dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260910-prf7gstbme
SHA256 dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84
MD5 cb1fc49764c26340f3f059f7fba932dc
SHA1 dee6828bc5016de3a1f5fcffc7509ca040daace5
SHA512 a06e656cf0e0a49dee6ec593eb303b1660d7c64cdaf6dc8db2f3f4c1ab7d94f1f35921524a2d8e6733b7161e1a20a2ddf5e4d8d1c580461f3c01eb02628b52ab
TLSH
T1BB517272E192643BA127C5DE7070939EB0E6C402C7976A176DFD9378CACAE939B1134C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
412	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335172223394314"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{A35AAC5D-41ED-45FC-8B05-EA4AA617B8DA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3884	msedge.exe
3884	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe
1292	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1292 wrote to memory of 3880	1292	msedge.exe	87
PID 1292 wrote to memory of 412	1292	msedge.exe	88
PID 1292 wrote to memory of 3580	1292	msedge.exe	89
PID 1292 wrote to memory of 5064	1292	msedge.exe	90
PID 1292 wrote to memory of 3580	1292	msedge.exe	89
PID 1292 wrote to memory of 3580	1292	msedge.exe	89
PID 1292 wrote to memory of 5064	1292	msedge.exe	90
PID 1292 wrote to memory of 2192	1292	msedge.exe	91
PID 1292 wrote to memory of 2192	1292	msedge.exe	91
PID 1292 wrote to memory of 2192	1292	msedge.exe	91
PID 1292 wrote to memory of 2972	1292	msedge.exe	92
PID 1292 wrote to memory of 2972	1292	msedge.exe	92
PID 1292 wrote to memory of 2972	1292	msedge.exe	92
PID 1292 wrote to memory of 4116	1292	msedge.exe	94
PID 1292 wrote to memory of 4116	1292	msedge.exe	94
PID 1292 wrote to memory of 4116	1292	msedge.exe	94
PID 1292 wrote to memory of 932	1292	msedge.exe	95
PID 1292 wrote to memory of 932	1292	msedge.exe	95
PID 1292 wrote to memory of 932	1292	msedge.exe	95
PID 1292 wrote to memory of 1908	1292	msedge.exe	98
PID 1292 wrote to memory of 1340	1292	msedge.exe	99
PID 1292 wrote to memory of 1908	1292	msedge.exe	98
PID 1292 wrote to memory of 1340	1292	msedge.exe	99
PID 1292 wrote to memory of 3816	1292	msedge.exe	101
PID 1292 wrote to memory of 2512	1292	msedge.exe	108
PID 1292 wrote to memory of 1804	1292	msedge.exe	109
PID 1292 wrote to memory of 3628	1292	msedge.exe	110
PID 1292 wrote to memory of 1612	1292	msedge.exe	116
PID 1292 wrote to memory of 1612	1292	msedge.exe	116
PID 1292 wrote to memory of 1340	1292	msedge.exe	117
PID 1292 wrote to memory of 1340	1292	msedge.exe	117
PID 1292 wrote to memory of 3884	1292	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffedc9bc188,0x7ffedc9bc194,0x7ffedc9bc1a0
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,17143433370547584947,18185552191605306214,524288 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:3
  2⤵
  - System Time Discovery
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,11369176413461196773,16038670397187754763,262144 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:2
  2⤵
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,8287329885472447141,16874296958273426859,524288 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:8
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,5256058638695240006,4157580516581734149,2097152 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,7342228717194485473,5781979894929635430,2097152 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4108,i,13721232724243347386,1442213780999795545,2097152 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4148,i,10503443848337879721,1172615466006269336,2097152 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,14214256420829922356,8223866920552531465,524288 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,10321374324765764687,5953999704388485515,524288 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,1006065049868473750,12952706238685734589,524288 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,1006065049868473750,12952706238685734589,524288 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,4975744828844585369,9237941135840021322,524288 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:8
