hxxp://document-store[.]pages[.]dev/

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/09/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://document-store.pages.dev/
Sample260911-wtql9sbm3x

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4452	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{19783D34-9EF9-42C7-A203-169B7E2081B1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
440	msedge.exe
440	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe
964	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 964 wrote to memory of 4720	964	msedge.exe	83
PID 964 wrote to memory of 4452	964	msedge.exe	84
PID 964 wrote to memory of 4712	964	msedge.exe	85
PID 964 wrote to memory of 4712	964	msedge.exe	85
PID 964 wrote to memory of 3448	964	msedge.exe	86
PID 964 wrote to memory of 3448	964	msedge.exe	86
PID 964 wrote to memory of 3448	964	msedge.exe	86
PID 964 wrote to memory of 2140	964	msedge.exe	87
PID 964 wrote to memory of 916	964	msedge.exe	88
PID 964 wrote to memory of 2140	964	msedge.exe	87
PID 964 wrote to memory of 2140	964	msedge.exe	87
PID 964 wrote to memory of 916	964	msedge.exe	88
PID 964 wrote to memory of 916	964	msedge.exe	88
PID 964 wrote to memory of 3708	964	msedge.exe	89
PID 964 wrote to memory of 3708	964	msedge.exe	89
PID 964 wrote to memory of 3708	964	msedge.exe	89
PID 964 wrote to memory of 1228	964	msedge.exe	90
PID 964 wrote to memory of 1228	964	msedge.exe	90
PID 964 wrote to memory of 1228	964	msedge.exe	90
PID 964 wrote to memory of 4728	964	msedge.exe	94
PID 964 wrote to memory of 4728	964	msedge.exe	94
PID 964 wrote to memory of 4728	964	msedge.exe	94
PID 964 wrote to memory of 2100	964	msedge.exe	96
PID 964 wrote to memory of 2900	964	msedge.exe	97
PID 964 wrote to memory of 2100	964	msedge.exe	96
PID 964 wrote to memory of 2900	964	msedge.exe	97
PID 964 wrote to memory of 2352	964	msedge.exe	99
PID 964 wrote to memory of 1116	964	msedge.exe	102
PID 964 wrote to memory of 628	964	msedge.exe	103
PID 964 wrote to memory of 1832	964	msedge.exe	104
PID 964 wrote to memory of 2156	964	msedge.exe	105
PID 964 wrote to memory of 2156	964	msedge.exe	105
PID 964 wrote to memory of 3796	964	msedge.exe	106
PID 964 wrote to memory of 3796	964	msedge.exe	106
PID 964 wrote to memory of 440	964	msedge.exe	107

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://document-store.pages.dev/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffac4a8c188,0x7ffac4a8c194,0x7ffac4a8c1a0
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,9544547403688291844,4733882689517118444,524288 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2396,i,3620659058429535364,16421740067885703540,524288 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,4139342957006391249,10551794221995984027,262144 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,14925113707525455845,1148486950997263484,2097152 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,4614149675363281011,82846728966031482,2097152 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,13928274153413715384,8701881755301531539,2097152 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,14135029912210902095,12622322024609446400,2097152 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:2
