05a084d8963bec85192a3301bd743a19858d0e5fbf70bf867262c1ac50afce92

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 03:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dist/dependencies/html/mainview.html
Size 23KB
Sample260808-eebq5azcmb
SHA256 05a084d8963bec85192a3301bd743a19858d0e5fbf70bf867262c1ac50afce92
MD5 ff95d56f9b9d77558c0a6ccd7c3c8143
SHA1 89dd9f990c782477f5c41d8b3154acd574c62879
SHA512 bfb00506e2cf720612eaf8be904bb4ddc3f64bef331cae65311b04ac6a6f1e50b379f3d6d5051fedd9dc5bfe26bd233876127bb95488f8abba215a8006e6b035
SSDEEP 384:GHUr3A/YoZi/pdiOJt7zmEkGf2a2a2r2e2tI6X0l:G0r3SYoZAmOJt7zmEkGOTT63tI6Q
TLSH
T1D1B2622291C1151690B7A2C56BF1475EFF798217C70305AC3BED27A29FF7EC58863A88
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4824	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306347714802092"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{2E1C631E-A878-43E5-8C6A-53CF0AECF6D9}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1788 wrote to memory of 5092	1788	msedge.exe	85
PID 1788 wrote to memory of 4824	1788	msedge.exe	86
PID 1788 wrote to memory of 776	1788	msedge.exe	87
PID 1788 wrote to memory of 776	1788	msedge.exe	87
PID 1788 wrote to memory of 776	1788	msedge.exe	87
PID 1788 wrote to memory of 784	1788	msedge.exe	88
PID 1788 wrote to memory of 784	1788	msedge.exe	88
PID 1788 wrote to memory of 4056	1788	msedge.exe	89
PID 1788 wrote to memory of 4056	1788	msedge.exe	89
PID 1788 wrote to memory of 4056	1788	msedge.exe	89
PID 1788 wrote to memory of 5016	1788	msedge.exe	90
PID 1788 wrote to memory of 5016	1788	msedge.exe	90
PID 1788 wrote to memory of 5016	1788	msedge.exe	90
PID 1788 wrote to memory of 5036	1788	msedge.exe	92
PID 1788 wrote to memory of 5036	1788	msedge.exe	92
PID 1788 wrote to memory of 5036	1788	msedge.exe	92
PID 1788 wrote to memory of 4980	1788	msedge.exe	93
PID 1788 wrote to memory of 4980	1788	msedge.exe	93
PID 1788 wrote to memory of 4980	1788	msedge.exe	93
PID 1788 wrote to memory of 4648	1788	msedge.exe	97
PID 1788 wrote to memory of 816	1788	msedge.exe	98
PID 1788 wrote to memory of 4648	1788	msedge.exe	97
PID 1788 wrote to memory of 816	1788	msedge.exe	98
PID 1788 wrote to memory of 1944	1788	msedge.exe	100
PID 1788 wrote to memory of 3276	1788	msedge.exe	103
PID 1788 wrote to memory of 2520	1788	msedge.exe	104
PID 1788 wrote to memory of 5028	1788	msedge.exe	105
PID 1788 wrote to memory of 1060	1788	msedge.exe	112
PID 1788 wrote to memory of 1060	1788	msedge.exe	112
PID 1788 wrote to memory of 4768	1788	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\dist\dependencies\html\mainview.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffaa793c188,0x7ffaa793c194,0x7ffaa793c1a0
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,6793339733315959350,5493107904364522274,524288 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,28571217340299784,5661810704486421806,262144 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2536,i,5135993251357538577,5543467692408569094,524288 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,12840346379827649812,8834988387265777029,2097152 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,9810138937550992397,12211906421929355747,2097152 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,6157861604025795210,12473678958179304019,2097152 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,16921230081581524236,10830474164444659424,2097152 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:2
