hxxp://mchny[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/07/2026, 08:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://mchny.com
Sample260724-j3hlssvgkh

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4844	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134293543563680010"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{EE0097D0-A436-4676-8E36-9B6875D4C5FA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1656	msedge.exe
1656	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4572 wrote to memory of 3240	4572	msedge.exe	85
PID 4572 wrote to memory of 4844	4572	msedge.exe	86
PID 4572 wrote to memory of 688	4572	msedge.exe	87
PID 4572 wrote to memory of 688	4572	msedge.exe	87
PID 4572 wrote to memory of 688	4572	msedge.exe	87
PID 4572 wrote to memory of 1144	4572	msedge.exe	88
PID 4572 wrote to memory of 1144	4572	msedge.exe	88
PID 4572 wrote to memory of 3688	4572	msedge.exe	89
PID 4572 wrote to memory of 1312	4572	msedge.exe	90
PID 4572 wrote to memory of 3688	4572	msedge.exe	89
PID 4572 wrote to memory of 3688	4572	msedge.exe	89
PID 4572 wrote to memory of 1312	4572	msedge.exe	90
PID 4572 wrote to memory of 1312	4572	msedge.exe	90
PID 4572 wrote to memory of 1664	4572	msedge.exe	92
PID 4572 wrote to memory of 1664	4572	msedge.exe	92
PID 4572 wrote to memory of 1664	4572	msedge.exe	92
PID 4572 wrote to memory of 3068	4572	msedge.exe	93
PID 4572 wrote to memory of 3068	4572	msedge.exe	93
PID 4572 wrote to memory of 3068	4572	msedge.exe	93
PID 4572 wrote to memory of 2180	4572	msedge.exe	96
PID 4572 wrote to memory of 2180	4572	msedge.exe	96
PID 4572 wrote to memory of 2180	4572	msedge.exe	96
PID 4572 wrote to memory of 1792	4572	msedge.exe	98
PID 4572 wrote to memory of 1792	4572	msedge.exe	98
PID 4572 wrote to memory of 616	4572	msedge.exe	99
PID 4572 wrote to memory of 616	4572	msedge.exe	99
PID 4572 wrote to memory of 2368	4572	msedge.exe	101
PID 4572 wrote to memory of 2960	4572	msedge.exe	111
PID 4572 wrote to memory of 2316	4572	msedge.exe	112
PID 4572 wrote to memory of 4480	4572	msedge.exe	113
PID 4572 wrote to memory of 3872	4572	msedge.exe	115
PID 4572 wrote to memory of 3872	4572	msedge.exe	115
PID 4572 wrote to memory of 1656	4572	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://mchny.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa306cc188,0x7ffa306cc194,0x7ffa306cc1a0
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,11053453507464535720,14214517899888702093,524288 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1712,i,8842810873608551655,1567465433425468566,262144 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,3114801668216791497,7735816706586988118,524288 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,13154845407814001410,5402079430451312742,2097152 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,12197366253723682558,1791217875272867035,2097152 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,14076875865247653379,12010305388828820302,2097152 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,2689737132144816324,14204567215128376028,2097152 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5072,i,8245234805228920390,14126341340878821768,2097152 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3724,i,8592293886344449609,9881014339738549773,524288 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3708,i,10688690371131429104,10716001204137624012,524288 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:8