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3784,i,11705180113224538820,5467530473094622993,2097152 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,7168426119492165604,5360254167016054428,524288 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,16579465262039014227,9418360464530282946,524288 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,4526410087373110981,5816713591663443052,524288 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,4526410087373110981,5816713591663443052,524288 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,11002295415064493284,10878602298017999411,524288 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,59653255649618417,15490040263386802909,524288 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1692,i,15378255100270869761,7491957852431969995,524288 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,17333085959191208254,9870908847294947683,524288 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,15866273414618640650,12895630722780782563,524288 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,4069763187739883398,185683581139654318,262144 --field-trial-handle=2296,i,6979517054119211441,2978104563630994579,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:440

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5024

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5e9370105eda559dd78751b6cd90973e3226281abb09b95e4c56385d3faca245
MD5 99313d74a7695510effa946f3529e830
SHA1 8d31c64b39c8153d57df7aaec4e4ef1780b68e94
SHA512 1ca2816a5b4b4d95d5a3e2074e42c1da66de552c4ad4cdf8d2becea179ba0a12f8bfe6a407f39899228da64fbe639b53d46a1dd9422f6afe8ec9d7de0774dace
TLSH
T1416109B2329F4C92EFA4267C9CE1A0933E387DB464835D178E75F4F90BAA7076155807
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591880.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591880.TMP
Size 3KB
SHA256 b9cc9c499d8a83e4e137f15ef7cb52a78581e5a20b8c5f8134e4f3e9973a13d4
MD5 962feebb0e225f1456186672662596a3
SHA1 ad1beff4e1d1ab1c166c1a542fe1faac396e6298
SHA512 7485f72ac5e23524bff277da8f81b7db82097af9974ebd8b0492d317f0a92b19e02d474792de965ccd80f25e5c956f000ec046122d5d59dacc74a07ea5e3d07e
TLSH
T1E5613AB2329F4C52EFA4223C9CE0A0833E386DB424835D178D75F4F94BAA7075055807
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b572623db94403c809a68be83ce11e968f2c431dda2024b416cd700330a3f066
MD5 cfea2ee28d1ad597182b68c09b2334bc
SHA1 3ed3bd7534692a531dcb8f6fe78f2dd741cbd1be
SHA512 aad9097f8cc09c1b4c26f256d8884b01c8f70f396bbdd7202e35caa8b1fea16e7426db859f70e2ba49be5e1a136ad77cb3395ec19562aecb312976f04e186e9d
TLSH
T16841ACF3CADA862EC9025BF06B586E27DD2D095952183C1ADAE5EF0FA7D2170D10294F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 59e4faffa7f4d03e3eae7e35abf4eea32df6439ec8539502b64a856db3ef1ab8
MD5 ff43eb778e4bd7c07304956cc6e8ac17
SHA1 06ca585389bfee446432b69634a9ba4849bf0cd4
SHA512 29ee457c65226baa271ccfeb62bc9b49ff6e8397be77ab5d512ffdfa46b88b36afc7df59902a913e4964d1adb797cffb5f2272139c376fe54edd4b71be2c1bf5
