hxxp://entry-verifed-cdn[.]codes

Analysis

user interaction
yes
max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/09/2026, 15:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://entry-verifed-cdn.codes
Sample260928-teqmlsys9q

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3352	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{9F56C74A-C971-4B11-A390-4041E3B706ED}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3384	msedge.exe
3384	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe
3692	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 3692 wrote to memory of 4460	3692	msedge.exe	86
PID 3692 wrote to memory of 3352	3692	msedge.exe	87
PID 3692 wrote to memory of 2096	3692	msedge.exe	88
PID 3692 wrote to memory of 1844	3692	msedge.exe	89
PID 3692 wrote to memory of 2096	3692	msedge.exe	88
PID 3692 wrote to memory of 2096	3692	msedge.exe	88
PID 3692 wrote to memory of 1844	3692	msedge.exe	89
PID 3692 wrote to memory of 4228	3692	msedge.exe	90
PID 3692 wrote to memory of 4228	3692	msedge.exe	90
PID 3692 wrote to memory of 4228	3692	msedge.exe	90
PID 3692 wrote to memory of 2960	3692	msedge.exe	91
PID 3692 wrote to memory of 2960	3692	msedge.exe	91
PID 3692 wrote to memory of 2960	3692	msedge.exe	91
PID 3692 wrote to memory of 4632	3692	msedge.exe	93
PID 3692 wrote to memory of 4632	3692	msedge.exe	93
PID 3692 wrote to memory of 4632	3692	msedge.exe	93
PID 3692 wrote to memory of 216	3692	msedge.exe	94
PID 3692 wrote to memory of 216	3692	msedge.exe	94
PID 3692 wrote to memory of 216	3692	msedge.exe	94
PID 3692 wrote to memory of 1896	3692	msedge.exe	98
PID 3692 wrote to memory of 1896	3692	msedge.exe	98
PID 3692 wrote to memory of 1896	3692	msedge.exe	98
PID 3692 wrote to memory of 2604	3692	msedge.exe	100
PID 3692 wrote to memory of 2604	3692	msedge.exe	100
PID 3692 wrote to memory of 2636	3692	msedge.exe	101
PID 3692 wrote to memory of 2636	3692	msedge.exe	101
PID 3692 wrote to memory of 4348	3692	msedge.exe	103
PID 3692 wrote to memory of 2000	3692	msedge.exe	114
PID 3692 wrote to memory of 1672	3692	msedge.exe	115
PID 3692 wrote to memory of 3480	3692	msedge.exe	116
PID 3692 wrote to memory of 3944	3692	msedge.exe	125
PID 3692 wrote to memory of 3944	3692	msedge.exe	125
PID 3692 wrote to memory of 4716	3692	msedge.exe	126
PID 3692 wrote to memory of 4716	3692	msedge.exe	126
PID 3692 wrote to memory of 3384	3692	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://entry-verifed-cdn.codes
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b8,0x7ffab249c188,0x7ffab249c194,0x7ffab249c1a0
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,1182702790801462465,1724956865883537068,524288 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,16177111755928142350,14336267563814821580,262144 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,8007958742465210960,113842118976981729,524288 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:8
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,10303089633014028716,7853149857367868170,2097152 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,12593849282163920102,7766587312729531657,2097152 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,11889549912508362759,1912514394954789252,2097152 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,9089589966619621934,11102164184141438452,2097152 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5052,i,13544798151908584784,1967711554791487119,2097152 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3516,i,18229305908494979095,10105239387421197299,524288 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,13293223230370790330,2816454635637052468,524288 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:8
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,6715438883368812166,17411929770148817551,524288 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,6715438883368812166,17411929770148817551,524288 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,11890787788690411135,8788658620723882264,524288 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,228620913747990384,4801453664168092848,524288 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:8
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,11770240951526136585,12587409165734382469,524288 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4136,i,8313133721533397292,6910827805644825332,524288 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,4533521164754331031,15895294075860419684,524288 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6020,i,13248807047204442846,13954623896342413942,262144 --field-trial-handle=2248,i,5217988252827515658,1587955998174018851,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3384