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,18077179185406671179,5403246414969309855,524288 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,18077179185406671179,5403246414969309855,524288 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,8910857366759354075,9876574029665241949,524288 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,17032116629218945416,17028364905076008976,524288 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,3966718074903117433,11730489758393802194,524288 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,3085260469577575508,18225507656256305394,524288 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5308,i,15058360659686665314,3307344238237231668,262144 --field-trial-handle=2328,i,18204320260499051407,8516240166871351767,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1656

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 e4b76170c71dff0e568e2417903080b5114af092f9c5f3112982afbfd878c136
MD5 2c1cb4175341d42b3c451dd3b3d978af
SHA1 1ff175bb8b58d629c4d17a3ca55ccdef272a6ed1
SHA512 7292334f3553bd95517fca7e6bb2ab9074a45f9ee8ee7f7949ff33e2ed90a92818b0c9f268712ef54f1c904c8c1a5f367772cde572ac3afa82c2bec911d25971
SSDEEP 96:CokrjU2JCcNCXCV8Hx0yKbpRwdjmBucRK+Z1IlqKnlu24pxBV+APoX+bWGS/i2BL:WgXaylmZakwrxLSI
TLSH
T1C091C7C83A914B65F32205B3F0D52A66353C48B48933EF92D190747C95937A86EF94AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58a023.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a023.TMP
Size 3KB
SHA256 80662050d52269fb0f9c24cdcf04562a518932e600cf72c10f7d7c8f1fe297fd
MD5 cd35fb12f8443783b75a548885226654
SHA1 4caa7716f766fb134b46150bf900257147e3ad68
SHA512 f1cf5b7d9106aa0a247c9996c5d6b1be8fd98154871f4e823bd49327cdc0773d1cf6f9bc803da1b31b47f36d4f5c33ec2c110d98f7eb275c76e6d68c4919cca3
TLSH
T1E96194183E924B51F3320933E4E91275357C41B88D33DE55C290B47D9A27B21AFE94CB
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 941dd546f1f4cb0f80507c1e2eab5922227910854d6ac29cf8f90bc17f2b7faa
MD5 8740b91f43df00fee06eb4c3ffd8ed72
SHA1 d28cc767a22289768b8368172691cd8c3d689ce7
SHA512 d5925f2cbbfe0d41d385ac6b2139d08d7b68a0b572cb5b63747146bff984fd31f78fea8fab37f671ddaf379c6ee4aca9a9a339b41c8ff58268bf51d4f7bfd828
TLSH
T179115BF3C3D5856E890116F06A24AE2BDE1D0606821C7D1589D4EF2BD3E3469E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 548826d69cf065eb98064f5c1e19b9b0be672da33bcf70e92351208acd389cab
MD5 9f6b01795b940de453b5b1a716b6052f
SHA1 bd1e1bce9558f1329689558b654e108cd442528a
SHA512 1cfa9d3bc125fe6989054d987f0af7240a76901a53b857e122672e44ffcec32b80be11af16448ad1c4514cddbd0d217a351da2bd50f296abcf331ddc1c85d6ec
SSDEEP 192:sxZoROyM/jK1Ml8UQdkU/fXsqWsIdp7gHW6+WNO4pZYLAO9dIg5TJ:sxZokq2U/fXsqW1kHbjZcX
TLSH
T14052C5166A3499778CDBD209F955BF53E6F514A2E2540E44AAFCCA0C00E6BED231781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 acb5667fec2873b80305c9121be61027ec72443302d155610fb6483f094a8bac
