29b3e3bfaed3f24b17cc4b0656d3d36e2ad8e77d1f3e049b578665237a40ee27

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/07/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gnu_cpio-master/doc/gendocs_template.html
Size 3KB
Sample260712-alaeesdw6v
SHA256 29b3e3bfaed3f24b17cc4b0656d3d36e2ad8e77d1f3e049b578665237a40ee27
MD5 315c25469bf8ce9530632f78790e6590
SHA1 b1689a2c05a02f6c34e406a9acdf0565e48b9fc7
SHA512 33de2dd013516452fb832d1c2848fb5bb05a8b58b8bbc08bb04b8fd5096a209db9c5d86be5de3c12bb75a394af5af32ff5a87be6c50cca7172406c06628f94e4
TLSH
T117619524E2C9015F8BE5079C6F526278A40B43461649296AB0ECCA4FFBE23854CF25DF
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4476	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134282890568895791"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{D26B9F0F-7DA8-47DC-926A-CAB616D9876F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3460 wrote to memory of 1096	3460	msedge.exe	85
PID 3460 wrote to memory of 4476	3460	msedge.exe	86
PID 3460 wrote to memory of 1464	3460	msedge.exe	87
PID 3460 wrote to memory of 1464	3460	msedge.exe	87
PID 3460 wrote to memory of 1464	3460	msedge.exe	87
PID 3460 wrote to memory of 4788	3460	msedge.exe	89
PID 3460 wrote to memory of 4788	3460	msedge.exe	89
PID 3460 wrote to memory of 5048	3460	msedge.exe	90
PID 3460 wrote to memory of 5048	3460	msedge.exe	90
PID 3460 wrote to memory of 4052	3460	msedge.exe	91
PID 3460 wrote to memory of 5048	3460	msedge.exe	90
PID 3460 wrote to memory of 4052	3460	msedge.exe	91
PID 3460 wrote to memory of 4052	3460	msedge.exe	91
PID 3460 wrote to memory of 3924	3460	msedge.exe	92
PID 3460 wrote to memory of 2820	3460	msedge.exe	93
PID 3460 wrote to memory of 3924	3460	msedge.exe	92
PID 3460 wrote to memory of 3924	3460	msedge.exe	92
PID 3460 wrote to memory of 2820	3460	msedge.exe	93
PID 3460 wrote to memory of 2820	3460	msedge.exe	93
PID 3460 wrote to memory of 3012	3460	msedge.exe	100
PID 3460 wrote to memory of 2952	3460	msedge.exe	101
PID 3460 wrote to memory of 3012	3460	msedge.exe	100
PID 3460 wrote to memory of 2952	3460	msedge.exe	101
PID 3460 wrote to memory of 1620	3460	msedge.exe	103
PID 3460 wrote to memory of 4700	3460	msedge.exe	107
PID 3460 wrote to memory of 3928	3460	msedge.exe	108
PID 3460 wrote to memory of 952	3460	msedge.exe	109
PID 3460 wrote to memory of 1728	3460	msedge.exe	118
PID 3460 wrote to memory of 1728	3460	msedge.exe	118
PID 3460 wrote to memory of 4876	3460	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\gnu_cpio-master\doc\gendocs_template.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffebf3ac188,0x7ffebf3ac194,0x7ffebf3ac1a0
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,7156604326340524727,3529563028263249067,524288 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,16036583545918262706,7855514316945771014,262144 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,2808114963761361750,1983637790208440443,524288 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,1723805651921870766,2273188477861672335,2097152 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,17562577478600627753,11548947628359268684,2097152 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,510823403887311629,1303361583673208975,2097152 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,7107510846162607604,10360099206926692480,2097152 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,774437637551541600,15259972745009427230,524288 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,13277525764936872518,12796997247072563012,524288 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,12439693403942849838,1248208296903143488,524288 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,12439693403942849838,1248208296903143488,524288 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,17494289684461095422,10554091954776846974,524288 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,11505077926902196445,6366395182303290904,524288 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,236649376215571446,16523521017815027026,524288 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:8
