hxxps://tinyurl[.]com/y3etrujh

Analysis

user interaction
yes
max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/08/2026, 04:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://tinyurl.com/y3etrujh
Sample260824-e7vdyashna

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
940	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134320197372798949"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{421C667D-8F4C-4268-B2F9-E145DF974B2D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 3364 wrote to memory of 640	3364	msedge.exe	86
PID 3364 wrote to memory of 2344	3364	msedge.exe	88
PID 3364 wrote to memory of 940	3364	msedge.exe	89
PID 3364 wrote to memory of 2344	3364	msedge.exe	88
PID 3364 wrote to memory of 2344	3364	msedge.exe	88
PID 3364 wrote to memory of 456	3364	msedge.exe	90
PID 3364 wrote to memory of 456	3364	msedge.exe	90
PID 3364 wrote to memory of 3916	3364	msedge.exe	91
PID 3364 wrote to memory of 3916	3364	msedge.exe	91
PID 3364 wrote to memory of 3916	3364	msedge.exe	91
PID 3364 wrote to memory of 2440	3364	msedge.exe	92
PID 3364 wrote to memory of 2440	3364	msedge.exe	92
PID 3364 wrote to memory of 2440	3364	msedge.exe	92
PID 3364 wrote to memory of 3980	3364	msedge.exe	93
PID 3364 wrote to memory of 3980	3364	msedge.exe	93
PID 3364 wrote to memory of 3980	3364	msedge.exe	93
PID 3364 wrote to memory of 384	3364	msedge.exe	94
PID 3364 wrote to memory of 384	3364	msedge.exe	94
PID 3364 wrote to memory of 384	3364	msedge.exe	94
PID 3364 wrote to memory of 4880	3364	msedge.exe	98
PID 3364 wrote to memory of 4428	3364	msedge.exe	99
PID 3364 wrote to memory of 4880	3364	msedge.exe	98
PID 3364 wrote to memory of 4428	3364	msedge.exe	99
PID 3364 wrote to memory of 2632	3364	msedge.exe	103
PID 3364 wrote to memory of 3880	3364	msedge.exe	104
PID 3364 wrote to memory of 3880	3364	msedge.exe	104
PID 3364 wrote to memory of 3880	3364	msedge.exe	104
PID 3364 wrote to memory of 2996	3364	msedge.exe	112
PID 3364 wrote to memory of 3288	3364	msedge.exe	113
PID 3364 wrote to memory of 4908	3364	msedge.exe	114
PID 3364 wrote to memory of 5028	3364	msedge.exe	115
PID 3364 wrote to memory of 5028	3364	msedge.exe	115
PID 3364 wrote to memory of 3020	3364	msedge.exe	117
PID 3364 wrote to memory of 3020	3364	msedge.exe	117
PID 3364 wrote to memory of 472	3364	msedge.exe	118
PID 3364 wrote to memory of 472	3364	msedge.exe	118
PID 3364 wrote to memory of 4368	3364	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://tinyurl.com/y3etrujh
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff4d27c188,0x7fff4d27c194,0x7fff4d27c1a0
  2⤵
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1920,i,7025774821190006878,10753188146043845745,262144 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2044,i,14702271949562381518,936618018800319118,524288 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:3
  2⤵
  - System Time Discovery
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2412,i,8020244078896030596,12501071303017655601,524288 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:8
