hxxp://acenda[.]in

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/08/2026, 04:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://acenda.in
Sample260817-e11mdatth1

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1436	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314143278020315"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{9EFC5C2B-08C7-4DDA-98C6-F97D841F7C12}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 2476 wrote to memory of 1284	2476	msedge.exe	85
PID 2476 wrote to memory of 1436	2476	msedge.exe	86
PID 2476 wrote to memory of 1664	2476	msedge.exe	87
PID 2476 wrote to memory of 1664	2476	msedge.exe	87
PID 2476 wrote to memory of 1664	2476	msedge.exe	87
PID 2476 wrote to memory of 1584	2476	msedge.exe	88
PID 2476 wrote to memory of 1584	2476	msedge.exe	88
PID 2476 wrote to memory of 4192	2476	msedge.exe	89
PID 2476 wrote to memory of 3556	2476	msedge.exe	90
PID 2476 wrote to memory of 4192	2476	msedge.exe	89
PID 2476 wrote to memory of 4192	2476	msedge.exe	89
PID 2476 wrote to memory of 3556	2476	msedge.exe	90
PID 2476 wrote to memory of 3556	2476	msedge.exe	90
PID 2476 wrote to memory of 3228	2476	msedge.exe	91
PID 2476 wrote to memory of 3228	2476	msedge.exe	91
PID 2476 wrote to memory of 3228	2476	msedge.exe	91
PID 2476 wrote to memory of 1916	2476	msedge.exe	92
PID 2476 wrote to memory of 1916	2476	msedge.exe	92
PID 2476 wrote to memory of 1916	2476	msedge.exe	92
PID 2476 wrote to memory of 468	2476	msedge.exe	97
PID 2476 wrote to memory of 1188	2476	msedge.exe	98
PID 2476 wrote to memory of 468	2476	msedge.exe	97
PID 2476 wrote to memory of 1188	2476	msedge.exe	98
PID 2476 wrote to memory of 3504	2476	msedge.exe	100
PID 2476 wrote to memory of 4844	2476	msedge.exe	101
PID 2476 wrote to memory of 4844	2476	msedge.exe	101
PID 2476 wrote to memory of 4844	2476	msedge.exe	101
PID 2476 wrote to memory of 2492	2476	msedge.exe	103
PID 2476 wrote to memory of 2492	2476	msedge.exe	103
PID 2476 wrote to memory of 2492	2476	msedge.exe	103
PID 2476 wrote to memory of 2040	2476	msedge.exe	106
PID 2476 wrote to memory of 2304	2476	msedge.exe	107
PID 2476 wrote to memory of 816	2476	msedge.exe	108
PID 2476 wrote to memory of 4208	2476	msedge.exe	113
PID 2476 wrote to memory of 4208	2476	msedge.exe	113
PID 2476 wrote to memory of 2540	2476	msedge.exe	117
PID 2476 wrote to memory of 2540	2476	msedge.exe	117
PID 2476 wrote to memory of 4840	2476	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://acenda.in
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x28c,0x7fffe8c1c188,0x7fffe8c1c194,0x7fffe8c1c1a0
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,2080095382497107615,486180213015583354,524288 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1772,i,6262426626744344580,10356474049900202189,262144 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2560,i,5629154616204856366,9108133920777523397,524288 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:8
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,5063468856239919462,8696751742295953549,2097152 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,12397948958746015403,10138867105413855525,2097152 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,1517975231185303866,14633924202140394432,2097152 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,13503911674662757761,4642589351640241964,2097152 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:2
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,13406629490263219647,4529950888976725082,524288 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,15163870312518907202,219969223512588242,524288 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5532,i,2266313890108424415,17105718850030491284,524288 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5532,i,2266313890108424415,17105718850030491284,524288 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6196,i,14967210421271974662,4717914808471638089,2097152 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4380,i,4132893628063378159,1872989595607909291,2097152 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,2090625853027559563,2460044870033916743,524288 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:8
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3384,i,3266643748530917806,6225715570432567740,524288 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:8
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,3012762347536007178,473576369880410637,524288 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:8
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,10528330732271741859,8707223179380806951,524288 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:8
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,6156738946058338547,16388181530483979248,524288 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5172,i,8110145760665197332,9397843142972022149,262144 --field-trial-handle=2332,i,14795023740122707613,13613346123354414925,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4840