SSDEEP 192:sxZ3RSWk/fxs1IIdpKQZHW6+WNKPL5/Y3I7X+BIgrJ:sxZ3rk/fxs15LHbE//bA9
TLSH
T18022B811AE28A97F8CC7D20DBA15BF53E6F9543291D11E58A6FC8A1C04E76CD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 684ebc8984fd9ca1a12d10c56378e0056e95cc3c95c63800dc9942b96a5ba61a
MD5 1150b9c8fcaf536138ed20224e329c79
SHA1 6c4a25f12a12b77b609abaea97a84172afb458d1
SHA512 298f2949a7462ca48bab51a97a0ebaaa12e8d62a34131743cfb8966b609f49ddf6157da6bed24f51e52b5b3062e8b6a2f9f08b666f9956627fa0a2c35b18e0cb
SSDEEP 192:sxZ3RSWk/fxsUIIdpoQZHW6+WNKPL5/Y3rX+BIg5GJ:sxZ3rk/fxsU5FHbE/iAQ
TLSH
T16F22C712AE28697F8CC7E60DBA55BF53E6F9503291D11E48A6FCCA1C04E76CE120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 564d7eff0c99d2928a1429a3a4e5f587331d8de1f0c4b04361557969f243ccae
MD5 a2e86f7a13405f4c892e0e24b3282174
SHA1 5ce747486a140ff5621cff061232b9effeafbf60
SHA512 04d91b974cabb55ef50b998d3a583d27faf15923251ed703744ffafe900cd04640cfa2a78c3d67b8ac511e6714d6831c3908798f1331a123709fefbfbac234c3
SSDEEP 192:sxZ3RSWk/fxsUIIdpKQZHW6+WNKPL5/Y36X+BIg5GJ:sxZ3rk/fxsU5LHbE/nAQ
TLSH
T14D22C811AE28697F8CC7E60DBA55BF53E6F9503291D11E48A6FCCA1C05E77CE220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b621353c6cc1003fadabbf6bbc02d14b978dd41c36b87386c13d401848c2b715
MD5 c69a82f98a829b017af312a2b776c8de
SHA1 82e5e6c02ce8c8c53c85f493f9fead092a0471c7
SHA512 567cd4b02ac449db4b9336e7a1596063eed00508a165dbb08f6e457a7cef16311579d0784a3eb057d5f584d7405f848f8506c419783ea7c9e3c4c15ab41a5ae5
SSDEEP 192:sxZ3RSWk/fxsLIIdpKQZHW6+WNKPL5/Y3I7X+BIg5kJ:sxZ3rk/fxsL5LHbE//bAS
TLSH
T19922C811AE38697F8CC7D20DBA55BF53E6F9443291D11E58A6FC8A1C04E76CE120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 c1bf67f0c607eec371551eb04dd1c9e87195c5ef3107947745fcec27e26d8929
MD5 78e64d77b4cdd0da447aafc3689d3b47
SHA1 a99bf7b93b2fcc11e8c1dead45946308c56f39f9
SHA512 0dca8e39a1e3607e3b0f5972d9c160c49a03bd4340fd821c1f209d6db4cd0d41744e0b48f30de1a7f6611b2118038c68593c8e9c467d28275f84b73df6d2a776
SSDEEP 768:x330AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72KrolZM9:x330AbSWvS2l9u1jaLmLZ12h6
TLSH
T156C2EB3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796548D4047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 487f1273aa2d7e32673ac83efb66d882374b93a105977b5b84eb3aef35ca81c3
MD5 de773faabca938fca8a5a670a5673908
SHA1 e66a65a8e8f50a61e7d561d060fc9a9aebeaa952
SHA512 ab663252e5f6e42ff2cc82c0a7e3bdb440b11248943e29eecf8c4ca22294daf37a368616c02afc11f871134cd6d2d09fd45bbd0c7940c7b9d5f6fde336e1873f
SSDEEP 48:K0rOPrVNNubdQ1ISLuK9b1ZuxD+YYp7vyL8rKfhBh6bZ0JISv6K9P1F6xfqYMNJ9:KcYwKR6OB4gKRmqQoKp2ue3SK40t
TLSH
T15EB1C01470BB134438FD254980B5A76F128235F33069EA2B7FBC14A68E6AE554DFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6a55145ef1c6cd375e67428a1b8a29102f04621db14994f85db563055753dcac
MD5 403283345ac984b41730ed894d1a3783
SHA1 459a4cb295e9af8e5c40463cedbc5c68145391b8
SHA512 73ccde4da3efa3974d6247a401afd5fa4cfc6531dd65592eb0c91fe47835a180382eb6b01d00bc607ec4ae0c7218be6306fc055377291cf934d852ea2abfaa67
SSDEEP 384:tZcITsNSUsL2puon+9iX5Fk+E74sa+VYwot:1T8PqaQr4hgrK
TLSH