MD5 0edd901f5b6e8e5f9a1267a2cd2164a6
SHA1 beb69bf1b443b54ec420a0e937f1fb12268c841b
SHA512 0e240229607ee167c375d3d6544cdc117e81cebdb676c22ba0b4b95cb7bb352d1ce0bc5efc99fbcfc98a1e5a579190ff217bc5b10270808082e84502c353b597
SSDEEP 192:sxZoROyM/jK1Ml8MkU/fXstPyIdp5UHW6+WNON5/YLQjJdIgrJ:sxZokMU/fXstP7qHby/J9
TLSH
T17E52E9166A349977CCCBD209F955BF53E6F514A2E2541E449AFCCA0C04E6BED230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 1c75cb3f3b216f4d6cd472fe2c449b450587e45793a643cc0d14676f544f9304
MD5 b5634c8f10c6b7d02cbc19ee53dcba63
SHA1 c61d7dfaa897176c9c1c3b89d8a079a03f55f79c
SHA512 0a80d7a67098c39893d6ff0011857bad7205a0a7c1468be88d92d75b88a57972eccc1b730bed2d04c31580747cc0fbe5f66076431b9deb2cc6ef5af750d71f70
SSDEEP 768:B9s6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNmroJe6:B9s6pD1WvxzWju1jahILIsNdJR
TLSH
T1F4D2FB3B680CCB7E4F840E5CEC2AAF967DD801CBAB94895447FA854C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5b9d9665f2b766ee50c6ad2c62c854e633e2ac3d1251f37e483de6b28b9aba79
MD5 2590afe6a07eb43c528bf85b4b970ff3
SHA1 945b0bf8ea2370cb6ecd080099f4be88025236f6
SHA512 7513f094289e89ee56bc1a891bfbb346728612bcbc7224256ad872b4771e70e493ccea0c2852ea150f2a1abf961660a50e286f912ea68ba757a99887fe80af60
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyFy5IZKakkzyzZ4NJ7nzkDn6PI6BkK1Bc:KUAAKteP+y52KakSa2oKDiv
TLSH
T12AA1060632BB12433C3E2958A294C7279746B1B33158B82B7BA811724EE7E344DFD5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a560302b-fef4-464e-80b2-6b059c149dc5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a560302b-fef4-464e-80b2-6b059c149dc5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 1cd52a9fc24d3f54a5b209a98f8d812df474fde444855f52569274079085fb17
MD5 0909a077d724a1429e5f7f4d614d80b7
SHA1 df91e63ca07302ec7641a935e91d595f7e8d4167
SHA512 59e9d4943149d0c1408ab8de68d33c43910f63e9ac3d36ab0b1b2ec2de12fde3b7c9ed218480014781c74e8d715b0a7a68136d3c98de3038c108e23de6dc4c2c
SSDEEP 384:wsN9Jei2Sla91ONMGgzJruKOObjI9G6w7Ys:wRMoPO5EhuK29MYs
TLSH
T1FD726D366C288D7359E7A151F54B39239FF440B7DB992F40D2DDAF0C01EB9AC234A81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 a6dd76b21510a891d0b96979e483b6bf8578ccc2f5ad88e7f3c0b169b3b55cc7
MD5 6ee6ba3fb12f22f79002fee03f4f9a45
SHA1 eee9e97a7944ee0bc735ac589d42c0a302ece9f2
SHA512 476573236ea5daaf4ca380a8f90abe0b2aa1927ed532e4d9d08329f50006271d52ede11fc4ac4a9ba2d8d47367d5302855cd080b5e934d7ba628df249dbc9593
SSDEEP 384:LiFrzsNw8TUNTUlIlMei2Sla91ONMGgzJrgKOObjI9G6w7Ys:mF/vwg/soPO5EhgK29MYs
TLSH
T15CB2F8F658D78936D9AE5743A77E2D139EBCC0A7F5846A40B3885A0CCC971BFD306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 4d287e406b7388a04282edb0a82886e45f1005b590b1e6e05c1dcd9f563cc326
MD5 de1732a6583862bb3892550cb92fbbb3
SHA1 3fc98557296fa1fe8ea0904848d20eaed4648af7
SHA512 67dc56166e8e6a09bbdc4d925499e7b10eebd0fcc9ff49f15f034e15708dee57344511e3bb49805f7fb7639eaff023d9702d33300db985609cbafd922aae48e6
SSDEEP 384:LiFrzsNH8TUNTUlIlMei2Sla91ONMGgzJrZKOObjI9G6w7Ys:mF/mwg/soPO5EhZK29MYs
TLSH
T1C4B2F7F658D78936D9AE5703A77E2D139EBCC0A7F9945A40B3885A0CCC9B1BFD306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bc1700fe8f4426f1c0d559cbbad2b4290b6cf206bc5b0b9f224435a8e4b4cd52