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,10101983283422752224,4701184563110294302,2097152 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,14183743705900475498,8292667314854826304,2097152 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,8544145295459056066,16308744892285240893,2097152 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,14480000771025661968,17885176251232415229,2097152 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,13141112499253301439,9303147560360774784,524288 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,2446658661721068593,16772337302862893332,524288 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,3590856851423783655,6481731023504947023,524288 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,3590856851423783655,6481731023504947023,524288 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6172,i,16984368839066314399,17946667596469850807,2097152 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:1
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,3306915624426514652,12012195640455462684,524288 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,14622062575256555383,7270930033014601910,524288 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,2077282239582967966,1749018626612725963,524288 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3648,i,12457414860762263607,13048534374203468404,524288 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,10912680428200147473,9740114618956011968,524288 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,11356443051314914480,4359915866951731566,524288 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  PID:472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6420,i,2155599351657165404,3813695628983020195,262144 --field-trial-handle=2356,i,13449561713880904940,14012021215330006929,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4368

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:932

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 f0ead82c3c8a4cd9959a8cd1cef74705c67e276b4a574243e75c890cb0b0b8fe
MD5 f8a5a8774310485121aa8917052b352c
SHA1 78542cc17bce16f7d0117a4beed6ae29c39c3042
SHA512 94c06ac4086f7321e54c95657a2fc0769092ed3577572d27a9a75f404a57f6b0c02e9bb5c1e8c0c285a577d89a5801c60face4ebf1cee334d6be346c240f09ad
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T1D5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 b71bd924b0afa536b6403b4b86dcfb5ff2f14c6da4bbb28865112e315346a0a7
MD5 8945b9c04183d75f7d1c6928055e6705
SHA1 822303a06c58ca3be2a9bcfc405403ad465c6bf6
SHA512 64e334b756ea50f5bebfd09a1c6e6e60642853a56ebfb127b66f417103d87b11202a3fad6cadb50e5a672c46690a2d89115d0fd66628b3029544c36eea629ba0
TLSH
T189E0C0641A88C5661B91D2EFE40B7304D01032CFD74DCEC53308B0CC19A70144DC19C8
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 3162af488c283bbdb6565f4200727821b4e60ce0c47948b8d5b3655271a2625a
MD5 7b9f1e9c5ca7be7a0fd051116a616b72
SHA1 8a88b30a2e0c8a2c94e5512f0a5bb56573a6d8b9
SHA512 2c13705b178f640305a8b7685e6b6a7e49374c53b0713e7e54da2205c3c290a3f79ad3280c111728c5383ffc23941c73a23b34049e67b876aa1915e6e2992364
TLSH
T183C08058798C845DC280187FA726F400177155115817962705A1FCD031406A01F2D124
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7441ee4f3c1eca7aea935ad1e06ceef2241d194ac81f8223fd1a2e5d49481bfe
MD5 ebbb2793b3f76988ec6753a260315989
