hxxp://acenda[.]se

Analysis

user interaction
yes
max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/08/2026, 04:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://acenda.se
Sample260814-e64afsvvhw

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3812	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311556687834236"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{D239AE32-1DD7-4C10-B385-A05CA172F46F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4348 wrote to memory of 3656	4348	msedge.exe	84
PID 4348 wrote to memory of 3812	4348	msedge.exe	85
PID 4348 wrote to memory of 4668	4348	msedge.exe	86
PID 4348 wrote to memory of 4668	4348	msedge.exe	86
PID 4348 wrote to memory of 4668	4348	msedge.exe	86
PID 4348 wrote to memory of 3996	4348	msedge.exe	88
PID 4348 wrote to memory of 3996	4348	msedge.exe	88
PID 4348 wrote to memory of 2312	4348	msedge.exe	89
PID 4348 wrote to memory of 2324	4348	msedge.exe	90
PID 4348 wrote to memory of 2312	4348	msedge.exe	89
PID 4348 wrote to memory of 2312	4348	msedge.exe	89
PID 4348 wrote to memory of 2324	4348	msedge.exe	90
PID 4348 wrote to memory of 2324	4348	msedge.exe	90
PID 4348 wrote to memory of 4564	4348	msedge.exe	91
PID 4348 wrote to memory of 4564	4348	msedge.exe	91
PID 4348 wrote to memory of 4564	4348	msedge.exe	91
PID 4348 wrote to memory of 752	4348	msedge.exe	92
PID 4348 wrote to memory of 752	4348	msedge.exe	92
PID 4348 wrote to memory of 752	4348	msedge.exe	92
PID 4348 wrote to memory of 3052	4348	msedge.exe	96
PID 4348 wrote to memory of 2124	4348	msedge.exe	97
PID 4348 wrote to memory of 3052	4348	msedge.exe	96
PID 4348 wrote to memory of 2124	4348	msedge.exe	97
PID 4348 wrote to memory of 4116	4348	msedge.exe	99
PID 4348 wrote to memory of 5088	4348	msedge.exe	100
PID 4348 wrote to memory of 5088	4348	msedge.exe	100
PID 4348 wrote to memory of 5088	4348	msedge.exe	100
PID 4348 wrote to memory of 3744	4348	msedge.exe	101
PID 4348 wrote to memory of 3744	4348	msedge.exe	101
PID 4348 wrote to memory of 3744	4348	msedge.exe	101
PID 4348 wrote to memory of 4972	4348	msedge.exe	109
PID 4348 wrote to memory of 3688	4348	msedge.exe	110
PID 4348 wrote to memory of 4028	4348	msedge.exe	111
PID 4348 wrote to memory of 3548	4348	msedge.exe	117
PID 4348 wrote to memory of 3548	4348	msedge.exe	117
PID 4348 wrote to memory of 5000	4348	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://acenda.se
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x234,0x254,0x7ffdd527c188,0x7ffdd527c194,0x7ffdd527c1a0
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,1678925898939961343,4785027921738982601,524288 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,12008952844441037157,1300005022664621587,262144 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2604,i,14464220158374316697,5130896628523484396,524288 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,11463932747940639354,12798592919324966699,2097152 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,18187089274073960443,11180989672550455846,2097152 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,14663761327561475780,7348449458078715050,2097152 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,8566594548454892260,2398580501741516835,2097152 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:2
