dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 14:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260930-rlcm8assdv
SHA256 dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84
MD5 cb1fc49764c26340f3f059f7fba932dc
SHA1 dee6828bc5016de3a1f5fcffc7509ca040daace5
SHA512 a06e656cf0e0a49dee6ec593eb303b1660d7c64cdaf6dc8db2f3f4c1ab7d94f1f35921524a2d8e6733b7161e1a20a2ddf5e4d8d1c580461f3c01eb02628b52ab
TLSH
T1BB517272E192643BA127C5DE7070939EB0E6C402C7976A176DFD9378CACAE939B1134C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2964	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{572CE7B2-485C-40C9-A369-73BB72A59A36}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
432	msedge.exe
432	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe
1056	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1056 wrote to memory of 1552	1056	msedge.exe	88
PID 1056 wrote to memory of 3512	1056	msedge.exe	89
PID 1056 wrote to memory of 2964	1056	msedge.exe	90
PID 1056 wrote to memory of 4200	1056	msedge.exe	91
PID 1056 wrote to memory of 3512	1056	msedge.exe	89
PID 1056 wrote to memory of 3512	1056	msedge.exe	89
PID 1056 wrote to memory of 4200	1056	msedge.exe	91
PID 1056 wrote to memory of 4116	1056	msedge.exe	92
PID 1056 wrote to memory of 5060	1056	msedge.exe	93
PID 1056 wrote to memory of 4116	1056	msedge.exe	92
PID 1056 wrote to memory of 4116	1056	msedge.exe	92
PID 1056 wrote to memory of 5060	1056	msedge.exe	93
PID 1056 wrote to memory of 5060	1056	msedge.exe	93
PID 1056 wrote to memory of 4216	1056	msedge.exe	95
PID 1056 wrote to memory of 4216	1056	msedge.exe	95
PID 1056 wrote to memory of 4216	1056	msedge.exe	95
PID 1056 wrote to memory of 3964	1056	msedge.exe	96
PID 1056 wrote to memory of 3964	1056	msedge.exe	96
PID 1056 wrote to memory of 3964	1056	msedge.exe	96
PID 1056 wrote to memory of 1144	1056	msedge.exe	102
PID 1056 wrote to memory of 1144	1056	msedge.exe	102
PID 1056 wrote to memory of 5024	1056	msedge.exe	101
PID 1056 wrote to memory of 5024	1056	msedge.exe	101
PID 1056 wrote to memory of 3092	1056	msedge.exe	104
PID 1056 wrote to memory of 2128	1056	msedge.exe	116
PID 1056 wrote to memory of 2084	1056	msedge.exe	117
PID 1056 wrote to memory of 540	1056	msedge.exe	118
PID 1056 wrote to memory of 3248	1056	msedge.exe	121
PID 1056 wrote to memory of 3248	1056	msedge.exe	121
PID 1056 wrote to memory of 4968	1056	msedge.exe	122
PID 1056 wrote to memory of 4968	1056	msedge.exe	122
PID 1056 wrote to memory of 432	1056	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ffda245c188,0x7ffda245c194,0x7ffda245c1a0
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,14381765215617812970,17134492292127181341,262144 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1996,i,3647562848106317519,3913119896407321724,524288 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,13047360701751026968,3844083998234253945,524288 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,4005588221923395872,696225224112165299,2097152 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,462879293568358843,7849990711341132697,2097152 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,9942894945745084743,7299284155515193632,2097152 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,215720922487658028,9036495710916632092,2097152 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:2
