dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 18:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260930-w6ds8stybx
SHA256 dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84
MD5 cb1fc49764c26340f3f059f7fba932dc
SHA1 dee6828bc5016de3a1f5fcffc7509ca040daace5
SHA512 a06e656cf0e0a49dee6ec593eb303b1660d7c64cdaf6dc8db2f3f4c1ab7d94f1f35921524a2d8e6733b7161e1a20a2ddf5e4d8d1c580461f3c01eb02628b52ab
TLSH
T1BB517272E192643BA127C5DE7070939EB0E6C402C7976A176DFD9378CACAE939B1134C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2120	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{D49AB796-DD5F-4D44-A850-3FC8483F18B0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe
1244	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1244 wrote to memory of 1832	1244	msedge.exe	88
PID 1244 wrote to memory of 2120	1244	msedge.exe	89
PID 1244 wrote to memory of 2480	1244	msedge.exe	90
PID 1244 wrote to memory of 2480	1244	msedge.exe	90
PID 1244 wrote to memory of 2480	1244	msedge.exe	90
PID 1244 wrote to memory of 2408	1244	msedge.exe	91
PID 1244 wrote to memory of 2408	1244	msedge.exe	91
PID 1244 wrote to memory of 4384	1244	msedge.exe	92
PID 1244 wrote to memory of 4384	1244	msedge.exe	92
PID 1244 wrote to memory of 2376	1244	msedge.exe	93
PID 1244 wrote to memory of 4384	1244	msedge.exe	92
PID 1244 wrote to memory of 2376	1244	msedge.exe	93
PID 1244 wrote to memory of 2376	1244	msedge.exe	93
PID 1244 wrote to memory of 3028	1244	msedge.exe	95
PID 1244 wrote to memory of 3028	1244	msedge.exe	95
PID 1244 wrote to memory of 3028	1244	msedge.exe	95
PID 1244 wrote to memory of 4448	1244	msedge.exe	96
PID 1244 wrote to memory of 4448	1244	msedge.exe	96
PID 1244 wrote to memory of 4448	1244	msedge.exe	96
PID 1244 wrote to memory of 2988	1244	msedge.exe	102
PID 1244 wrote to memory of 2260	1244	msedge.exe	103
PID 1244 wrote to memory of 2988	1244	msedge.exe	102
PID 1244 wrote to memory of 2260	1244	msedge.exe	103
PID 1244 wrote to memory of 4732	1244	msedge.exe	105
PID 1244 wrote to memory of 4324	1244	msedge.exe	117
PID 1244 wrote to memory of 1064	1244	msedge.exe	118
PID 1244 wrote to memory of 904	1244	msedge.exe	119
PID 1244 wrote to memory of 3480	1244	msedge.exe	122
PID 1244 wrote to memory of 3480	1244	msedge.exe	122
PID 1244 wrote to memory of 5052	1244	msedge.exe	125
PID 1244 wrote to memory of 5052	1244	msedge.exe	125
PID 1244 wrote to memory of 2324	1244	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffcd1a9c188,0x7ffcd1a9c194,0x7ffcd1a9c1a0
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,3610822706818687053,13088903874623371479,524288 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=2108 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,6544002397156738179,18282482828034541487,262144 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2032,i,8087160114291938744,9567681010482823639,524288 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,13204269337975340132,10463228778280547774,2097152 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,17480255049722767411,6739988335393804990,2097152 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4128,i,15965715527810014024,3214677328821121116,2097152 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,1829977151137696460,4510222779460080037,2097152 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:2