MD5 ffdc91a55cbbf4a1e23e93d628f7d5f1
SHA1 89c079644c200c5db40cdad95c8b705855516aa8
SHA512 10c32547032a42a20b57fa0d9ee436a2543888fa436dbc7a6be5fc5bf007ed960d1744c53447089465122f1a9a2097738a1704206cfbfc2d9ea26a8956031032
SSDEEP 192:qON86O7+3hQmiUyUgGttb0oO2bKh2hgGU+RU6:qON8610Gt91ONMBXRU6
TLSH
T1EF02E8356C286CB78EF2AE05FA8777235FA5107BE9952F80D6E81F1C00D765C2346C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 6ed8d0ec9056d34cbeb423761bd80e14237de11d5affc7f683c416b0b77aa32a
MD5 7d8a3fcf1411d3236cc6cc8369eab276
SHA1 73da24f1714086cc568800c0f9be9139d7e1070e
SHA512 4f1298b608c19b8b857518ea422e71fd07b0a5657f7e531712f25e06901027b2cca3952340a85eb298e09d12c53a588d51cf70eca7422516ff3bca6365811e68
SSDEEP 384:/sN9Mei2Sla91ONMGgzJruKOObjI9G6w7Ys:/OMoPO5EhuK29MYs
TLSH
T160726D366C288D7359E7A151F54B3923AFF440B7DB992F40D2DDAF0C01DB9AC234A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 de46a03b00e471399b4ce5b2682220f3902ac6a0f77e0c848dbbbeebc8f0b27c
MD5 117db73cae7185b615e690e0bc7ff9cf
SHA1 651bf70e244358353f3d3c72f3c8fdd575951aed
SHA512 5891a4aeb6892cee37ab0057fead07cdfe5c9aced2388b76b0525a4662bef0f0c8199f004a47e809a1bcc7fcb085c87108272ba31bdbe944e7e90f6c905c1925
SSDEEP 192:pONo6O7+3dQmiUyCgXttb0oO2bKh2GkF0SJrNYcNsqCzU6:pONo6xEXt91ONMGgzJrnKU6
TLSH
T1BB122B3668289C775DF3A541F98735239EA54177EE8A2F80D1EC2F1C01EF66C234AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a8f2fb767b153d3a5ccbc5e05cc0bfda30857d55e027cacc5b61fbe7666fc499
MD5 7bf45eb70130d2a53170a4d6185aaa04
SHA1 2b0b9c7ec2a272cc88c01d92194e5cb4563db57d
SHA512 0a511724084a5e1159e11a5f2f4e41004e483dc04c5d7f0bd8a976ad7f1b7920ae011b7e5d31a4f905c79aad87963eb0a159e194131c37d7d736c172e6559a94
TLSH
T12DE00242D344009FC43803B010C397303676C020534303074A5001743C213841F144D1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d223b1cd6a8bd66a17ca194d290c9be964ee009b21f18aa37d29af34557b2153
MD5 5a86cf98ccdb2915f7ca1fca81661978
SHA1 a700365ddbdff1f983838c30239f981085507a72
SHA512 1bb4c202a4d8a5c5b7f71df27ae4199a2ea1952ff58ece8b7f9125ae87e513bb873461b80aa766e4a44424da9ee6ff7fe98a41d6193168255454a56fb4cca103
TLSH
T17BE00441D344005FC434037000C357303775C01053430307455001743C313C41F344D1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe586491.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe586491.TMP
Size 392B
SHA256 cadc21ac81bb49f4ce222b6e588b4b9549b0df3816d7d654d69bbf617a327a21
MD5 b5d7961bcb14e2f4576259bf7ef7c0a9
SHA1 93482892013d3932a02f5ec3244067c7c53279eb
SHA512 6c00efa66def0897cc6547555a7685099e504888a60bd2f43b5bd24d6294f8a94e4f05d3583add014d81bc7e7069eba58a6de306182986c9a39ea6bf4edd5443
MD5 SHA1 SHA512

Submit Download

ea1b488a-f2a1-4dd0-8250-2bb7867f37fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ea1b488a-f2a1-4dd0-8250-2bb7867f37fd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0f019f28b4179a87da6bded0591cd452209e74e786ef828e2f46fde02235bf3b
MD5 f3065b5f68ea2e7ff3e6aa370a590610
SHA1 abcb4400130098e37ed919b879ba7f4363d306c1
SHA512 c047372b322340106af0c8d6bb880c12d1dd8c27f5d232af9e73bf4ab24e85c2807773fbc1ffb4a64a3d458c6c67c2c09ee75ea44ef1623356e8fdbba34a31e2
TLSH
T15B414A58B6F9114CB3B77F5AABF6A86D487BBD372E0AC05D00010E4E0566A40C972B37
MD5 SHA1 SHA512 TLSH

Submit Download