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,2414490849636042717,2573143292159424619,524288 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,690212177413876784,8714970840509812897,524288 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,13746513543485830892,12181119131410890379,524288 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,13746513543485830892,12181119131410890379,524288 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,17195528662189984314,3956628176266979880,524288 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:8
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,11738720451525229927,1386741715988092968,524288 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4916,i,6964982570662628418,12532021002694514594,524288 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,5217691433464302709,14984811938541731191,524288 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,15576885970710514721,14469667894713278132,524288 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,6712311369226101650,10952039677167618248,262144 --field-trial-handle=2200,i,448484192926526582,9219499162377131095,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:432

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3768

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 13e0828c657fc7a45b9aba24a31f664a5981a6068d807276e92fc63ef7541db2
MD5 e82f0b73b0f2482538951585ce0e02a3
SHA1 6259bb7e8527b9b1753d9b6d6053c7eece0188de
SHA512 335b0fc7932ef01370a9a2808e9452f5dca5922d7b95d7f367283aaa0e214e7653ff6182e155464b1baade9d589d273d489c7a7122173e7f349f1e7d0a34599c
TLSH
T16D61808C9B1DC3F1F7F9837E80E523473B72C58185834D420A9BE478989A3E7923B010
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dc61.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58dc61.TMP
Size 3KB
SHA256 af448bfdceb70ffeaa0c912abb404f65f2278014d1975acbb35bf922cdf0c5b4
MD5 72bf5ddb8b8eead6c7ab7f7f588af506
SHA1 ab233d0e871328fac82a80acb195bd68bbb8dcfb
SHA512 5d1a12e38e2fc5618a7dd74dac61093e3ddcd9cd352d5fa28014d073d8ad813299caa801e9a3d168f8b55c592a81402c022497642fd73aeed260046b17d0087b
TLSH
T10161808CAB1DC3F1F7F9837E90E523473A72C58188834D420A9BD478889A3E7923B010
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7831457b059d2be669458a3a25943f45c20d052b03d544eed136be77d75703f2
MD5 8d04c8e8aae662d268b71b819680d0c7
SHA1 070ed9d39093c28a9446813f07af17d7c59a06a7
SHA512 437d4aff8ea5232aafba6ca5d7f80d04762a0ad56232d94047aaff8002b70b890e2bc633ec22af53b166f9b33f534bdfa25e8d716065dafe5cd1c41aca8b4ce7
TLSH
T14A1180F7C7E5866E890156F09A18AF1BDE2C0506431C3C5585D4EF2B93F3475D00199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 3b401fe4f46849700cf59376ac450af6545ec45e1ce6877e42c6f5b30baa174a