SHA1 9686407d0893df56d2be86786bca80eb67e0fff2
SHA512 18bdc776501688e15256ff654ddcec1177fef07de99acfebdb067248117a6f446276f744e68049ae899260e032e496cde71650a54e4c79d0df59360952d14f81
TLSH
T11F719158126BC99AD7200331E4E33174FCF28FA90EDFFE8511815BBE19D0F6D6126408
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f846.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f846.TMP
Size 3KB
SHA256 0054cf1219dcb9d7884606678c302f3b607fcba8412234522305fae2c4dd5675
MD5 c238d2d92638d6f1a8182134592c79d0
SHA1 d31843ea032b260f16daf727ddd3db4dfb3ba50b
SHA512 9527f6333bce4e19b04dbfd312c74b7768dccae7a5173a27e6432c55374fec9ea97ce83f3b464c8f2b9bec6586705a2ce01c79a475dd8ad76bc621718b2e1670
TLSH
T147719214126BCA9AD7200331E4E33174FCF28FA90EDFFE8511855BBE19D0F2D6126008
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8989c5e1b97929a0301c8771007b0d2edc040cce3f1eda8d2a565998e2e25a1d
MD5 0f7b1e1af8d254ee2c65ce0de74fa3ed
SHA1 d0cb94cd39922a1f2d6fde96f47507787a630304
SHA512 27d4cd2fe504348b81695faf1e7aae0a4b1c830df0df84628777804a44093573b160cc10b036fa5197ac2a2ec9bc7b14a87de4a36142938cbe39afc32717d930
TLSH
T1D751CCF2C7D4D72EC90147F09AA8BD17CE6C092582683C29C9D8EF4F63E2571E22251E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 86586d4499e86cd7104e6a3f1f9ed42257195a82ced1407ec5c4a65b42c13094
MD5 93094177db866a8e9a29af16c438a48d
SHA1 daf39d320e03833d56c3a31f60c8e8359d5d0d47
SHA512 fc24781b5c502c8bb0a24d45000b9efeac34b34a31b0704923f5dd1e8596889100f46d06edf76f747065e46c090c8542416b21325ee31aba2263eb1a5b6feba7
SSDEEP 192:sxZ/LRI8yM/jK1Ml8Mkc/fWssj0NhIdpHMHW6+WNMAv/YwQttDIgrJ:sxZDBMc/fWssj0NKsHbT/a9
TLSH
T15F5208056A34AA7BCCDBD208FA51BF53D6F5453292900E44AAFCDA1C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d035b69769611ab5856eab745afca4db39f89c89705f9704ea5f1c83f8670a10
MD5 26bd9359661ec80f5f4aa3596e2eb889
SHA1 a407614a28f2a24b693a3bf3ba62f7462c003ab1
SHA512 a9133862c7832355456dfafa0150bce5658fa0dcc8bed0bccb443407855d8df290e9109a9c00cf4bf7c64d83a52e66f9286035953476fbc04acd09598779a8c1
SSDEEP 192:sxZ/LRI8yM/jK1Ml8UQnkc/fWsVj9NhIdplMHW6+WNMAv/YwiWtDIg5SJ:sxZDBqkc/fWsVj9NK2HbT/3s
TLSH
T11952F8156A349E77CCDBD208FA51BF53D6F5847292900E44AAFCDA1C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 7346f6e1df6c4b5d4b0e8750f4fc55c88c881e8a74704018fca59ece84980e30
MD5 f010fe173fe7ce6037c863e93b3d40e9
SHA1 7007cfad3fd7ecc743444efb195d7a7ab0d1addf
SHA512 cb07d743e2391cc5d3ce624eadcace9cab7131285463c88e7a85107ffac1b02c7dc71324d91e318afca0c8eb3b034e4b4220028324d9b5cad705c0fe2c6acc95
SSDEEP 768:oN4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dXrohncoa/:oN4jeXmWvmKLEu1jacPLZQdE+T
TLSH
T13DD20A3B280CCF7E4F844E5CED26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 06109c979835f311d6d63b3acc3cb87e01b3267922265451b9f42116bfe52715
MD5 11d9a8daa9ac64268c6eb09e65ff1ff4
SHA1 e1c6d7146c39a556389f86dc93ac50b6667da063
SHA512 3146e3e11a67d8ab4528f103ebd4f66b1f340945a166b4264519375f7ae3904edf50b344a852ee3069725e4bfc2a7e3e0840080760dca1bb1b5b0866cc2ac5aa
SSDEEP 24:KdRtfRoR7RSaR3dRfR7Rz4RLRv+RCIjRnRzKiRchaRJRz1ER1RjSmRdMR48R7RQo:K88I7KZiEzyNdIpKGkcuxIJKa8s7yn
TLSH
T19591519637BB43122C3E29089751AB77564172A33208E62B37A844B20E67F690DFDDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

