hxxps://www[.]dell[.]com/identity/global/LoginOrRegister/

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 15:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.dell.com/identity/global/LoginOrRegister/
Sample260916-s8fttssekd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4012	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134340472620754700"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{21F1F6E0-6033-47FD-AD27-BF537CA06A3E}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{D0C95CCC-806C-4EF2-BB1F-DE319BCAAEB3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3008	msedge.exe
3008	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe
4996	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4996 wrote to memory of 3828	4996	msedge.exe	86
PID 4996 wrote to memory of 4012	4996	msedge.exe	87
PID 4996 wrote to memory of 4980	4996	msedge.exe	88
PID 4996 wrote to memory of 4980	4996	msedge.exe	88
PID 4996 wrote to memory of 4980	4996	msedge.exe	88
PID 4996 wrote to memory of 4784	4996	msedge.exe	89
PID 4996 wrote to memory of 4784	4996	msedge.exe	89
PID 4996 wrote to memory of 4324	4996	msedge.exe	92
PID 4996 wrote to memory of 3928	4996	msedge.exe	91
PID 4996 wrote to memory of 4324	4996	msedge.exe	92
PID 4996 wrote to memory of 4324	4996	msedge.exe	92
PID 4996 wrote to memory of 3928	4996	msedge.exe	91
PID 4996 wrote to memory of 3928	4996	msedge.exe	91
PID 4996 wrote to memory of 5036	4996	msedge.exe	93
PID 4996 wrote to memory of 5036	4996	msedge.exe	93
PID 4996 wrote to memory of 5036	4996	msedge.exe	93
PID 4996 wrote to memory of 260	4996	msedge.exe	94
PID 4996 wrote to memory of 260	4996	msedge.exe	94
PID 4996 wrote to memory of 260	4996	msedge.exe	94
PID 4996 wrote to memory of 4808	4996	msedge.exe	98
PID 4996 wrote to memory of 4808	4996	msedge.exe	98
PID 4996 wrote to memory of 1940	4996	msedge.exe	99
PID 4996 wrote to memory of 2552	4996	msedge.exe	101
PID 4996 wrote to memory of 1104	4996	msedge.exe	102
PID 4996 wrote to memory of 2552	4996	msedge.exe	101
PID 4996 wrote to memory of 1104	4996	msedge.exe	102
PID 4996 wrote to memory of 4984	4996	msedge.exe	104
PID 4996 wrote to memory of 3740	4996	msedge.exe	110
PID 4996 wrote to memory of 3756	4996	msedge.exe	111
PID 4996 wrote to memory of 1704	4996	msedge.exe	112
PID 4996 wrote to memory of 1820	4996	msedge.exe	113
PID 4996 wrote to memory of 1820	4996	msedge.exe	113
PID 4996 wrote to memory of 1768	4996	msedge.exe	115
PID 4996 wrote to memory of 1768	4996	msedge.exe	115
PID 4996 wrote to memory of 1816	4996	msedge.exe	116
PID 4996 wrote to memory of 1816	4996	msedge.exe	116
PID 4996 wrote to memory of 3008	4996	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.dell.com/identity/global/LoginOrRegister/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x234,0x7ffea3b9c188,0x7ffea3b9c194,0x7ffea3b9c1a0
