hxxp://atlas-signal-web3[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/07/2026, 10:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://atlas-signal-web3.com
Sample260703-melv4act5p

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3272	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134275477730694517"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{AD5DB0C7-B155-445C-926C-BBFB9E2F8149}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
548	msedge.exe
548	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4952 wrote to memory of 756	4952	msedge.exe	85
PID 4952 wrote to memory of 3272	4952	msedge.exe	86
PID 4952 wrote to memory of 4856	4952	msedge.exe	87
PID 4952 wrote to memory of 4856	4952	msedge.exe	87
PID 4952 wrote to memory of 4856	4952	msedge.exe	87
PID 4952 wrote to memory of 1692	4952	msedge.exe	89
PID 4952 wrote to memory of 1692	4952	msedge.exe	89
PID 4952 wrote to memory of 4600	4952	msedge.exe	90
PID 4952 wrote to memory of 1460	4952	msedge.exe	91
PID 4952 wrote to memory of 4600	4952	msedge.exe	90
PID 4952 wrote to memory of 4600	4952	msedge.exe	90
PID 4952 wrote to memory of 1460	4952	msedge.exe	91
PID 4952 wrote to memory of 1460	4952	msedge.exe	91
PID 4952 wrote to memory of 4416	4952	msedge.exe	92
PID 4952 wrote to memory of 4416	4952	msedge.exe	92
PID 4952 wrote to memory of 4416	4952	msedge.exe	92
PID 4952 wrote to memory of 5068	4952	msedge.exe	93
PID 4952 wrote to memory of 5068	4952	msedge.exe	93
PID 4952 wrote to memory of 5068	4952	msedge.exe	93
PID 4952 wrote to memory of 636	4952	msedge.exe	97
PID 4952 wrote to memory of 636	4952	msedge.exe	97
PID 4952 wrote to memory of 636	4952	msedge.exe	97
PID 4952 wrote to memory of 816	4952	msedge.exe	98
PID 4952 wrote to memory of 3832	4952	msedge.exe	99
PID 4952 wrote to memory of 816	4952	msedge.exe	98
PID 4952 wrote to memory of 3832	4952	msedge.exe	99
PID 4952 wrote to memory of 4092	4952	msedge.exe	101
PID 4952 wrote to memory of 3640	4952	msedge.exe	118
PID 4952 wrote to memory of 4908	4952	msedge.exe	119
PID 4952 wrote to memory of 3100	4952	msedge.exe	120
PID 4952 wrote to memory of 432	4952	msedge.exe	122
PID 4952 wrote to memory of 432	4952	msedge.exe	122
PID 4952 wrote to memory of 548	4952	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://atlas-signal-web3.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffb4f7ac188,0x7ffb4f7ac194,0x7ffb4f7ac1a0
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2004,i,10020902236316134219,9532244305959280049,524288 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,14624688897329364873,17726243903985530543,262144 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,14705499615005342367,12095865721305077879,524288 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:8
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3388,i,17004053360113275987,15563604967147092709,2097152 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,6406564023614091489,4193886723340397426,2097152 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,14008382456140852494,11431240102149778087,2097152 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,1782692731445132174,16238193092718604176,2097152 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5100,i,15812779600871067632,721950532122200474,2097152 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,6211076755234727778,17693338998708360531,524288 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:8
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,12010363548434671098,1161340663407191655,524288 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:8
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,13043501143922570364,17020999424764021553,524288 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,13043501143922570364,17020999424764021553,524288 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,14326720016586531366,607687879026127556,524288 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:8
