dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 12:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260910-pvkdbacm3z
SHA256 dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84
MD5 cb1fc49764c26340f3f059f7fba932dc
SHA1 dee6828bc5016de3a1f5fcffc7509ca040daace5
SHA512 a06e656cf0e0a49dee6ec593eb303b1660d7c64cdaf6dc8db2f3f4c1ab7d94f1f35921524a2d8e6733b7161e1a20a2ddf5e4d8d1c580461f3c01eb02628b52ab
TLSH
T1BB517272E192643BA127C5DE7070939EB0E6C402C7976A176DFD9378CACAE939B1134C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3152	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335175447696820"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{5D30489D-E3E6-4E18-B66F-1BDFCF0FF650}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2612	msedge.exe
2612	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 412 wrote to memory of 1508	412	msedge.exe	86
PID 412 wrote to memory of 3152	412	msedge.exe	87
PID 412 wrote to memory of 3788	412	msedge.exe	88
PID 412 wrote to memory of 3788	412	msedge.exe	88
PID 412 wrote to memory of 3788	412	msedge.exe	88
PID 412 wrote to memory of 4000	412	msedge.exe	89
PID 412 wrote to memory of 4000	412	msedge.exe	89
PID 412 wrote to memory of 2596	412	msedge.exe	90
PID 412 wrote to memory of 2596	412	msedge.exe	90
PID 412 wrote to memory of 2596	412	msedge.exe	90
PID 412 wrote to memory of 2208	412	msedge.exe	91
PID 412 wrote to memory of 2208	412	msedge.exe	91
PID 412 wrote to memory of 2208	412	msedge.exe	91
PID 412 wrote to memory of 1152	412	msedge.exe	93
PID 412 wrote to memory of 2828	412	msedge.exe	94
PID 412 wrote to memory of 1152	412	msedge.exe	93
PID 412 wrote to memory of 1152	412	msedge.exe	93
PID 412 wrote to memory of 2828	412	msedge.exe	94
PID 412 wrote to memory of 2828	412	msedge.exe	94
PID 412 wrote to memory of 4504	412	msedge.exe	98
PID 412 wrote to memory of 4108	412	msedge.exe	99
PID 412 wrote to memory of 4504	412	msedge.exe	98
PID 412 wrote to memory of 4108	412	msedge.exe	99
PID 412 wrote to memory of 4148	412	msedge.exe	101
PID 412 wrote to memory of 4328	412	msedge.exe	106
PID 412 wrote to memory of 832	412	msedge.exe	107
PID 412 wrote to memory of 2004	412	msedge.exe	108
PID 412 wrote to memory of 2856	412	msedge.exe	110
PID 412 wrote to memory of 2856	412	msedge.exe	110
PID 412 wrote to memory of 2612	412	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff6b8ec188,0x7fff6b8ec194,0x7fff6b8ec1a0
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,17659432001955686297,15680295065810889473,524288 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,10947907185320030582,14174323713033251684,262144 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=1980 /prefetch:2
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2508,i,13934723652619559349,11508804528468447462,524288 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:8
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,13958025781458866577,6395125484639226769,2097152 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,13867191564856575265,3293236023427416094,2097152 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,13862162835375177789,5962159242951583879,2097152 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,12710321461430636851,13826558091745419082,2097152 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,13616950548301386233,11929289255611918296,524288 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,18317615527907688476,5112244361583016416,524288 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,14266936283465351308,12902209917414914575,524288 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,14266936283465351308,12902209917414914575,524288 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,13680802520433210460,968175944055847865,524288 