620437f8b44470155eaa5d56df32791d949c7a9970480ba6f3a5725f572c467b3602a5f1cc42574d4
SSDEEP 384:HiFiZcIR7zsNS8TUNTUlIl45YOCZLR0HX58EzO/ArJtgOIwZOyz+oI:CFQRvvwgdDbaakO/eJXsjP
TLSH
T144A27D3799A8DE7B7DFB9A44F58A32038FB85067C585BB90E6DC6B1D019B19C030BD06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 53e6ade4e04028195dbc6b46ee7985f99c1c2c036883a422fbb91fc90606cc64
MD5 4e6a259c9927b84a14360c5286024a8e
SHA1 11ef0098a4708534e1568f632dbc880774245f5f
SHA512 cfb55882bf70511a52e1d0593c27cdd1aa1dd1b86dd79e4a2802e6e64e9b47893ccb39cd36beeaa6644bf3308330637741feae2b8c758fb7f8d4e7520431a70f
SSDEEP 384:VZcIhsNK45YOCZLR0HX58EzO/AcJtgOIwZOyz+oI:thtDbaakO/PJXsjP
TLSH
T186827C36A978AD372CFBE144F58636039FB86067D6897F80D5EC6B1D01DA29C130BD06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ddeb3feb7e5a6bef1f43effebef2cfb6f6d608a501ac8fcbd13dd64a969f2ad0
MD5 6db50bb911121238689b2c3257fde1e1
SHA1 9fcb8121fe8c9164f04f41b944e744f8dc9df75a
SHA512 1152d177266006bfc30a17061536fee4f8c1dc465a0fea7ca0b7e7ef4d38cc0b5c117c937887ebb6a436923be14424825e0dc5e442e99ea3f3a57a927b877265
SSDEEP 192:1ON36wlDgQmiUyBTW4X58gZrvOKG/DllvU6:1ON36kgyW4X58EzO5dU6
TLSH
T17502EA38B9687C7B9EF7AD09F58736139FA4202BE6556F84C6E81A1D00D739C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 39ebba22fb0f992983d8878514c1e673acc58f49b238495174371637f06621b7
MD5 43439f202ade8460d9ef26030e38a9f2
SHA1 667e46bdf262a7aea8914dd2c7b7d079049b2f68
SHA512 a570dd2f54b53f3600b9f6c67ee86c7e9bc409d49624aeb1d64ede3dd96bc038370855d1825a0029f9cc524d8ad4e9d01a77382a76e680ce37641a21a5bfd70b
TLSH
T1DB41065CB6EE1048B3B76E169BF6A86D487F78372E06D56D00110D4F0A22B41CD71737
MD5 SHA1 SHA512 TLSH

Submit Download