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,14240684342099636654,18233866819620216679,524288 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,14361512105266621169,1694899727273898885,524288 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,17470733007393011894,9394693306872994815,524288 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,17470733007393011894,9394693306872994815,524288 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6112,i,16894817980522178924,17782516437160651746,2097152 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6336,i,10339197855121811650,12516121247913712918,2097152 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,6053887633502489366,1182202306048066630,524288 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,413796233345107446,6031903422350569310,524288 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,16827385657166976327,4127468816667824290,524288 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,16818617614573947515,14415901772914333137,524288 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5844,i,4667930348000513440,16740921040202585013,262144 --field-trial-handle=2232,i,5636293678224181081,11111104203095361249,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 2c619caf85b6078c7f3d9de900b75c5a1c2828896e2220f212ed8d4a328a9936
MD5 5d6001da4da9283690d5ae15908333c2
SHA1 7ead9e73cd720f1350378876703610a1d0a45b23
SHA512 a7226359d10a4cf68e6d558803268b86f242b86fbf68455448c99772c7697633b05a6fd0e96cb79ce49a59281cf3274691867f9bb6b0cfb6b6a157b6073acb3e
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7H:fwUQC5VwBIiElEd2K57P7H
TLSH
T117B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6ae936b05dd78825aee9221ee7d43237d899cf995bfc6bb846d3c32b5926f852
MD5 87f7bd7b258b8c16177103c03f0c8f1d
SHA1 64d24ccf5c193b28c094b7075d2fe187e4d02d07
SHA512 1753831a8694f421be5c54ca5af7739965cf68c131fe50834f2b3097f5dc1bc8058da36ca660c3cd608ec4b499c09a818f2e5ce6587b807a01cd937a1ab78334
TLSH
T13E611A391D22C886D3B147B1D0E23FFC75F991B50E236EC90184A9BE9A0FF67A139504
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c7c0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c7c0.TMP
Size 3KB
SHA256 f718f7d9ae78eebb4ee3ec1fd363c80615a5df757d5946d46544207f247cb9b5
MD5 b10cee3fdc1f137be59323864d5d4bb4
SHA1 bb4323293fee09f1f4d372bf508021d76ab7b494
SHA512 6f7691f4b10cc762f87c161b6ef5bc20021508ad3035bb02a147e28f97160de506e674bb176748f5c0f646d951180955f45f9dfbf212a7692d27c51fb06ef381
TLSH
T1876109380E22C886E3B117B1D0E13FFC79F991B50E632DC9018499BE9A0FF63A139504
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 dc0f4b349a1fc98f4531962f6c03cf54f63d15d03d18320c7265bdcf786ebf18
MD5 4f7421e8c96a798648ec6fcc7880c985
SHA1 f4cbb4783908e7c6aa3c8fb9997d59570684e37e
SHA512 5be27982e1c58856f51d4e4c6f4d01489f6e70d36bfae363268fa9f087a95de8017773d4a63bca3162c42dd2a8f08e433bc67fcc6e91420c09fd2603ab57214a
TLSH
T1F9617AF3C3D48ABEC82153F4AA246E17CD2D091A422C3D16D5DCAF4A93E24B1F28194F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 040fa239e658958350e8afca1011d4addf673ec5ddce3e8bab23b808b79dc5a6
MD5 a2c8f20e3b43265e9e2100d96baa96f2
SHA1 feec9a92ac036c43453e4bc11a1f2470cc088012
SHA512 9b7b6e40b5efe55751bd27c4b28fdcee2abdc4f0ce83e068f383c2d56925e21779ef7cc0740d77f012ca056045a3d797de02cfbceaed61f0f32e73692fad7016
SSDEEP 192:sxZ5RkyM/jK1Ml8Mkg/fjsw1+Idp6qCHm1N6+WNKSB/YLXLy/IgrJ:sxZ5qMg/fjsw1v+Hx9/n9
TLSH
T1F452E8116A34A977CCDBD209B955BF53D6F90572E2900E44AAFCDA1C04E6BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 92c6a4d85baec7ed2de5c667d78612e5bcca681aa5c58ab60fa2771a53840013
MD5 ea493874842e99605e6f212ebc781c86
SHA1 85e071a8be2e18820ded053f5011dec7b11730e1
SHA512 2d283bae44fdeeef14a723e2b0c7e6167559b76fd893f89e3d1239545fb8f45fc771639ca045b5f66280116c36688c62138c57497a417ee252b56a4e69808cf0
SSDEEP 192:sxZ5RkyM/jK1Ml8UQSkg/fjsni+IdpwqCHm1N6+WNK67XYLnTWN/Ig5HJ:sxZ5qqRg/fjsniv4HxjX8MD
TLSH
T1C352E8156A349977CCDBE20DB941BF53E6F9447292940E44AAFCDA1C04E6BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 05953edd18e9b567cbe7fb099e42337ba53eca983db1e9405f6614efa28d06ff
MD5 9f490f120cfa3c6d1f8213af40f264af
SHA1 0a15e0abd935d92cad19abe809e225abaffd4483