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,1241560690254615371,12584743640972031626,524288 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5204,i,2022015689356537982,18210552368208590006,262144 --field-trial-handle=2096,i,8202117340467307955,2154743459986060044,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4876

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3148

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ce1defcf96f42e3646dd3f290434b5c720f36a78e5aa1a257eb59ec30a5ea7b2
MD5 0019c23d78fb8f0eabf8b6b33bb4559b
SHA1 42181baa7a2e04a6a10beccae942c5253d0a9ed1
SHA512 ece7135d492557661c7466147f1b8dc076456fbdf82c2c2b244cbad14032aee3bb7578da2d4115f036849c2ab1421c6bad7fbe25c3da66732343f2d01a166ce5
TLSH
T10D81C73F010248B7D7911237C0F333867A73AAEBF9236E561374797BA525395B88512C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5879de.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5879de.TMP
Size 3KB
SHA256 029bc6df40e7964c61fa2b630cb0feece3f7e0390819165169cee8e63ec3bbd8
MD5 c993251ef33182f4ae3c1d52d6bc888b
SHA1 7249935d7777eeb7eb2a2dfaa0dbea586ab7e696
SHA512 170a7506b818151ba41ebc12fe6eb615ea88d3e002bfd35158d556772f59f0418073581890477d54870179a580e29c242acbd8d1e0abdb2e04960ffcf2b2415f
TLSH
T12D81A63E110248B7D7911237C0F3338A7A73AAEBF9236E561374797BA525395B88512C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8ec87c5935658e981a1375aa782ee09603ab96af4671d57b2589969e7b623145
MD5 1a4d6749691aa205c00ab4fe8c62766e
SHA1 e8e2317db883c3b9bec5b43f3c5bccabaa7c01d8
SHA512 a02be0ea31a8801d53caba4fc5f0baa50e165fdfc66aaad58685bd90c0529a37c1c4cdfaf32c59517cc34483e2fb6c90fcc5ea9d90398c5a140202d692f878bc
TLSH
T11931C0F7C3D5866EC91556F06A28BE1BCD1D0506432C3C198AE4FF1B93E2474E00295F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 5cbf14dfd6bffa12500b9960f14e3863402f6b929eed2a881be3f840e4f585bd
MD5 3063ee67c62a9133b5bb63db27940eb3
SHA1 c495783d335d1311f4b05ebd48c98e101909272e
SHA512 4c172bf8dddd3a309324ebb2c320348c05351f44d780e3a3e03b38de84f72bd0f811caccfd75a3c58220fb008c178a10ee6362e9fba9330c244ca7ee54169801
SSDEEP 192:sxZlRcyM/jK1Ml8Mkh/fpszTd0PIdpdXHW6+WNGYIkPvEIgrJ:sxZleMh/fpszTd0gtHbGj9
TLSH
T1BE42D9126A345977CCDBD209FA45BF93D6F55472A2941E44AAFCCB0C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 1ee3219b78a755e95ba908fc0e6dcc9d576c3af26e163311cd122df10d19982b
MD5 81d874eb7ea2bd94f7895cd39c60d753
SHA1 1aca81383c94afc10e0595a1c79cda429fb202fb
SHA512 b474de930e7ff8ea822e69fb17d547e89fdc35553334e79b0036a661a37bc097ac2bfa9e0dbf99b9b8a4cba8f0bde396689a8210c5109f49635e79b760c16c7e
SSDEEP 192:sxZlRcyM/jK1Ml8UQZkh/fpsTTd8PIdpHXHW6+WNGYI1CqEIg5wJ:sxZleqah/fpsTTd8g3HbG6K
TLSH
T13F52D7126A345977CCDBD209FA45BF93DAF55472A2901E44AAFCCB0C05E6ADD220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 5ffc07b83dcecf0f04534814df5303c33f426d289fd97c507d753daebbbea30e
MD5 eb557cce124f89be5397f1e4cf8bb700
SHA1 08c93c6739b9347aa318ae58510f40e1b4863e3b
SHA512 faffda7efa01155b25cf813098cd76fb6dd1a934b08d8c6173a1d68872756e2906a896488764def311225026e4c44f902ffd9bff7eba203bc283ab2ca51d1231
SSDEEP 768:gKsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9Hrog+o:gKsqxXlWvJD6Tu1ja54LAs9Ugv
TLSH
T152D21B3B694CC77E4F840E5CEC2AAFD76ED801CB96988D5447FA890C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 f489efb99f774fc2993c3480576cb50227106a4dd3a98bd1c9cd08cac0248f18