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,2602697480869670502,3831398667877255036,524288 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,17121094737716848155,17876613185400343707,524288 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,16279488429698958878,7298050061724508448,524288 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6152,i,12055882369360914627,18149958644772735137,262144 --field-trial-handle=1996,i,13726996943337449423,9378834840018395518,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2612

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5024

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
MD5 ca6c08209c2d38cddd20d85d8c5dc47a
SHA1 cec1cabd103f18062e7cb4e4d6f0d8b419a6c0bd
SHA512 21049ac949a133b2d3655a743fa48fb77fd023763be431c403808d8b8cc86ade7133ad2fd2407bc2f19378bde77d294fb858d77ccfdd369434389ccbd4e515c6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2bf541e47ecc49109af5de531a7ee944a3b0473067981828c90824642628df14
MD5 6a56258df4aed92afcd0eb1cc420b389
SHA1 eeaab49ce2699f673517f651eb22e3b60843dced
SHA512 287d14f5007ea0a3430b98ffb4ccf0742e67fd54d3a2d0037bfbf73eca5e966d990a6ccec26d637c969bb5beff8816cf5b988240039c7939ab74eeb0d987a43a
TLSH
T1087182360A534269E7570332EBC2C41A727186EAFA3F9DED24D0587C4D0B3F1816A967
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bc65.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bc65.TMP
Size 3KB
SHA256 cb34e0782a31c2d97b9b606d53644ed3a802eda0c6f2594c71e93be1f394e81b
MD5 f1172deb1fcdb3daefa895b6364b3be4
SHA1 cc6a6ee3b8c38366071115f579845ff6a7bda9c1
SHA512 827ec7d9cdc2bc7467887a3abb5cec82587b01326e8a6c0daa03bf23b7886a81d6532a0cdd89f3c2362848315949c60f4675955aec2fe7f82ef49fa9f1f50111
TLSH
T1DA7193360A534268E7570332EBD2C51A727186EAFA3F5DED24D0587C4D0B3F1815A567
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 89bf95b0e39366ab3a5848ae485df1bd2c77b604d34dc675c5b3351d77dd04c6
MD5 26453125f41079ba8bbee0a72c90fe66
SHA1 b2e933aa5d0bc2b3626d96b4cc51bedc173b112d
SHA512 8d9e04acbf3e42e387f043a81c64d55924d12f64da3bc6b5b359578c00c55e74d212260872a5c85f3e86051e5ec75567250c3dc8ac9360e29c1a5b50b544db30
TLSH
T19411CCF3C7E586AE891117F09A24AE1BDE2D0506432C3C558AD4EF2B93F3075E00299F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 cafc278a7a115fda9a36875066b759f1dbd0cb342b0f04bcee8d31b373856892
MD5 c23d1ba78aa9bb58ef5eab34d9d1a289
SHA1 363286f1cfff5bfb31816c8d6c3056e967e8710b
SHA512 a76fd7b044360f6281b480c414dc03cf4879d14f01d04877642700eb13c1ebcc58bdbed8a40d410da4cff421ce0d823055ae18185db4f14686df7f38670759d0
SSDEEP 192:sxZzRRoyM/jK1Ml8MWj/fzsB2SIdpdMHW6+WNGYzQ/tkWIgrJ:sxZzguj/fzsBqqHbGuu9
TLSH
T18742D611AA34A97BCCDBD20DFA557B53D6F9447292901D44AAFC8A1C04E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 458b768246f88d0860dfe94dfeb4994893d4a93d1ddce87cd56228b2ae2c56e4
MD5 43f6450d009ea113ea9f1bd53e4ad67f
SHA1 d7b14c55c397f332b7d692f3d1cb423f57eb35d1
SHA512 d6205e8b600c5fdd6cc78d04df743bcc6f9aa2f1f4e20eb472abef34efee2d00d5019fee1f6da5a75ad717da0d89912af2abb655268fd0b00234781d7e85f86c
SSDEEP 192:sxZzRRoyM/jK1Ml8UQ2Wj/fzsb2SIdpHMHW6+WNGYzCbmtkWIg5+J:sxZzgqBj/fzsbqsHbGxjuo
TLSH
T14652E811AA34697BCCDBD20DFA417F53D6F4547296901E44AAFCCA1C04E6BED620782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 77c1b706d14e52ba31fa81ffd3e5563bfc58dbb4b17c992c74f42f73c1400293
MD5 356298b9a5a90587ab4e6e52da33bb9f
SHA1 189f8699994efd395023b33448e90389222bbef9
SHA512 932cfbf021c79d437f63eefa00e35fff9d975925ade41b93aa8b8eb74c60aa948853b2590e343e4ba8e60eaed582d4b8b8e2806d1884517fef498b24d884f891
SSDEEP 768:WRW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjRroIDiWY5:WRW7kf0Wvqidau1jaa5LA3jqb5
TLSH