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,17533979475582988025,5221407480664146355,524288 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,3465527202275486618,4839874089619972412,524288 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,15886685203261034132,17865094015743171584,524288 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,15886685203261034132,17865094015743171584,524288 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,15380006619413958283,4340904932183018616,524288 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,3089829137483579688,1735340867616309461,524288 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=4124 /prefetch:8
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,4200615160047457304,2653729149646511917,524288 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:8
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,2749506633526956299,4434640353409097443,524288 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=684,i,16913755996647309353,3579992222239471549,524288 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5152,i,13150547130496671451,531347661148438055,262144 --field-trial-handle=2076,i,11850729323491001742,2353031551167499215,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2324

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 010ebb0b4af225f2919e07c13b897c0c97c70b92edd29cc60f216218a5a8038d
MD5 b9c978b244aab2f1dc5476edd3105e16
SHA1 f226e445dfa7a24003c0a13f930b25af8cf7b10f
SHA512 230400e9e6a6b974512d61fe5f6cbbab18c813349ac24a72a565abfda972c9225e98eff94f3837665025633b515067d2e2a13632523ed7584180f3cacc319b56
TLSH
T10E613ACDD142848AF7980075D2DAE4E332B25DA169B39FD338E4E7FDAC07F00A918008
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c02e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c02e.TMP
Size 3KB
SHA256 5c9e4629c6384fd637bdcead3db9fba9c5d19f908237d0a59178e750344fa6e5
MD5 f0088b24483ede939d30aa49d3dec192
SHA1 dc9eb3bb6b19a552e9e066687be1afba3db5f324
SHA512 4b6b4ff8b6b78f8f09a3777698bc953967468ea6f573fe4c3c0bcdc80c3d7eb2e2dafd1fc5c5c2997b83ddf4c422b65ae3fca75afe239876611b8458b54f1cd4
TLSH
T1E3613ACDD5428489F7980075D2DAE4E732B25CA169B39FD338E4E3FD9C07F00A918008
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 955f699ac6332d14acf2d48f4494072a211368d26ee26189c79efea7a660e9ab
MD5 49917966e58db4c07969de8792aa8c96
SHA1 7fc049215196e5fa1840522c7c747668e763a9b6
SHA512 8a92d2b712614dbb97c25d25f606e603948efa589dbbf99f3a14882786f386f4c02c800293bd041751ebc7bc02b326bf28051db4d651d8e54489d3541112862b
TLSH
T122116DF3C3D586AE891556F05A14EE1BDE2D0506431C7C5986D4EF2B93E3475E0015AF
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 7844eb1694b610d8c528ff302012f7bd6a1e105908d09e5714fe015c5fc98834
MD5 56b7b7e59552088c5a4a01eb303255e3