SHA512 140a55f016a3dfe4f9efc1a3ca230a0c7dad951157cfcc9c58048a86d6f19f9ace15747600c7cdf30c330b0f52220657f98bfe3cfdc1c2a0df9e9ffba6a6fd4b
SSDEEP 768:EGs6pD1WvxzUj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNnroXt:EGs6pD1WvxzUju1jahILIsN0Xt
TLSH
T175E20B3B680CCB7E4F841E5CAC2AAF967DD801CBAB58895447FA484C03C77EA51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 dce7a78698555999b9cf75e46b63a8bceea0fb5b3bb417c3e46a6682819e2b4f
MD5 c08ec2e98eff5793aa35d9709165deb4
SHA1 371c86f7d7f7ce252016863e9bed3ad687fc581d
SHA512 e34c0e33ddfbec00e01d81ed12c99a5696c47449e9bcc55855fc867136bc909eedac66cf7fe838dd3833607876d09c6029970f9e3337054bc5efe7bbec4d38a2
SSDEEP 96:KUAAKtePbJSKqoCe589p7nTkjn2PdhkKlBdzkRJpW78:iieBe589p7nTqn2lhFBdz6JpW78
TLSH
T1D5A1A15236B703123C7E2918E264872A8782FA637018E92F77AC50755EA7E344DFC5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 cd1c1272e8a4d33e510b23d3b6356617b7f3263cb3d599331429ba49d8895b0d
MD5 9d57821da83e880677f737dcac4f46c7
SHA1 15ac5d49c74efa19edd4b121979d09c2646f745e
SHA512 a12c707cc0230a2d0a2898afba5c369a33e702de3cdf06d84582ff540963cc9df67d263300d1e47662a0dd28d63d47701d4a224351659a7d5393c60739a0ccdc
SSDEEP 384:UZcIhsNCb454lWxYMa9wvzJrqd4OOPrXLpe8C/K:ShqOXV8hy4Oi9PJ
TLSH
T1F8927D71A87C9CA76DF2F581F98626139FF941A7F6C91A5092ECAF0C01DB568130BC36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 23f66f9baa44c1599362c597220b2186655abeabf56e6026ed39475665f448ad
MD5 7d083341d5d20a617703f8e0e0843b36
SHA1 7d77e6e7dffd4c7751bc22a9e3dbd8117272b366
SHA512 7216c6eb258fca183855c0afb9728e611823f6c1632d6e9cfb39c380ec2f464451de825a19350a8fb24581964273e1cca78ec0640c6293a2ebf5476527ceb9ac
SSDEEP 384:yZcIdsNCb454lWxhMa9wvzJrqy4OOPrXLpe8C/K:AdqOmV8hT4Oi9PJ
TLSH
T1F7C229F168EB5876D8AEA743A7BE2D035EBCC057B5851A40B3D89A0CCCD653FD306825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 f152564aa91063e2f81e5a8bd422ae49c2e45ff92a1878aaff46442e3ba62e01
MD5 390a0d355392728c461e10e85bdb5c17
SHA1 2c18844bfe78c8271d9c35db4d34ecd318908c91
SHA512 dff638ef12e1467f037a743165232b202d8b8b88facb3a76bf7d9b99058924d9f6179cbe2ef6c782be77f413197105cb10b5768fda50d5c0727376cafd9a237b
SSDEEP 384:OsNCd4lWxYMa9wvzJrqd4OOPrXLpe8C/n:O4XV8hy4Oi9P2
TLSH
T167724A71A87C9CA75DF3E580F5872613AFF841A7EA892A50D2ECAF0C01DB56C1347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a461cbd99954afc34c61a5be02eb94db8c349ec157f527604bb82c4ad21503ec
MD5 b0606d0384ba3f608a406c9f1c87ed88
SHA1 b996b16bedb3a498f66762e344a1c1feb1480c28
SHA512 04bd05ff7e645bbf1616a03ed73f47586e0cd14bfffc1bcb0306762bb94b79d3f382a9de00cccc85147a69b4d9013953c9d2c3f12ffa2165275a0ba55a3bf532
SSDEEP 96:nqONkXQsjpfg7+otEol5ih/cIPURHl8h4otop5BJDjB8PHvIVytb0gigBabJxgGK:qONL6O7+3hQmiUyL9Gttb0j3bvgGF6U6
TLSH
T10002F8357C7C6CBB8EF2AD45F98727235FA5117BA9A62F40D6E81E1C00D766C2343826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 357fa5bc96f43e39306bb25aad1689cf193519bedac996d34da6c71b86224810
MD5 bb869750f50f0d39aad320daadd57c07
SHA1 25bcd3733912199c55a89cf58b4c8adb6e5ecc43
SHA512 a76d04e31a49fc79f6c137d9f889c8e34a93cce532e3a89bcf15388f44408f475ea949a6d33f7b4c018751b708ad7bd7d955a0fd57b7c8f3c754e4e8ab7928c4
SSDEEP 192:BONz6O7+31QmiUyg9cttb0j3bsuF0SJrqOJcNXq3LU6:BONz6xLct9wvzJrq14U6
TLSH
T177120936B868AC6B5DF2B480F58736135FB5416BEA8A6F40D5EC2E1C01EF56C2346C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 86e4b9f407800032ea10d24557a71077b6bc8e726b8727969a33af3993c10f3b
MD5 5271b41b2daf186afcbdb81f009365f5
SHA1 537c1cbe5147b897dbd8426450219b169de3e802
SHA512 cee12dc96cbd1c0205ba3ad43da6a983b81a6c7fc34fc5624549fe7c34cbf8cf179d8902dd93774aa0ff71218411d2808db11a6ae9b8bbd4821d8cb48124e381
TLSH
T14F41D698B6E91108B3B76E569BF6A96D487FBD372F46949D10010D4F0A22A40CCB1B37
MD5 SHA1 SHA512 TLSH

Submit Download