T146D2FA3B684CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB6EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9b80bfb00b912db43683f1b8940ae81c0fa3dd67eaa7f5ba8e1797c9a0807cc3
MD5 449b25b1df233cdffc5708de9a843b52
SHA1 afc6d09730554ac7c8a8d66f17337f496b732d68
SHA512 34175bcae3227a6d696d6a61559db93da8bbeebca4322cd50a508a7ec1f5c03c74a9d0a47975baa59729406699744572314e6c955f29dff8ee01185770ea4f62
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTbEIfKFmc3yZ8ILK9Kct1I5KOO:KIbCKcbEQKFmeK8gK9Ke1aKOO
TLSH
T13791BC86713B160138BE2C44A356D6364F423563396DA86F7FB940A21D66F124EFC9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5957bb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5957bb.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 661587b71f684d2442b589dc71b54b769fdd6401561649000f438e338c27261e
MD5 2bd05a26d530d41451fdb9e4a1f5c365
SHA1 e19394b48e7f24cc5c0fbdd28eb3f2a105075764
SHA512 a2e17fe014d3d94c7a78a921ff8ddce30361f90c7e3e52098abf0aa2e4abb52c3663ba3cac161a9b6bd62821e34181fab41933b0bc00ee7cd0e569647f26e622
SSDEEP 384:ZZcIhsN/Dd50ebOyDPdlhCEJr79fxuvzxV+MhdpcBdoC:xhUbxz7h79f4184pcT5
TLSH
T1BF827D70ACB5AD775DE7A141F84637034EB88037EAC86F40E6EDBB1D01E6365131AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f4d828a1852f4f1e4cfb2a13b42735c28338aeaa1149588bade9d7e9a351dedc
MD5 73264cc4f7a8e40e76f99ccb80542989
SHA1 c994f34f153cad30e429160063cbd543412ccd0b
SHA512 ea703b0eb6ce1c008e6f7cc82ef9c2619703830f68725dc5fbb48aa479e9dbc7fa1d0eac0817b2f8e7af7673009632d4de69918ca4c838c4e456c22db2a6789b
SSDEEP 192:MONB64BAQmiUyB1YW5GBPKDv+FdGEIaD9NrU6:MONB6eAOGWAdlx9NU6
TLSH
T14102E938AC696C7B9EA2AE45F48637175FD8113BAAD52F44E6E85B1C00D764C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9ba29f47739cfd46fd5cd83a67a499031d72642d33cdf8815fcabe9c08f13bf8
MD5 28546dd6e93340f34df8e68b055e5d26
SHA1 adf31a075c69155899c58fa422c50f50d779bdb1
SHA512 0401702b5473bbb28bd975089f0234e2e52fbca9acb392a1212be07c7ff1a23819c5ce50c69d83bf3c0f0dde76e04b764c3b8a552c4408678af117308102b4bb
SSDEEP 384:+ZcIhsN/6d50ebOyDPdlhCEJr79fxuvzxV+MhdpcBdoC:8hlbxz7h79f4184pcT5
TLSH
T1A8827C30ACA5AD775DE7A141F84637038EF88037AAC86F40E6EDBB1D05A6365131AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 7aa6c0fe0c4d843408eb297ca518362603fd2cf2139f51e3fd3bd4d094be0ccb
MD5 c0ec200df3ba7ebbc2e1bb97ddd94c38
SHA1 ad059f383d11cb2f8915d06518deca1a7414d519
SHA512 da8674b19d05fb050a38c17c7b745d9b67c2f2f5ccebfd26a4b90f0755c0a863d8d0695a22b19c68a25b6e159384b95f2ccbdf9bb81fc23c771e1d04f0089761
SSDEEP 384:kiFiZcICsNh8TUNTUlIl6d50ebOyDPdlhCEJr09fxuvzxV+MhdpcBdoC:/FQCYwgcbxz7h09f4184pcT5
TLSH
T127A26D729C94DD7BADE79745F94A33038EF48077D9C8AA50F7D9AF1C00A7298130AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2bfc078c10e1102a794fed30e7c35afee9d7a8c5976aaf467db5d25cc3929c7e
MD5 bdd9909b8089cf42571941154a2989d9
SHA1 0aa57b3c486234b02a744830f1c1ae2c4f625a25
SHA512 4e73e9835fe0ba2f8856af43979e568884db76a3d454106c832e9b6997230d0a7e78642c00cf1ea8aa158c1978dd116cecc0e076dd9b45f8cd5acc2044f3fdef
SSDEEP 192:tONS64BSQmiUyKYR5GBPKDv+FdGE1VFC1SJreWw9vqoU6:tONS6eOgRAdlhCEJrc9fU6
TLSH
T1FC122B35ACA4AC3B5E92A185F48736135EE54137EAC97F80F6EC6B1C01FB75C6306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e229c03-77da-4ae4-a0bb-da9fc1c8d722.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5e229c03-77da-4ae4-a0bb-da9fc1c8d722.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7484b3dd91e37a667ca5edb884dd6d3a204a4b3929d2bf623f52cb5103c1b5e5
MD5 c31b323a8c9080dd31a20d2427ad7ffc
SHA1 9fa8657a1121b044e2b59c9f151a63ce01992167
SHA512 ee1ed9fc0c9adf8a9f4eb769e9f2e999d312dc2c9704795a94d6bd73c5403ef2d41ddcbf325624da1b8231e6dec075a5016ae19984509760e5845f0b173dadaa
TLSH
T178410B48A6F91144F3777E5AABF7B86E587BB9373F0AD45D10000E4E0A22A40D861737
MD5 SHA1 SHA512 TLSH

Submit Download