SHA1 6d09a5d7bba4f86d46bf576f99e2772f1df0c385
SHA512 36c6b1c93510e77a81b79b9dc39b7b19a482e86b12bdc274172b73ab8447e18e47ca7ae8472c1ebf57107643f8d03230a36c579ae742f636aa9cc44b25ed350d
SSDEEP 192:sxZVR5WE/f4sDOLIdpdeHW6+WNGY3RQDIgrJ:sxZVCE/f4sKU0HbGl9
TLSH
T1B722B8116E38A97B8CCBD21DBA65BF53E6FE503251D41E58E6FC851C04E6ADE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4a673127b1d828e972cb2012de4fa1b61caab4a45da8ee75ed6bc51c97a948eb
MD5 ef9a3ccd9e1e200c066d58d5ef1c3301
SHA1 1e35411fd0f92f4c83cb7d5e11bb7a6a2319a264
SHA512 0e3e9c0157451ad3fbe4f36409708c1fd6b81a392f2b4fbaf6df92be0b2ee649644a9d6042c530c1d8f89fa9e2fbf69cfa19b58466aaab680fd8693235e0fb61
SSDEEP 192:sxZVR5WE/f4soaLIdpHeHW6+WNGY3sQDIg5fJ:sxZVCE/f4sNU+HbG6D
TLSH
T11422B8126E28697B8CCBE21DBA65BF53E6FD503251D01E48A6FC861C05E6ADE120784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c5c2c6329cfb8e72096e9db879e3cf6eb6f1bc158fb929d6c8aaff910974d32e
MD5 2cf8d51a4acd7e9e1582f270eb449051
SHA1 d73020acffb91751578d9dcfb2dd7996921d95fd
SHA512 4865114434823eb713608584875a4e9f771e9cc06c42648a780f26bc997a9ddb0ec505d1c1568a5df22c118ee14ed7402225d793ad6329c600c9211ce2beac9c
SSDEEP 192:sxZVR5WE/f4soaLIdpdeHW6+WNGY3VQDIg5fJ:sxZVCE/f4sNU0HbGzD
TLSH
T13E22B8116E28697B8CCBE319BA65BF53E6FD503251D01E48A6FCC61C05E7ADE120784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8f4b9ba70ab6f82ed8d9b87ec31b23809bde726a1ab7a896d0a3418d60223e3b
MD5 2f58fbfb555308e5e3956b99e2365949
SHA1 5461f08203665cd793e69126df2a3edd311181fb
SHA512 b880b41a88956b9f3381dd505beb8470cca498bb458a1822d35907865463970dfd6bf7cbd798bb904842953ed814b38668f4c5da842b6452ba58de4beb960665
SSDEEP 192:sxZVR5WE/f4soOLIdpdeHW6+WNGY3RQDIg51J:sxZVCE/f4sZU0HbGlN
TLSH
T12922B9116E38A97B8CCBD319BA65BF53E5FE503251D41E48A6FC861C04E6ADE120784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d48080bddb9322fc9b5bdd76439327736e5853be44b32fa2eb812b69027750ec
MD5 de9508b1fe247390aac6ab94b0feb986
SHA1 c66e842ccfca26f13e71dbb0bc37c9e735eecab9
SHA512 c9c86d51d1bcda78c9318b541c5e4f75f51b3063c5d75d400d679dcfd5d5d42e258f4ce981c5c16a368f23d4316e66ac60ed9a351f6432ffbf19e0afa26f06e7
SSDEEP 768:7h30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72RrolZMRo:7h30AbSWvS2l9u1jaLmLZ12qGo
TLSH
T167C2EA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796548D4047FA984C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 64f4cfe279afb20e9e754b494ddc3d8f3aaa984ec901646a0b92260f452b8cf4
MD5 717f3fb378571c35f3163358cfea7e4b
SHA1 3b97271edde631fdf6a1da4bff50f8bbb1aa9159
SHA512 9d10674fa26e782635ec5c7e0fa9fcaf9be3898f1e72626b5a4cb80b594b1edc0eac7a27c396c95e0618af4410f6ac54f8cf20a9a2de8a666777f271cac51c10
SSDEEP 96:Kwj2KcQey+0K7CsKYKPae/0l4kuq2kGqnPYskKwBYWkcEkHu9:wNHMDlM
TLSH
T151B14051717A2211387E244880A5E76E52C232A33315EE6BBFB904B34F6BE550DFEDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595b84.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595b84.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 16fd86533993fff0bcce20e6fdcc06ab6e14e8743e4a90db51819c1d31f1b1d8
MD5 bd30bbd016f57675cc13e7d10a5c3074
SHA1 5a2f6f0c8cd922db45256f99d72483e6a58b4af9