T149827C32ACB85C7E99F3E651F84736035EB48167D7C83E948AECAB1D01DB2980307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 d5f1b518cd7fd8401602f5d04cb47bb1d4202d1f20a277b6fd49b2ecf22e485f
MD5 6dbeb35c62e537e8899c864c9180eaa2
SHA1 b965bf709492abbae8302f8fccc92643b05c5b49
SHA512 1e96d897d6284f1846a750ed72a9653f071905ad711169c64e5a2e3068dc011e569b7593f35da25ac136d0ec6a5d61b0efa459204d9e1d3181bf74c1d41d35ed
SSDEEP 192:uAipsNSUrQaC9mwpu7kQmiU10qx49iX5FJxY+eteediIJr/SU8:4sNSUrL2puon+9iX5Fk+E74U8
TLSH
T165322A35ECB86C3E4DE2A655B40B36139FB44127DB883F94DAED1B2C01DB29C130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 65e3a7dbb629b435c7005e6a89c5a3ac1a66fc8d657da1e07a980e26f2a26b25
MD5 14f84d54fb154ede5a101e02e8f1017a
SHA1 41b4e30ad7b569cf1fb8524aa9dc47597ad25815
SHA512 c9008d5d06cdb20337344fb3dc8fdd62e6649e90d4e6653c9627ad451b3cb9b1a35d175613559f11f5fa7ae01b4083a1f93638d6cad4e01cca8f36a385c18d53
SSDEEP 384:XZcISBsNSUsL2puon+9iX5Fk+Ei4sa+VYwot:fA8vqaQS4hgrK
TLSH
T1BAB219F198E7583AC9AE9353A77E2D034EBCC157B6882A40B7E85B1DCC9617FC306416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 be2bc112970bc43634b9640a2c3067bdb9ea05cfc117cba4c9ef165723cd5aaf
MD5 fe8ba6a315914ea368b30f2b47f388eb
SHA1 b98314846fd60611f4066f9d09b52d376699e4cc
SHA512 f321cb831641d69f07faff45e1a467b02c6aae6e3edf978e1eb649c8b099563343343c468affa7d765a84b51297b7b11551739a850672208151cdbb2d8379442
SSDEEP 192:uAipsNSUrQaC9mwpu7pQmiU10qx49iX5FJxY+eteediIJr/SU8:4sNSUrL2puTn+9iX5Fk+E74U8
TLSH
T179322A35E8B86C3E4DE2A651B40B36139FB44127DB883F94DAED1B2C01DB29C130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 74c2ffb77ce986f7270f6b14dda082f0814cb38cf96b58a2d98658f308421c20
MD5 3db115e1c07c913c2e2b9ef553918b86
SHA1 8678235d60eabbafa1f734afdb2d8fc50a1754dd
SHA512 b03825d1a4b9292e255a4093cc926acbbcb93a2c266648f8d30c131f58833fd6d511b6594d19efd04cc403de7f80326250baedac4a69909187258c4e7bd974d5
SSDEEP 192:LON16AmwprQmiUy086siX5FJxY+MJiIYU6:LON16ipd46siX5Fk+5FU6
TLSH
T14102EB35EC786C7B8EF3AE05B44B36239FD5112BEA942F84D9E81B1C01D769C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0135197e4638b58ff95ff8dddeb12d25339b16728308a8c84accef852681ecdb
MD5 2a7b0b375355541b803a402307094a1f
SHA1 a533a7e0dcbfddbaddcab64f36143836c482531a
SHA512 8a6fcc1723ce414980edd8afe438d54a52d240404568ffc4f859c86bb928e1c66c7e7b54435eb198740b4c29b39d70a48ef9c145f54b703b3b42cad481d098ba
SSDEEP 192:LONY6AmwprQmiUy586siX5FJxY+eteeslRJr/SU6:LONY6ipdB6siX5Fk+EM4U6
TLSH
T1E6121A36E8786C3F4EE3A951B44735135EA54227DB887F94D9EC2B2C05DF29C530B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a8e660e-32d0-4816-ba84-e755034e4e3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2a8e660e-32d0-4816-ba84-e755034e4e3a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 99df01e07016d9859c994006654b4a9c5a089d26c7a37a02983505ca9336cf9a
MD5 a95ac4293f56cf7e073441b0a21a1ee3
SHA1 ed767a48571746a1d655f8da81be1ee81228ef6b
SHA512 e2b84a83f36451ace9fe4b4a181986636b39cd1ebc8438a3327c34973a91d07805adb2a30c6252db7e0cdb6fdb7d21145836df6ec499085a501eb051cc40a959
TLSH
T136412958A7EA1108B3B76E5A9FF2A96E487F79732F06D15E00110D4F0A23B01C8B1B33
MD5 SHA1 SHA512 TLSH

Submit Download