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4316

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 a8588cddb823d8d12f36aacd51b467c9ac59720ea10ba2810fd3447648877faf
MD5 23f9fc30e5266ad705afe94b899001ad
SHA1 85022ce11bae8e6f3918133c3247ff916e45e193
SHA512 f8139a32ad10a0319290cd27df0fad7b701042560cc3f325c769b7babce6a80ef2c82fa5f0d0b578c732f18996029471f00f544cee16e1e15ea004f5b0ea459a
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T1FEB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b1d6c3d4f35de51871e503fec5e6b329eb3f79d5049c22cc9df07e29df36d2a1
MD5 c2e059168cf258fb0e5b4819ad225175
SHA1 10808761cd1ca6456744d261296a72d3cbc57f92
SHA512 76b3f78f1d386d5f15e558605711fda8b2d95339929c00cecba7e6252470275f251e2d1acc60ef7af71cc35213d695f856edf1366c286ba4de70e955d9a48a1a
TLSH
T155714CCB0D324951E7912330C0C1374431FC89A30B5F9E8C8A689FBFA9167F28E26D58
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2508072e2ce3110261ca24e0cfbc1eb762705be05e0d5378591fd7e69d3b1ca7
MD5 2abf7d5a4bd5cf932673f8b02b5bff47
SHA1 a4af82212ed44cdb1a74e233ee6046970af21245
SHA512 8275a11d9550a276bf67402466d76d601a51eb14b2636cae13108c74ef209eaf8b297ef6e81b128a8d40e3d67ce7ed5cd31746426cec6841a4dd0dd338bc6f8a
TLSH
T190714DDB0D324951E7912330D0C1374471FC89A70B5F9E8C4A649FBF69167F28E26D58
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ab20.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ab20.TMP
Size 3KB
SHA256 2ee52ba9169341e009b448a61f63159a57cf7957a233b331e99101a67f7037eb
MD5 5b2a4f69d0d4d9cfcea3130ca31b0d8e
SHA1 3c0c8abeb5c1726325f46f9c62aed9596db720a9
SHA512 7691f627d98dfa2ea30df357e8cf3d981bd8b95f86610701110c927262095eaa7f36194bafd2bce3eb25086453eb98c1ce5604ff6194f3ebc397ffd6b4713929
TLSH
T185713CDB0D324981F7912730D0C1374871FC89A70B1F9E4D8A689BBFA5167F28E26D19
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 deedf6f8ebf423ca5360c9ae9d03b54015e77dadff7135aa9ab7137fec06ca5d
MD5 8243c6122bfda7b95053ac945d7352b3
SHA1 22f2003aa9ce3c5368296b05834a9587df2c0570
SHA512 be3478195a147245ed3363a0daa5f985aadeaa864311a31f78245287ad6e1fe5db21d9d9bb13ab37f18d7933aaed6425b8839f321816e7cbfb4f3a351dd24998
TLSH
T136319CF383A5967D8E1256F05A18EE2BCF6C0555832CBC65DAE4AE27C3F3061E10165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 79c668dfd69b0807ec7dff67c44620968ec7ea63fdf1b8bc79085a16ffbd23cf
MD5 e2000152ce9329a7a8ddb58b4462bc62
SHA1 20bbc90b8daf0d3b08a2de1c61b5da0225c45ae8
SHA512 b52615ae9ba130f4d678319daf7103a0923da3b7746a74b04714240c10512af707a3d7e1c15584e4ee1795a71fd7bbfcb24a460051ead6d8c76a956ab52089cf
SSDEEP 192:sxZqRbyM/jK1Ml8Mke/fQs40fKIdpFlFHW6+WN1odx/YLgquNIgrJ:sxZqhMe/fQsjfD1Hba/J9
TLSH
T13D52F7116A34A977CCDBD209B954BF53E6F9153292904E44AEFC8A0C04E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 70ae6910bfa3319de3bc5a99cf4c9e62411ed38c6dd145f3dcb58f9ea254ed0d
MD5 0cbdb1d60d028adca9a2d23356e0ee39
SHA1 dfa027bcd6488820e6dcb7611b038f0954c1bdc8
SHA512 44f2af937537de5423c03f75a9f9312b675e8867341052a3f2551de05fdad2f8bd2e686790dbee6a614119e3ad4fdb16d9d689337bf34d9dabcea5ac78a1fb26
SSDEEP 192:sxZqRbyM/jK1Ml8UQpke/fQs80/KIdpTlFHW6+WN1odx/YLMZ7NIg5VJ:sxZqhqqe/fQsH/DfHba/pZ
TLSH
T19C52E615AA34A977CCDBD209B951BF53E6F5157292904E44AEFCCA1C00E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 53c153df4047bd81fa9cf2a252e0e2dc21b358f727e55e33274a4119f415756f
MD5 eec193acfde098d519c9de0a18642251
SHA1 facc86e06eb7c9e7cd030e6d3487e4290659965e
SHA512 ffd5e06c76bcb17968e9df9871568e7ce096f68345ce817dc9357cbb494092a209ee7bf67e446fe6552122eedd3f15fc31537a7c264189a36d7c1c588eb05406
SSDEEP 768:59s6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNmroi7:59s6pD1WvxzWju1jahILIsNdi7
TLSH
T12BD2FB3B680CCB7E4F841E5CEC2AAE967DD801CBAB98895447FA444C03C77EA51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 ffb747a6b780d378545f1e71db809b6151136c6a3434f0672c1730ae09d1c17c