015e17d4-2805-48bf-94b6-84066fdba545.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\015e17d4-2805-48bf-94b6-84066fdba545.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a5028392cdd8339e504f71dfb0ff463351c8349b1e0ae8d9fe1b3139c3662e66
MD5 c16d1b1f3c48735c16d8626a62b52d01
SHA1 971502807384d09edf6329a464f7df5273b213c1
SHA512 cba82eb794cdab4be6a4446790f947ed966407a4a8039c44defa68f8e9f4ae0115ea619db896b63d5deb11e0385f943c04dc3c12fa020c18e240d4c9471b6cdc
SSDEEP 384:NZcIhsNdRp9oQvXuf+98RUlXU+2mqFqivb+a5to4:Vh+mqlUlmcqiDl5tn
TLSH
T17E828E3658789C7299E2D240F54B36139FF8D02797D96B8095EDAB2D00DD6A9230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 b74d35a61a8db57407f24501e43f73f7711f1c23336503cdf2cd3672a24b9c47
MD5 afbec2e8b789387af09286d371b4cd93
SHA1 bb92362958a17464fa5223446d436277357f016c
SHA512 5beaf88527069fbc06c1b444310727c3f816ef5414d452c3e4b31d59ca3181426f482c88abead2d36447fb793e949ff72a3506dc517ecf2390cba28fbaa61e67
SSDEEP 384:LiFiZcIwsNn8TUNTUlIlcp9oJvXuf+98RUlXU+2muFqivb+a5to4:mFQwCwgBmqlUlmgqiDl5tn
TLSH
T198C21AF648D78876D9AD9743E73E2D038EBCC027B595A690B3985B1CCC991BFD306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 56c194407963526289a6b8ba3458ae21fc2286a0c1afa72b1183c8ca096043ed
MD5 ba55b5bd7f23101f5af6e830b77d3b75
SHA1 866f5de9d59c3761bbe4276a2f9a1371c0393e11
SHA512 278b823fc6a5c8819fd6c7c9373a69917856783c7337064e5913d26e9fddde0ce23f0a9912031852ce73d3ffc5b4465075d1e9038c7932a963d9d898fab4cc6c
SSDEEP 192:EONu6hZ0QmiUyY2pc/+jVnjzorRUY5wOZjzU6:EONu6o6pu+98RUn2PU6
TLSH
T12802EB35A8686CB78EE2AE45F48727235FE5112BA9A56F84D6F81F1D00C769C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7694a508ad4814a399971017ac0bfbbc62671c2422960dcdf0442c5a33fa6be6
MD5 e4ac5f3865db309aec7dde9ba1f1cccf
SHA1 4a28ba8eb1949a439bcbaabb1dd15a45ed062cca
SHA512 7a90a3306ae15ee96fbf87f3b04923562ec95599d9edc1748494fed2b6de067498c9fa18ebf8b9e2c2f053a8be4f3243496403d42436582e913ff796bfb06e85
SSDEEP 384:GZcIhsNdcp9oQvXuf+98RUlXU+2mqFqivb+a5to4:Uh7mqlUlmcqiDl5tn
TLSH
T162828E3658789C7699E2E240F54B36139FF8D02797DD6B8095EDAB2D00DD6AD230BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ad8b07a97678f367e60de59f3007d68590f0975209660123ec5b77a08149b1ec
MD5 fd21c934a9507b5b385d308c4cc153bf
SHA1 9bffbace9234dd47935eea8f52c8c4d3819f2307
SHA512 d8328cb2309f41e8994f212415226914c4e421527db881d4160be39b7461312033bed50015aaef2f9f44f569e9697ebb0a5f6c953ae9317726d7421223ba7274
SSDEEP 192:GONA6hZbQmiUyK2vac/+jVnjzorRUlXU+2mu5cOqIqdn+U6:GONA6Jcvau+98RUlXU+2mB9qU6
TLSH
T122120C366468AC675DD1AA51F08732139FE95117EAC97B80D5FC2F1D00DF66C234BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe696403-064c-4765-bc81-66d714f89842.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fe696403-064c-4765-bc81-66d714f89842.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 62ef10a6763a58a1887c9e1d6e3cdf3a44ba4a69f19dc9aec366c5c0fafb183b
MD5 bd32f1b4f43e18bb588bf2a010bdd9b3
SHA1 95e24320d356cd7e8e475e10f876c5a8fe53b7cb
SHA512 212f45584802a29cd54c9ef9425df2a3b1d1e5beb14185f14014ac4cdd8f35cfcb4d665cf894c8c9cfe66db4e65112a37225afaa4ce30d8e60a908655e7fcfbd
TLSH
T1DF41EB58B6E91148B3B76E1AAFF7A86D487FB9372F07949E00110E4E4A22A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download