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,9253549701775094469,14910799538498615251,524288 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,10565366798902455195,5600916246036858506,524288 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:8
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,5844664906194883968,15921394930330623557,524288 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:8
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6332,i,15819195364388315916,3850707750020161323,262144 --field-trial-handle=2280,i,2263704056646046688,16776255343999479692,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:548

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b28cb7be2bb68a6cda7ff7689f0ec4acdf8699e4818545d4dd692148ce1d64d2
MD5 a712889d00fb4f0945d13b925681156a
SHA1 1448cbfbc2c620e016aa5e6fccd0ac75e74ef2d1
SHA512 65f51cf451d5f77c9e695462e66abc873922db3c3999c172526727c2356a5a29052ce4b77ead44b02780ca80f6b290696b7633f537570254f36e7374ce0d04a5
TLSH
T12ED09B3277C5D541D5423276A41447816E164568159AC2175474444CDC69445579D147
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d33ef15a33681c7a29ea1430b70daa058fdc8798fcf3119056856bb0fd20aa55
MD5 4988084dc8d18e972c6b248b8e5f7027
SHA1 0965c52776d7819840b6da511eb34cf5903b8a2c
SHA512 44ee30f9f880ce4aaad68e07e7827c1d726a08fd922c8ee637ce66c16ecbefc4fbe0ea340aaa9ca7b0bd65304c9202941931b1da82d2af2d598e13dd07e0e8d2
TLSH
T1C271930B06693E95EFE71170F3ED464D39F283F50E636E661D6CD83D652AB274491308
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59095d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59095d.TMP
Size 3KB
SHA256 d7665a3c8ef9dcff82aae534a81a4a58050d87f49e4b1c7e00fa2049db76f60f
MD5 d15c6211fa068315ce52cc62796262f6
SHA1 df538980883c13a2e7e1ad818d24442ce6d75971
SHA512 e1ef448eec7d9558c6b2032689eb3b27dad0bd960f21783279e704ff0583a33e3681d2e74576115db824f8318281861849cc53cebf67436262cd1e2ac596693d
TLSH
T14471A20B06693E95EFE71071F3EC420D39F283F94D632E661DACC87D652AB274492308
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 36e69c630fdfc88afa330a9031f403dc2e500257ed84cc415a7291d757163aaa
MD5 ed210ee30a48a204f821fff108ee13d3
SHA1 0d1588374e88cdd3f7ae415b0c65a1463335a7f3
SHA512 e39e229321a608476974bf22913b2b2ef8fea9c11267c98f7df01533cdc908a1f0854d559efcf8c316f06e92a00a79e441fc8bc14616c3c45d78ca3510eb71cf
TLSH
T109317BB383E9866DC92656F0EA18AF2FCE2D0515432C7C5985D4EF5BA3E3435E101A4B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 fb3bfd78c8665528ee783925155c726e8daccecd94b09a4f513636960b2299ba
MD5 9be1b296660038551e9e536528d47410
SHA1 293b82ea0097171e394a20556c5dac8642e6ad74
SHA512 4add459f6049ef1042a1591a32f85fb483760f6d8ac547108287f3e0806341049363bcd03ef4d2bec571223fc6eb8ff533ba95e1b64375143944acb9c6a8a1fd
SSDEEP 192:sxZzR0yM/jK1Ml8Mka/fVsHIhj0IdpcleHW6+WNbPQ/Y4Lq+yIgrJ:sxZzuMa/fVsHIltrHbs/e9
TLSH
T15D52D8126A345A7BCCDBD309F955BF53D6F90472A2940D88A9FCCA0C05E7AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4f32031f4df14661b2a88ae3b102400ea47b33e226e9978c676030aeecf93a6f
MD5 738fc0d36649e57deb31dd5e58da40ce
SHA1 c25ee2d2cdbb02405c3815cd42a92af53058f385
SHA512 efb52ee1220657ead197e9e083e71ac9ff52339399c72de935e851b39e20409c263e69848f4b7394a7e508b57bc9fa9d547220ae94837ecd4a397bfea8bcb674
SSDEEP 192:sxZzR0yM/jK1Ml8UQska/fVs8Ihg0IdpyleHW6+WNbPQ/Y4EriyIg5uJ:sxZzuq3a/fVs8IGttHbs/0w
TLSH
T18B52D756AA345A7BCCD7D709F951BF53D6F50472A2900E88A9FCCA0C01E7AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 064f192bdaf5bc29a11a8bb2ad73e66306f57723ccdcb29ef4063c7992bec270
MD5 a81ce55172b2ce9ffe9d0a163dd44fc3
SHA1 4ca9ee61a4b3ba8cda3cd3de70cf838c78cf086e