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3396,i,6357465010523561479,15176424000585244789,524288 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,6963063576746469503,10525211933099033815,524288 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,18059792715676971971,8390409475577535080,524288 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,18059792715676971971,8390409475577535080,524288 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,17455041786975287532,9856913035907023890,524288 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,4919006025611981437,2923846853313687992,524288 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,12396980695505458620,17512136666939783831,524288 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=3388 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,7175793667355093917,856780772604090030,524288 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2124,i,5296827570343388937,14347940434496015742,262144 --field-trial-handle=2268,i,5368085892886434957,6952879830383500032,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4768

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 987a8409b500944c2e91e6f0b356beba7853fbf9bc34127cdcac87e36a5d159b
MD5 711b7276ab4cac5c7d0662623628b4f1
SHA1 c0b08a2ce958cd6b3cf43b1b606bddac6f416c76
SHA512 53334798f71067d33c5ea1fc8c14893238cf2be2d4562c934fc37a0753148ec6d84178d601e10f62955b9a3059a4dc075f4e1a5620c5a7ef13184470d069a6e8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P76:fwUQC5VwBIiElEd2K57P76
TLSH
T188B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 704a352f2f43e96c78f11fe72387562a101ee353397cfc73c5d0d4a42178b2f2
MD5 75669b1240b2b5d28c72a4be1db4483b
SHA1 e13ea1b060aff57d2f01f7144c635ae2bb7eb061
SHA512 3aaceb592252f88d43ce4fa39dac29e56fca18dd9d78423401c5329bde891d50fe20f59322e37de4673b1ef2c6adcdf67518d2797d5bf40f53ea2c590ffd3384
TLSH
T10271C53B06E26CD2E39057FD74DE1AF5747349DBFD8F5EAD12209A3036137128229568
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58437c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58437c.TMP
Size 3KB
SHA256 8f0163e0d34f3df0867c5fd2d9075aff95e80e514b9067883d39770578b952f4
MD5 1a8614c368837fdae31c2d786c0768fe
SHA1 30fbf35391ebf79fd2968e3fe80458fb33ec560e
SHA512 0319ba701a21c8bd35ba8a5f6e23c692004a933de75db5853a3692088b5746d85a0e7b0ca8526d323b88a196efdfcc790ac7358bf987f5a70d0d97070c51b786
TLSH
T11471D53B06E22CD2E39053FC74EE1AF4747349CBFD8F5EAD02208A3036137528229568
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 87044ca0b2b75f8658fae8c90d483a6e9ab594b843719e0bfcf9eaf8bb24cb6d
MD5 e39bf60cd8236352f280f9d251ba1c7d
SHA1 ea9e3577d13844d56441c2488fa620fb2bb731b2
SHA512 7cafc49472df43dbe3c28fcd0091b2e633f4994c9541f9aaef48c92b169cd3e4e9a95261201768a814209dc0e961bc7b89817e591ba42b99c59204b846aa184b
TLSH
T13F219BF3C3D5866E890116F46A24AE2BDE5D0606422C3C16C9E4FF2B93F3475E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 87eeb310bb0978b985563883d1e95313341a64f82bb4ee224bc2a338f13df3df
MD5 4c62036a8871cd1eb75afe59f5113c3a
SHA1 b71ff1d2cc027113b96909371a4affb338463e06
SHA512 7037a962834c3830f38a1e497d1d26a1f7dfa0cdab925c8d4386dc08c2c1e0cf3df3ce913cdbb8fb69c19af128513ef082ce0c3012d814c95ba8aa3a75e679a5
SSDEEP 192:sxZcRPyM/jK1Ml8Mkm/fiskp4tpIdpduHW6+WNGYIk6Z9IgrJ:sxZcRMm/fisQ4tiEHbGJ9
TLSH
T1DE42E7116B34697BCCCBD309FA45BF83D6F9147292940E48A9FCDA1C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7967e067633e72202e8da82f5ff38e8f3cd52f5d6c97b465b074f9da24e3c24c
MD5 8015fdc9f5179ab4355cecc867b9c9d8
SHA1 347cf61db9e5ae1ae4e6f18d51f9edbebe71f417
SHA512 866a33d5c9a09bdb72b140800e80448571b18d4ba304a3f69fe05c5c61362914b8e5e152cc8bb2d1f9ddf04a6a6f61ac7400538a0cfcabb89d9b1759be866eab
SSDEEP 192:sxZcRPyM/jK1Ml8UQCkm/fisBpltpIdpHuHW6+WNGYIFRa9Ig5eJ:sxZcRqBm/fisfltiOHbGEQ
TLSH
T1F452F8156A346977CCDBD20DFA41BF93D6F8147291940E48A9FCDA1C04E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d2aca6ca9cd256e5eaf809f19190a2eef7eb68d2e2b163b34cc2a2143281b01c
MD5 0f1b534cc653b5cc2396410236bcdedc
SHA1 61a78cccbda8676d138bfe6c35d9e6936095bd49
SHA512 f36302b2cc14f7e9459954fb0c152e1a7dc4bc74e0f0187c6152076c52620f5055da24e792dc66e9f4cd54f4d1015f384ede73112069d97669558b7a8b57f646