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,11572020127114683705,1946360237394403405,524288 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1820,i,11027984029888719515,17216952965447933689,262144 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,2999199783348100986,16131337224721935204,524288 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,17476553010886885070,5936925448291514608,2097152 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,8223831666262535830,3271144327176350620,2097152 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,8820110448813567191,8902121534180721412,2097152 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,13135992986092287127,11967688219978268611,2097152 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,4032436217200370381,6447002833550786776,524288 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,7899957224009417569,9348846126741215336,524288 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,4529663858201117544,4258865846639897718,524288 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,14798689505925417254,16129570682516785078,524288 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,3500969260691030834,5826181384968207305,524288 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:8
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,3500969260691030834,5826181384968207305,524288 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,6246056903390897090,9329843045748466176,524288 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,16399220029317033681,8608886068623290072,524288 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,8422063922724032310,8798445586827095864,524288 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,4600518048748381841,10361287701182782820,524288 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,15562351659282339774,3553443433092004312,524288 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:8
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,13374333805263786497,174664807215732039,524288 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5256,i,18173526877094470959,5434560818802344374,262144 --field-trial-handle=2272,i,4375456106254706506,9620536010680259921,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3008

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4280

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 ded0cd5e8c22e52b9e19ad94ab49c783783127a32073a5920e704a5144a69757
MD5 cb7d7bc793351c4255f8e12d01147009
SHA1 1f463e2875a8920e75380ed6fdc5c7a202326673
SHA512 2b5155030d1774fdb25a90a078ab3fd2b8d4661d9c05024e357b1d56da21eb4d190500a5d4e28f62dd8f0a9eed736c357634d0ef8ba460e82b97e4930e0925c9
TLSH
T1C8E07D8814CEEE6EB25875CB416877CCC28C375EE2CC7A8B1F058CC9700A240BBC76A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 84cc78e81b66a7b6a89b01a0b2209acb37fd3d16eb50fa6ed82b087244cdccd7
MD5 48cc347156c3cb1abac1b0c38b3ee0ab
SHA1 f619301cc37fe41a30cba20d7e8ccb47acdaec6e
SHA512 edf3e239fd21c0fa017a3371fc5bb400c728518d7ba4b6f62c8f749992aff71ac1db54de8bbb51907c885e54c3d86e7739c67411484a49ba35fe8b485ae475c9
TLSH
T11E6193B594434157FB9840F0E9D8118B3EF0A5BE98835E16A1A6D177A86EF37FD44CC0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5978a1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5978a1.TMP
Size 3KB
SHA256 e41530e60f42615a84d5129a4e22c2c6441a85ba3d1b74ca4fb4b1ee5426b1b1
MD5 965027c5200e0c17695267ced19958ee
SHA1 a863c059ee3f304433dc0db2c8632ad0179547ed
SHA512 846de61e2867ef5cbda162cf81e3f1d97cc3a64d2a64623d04ba98a74c13d2ee397e2c8a433d2984c6301f6aea01b372cb8e6aa92a7e7f196c3010bd1d93108b
TLSH
T1B06184B495434157FB9840F0E9D8118B3EF0A5BD98935E16A5A6D277986EF3BBC40CC0