MD5 0e9ddde512490571468ea35d9f79a6dd
SHA1 848061789279815eb8ea42ccc19e75d2f90eae24
SHA512 d964adea4a89ff2e2d5b5efa7ca0110f081861aad51dfe4893c5720496ff8b3adfd866386d57aa415f359afd94e750fae67d88ebfa022cf4c818cf460866c9b4
SSDEEP 96:KUAAKteP6OYKTCEK4K3qmq0gK9KaRuVxrjB:iivGr3FRuVxrjB
TLSH
T175C1021271BF06022D7E2A1DA3948727A7427163301DA42B3BE950B15EABE340DFDDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5929f4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5929f4.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 53ea7a8eb83b4df5ac3227402e92ca16c0a8378e99d7dfff8fc977e6a14a54ed
MD5 5da8b2547077023dba008cc83bf57496
SHA1 3686dd0b7d77faff63b41d9a2eced04f9216c0b3
SHA512 04431c68ccf52051a9a98a36473a5c148330720084d7a60df19e1cb058fe9106c691bf569f4a3fbffed4943c1940e8201ed60561aedda03c358931753a88d9b2
SSDEEP 384:6ZcIhsN3UFPqydXua95OVnuzJrq/OOPrXLpe8C/gyK:4hmK/jOJ2hq/Oi9PbyK
TLSH
T12E928C3068386D736DF2A581FA8626179FB84127E6C51F84E5EDDF0D01CB9AC1306D2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 07bbe939a7edda8d59108672999f0c1a48ba62bfe6d6508108205fa7cec867bd
MD5 642e88140d3626daf3effe59cf184fd4
SHA1 ff5db517186b74173d26e5eb6e1a2847e68828d9
SHA512 9ff3af3f4b2d66ad22ec5dc7c915368aaad8350104a85fcccd1fcfc82910749a7b15d94b66a3086ad3c716db93e3ecefa8368b506e87e8e6ff8e775ca3d5f371
SSDEEP 192:qONi6O7+3hQmiUyJLGttb0gO2KDgG5qdU6:qONi61+Gt95OVHYdU6
TLSH
T11402E9397C2C6CB79EF2AD45FA8727275FA5113BE9952F40D9E85E0C00DB65C2343826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2d4ad30dd9c83af524cb1ad9da31715efbd272e9f2e5eaecbf6dbe8319edfb3e
MD5 0142006b515c16d52a1af6eeeeb91861
SHA1 97379507ffa7b06ef51cbd4bda37fe5aa9f5dcf4
SHA512 1abadddd59493d59baa6f23e2a22d47d8261e6795ee89798fcb80402445b940488351b4d4110950559ec3e410107924383620af5b4c758d0f8ccf56aba6cc75d
SSDEEP 192:UONi6O7+38QmiUy6Lattb0gO2KnyF0SJrvcNoquSU6:UONi6qPat95OVnuzJrs/U6
TLSH
T157122A357828AC775EE2A445F98736179FA54137DA866F80D9EC2E0C00DFAAC234BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 8a3d14b6be6f9f0196cffce36534e1a6494918fbd860734b560228b580f9f157
MD5 cb0e30f435151eafa9964b7cc5dc1738
SHA1 f415513a878685afa4016a2ce3dbc4f3558a880f
SHA512 bc1d77ee9859131569bdd7e69b71ae6eb9be616532569b5942c41acb2dc17bd8e1ef137af2f15f6c4e9f14a9615c2732cf3a815d207b6e6c7e30e41c785cb32d
SSDEEP 384:6iFiZcILsNJ8TUNTUlIlUFPqy6Xua95OVnuzJrr/OOPrXLpe8C/gyK:xFQLMwgvZ/jOJ2hr/Oi9PbyK
TLSH
T19AD239F158E79976E9AE9743E77E2E138EBCC163B5815A40B798990CCC870BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9e3a69f-83e6-40bd-bbe9-ee0700e9e6d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d9e3a69f-83e6-40bd-bbe9-ee0700e9e6d5.tmp
Size 19KB
SHA256 81f491fbca6838a41a80880c3fd3705db091ed1b3d970b28700d7aa5bc9876c0
MD5 004a2cf8561157ae15685f71737ec7ef
SHA1 69cb77228b186aa3e72ca3148659044221dc63a9
SHA512 0d45b91b7446848433953d5353a99ed59597a6f48a591590ff306ba174653476db3cb5179338239fe2bbe817167cf849b2c5676ae6599da9e8fda148fbdfe568
SSDEEP 384:MZcIhsN3FFPqydXua95OVnuzJrq/OOPrXLpe8C/gyK:ahbK/jOJ2hq/Oi9PbyK
TLSH
T1E4928D3168386C736DF2A585F98726179FB94123E6C52F84E5EDDF0D01DB9AC1306C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

82133722-5efb-47b0-bea7-7d5927834cd5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\82133722-5efb-47b0-bea7-7d5927834cd5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 966dc6d67f3a198cb5d96e7010c19878fda43c002da916eada09e9a195be8f82
MD5 0f46b403700f0caebbeb72fe6c112fc6
SHA1 2370ba870a368b4e28626083fec5ebeb76eacc40
SHA512 094aa6ef423100edef006feb1970bd6173b13c78c4427f7a47c780c48f0929fd9454ec72f8a8cfd8b4f9fa8480267bb07f373e503b0d63acd7e020d3d97ac1a2
TLSH
T1E741F858B6EE1148B3B7BE0AAFF7A9AD543EB8732E46945D00110D4E4A67B00C861B37
MD5 SHA1 SHA512 TLSH

Submit Download