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4136,i,14240518344186017198,4492951965936139970,524288 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4148,i,6459334874469832197,9022967315753648565,524288 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2036,i,3509557840243087268,1613612568320882191,524288 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,5472757138426998033,3494066982024432498,524288 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:8
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6068,i,17688507112474393150,13807951777068899487,262144 --field-trial-handle=2640,i,182738103655436229,1307555401136807840,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3884

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3668

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 0804483de5e33eac42a55c13c97a28c041dabb71414a391f6ea4e0308f2eae04
MD5 154aed7f445711d4cf3da11767968fd5
SHA1 dc1db72fd0faf444b8a5eedaed3c9f2779b38fd7
SHA512 cf427d5cf73864f770b9c4e2e73d54ce8c4820ba790d0e49e6cfbcd530abfda2a95bd084e2abbd13c6cd91278afb411dee5c6544c7150f3d4c15c3aef804d8ff
TLSH
T18B51C4384711301CD35901F1B1C30CA6B0BAB6C1F9E7EFFA0B63A475CA1D7AC8814654
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589323.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589323.TMP
Size 2KB
SHA256 f2a766f68063fbaf0e211683c8c658a38bdee975ae311ce3f742034e94b921b9
MD5 d24bf6cfdc1e7c164232704db507c170
SHA1 c6acf5d9b47ba6f04c190cf832d2b9ce55c56b48
SHA512 33e5982707b49bd6eb3e8d878292e9dd584f4b82c6bbb77668a63ef269284b88b25a7ba760e7d1d5e4050549af08ef45b6b035ad21becde17833bd4ba3080ac5
TLSH
T17051B3384702345CD35A00F1B2D30CA6B0BAB6C1F9E7DFFA0BA3A475CA1D7AC8814654
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 1b233bd6feee9ec519368596a1fc5498e484ff003bd939e798d29dab06b4eb4a
MD5 ab80a8fdd4589dbe62247fcbc62dd8a8
SHA1 d688535567a97ec7a9fb23676bb9c8b30e152b9c
SHA512 19e5cf10c66a90e75121a42b1ea19ff278b9331a43a67a7a0a49f8fc67aeb93f77df5617bc000d816dde424b8c8f2f059449c71418263d12793d897af0989bb2
TLSH
T1DC11AAF3C7E5866E8E1156F05A24AE2BDE2D0602421C7C558AD4EF2B93F3475E00159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 3e66ca54d3d20223fce80b3bf03f8f0483a0e6c1e2b820ffbb8fd98b2a582d05
MD5 11df6d90bcb3b4c62fd76d0763b84ef4
SHA1 28da60030e3d4b937f729f120cb1f336985265a4
SHA512 efbde269241b49f3f54d2e67646fe6cf6ba01c742789b7d21599fd0a66ce948a221e0a97eb1488c9e873e10d8c143544199a3f2a7a6d10c9389840cf643fa636
SSDEEP 192:sxZmRKyM/jK1Ml8MWX/f3sQutIdpdOHW6+WNGY9IKdS1IgrJ:sxZmYuX/f3sQlUHbG59
TLSH
T12242E815AA346977CCDBD20CFA557F53D6F9443292900E44AAFCCA1C04E7AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 da29f7aacaf7acc231088cec6d9856dd9ee6c1f2e84b8a649e9c0beca0cad7e7
MD5 2b6506131268201954fecf763adc75c4
SHA1 376c150cea6efaecc75143c92a09aecf71fab2a2
SHA512 453c4c0e485bb2d0c24d277eed487ccde8d34938ebfcf7d6c1f04f3469e35d9d9800fbb0be122531f225803fbc1f7818cba61680c19701c43b0388a16dce3e80
SSDEEP 192:sxZmRKyM/jK1Ml8UQlWX/f3sXutIdpHOHW6+WNGY9IUgS1Ig5WJ:sxZmYqMX/f3sXluHbGq0
TLSH
T12452D716AA345977CCDBD20CBA857F53D6F9447296900E44AAFCCA1C00E7BED621782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 6918e27de31898aa10793e1e35af62d702a0b98b406793df4417e2f2d433bba0
MD5 2806e853ff016031b5a993f18845e1d7
SHA1 021b3fd2e282e800a0d5da32bb609654b930f27e
SHA512 f94fcba37422ea248acbfc75de5cefd1f94b3e223b1c85324ef9ac5058ce45112ec86ff8c5eab496f9abb01e2f3a914603ec59ee399155a71e34ffe4b3b3e70f