SSDEEP 768:4usqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9LrotqIg:4usqxXlWvJD6Tu1ja54LAs94tqd
TLSH
T1DDD21B3B694CC77E4F840E6DEC266FD76ED801CBA6988D5447FA880C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 3cdfc2d2cf0fc1e71e8560cb4cc328d2ce0359b57916affc09a97f7c1da9cb3e
MD5 2f54a1e38987d361b55dc061e34f1a2b
SHA1 c2c539b320e499898f77a4ce911d90b27d83e8fc
SHA512 3e92a8cfb5a5c4717e40ca55b3e7cbb4b6881d863fb06889d08764a85277cff36de2d7db6b085201597ab3fe355fc17a35665f56e7fa46111d5a96b9f905f17e
SSDEEP 96:KYbaKYIKOBOKyw6aEAKdieH6KYUOWb+KoEc:ExthXc5hN
TLSH
T196E10822737B134278BE290CA2EA95378E4133633818A56F7BB840E50D67E615DFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58e049.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58e049.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b8d14a7bcf74cbdbe2a4449e47b8cd99806e452b183c6aec4e2ddba2b5d0b846
MD5 9bd50784ae47c2dca0ddf0ab5a16cfc9
SHA1 106c6bb6f44166e9741b8beea958fb084b5652fb
SHA512 891006fe89657dc0e71aa21188f5034921145ea841d9ff0ee26a740978c27ef64b1179a2c81e2361fb6df76d22a85e79a9f15ef44f9c320ae1c9acae6a6ab6b3
SSDEEP 384:GZcIhsNVzeb+btVRNwOqp9UiV+nTKwBODNZOCcKD7:UhATHwOS9UiV+newBKZOH0
TLSH
T1A1928C716C385C774EF6A509F94B320B4FF89073E6C82AA4D6ED6F1D01E659C130AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 983d97376e960d9ca99830c7435ea9bb7a052f99b2edd32fc47bb2b0c3adc1c1
MD5 759aacb4e621fb7b5a810634a4dfef22
SHA1 48a5fd098f35234865100b7bdad07d016d116601
SHA512 f5316d8febe8353bfdc6b88c08a6514eb5d76b5f153e8cab13fee58dcc39bfe57528bac52cf4b67ff8abd5ca68bbd9bd4030193426785ab5b1adf43b9b5c4710
SSDEEP 384:FZcIhsNVieb+btVRNwOqp9UiV+nTKwBODNZOCcKD7:9hZTHwOS9UiV+newBKZOH0
TLSH
T1CF927C716C385C774EE6A509F947320B8FF89063E6C82AA4D6ED6B1D01E659C130AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 ac3151424797e263a0cc1ceeca0ab8fa3c8b29dead0e35472b08b91b80bc1da1
MD5 ab424ceb594c34773acde82bf5456baa
SHA1 1de7e62022db3c1be2301a623dafb252c7de35f6
SHA512 12e54bdcb140d6231bf74da53dfe01a262c91764abffa264a054a56528b5352854d5dc9ba4cc50b406fe2c6529053a4766bd56be0a5493b88df96fec315834bb
SSDEEP 384:liFiZcIPzsNv8TUNTUlIlieb+btVRNwOqp9UiY+nTKwBODNZOCcKD7:sFQrawgqTHwOS9UiY+newBKZOH0
TLSH
T1CBA26B725C289C7B9EF6AA49F94B32078FF89073E5C46AA4E6DD6E1C10D61DC130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cc208d745045faf1e5c624aafa2ef963e35830777556742e6ae0f6307b7f0953
MD5 354057dcbf93deebe98b89fab7a33f3c
SHA1 e13b987f783e121312c8daf5b03b0a8f949a94c5
SHA512 5e40a29f404b094209ed447bf064c749a6086be3ca751b0278a897a1370f71f4387732b0da7b729f7d7225b8af3ac299e2a19bb7d0929b163a9fe3c431dfbb0e
SSDEEP 192:tONA6JkRtQmiUy+yW+RNwOm9OmGh3nRMU6:tONA6UrQW+RNwOq6GU6
TLSH
T17602FA357C382C7B9EF2AE09F98B27175FA4206BE9952F84DAD81B1C01D765C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e51f20635975d5285981273e1880ee36b48daf57c7196fd1389e047baab974cd
MD5 0aff0bacebc47859b0ad633434552b66
SHA1 a07b88061785d009e1c28c5a3971d7aba22be252
SHA512 4122a2096e6c2ed85b1e47d3df698fa831c6861504f0d417249c3a6e013eaf69f58661f9b3a075dde91f6d02a669954958eb622c12cc3a9952cc2114c2d56e58
SSDEEP 192:MONY6JkRlQmiUy+yv+RNwOm9Om3l9UiMVcvqSsU6:MONY6UDOv+RNwOqp9Uir+U6
TLSH
T1C8122B316C385C775EE2A945F98736174FB46127EA892F90D5DC2F1C01DB69C234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aca78f27-9c27-418e-a88a-3dbc1dbfca99.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\aca78f27-9c27-418e-a88a-3dbc1dbfca99.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d26ef8a3c703ea97750b03dca3b4cb5cde3100358778ce8c72270d951d959978
MD5 8468e8527f7d4caf343f18429a68778d
SHA1 f11cfbc916a5b161f0f908dc607140e501de28e1
SHA512 56105eaec551813cd1bb71cc36adeda44780abc920c311ef70602a875b3aa1f76bd3253dc2abad3b5b71787a775c3fac36d6924a6619240db18e0119e330735f
TLSH
T1BA410798BAEA1158B3736E1A9BF6A46D487B7C772E0AD49E10110E4F4566E00CCA1B37
MD5 SHA1 SHA512 TLSH

Submit Download