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b9111152dc1f9ceb842969f5874e48748cf93675478eb7257698fd6384a488d0
MD5 93c4ba27db1abce4ff323fb9435e4891
SHA1 781de95d40e8ccb6963302c3b6728a03c1e9079b
SHA512 b9c24ae3b10ec7dd9b0b5af27712f0a3836ce60d5cfe67bbc0e2d91a8f1251965422ff1e854115296b67e8e98a1106b47bf6374a86fdbb940e97c80143d52108
TLSH
T123212BB7C7D9966E891116F0AA28AE1BCE1D0906421C7C1A85E4EF1B93E2475E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 78175a29047058a0ebe087baf69d84970a1d99145164e91f2d039292382c12d2
MD5 72e0bca49a3eaa025af9312b51403a9c
SHA1 3cc4485a4d56f89dabae909a8238d6199ee56b6a
SHA512 03ea5c187df294531159ce901113051afa171b57d0faae53c9fc06f55dbcce0e5b57d7147ecccc18c57c9abdd527d32cf49bbb6296cbfa762da01508d9960d28
SSDEEP 192:sxZHRhTWu/f5syuSIdpGa3HW6+WNPmc/YYB+lFIgrJ:sxZHuu/f5syubBHbB/fa9
TLSH
T13022B7526E28757B8CC7D219BB15BF13E6F91032A1D51E88FAFC862C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c7d5547e2f8246049a2e79c5b753dd523ba50f05a394996b2f49c41157f10df6
MD5 474e33cb01923131d80127f42253c874
SHA1 bb0d2a4bc0e52cb55e72418594ddbf4d1dbb84df
SHA512 a21bbc055d8e42ccd6a4880ea4b6635c0ac95bf3c05081273400bf517672fb4a60fe30a1e281bd519cf7ec9579b749aca48063c8fa9d4584b5b5d044b567535f
SSDEEP 192:sxZHRhTWu/f5shuSIdpka3HW6+WNPmc/YYBJlFIg5yJ:sxZHuu/f5shub3HbB/fZE
TLSH
T15F22B8666E28697B8CC6E219BB55BF13E6F9503251D11E44FAFC862C05E6ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 615ba3ce87e722255890aa4099a3756af13bc28225554947a1128dcce1cfb9c5
MD5 84d68ea2e45a06d394770c8a774d29a6
SHA1 4c5d3045bf698ba1b15a3caaab2ea5b5ff152f44
SHA512 3716124bb6c5b964650be11e7d75abb8cc47cf5f20ac5d766ba51b69e6d99b291f7f40ed4f56e017f7c46b5bd0e1f1d5a5c4237fe01579a711113e2f22576850
SSDEEP 192:sxZHRhTWu/f5shuSIdpGa3HW6+WNPmc/YYBRlFIg5yJ:sxZHuu/f5shubBHbB/fRE
TLSH
T15922B7667E28697B8CC6E209BB55BF13E6F9503251D51E44FAFC872C05E6ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6823fab4cd821ebc1622056a60f21b7cbcac96e1ca06d9a47d52004a1fa2cc01
MD5 a0c2c87e179f2ef928bd949b201686d8
SHA1 e98596e237997b564eede558d3196c104f06ae2b
SHA512 dd145b615431b4377c793de753a187657f3fe5f15381602c3dd23ea2ae0362ec8a8f8e048e942e508e1669dff642f6e6b5652cc4c3754a48a11385e45a5e3486
SSDEEP 192:sxZHRhTWu/f5sIuSIdpGa3HW6+WNPmc/YYB+lFIg5AJ:sxZHuu/f5sIubBHbB/faG
TLSH
T1EF22B8566E28757B8CC6D219BB55BF13E6F9103251D51E84FAFC862C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 687e9409bde11119c169d69510ad5d0c3ccada0fc5fdaf893b1f22301a5504fa
MD5 138f886bfd3426e5d306e8a448c38032
SHA1 9c6a4864f709c585ba1495bc9b97283ab57f3d4b
SHA512 6f9e6a7de141d2c5bd71b755a4e47579a20ba797c8c85f59a41bd7ede1f77c1649f2b775d1a4402b0fa8238375bb2adb505a542d9419fce2a33dbe1dda1811f8
SSDEEP 768:yjyYR7jWv3NRB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXlrop+HJ:yjyYR7jWv3NRBu1ja/CL8OXeo
TLSH
T175C2D93F640DCB7E4FC01A9DDC5AAF9B3E9802C796548D4047FA984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4d4b129d8ce3b07aee1b5e3b5d182e2d32375e02d292fc8f7c524120fb324638
MD5 eee8a6b2ed13ccb4c5e85a3e44b47022
SHA1 a285ed286c79e3c1551b19266f9d2fbeda4182cb
SHA512 a0dd0edd805900a3bde437573599eece15b0885c64235affae55c4c81482e67c16ea697163a58bf6780b619d0cc57174fa4f7685d493429466ade1d171e9108f
SSDEEP 96:K40xCGMWyb5CXqjubK7ijIb30cPqSoqWP0geM8l5odYjIlK7UjY4T2yweedlaxQ0:otlV5j
TLSH