SHA512 daab5f58fd333d8efcdf2d097bf6dbd1d768a0c40b4c2547cd58ec2af4d65d332803084c8a48132da7ab8d45cb2011ae1412e34e671da06146d89dd53240216a
SSDEEP 768:Tv8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdEroCk5Unb:Tv8iJPNWvx76ru1jahALocdPbUb
TLSH
T17AD20B3B680CCB7E4F844E9CEC266F966DD801CB5B988D5447FA884C03C76EA51279DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9d13fe0f00a320ab2b984380792f901f0be9006381e95f0b015076bc06106978
MD5 3077be1e89f7a412876a3800ed9117e6
SHA1 fd21c97e985453b095362e592b1c182950099b0f
SHA512 5e806d020b9cc05e218d9ffb46d4412e1fa6566f5d987c9fe3ff6d1841cd50af9e93bcc1209430f69849a9f7d337f4508ec72cfa3e41d9e2524ed15f81a3c79b
SSDEEP 96:KEIgK9WK6A4KBGHHQ1xHF1ZWBu0g5ZK4wg3Zc/32p1qHMN4cWa7:azbWHQ1xHF1UBuF5Twg3m/32p1qHMN4A
TLSH
T116915612717B02013C7E651DE252A7174B83B1A7310CA96B7BAD01628EA7E264DFC9FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59a08c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59a08c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b2b2f249dafa821bae2bb746801cd736712e53c2a1b47f440b85adf16598fc09
MD5 5885d959df0a17743e8e5e9091bba31d
SHA1 686422edb000d149027107d17534164999f90387
SHA512 ab085c79eda075ae49cbef0115884896ba76e4212e664258a2db672b715297c71c6cb36c58b0a2d24dcbfe690389553d051f235994652e0940a82fd0ccc74d8d
SSDEEP 384:ttNn/s3n9SfsN99mw5ikvMMGOObjI9G6w7OR:tj+9UqTG29Mk
TLSH
T1EB928C326C286E7A4DD39A65F0473A1B9FF4817BC7C92F84D4ECAB0C06DB5AC4316916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 1b6da728dba34174dce7af6c1fee561411077eb3a376f586261f71acc1762b31
MD5 9c31050a6ae9b8a162e8d4e4422590d5
SHA1 a3ec750758d555c623f778577ddca82941816962
SHA512 1e83c3b7f92e79449a45acb6d90daf44b7589308ef32c270dee9a34dc7d4f43eb2ca482c56c614e4f1d5a80ce0f87e8dd6d07283726db21f0ad617ffcb3c86dc
SSDEEP 384:jtNn/s3n9SfsN9Mmw5ikvMMGOObjI9G6w7OR:jj+9UXTG29Mk
TLSH
T1CB928C326C286E7A4DD39A65F0473A1B9FF4807BC7C92F84D5ECAB0C06DB5AC4316916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 289dd1655ac17e6377b9cee01884a0c292c8cca5b40a58e2b666166716b7480c
MD5 30e998520dd71a8227029be841e2b11d
SHA1 69f8706958dca51c35ef78196eae94b170fd0154
SHA512 3c6f58e574b3d598a5cf67e850f8c893ab9d7a25ed9969026e60c10ff0d5005788186bcf6cd4a1de1d391fa1b44dac240d6f5ad7c8e5cd324d17987c22c6dfef
SSDEEP 384:jiF1tNn/s3n9ShzsNH8TUNTUlIlMmwEikvMlGOObjI9G6w7OR:OF1j+9KmwgVoG29Mk
TLSH
T1A5C23BF248D75A3AD99E4B57B37E3E168EBCC067B6845A84F3D85A0CCD861BFC205811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 79d063cec9534b9c696f38a345a27399225efd14f55e2dfde14872f90d9c0bc2
MD5 f31212921dc84f7e93e3d30436401af2
SHA1 396a70c9367d8e6feb262b604f8ee4a418ccca56
SHA512 190f938e3253c49a19a84a9d4a72d165d75e348e552e5e0d303402f97664f10dd0b940b442461a96b79aa3cae4b417484625189967cc9de5dddb7dfbf4586728
SSDEEP 96:ZqONkcQsjpfmUTmDK5ih/cIPURHl8h4otop5xA5DEBhPwivh50xy0SFYK7Ax6YLw:gONc6kDfQmiUysoZ903NIQiSEU6
TLSH
T12A02E7396C786CBB8EE3AE19F48737275FA5113BEA942F80D9E81A1C40D764C1743827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f9fd4288f4a0d2ad5d81c4d8947c6399719a34dab86eecc30aef5f6d917914b6
MD5 4e2bd6ab5a5144947dce0c37ba46f281
SHA1 9640e772946e613f47a274d813ab39229ba4890d
SHA512 c9b59db6685c74ab9895302333431c155e23c4255484baac0cbc3b2e0f1b9b2cc02a677b2425833571f5faa03643fc17a7e8450a15715eb0053d72a8c6f1be82
SSDEEP 96:0qONkBiQsjpfmUTSK5ih/cIPURHl8h4otop5xAGDEBUPwivh50xy0SFYK7Ax6YLl:/ONA6kjQmiUyzo+903NoeN7cRdqDU6
TLSH
T124123A32A8786C6B5DD3A951F08736179EA14127EFC96F81D9EC2B1C06DB69C130B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 dc8604f5fbbad56cab2bf6d3cdbda50c9fd6afbf7d2e6cbda736b3ecbd5059b4
MD5 113da9508ad737352af135ad69c6ecc2
SHA1 e8ee4bc3d12d7826c5d8e1382394787c1ef3ec1c
SHA512 2f9ad1a606655613da60644c3120ad8f2f2b8de09a0ce5da6a90b7d91e49351cdaa9270ee6dab5dd051b340cb70cbecdfd1f349984d8040c48483c0444bd6b3e
TLSH
T143411A58A6FA1158B3B76E5A9BF7A46D887EB8372F06C45D10010D4F0663E40D971737
MD5 SHA1 SHA512 TLSH

Submit Download