MD5 57e6d8e0ac3cc86a98cf32d8e8b9bad7
SHA1 81d92729dfb474525e032a7ad366c82d23f19cbf
SHA512 48b6efe13e1963ce36df44be19f601384d20f3a3128d26767b97a06013a5e9de0875a28c109239c01eb6b343a7b2df9ea710f629cddbd21ff6355cce59cfd781
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTyBeI3K3qgfyFpIhbI9KMMgLy5CI/K/K8:KYbaKYIKCe0K3q6upKb6KMMWKCIK/K8
TLSH
T16CD15312713F0242397D6958A26A8A778E8276A33418A5BF3FB854614E77E125CFCCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c83fa61-dcab-440f-b35f-a39dd80d3f53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4c83fa61-dcab-440f-b35f-a39dd80d3f53.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 381bb5c5d5a0711bcfeb6773f9e8edfaa7f310e77804bba3808efa42ec6396be
MD5 276a0e76e45f61f0e7c0a5c5b6ee0ae8
SHA1 f84f7682bca0c541ae01f9f3b2175be0ca97b175
SHA512 9c6b2f12bb1beb26b534a14382ffc45a3ca5e500fea8221a9f471297fb1d344b0735750ba268b196a6c8b9a8bc6d7db14131ba147e2b4a38a733c747fcf03f6c
SSDEEP 384:tiF1tNn/s3n9SLzsNc8TUNTUlIlFIPbHyYVRNDXOI+W9ZvSQOObjI9G6w7NZ:kF1j+9sZwgbOH7OIL9EQ29Mr
TLSH
T1ADA26B336C688D7BAEA25A99F64F35178EF4517BC6856E80E2CC6F0C01DB1EC1306D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 a5b62a48b893bcb0316c4545e8fb439aabc6dc1b546ebbdd93a8add013725d3d
MD5 abc28ee998df908424997065cd669330
SHA1 2fd54fbddc418596993cfa86c4bbac0af9e91e33
SHA512 0a90f7bbbe8f3c01bcf88382e16290edf2ea50524fa1ef62f1cf9288200f78bf809ee55c75fb8f2a3c69568b299b0aab168e8eb19fb196e28351427eed1ac74e
SSDEEP 192:ujLsNUv32Qd6mEkRbRXQmiU1mXH4VRNDXOmj+P+9TFvKSRerqlyLU8:ksNUvGIPbHyYVRNDXOI+W9ZvZQU8
TLSH
T1D23218366C389C775EE2A545F48B36539FB85037AB896F94D2DD1B0C02DF69C230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 52b51011ff01fa2ecfc2c4d0b0c012855f4b012f178d2c88b501b42c2f3759fe
MD5 1c7039436a64a366e3bff4bc2a6d7f07
SHA1 a54b9bba2ac76109af287aa061c49f9aaff3649c
SHA512 a1c7bd79d820ec4ae7f3f6f819d053476c602d8d2befa4781bb2d27faec175a5373a8ee6ec3a49c69846fb79a872c22189091655826958b84864ae5f7bb0cda3
SSDEEP 192:tONR6JkRtQmiUy8gW+RNDXOmj+Oh35RiU6:tONR6UrwW+RNDXOI+mKU6
TLSH
T11F02D9356D381C7B9EF26D09B58B27175FA8207BBA856F80D6D81F1C01D765C2346836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e7c61981000742ad9d796a8a0341f0afe75598e766a4ac6f8fd351bd479d72bb
MD5 b758f211d447efe5b1c8121aebb170c5
SHA1 7aa6c250dfb27e0e4e174ad846c0123b46d17cf1
SHA512 7bf32fc5cb07fb8d0523dbb20c2656d225266b9e6fdd862f68b14dad30bb3a99311282d4d5bfa8bdbbc80399e960d5fe16a44423acbfbf3eca165ef539892c27
SSDEEP 192:5ONt6JkRZQmiUy+go+RNDXOmj+P+9TFv3VcerqlyLU6:5ONt6U3Ao+RNDXOI+W9ZvGQU6
TLSH
T1511209366D285C775EE26855F48B36139EA95137EB896F90D1DC1F0C01EFAAC230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 e09740f0014d097883c052ebbc89358c36832d2d96fc61a5439c3267ca9456b9
MD5 76fca01310e870be675780b052e0ff18
SHA1 856b7eb05849be66450d038c1d465246fb4534b6
SHA512 dd5b23970839acf0086e8ee136020a4c4ac27ce266e9f877dbd4aebcbd28937f902ea1ba4902b1708af27085d386fbd3603be66320ef852bf8bb99ee3224c0b5
SSDEEP 384:3tNn/s3n9SfsNUFIPbHyYVRNDXOI+W9ZvZQOObjI9G6w7NZ:3j+9UlOH7OIL9jQ29Mr
TLSH
T1CF929C327C395C734DA2959AF58B39678FF8507B97C92E80D1DC6F0C02DB6AC1302926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b1e6170-db93-4ca4-aa9c-ca60687a3415.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8b1e6170-db93-4ca4-aa9c-ca60687a3415.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0bd5c718e951cf5abe1a6dfd9339c9e2d1b6f8b5fd8d1d464a00707c03350e7c
MD5 72f876a5df964c32d2aa82dfe62b29ac
SHA1 d0ce6825e147291f0aeca104fb1ddbb870c9548a
SHA512 d7aa4b98e3270f12065cff12909e6cdaa9b6a33822ed57e43dd59bf4a072fcc71c641f7664300efaa1c1446444eefe409b03e5d5dae050fc1480071e8c3da3a4
TLSH
T15D412B58B6EA0148B3776E4AAFF7A86D847FB8771E4A905D00110D4F0A62B40C8B2737
MD5 SHA1 SHA512 TLSH

Submit Download