T13A91238030BE020439FE354C82B48B1E468235B37069E67B7BAC46D5AD6BE045EFDCD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1255d835-97a9-40a7-b963-d9873a980d72.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1255d835-97a9-40a7-b963-d9873a980d72.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 3ad48c6121f3b8337401d8edae53fc892254a733e1c9ef2d09f12112359e4b50
MD5 8393d3f3dfcb7524edcaf52b8a34958c
SHA1 e09624e0a09f2c2290fd56a628def93d055abbd7
SHA512 153f2dfb13b66230b7eac62fb355858123f1d1a70f5fba000aba582b5a55905f120989a1df40633dd329a4a30ad33b6c3fd02dabf041778f6bc1c86a50eaaac0
SSDEEP 384:siFiZcIsgsNf8TUNTUlIlsVri9ilQX5+DtN8zX3+21Xdsa+VYplRor:XFQ3GwgAvCkD03l1XdhgOE
TLSH
T1CCA26B32A994DC7B9DF79781F94A32039FB450A791C9AA90E7D89F1D00DA29C130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2d0cb89e344c9c9f4f8af223b36e3677f74d2ed319ea6ea2dde3416e9b0df61a
MD5 f6852309d94143eb4b1caf5347d37672
SHA1 b3cb8918e2a81ce8dafbe0351ecc1e585e00ac98
SHA512 5a42f14baf0b16a378ad573f4f2d7cd99e3ec331bae46c91abf5e7afc0358f27c61d3ed8c418ac114c5fb25a22f3b08ea2013e97c9ba3e34c9804eda8e8508b1
SSDEEP 192:EONh6nnHGQmiUy8RQYcX5hQDP1xjzor9RfMcPwU6:EONh6nC5QNX5+DtN8DoU6
TLSH
T1C002EC35F9A46C7B8AF3AD45B4872713AFE4213BA5956B80DAE81F1C00D765C2306D37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 463ed472b9c727087491f8d544a11ca7cd349ce6517e96fc2938e63846193490
MD5 a9bc11eaec37b92559d960148232ed13
SHA1 c85a3d3ce02ce52c0c072e2555d88925eb1424ae
SHA512 4ed58b519b5d0ae1ab4713d2a68e423ddc2da480cc463859241923c7d8db0f4f7fee2a36eb35e6a2bd91f747479375df2787d650132276398898f0919bbcc763
SSDEEP 192:EON46nnH1QmiUybRXYcX5hQDP1xjzor9RzX1x+2tg3d/5dU6:EON46nzAXNX5+DtN8zX3+2yXdU6
TLSH
T14B12FA35F8A8AC6B5EE3A595B08731139FE56127E6856FC0D6EC1E2C01DE65C6309C23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5019febfd5d092450d383e31f60c5d81469c5b3fc0f8315b9ff0bd0f20f547bf
MD5 a9fa89db63dd356da8b9c6b07d5f3f61
SHA1 3df9ab144fc9e24f23fe86016fef6f115a0a7617
SHA512 aae24983874ed7c1099264ea878ef67f57e87a8854b21c0ad8d2de6096f41d18a5f8451bcb1697724200626e941411dd2747a74fda7cb927cb487d483be0363c
SSDEEP 384:nZcICsNFsVri9ilQX5+DtN8zX3+2CXdsa+VYplRor:PCNvCkD03lCXdhgOE
TLSH
T104828D31ADA49C7B49F7E281B54736039FF46067A2C96F90D6ECAF1D01D97A8130AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ae74bed82d03f5a4a7239d4ef5453ef6f1e30b90c69d8c05f00d408790e0b3a8
MD5 d10e83914736d6e9b1d0780694d511a3
SHA1 ac0fc7d310ea02084badeb0821df823c93f42fdf
SHA512 cbf25fb9329d48da062c20971f47fa16ca5e6a30101b5993e4f3bf6e5f9814b9d966e75eb2aac2c09cda06d1de7a136022f7bb8d2c3192ddf839ad39788122bb
SSDEEP 384:sZcICsNFtVricilQX5+DtN8zX3+2CXdsa+VYplRor:6CmWCkD03lCXdhgOE
TLSH
T101828D31ADA49C7B49F7E281B54736039FF46067A2C96F90D6ECAF1D01D97A8130AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

926214e5-3c77-49d1-974b-7c91ece40139.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\926214e5-3c77-49d1-974b-7c91ece40139.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5b19963328c67777d417448dc80232486fa2aa7a9bc144348ad1846ea87cf762
MD5 7cb5ca31b9f768db740c9dc99a01ceea
SHA1 36ab387c78d62ceb806d0f70002a86b7b6aad92a
SHA512 32331c4adf1effb2289de3afb41cde2662d9a7280c20d712a63ebc3a414d12fa3d073de1b6e113bf74821cd7c798519ca265451982ce36da0e6e26281282e48b
TLSH
T19C411858A6FA1148B377AE569BF7A86D48BB78372E07D45E10100E4F4B22B41C972B33
MD5 SHA1 SHA512 TLSH

Submit Download