SHA512 ec652c7b8431f80e236b9a86277bf673bf51f08292d58be985e2c0557b4ce7bc19f7e45a726757537f7633441c4699b1b0460407bc52d42721a64c3e94d44f76
SSDEEP 384:6ZcIhsN8njnpuTo59iX5FlS82YoUnVZh6DKhHH6ov:4hHn93aY8nfYGHH6I
TLSH
T16D828D33A8786C7A5DF3E291F5873A139EB89063D3C85F84C5EDA71D01DA5A81307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 60b635136ce59b5fa009e5eaec593ab4f32ff832450ecbd3be9ed7bf03fa00ec
MD5 c8c7ef9273fb8494be0cfafb018779fc
SHA1 badd3255cf1c7a8b24478e949150510d170c44c5
SHA512 0ea393924af15727ed351c49cd1056e1755154673dcf7f851c990e4548f60386106f8a6616baa73650a9a641f660d45464adabeec497c10ffb00a507b57424c0
SSDEEP 384:kiFiZcIPzsN08TUNTUlIlOjnpuTo59iX5FlS82YoRnVZh6DKhHH6ov:/FQr9wgKn93aY5nfYGHH6I
TLSH
T10AA27D339CA89D7FADF7DB90F54A36138EB840A3C6C5AE84D6DD9B1D019A1D81307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 080d2285f7c24a6f290f2dbd3ccda88c090d0c6a7b3b0b5f454e3f3664130c6d
MD5 01cb79a5fb4fb79c253fef4a700e698b
SHA1 dac72387d352243620dced5a6161d1c1a76c5532
SHA512 7260512649e71cec8d47da9660cb5370b2656c3c66286bc095e6a488faf18a1016c5c2eb8a7c3b9f084365b87b2197ee894c13ad2be32383d4724fb6b9770c87
SSDEEP 96:gqONkoQsjpfuMVwptaL5ih/cIPURHl8h4otop56iCDuBIPuva6zx8X5Fx+xKYv6U:LONU6AmwprQmiUy6O6siX5FliJiEJU6
TLSH
T1E602E935AD686C7B8DE3AE45B48B37239FA5117BE6946F84CAE81B2C01D765C1307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 afcc89aee17ea5a4676c90cd0afbd5eed7265accdf52ff75de19e3159bd00d2a
MD5 91264f4f2b2efc5e13dfc3da3831fef3
SHA1 a71541cafb5c77308b3eefb07332ae9961e246f0
SHA512 a65e7a6604d661b5570d5ee08356dfa6fae40811e235365a29c5f63c85565e29c95e227a8a84eda6cc9ff9a91462d646e262a5b002e05d1f5f96b95e38cf91c3
SSDEEP 192:LONF6AmwpGQmiUyQO7siX5FlS82PwoqlRvrqgU6:LONF6ipiE7siX5FlS82Yo4nU6
TLSH
T1A8120A36A8686C7F5DD3A594F08736239EA45127DB886F84D9EC1B2C02DE5AC530BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

59760bd8-acff-4f9c-9c30-ba3bd85492c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\59760bd8-acff-4f9c-9c30-ba3bd85492c1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fb7cc125-e3e0-4888-b276-aebdca888147.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fb7cc125-e3e0-4888-b276-aebdca888147.tmp
Size 18KB
SHA256 9520d8a183e09ea99ac86106a3721d5dbc26c80418e9b47036b88ddc3c08db70
MD5 b4c98ec1dd1c3395eb0c238a5df80994
SHA1 01eed2b49ccf8c26ed7776eac52762cae3cb1cc0
SHA512 77bc4e9d35daea4c4be1c200b0c6500856367a74022c11af29964e5b08f7d26e687a88ac7f60fddc7f4f07be2e005deeda087899dd5116bc641936a6488cf697
SSDEEP 384:lZcIhsN8OjnpuTo59iX5FlS82YoUnVZh6DKhHH6ov:dhYn93aY8nfYGHH6I
TLSH
T121828D33A8786C7A5DF3E291F5873A139EB89063D3C85F84C5EDAB1D01DA5A81307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 20636b01a63939b4224bba4a5f308987647a5f2be470c23a2c464457775f5671
MD5 5defef4250910456102a7a8dd64d0989
SHA1 c5601e0d06bf6bc84db6f2c47b3d360e90720a3d
SHA512 d73bd5966a572165ad81b69af2dcc3ddd2c4c26f2b44ba77e34c879827fce2c0997f8ed5f08caa8ebc5199afc17d9b0c597ab9eb3cc7055ac73afcd45ef2c09b
TLSH
T1BD41185CB6ED1108B3B36F1AABF6A86E487B79772F0A915D10110D8F0622A40CCB1B37
MD5 SHA1 SHA512 TLSH

Submit Download