SSDEEP 768:Zecv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNSropg6B:Zecv21wWvu+Z+u1jaeFLeRNJpR
TLSH
T116D20B2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA494C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 268b41de087c5a660cdf8eff9eff862b2d00610a897950fec12dc2e84e460d3a
MD5 69cfe741663a210ec38185a71a55f6bf
SHA1 4f6f5d235244197d0184645f6b4b9d09c27a7e80
SHA512 a64d6f209a694f1f1d8ce85f753344e9911b8eb7229c4ea8349a6daa988e7252277aa595b03f373e4bd81619ee23111990691ca8dc5942fcf60224ab6ac99278
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD+HyKokuK2EKnqjw:mThJ3J
TLSH
T185913016313A0292387F7958A3D687365E4136A33918A97F7BB805614E37E213DFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5dfa016-468e-432b-a5d1-c553aed3c026.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b5dfa016-468e-432b-a5d1-c553aed3c026.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 ec8b0690f9ae3de5d1d2da6392f84527d217e1dc231490d731cb3958b57d98de
MD5 2ab556a3e13dda9f333af2f8265456f8
SHA1 2e704d271c5ef4b1d6f7b1149b12bf14d6a4ab43
SHA512 d47ee3fddc5efbe443e27cfe1a4d061a3a263c714565b250106aad21a6258972d7bcb907cd77a85cf6a6448a35a2ad31849c37254fa47ccfbf623daa48e0f1b8
SSDEEP 384:TiFiZcIjsNi8TUNTUlIlc1PzidlU/e+CnOqEl4D/sa+VYTro2:+FQjDwgccUm/OHlK/hg8rZ
TLSH
T19FA27C339D688D7BADE75B85F90732038EF881A3C9C5AA90D2CD6E0D00DB29C1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 72b6e2f11daa9b0264a42b0a39903b0bc546876a2c3e51ae1bf6b4875f090bea
MD5 c55784ec3ef3b4ed625610a0503550db
SHA1 d6140ebd17b8be08611a12d0925273a56636a1b3
SHA512 e30671330e0227c4d61d4c89d3a40597afab98a1c01449f7f3c47cf729609be7867db1c4f8fefeab3d9f6d4edf01a2420b0e1af246f170cbbe947b3a109e0217
SSDEEP 384:lZcIhsNaF1PzidlU/e+CnOqEl4m/sa+VYTro2:dhxcUm/OHlp/hg8rZ
TLSH
T186828C32AD784DBA9DE39245F94736035EB88167EAC92F8085DD6F0D01EF798131782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 cb291738f898f83e8b77661060a6806251b8d51c426fe7bf64cbfb225e44dc93
MD5 04aeaeee6a363755ced83300fcf69678
SHA1 d2ad379b6ca2f9c4f03a54cb533b777917fdb8e8
SHA512 c8b15fa9650d5d00071cdbf44680e4089182697d5faaf142f2e72ad9c4d2e7b70c6b8e1a5276a75e73383564f7dd033a38985cab009e46b6ecd50e929c40f983
SSDEEP 384:QZcIhsNac1PzidlU/e+CnOqEl4m/sa+VYTro2:uhwcUm/OHlp/hg8rZ
TLSH
T1B5828C72AD784DBA9DE79245F94336035EB88067EAC92F8085DD6F0D01DF798131782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 11041c6d0e264c28d40984d97c8069de22ca225d3ab820f8d7f9511ef992ed5b
MD5 809162320269c976c2392829643ae886
SHA1 f19a3dfeba064fca0a6117f2e694793c0ec746c3
SHA512 7d56e93c9a3b1db258d263371671e06f6636cdfbb8f1db0a438532939a988e73f4751f07c664b73a087306a217f965b7b08402e410a02b4f7322ae68c58a35a1
SSDEEP 192:BONz6v+YLIQmiUy13dh+CGVgOqEl4aCHhq+U6:BONz6vzcqdh+CnOqEl4D/U6
TLSH
T183123B32B8385C6B5EE25544F48732135EF99227EA867F80D5DC3E1D01EF69C230A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 88016abb89534e036dd31059951a0b9fac35c89fecaffcb601e84c67a86f9d5e
MD5 ab5cde3b21320055fff305e19a4acacc
SHA1 28a790d59e147b52958561c2679e7e1e556938fa
SHA512 5aa96114fb781f88fccf3b1e69234c53f07db51d5c910a98bd9a238a7f5bd449818f016cbd4d298bacb8bac9359b9176f3b47cd79788c83f6c47f1e0b30d827b
SSDEEP 192:JONt6v+YLNQmiUye3Zh+CGVgOq8uszT7U6:JONt6vz/7Zh+CnOqyzPU6
TLSH
T17202E935AD782C7B9FF2AE45F48737276FA4217BE9912F40DAD82E1C01D764C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 15a372aa6124ed3cbb752953fb88833005b216cc5a3a142d0995ad76654f8d84
MD5 ca415dac37cb9585149daa49f7b9e9f1
SHA1 32a270664709296e168474f5b787bc3b5ef195af
SHA512 baaeb974e01bc5182da50aca9d6295bd0c19d86c3a7ba0dda80bca798bdb3728a48633919017b412918f70c0cd15c38b03cdf37b09fcb0074a3b9aa4c8752a0d
TLSH
T117413858B6F91148B3B36F1A9BF6A87D487EB8772F16D49D10120D8E0A62F40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download