MD5 76045b0ebeda00ce65abfeb213d05d22
SHA1 67bc7e99c6cfc83d4c3a2cef6bd8caa3c7532892
SHA512 20caf63439a8c395d8211ae204e49f480aabbf9e67feb60fa8eb34cb485a972531e48b352817a778c2b711f592f22a93c4d2518f089692624ae1307b22d12673
SSDEEP 192:sxZsR6WP/fisq7jfIdpdcHW6+WNGYapYhXZIgrJ:sxZs/P/fisy8SHbG49
TLSH
T1FE129612AE38A57B8CCBD21DBB65BF53D6F9503291D41E88A6FC861C05E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8a3cef58027902a95c01a5bd5812770861b6d7bcc27a6c502afa5711be197df3
MD5 26873697bbb09c15dfad3dfdcc020f0f
SHA1 b5ab2ab3a62f93cc05179f32f0f475a0dc30ddb2
SHA512 c978a674c603087f191feeaf1ab29d3288459fd673a240c8818b78aac2a996ad1c69cc41fb72226d7a7974a9aded54fd9ec09cc1c3b35ddbac7b1e2187ced063
SSDEEP 192:sxZsR6WP/fisLOjfIdpHcHW6+WNGYapQhXZIg5OJ:sxZs/P/fisC88HbGsQ
TLSH
T1DD22B9526E38A97B8CC7D21DBB55BF53D6F9503251D41E88A6FC861C05E76CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d6b5604fce3c30417b71a4f886dc19a96aedf3bad3aaca19058061e6fc7445e1
MD5 9e8abe3f3a2b9c56a466cfda007dd1c5
SHA1 0db483c21693d83926a82b1255a02b2a1f3aec98
SHA512 99016d77e98512842e0b57361e0b2736f3277cafa0ab960bcbdf538b24e0ca68c9f3b5895fdcd3ca13e07467643cd61d6eb489b601cd8ce95cd42af7960c4fcd
SSDEEP 192:sxZsR6WP/fisLOjfIdpdcHW6+WNGYapdhXZIg5OJ:sxZs/P/fisC8SHbGfQ
TLSH
T18E22A811AE68A97B8CCBD20DBB65BF53E6F9503251D41E88A6FCC61C05E76CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 2d9a6e9aed2e209d8e7d65c897c99bb747209e13729b10fdef1608c956a60dff
MD5 50a64222cfef18cba57e196a2b5613e5
SHA1 9dd0f8079128d5dddac24841e19d687975027fc1
SHA512 6a76069d2d758605e0aa63a5a76b4d4f17d289fb522fa38b3f392b60ddde48aa7af324c23778025467afabca1042d3d1b08b845b47e11d0fd57cbd57b775874b
SSDEEP 192:sxZsR6WP/fisL7jfIdpdcHW6+WNGYapYhXZIg5cJ:sxZs/P/fisv8SHbG4S
TLSH
T17E22A712AE78A57B8CCBD21DBB65BF53D6F9103291D41E88A6FC861C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9f641f8d3466d2613610b9709b793efdd2685ca04bd3333b9c949cae4d104372
MD5 5d54ff616107fd061d533554e3883f0b
SHA1 bf87b0837477548b229f18db4ebb7bda2470331d
SHA512 f223c062dee6059093d884ef5663b9f7db0230cb2da4544c469b88d164d3588618664f89325038c914286eab11705d50d92eefec647d9148570973cfd7ed3aa6
SSDEEP 768:2aWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Rro47FfeSmRQ:2aWPcLKWvKeEeu1jaClLiF7q4hWSmRQ
TLSH
T12AC2EA3B640CCB7E5FC01A9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7f54736db9e969a6e4e072b4540c0e7d474d1b290ad81fcc9963cf483d5dd96a
MD5 30490d3b33ae5d1c68e3ae63ff588158
SHA1 08361d33a72dd1a3e1d9f9935bc22af2e342c055
SHA512 ce5d3b3986795dd71fa9622858ee15a64f5e5359c47e8f909399793ca3715fde7675e408102f81e45fa157bb5de2318140b6ede94c11cb02a0825c59d3d555de
SSDEEP 48:K0KV4kKIYJbUzEIScJK9A16JxyZYLs46yLCNQ8CgARbcrMISURK9Y1iRxaBYDU7U:KgZKK6Aimd6KmkFkAKdi+Oz
TLSH
T1F391F4513077120238BD2D8C88A5866E428131B3705DEE7BFFBD45A59E2BE095DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5977c6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5977c6.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 21441f14caf3811baf1f528b50b52e9e240be6c46bc51373360351c889b7870b
MD5 95eb1629df46ab316ede71b7a9e54248
SHA1 1087a023d9714d6fcf62297bb13a0817d6215c3f
SHA512 e70d1a5f1ae6dcc206968ed57044dbe63baeb0b764759b3076e34b6fc31c880afe382b094f91a90d43ef7fbfea57702876dddadc6482712df332cdf07aafcc35
SSDEEP 384:dZcIhsNEZSz31euSzIGmYMoULMXXjiCztgOIwZOypqoD:FhcDRUHMXMnjiCzXsJ0
TLSH
T1CB826D339CB8ACBB5DE7A545F54A3A135E748027E2C86F94A9EC6B1D01DA294030BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 c37b43dddfd25ba87b3fc1ce645f2c13969065e3e08f76266227d1d11893b36b
MD5 acfef6e287d7c065217cc929a3dcd7b5
SHA1 6ba1fcfcf48b040b55153748a1c0a41af549c140
SHA512 9ea7e9bbb7f9702b3dea488a8955fa992d4faead7822886fc943011dfbe24d5eff729d7921efa5c1d793daa278fef04ca1a6ca4de5fd5787a95f667ea924305b
SSDEEP 384:+iFiZcI1zsNM8TUNTUlIlUSz31euSzIGmYMoULMXX4tiCztgOIwZOypqoD:VFQN1wgDDRUHMXMn4tiCzXsJ0
TLSH
T16CA26C338CB8DCBFAEE79A44F54A36139EB44067D6C5AB94E6DC6B1C01DB198030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6ac34a994c01a2d17dee2d535599167faffbdf07370b5fd1fbd4ae54df2ccb66
MD5 4c7b4e9eb946f095d6e53ca218bf3c2b
SHA1 dbc5c8364639d35d94e7877c84c683f03aa3644f
SHA512 e892a12c3d4b052d4ff445b001ce85f38b6d22f824b63f1b9fd4492cab6803243bfcf5771f5d50951a47cd2f790fac4199dde63f5a289d38f6c682315e210f1c
SSDEEP 192:aONg6IE7QmiUyu5TPuIGmYMgjzoFGtC7sckU6:aONg6DttPuIGmYMoUVsJU6
TLSH
T1CF02FA35EC78BCBB9FB36D49F4462B235EA5112BA5952F84EAE81B1C00D725C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fbfe28602329fdc642ba86a5a338f0400b2cf9c07e05270e2adfe7fd9b27df25
MD5 1f384b3bdd094b61f5c236002dd0df31
SHA1 8dcf2934dd757512eeea85eeb66100a5762b27a5
SHA512 64c33d93f48adf1e272bf1992fd092f9a6a70cf5f975fc186cc07732a2edd53b43267be5d6368f66a964070c07d275ec918b7a123d875a605118cd3bc7cf1044
SSDEEP 384:4ZcIhsNEUSz31euSzIGmYMoULMXXjiCztgOIwZOypqoD:GhJDRUHMXMnjiCzXsJ0
TLSH
T1EA827D339CB8ACBB5DE7E545F54A3A139E748027E2C86F94A9EC6B1D01DB254030FD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1697d933c2f6c347a49bc062e93c72cbd8ef194f60dd2be1073e9a5ce3ebcf3e
MD5 6b3b15bc3d5230c548fdff654ed1cbc9
SHA1 a3c9b2e57f4280649fb7596908427355dbd55bf2
SHA512 93d9d3a9fe05ac83836d332a7deff89fa9dcfa8b4ce8f13f47815eb8a03e4eab7bd5fd1c1cba13caf96706aab6f220364d744afcbd33b49881061bc76d14b308
SSDEEP 192:aONV6IEvQmiUyV5TOuIGmYMgjzoFG8MXXxeUK27HOqmhzU6:aONV6DxUOuIGmYMoULMXXhHCzU6
TLSH
T138120C36EC78BC7B5EA3A944F4463A139EA54217E6896F90E6EC2B1C01DF25C130AD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f7e2a9db-386f-4e46-8edc-45b097cd755e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f7e2a9db-386f-4e46-8edc-45b097cd755e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 54d4d97ea4f529eed19f59b75eb8a8df4d895df074df901261376bff9f0672b5
MD5 9ae7bafcdb56141c8c0d495c1881d5b9
SHA1 593498a41560b092ddcff68047a1f8a51c55dca4
SHA512 4c55ea58e5a3244a2db6480dce1413b07a1a27d514bc660f28381092950c8e7064e6f61da2fd67db2e2528243c1c83420e2f77518643bc1dd929bb3629a6bd52
TLSH
T1CE41FA98A6FA1108B3B76F569FF2A46D487EBC732E0AD49D00110D4F0A63B41C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download