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4616

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d44b117ae9ae7f572e8aa55bd505963fa7952f8d679120067fc197a744992ed8
MD5 1230267d743ab89699b68a1b26ea3a17
SHA1 027a3cbc9c5af4fafa230a6d997e8ccb7f5e0746
SHA512 3733113b50375d1339c7bec0475b96254c52832dfc76319e78421ce63cfd0a001355425d8cb6ec31edacb2bf60cb1eb93e3480eafb91a2e9339d471cd2eac731
TLSH
T16D5191B0BF8481A9F798627C9DCA02473E34998558B77FCC21EBCD7AF80A71E1124E44
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591a25.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591a25.TMP
Size 3KB
SHA256 fb962a0d0604eabe766f014af1d225ba87c1761ddda89414f71de748550e8864
MD5 71acd114d190f93a7f6d23efdc8f0cf2
SHA1 10699fc25f0d62ebf0adc754bbbaef7e8847670b
SHA512 09c4d8c6f144c5acfb5c21f36daab7057948fe31135a24983db92247afd99058e1904e2dabd6500e27a9ff292194ae18c33468fa24c8552ecab2d9acf7001c24
TLSH
T10E5192B4BF8481A9F798627C9DCA02473E34998558B77FCD11EBCD7AF80A71E1124E44
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 28c4b49c87251e0cf16d497053495f6f3f8ac5002c886dcdee68f07dfeb997e2
MD5 841bef2ef9e2206a3bf34fbe8d03ee66
SHA1 f8e9d4a337ae61dac5d2771e3c2e0e9167236499
SHA512 ce2ffdd9ff17010871f73e7485b345f57d5b63ba187020e7b4c4baa6276610d20552734abbc585fc6fd4bb6df444782f544ba5a750149716ac80d92d306fe169
TLSH
T14A11A0F7C7E5996E89015AF05A14AE1BCF1D0506832C3D1989D4AF6793E34B5D00255F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 54bd2f818f749e776ad669149d551376708c78117289c04f9b2250602a68c90d
MD5 2c12b9982aab630e8e6bceea90663ee6
SHA1 2b70c67a8e24bef780234daf91e042c46ce76449
SHA512 890ac5a194832df6772cecd257a27dd1e5176b1f8effa3f5f7f99207c3d920b5d27af6c0eafd72b83de6351263e8465b2915e8f705c429d76df0993becc24254
SSDEEP 192:sxZFR9WM/fZsMxIdpr1HW6+WNwJ3/YgoMMJIgrJ:sxZFSM/fZsM6xHbW/Cj9
TLSH
T15422B7516E28A97B8CC7D20DBB25FF53E6F9503295D01E58AAFC861C04E6BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 10f0b5a2d61d7fd73cc3df85e8a4291b1d2e27f4fcb4c1e06ea455cf2d957e7e
MD5 dbd3f9b95afa7843d3016ddaba68aebf
SHA1 708dd6d1a1afd9c85b22f9e4ea7885ca47221872
SHA512 7c43c9744379a343f6dfba6c5fe51f279a318834eabcf0d64807ebe44c059ebb21ae663524b29ea8a4b84b109e00fe8973f53b4c7295687c5937c75095d7b333
SSDEEP 192:sxZFR9WM/fZsGxIdpr1HW6+WNwJ3/Yg+MJIg5lJ:sxZFSM/fZsG6xHbW/3t
TLSH
T1DF22A6516E28A9BB8CC7D20DBB15BF53E6F9503295911E58AAFC861C04E6BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bc4de6bdf9a0919841b01af3e786ee047ebaf45e5d3ca3c565560ae0f6624d78
MD5 c37f42ee937354deda982de33ceeee96
SHA1 3ca08b6359ce730e3280d6a077d2b4b1f2fab34f
SHA512 c881e5f265455aa608eb8971d3aef28b243a736bdf89cf9b374cf017131949a6f461795fdab92b2f1e2b23f6f8de7e090bcaf9a8e28d5d965024b5f105658a3a
SSDEEP 192:sxZFR9WM/fZsGxIdp91HW6+WNwJ3/YgVMJIg5lJ:sxZFSM/fZsG6nHbW/Et
TLSH
T12A22B7526E28A97B8CC7D21DBB15FF53E2F9507295911E48AAFC861C04E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6252815361c5207b9fd9a65366919635215fb6bcf6489e0833fbcb0e904db9b8
MD5 29672c80deb723896c4bba4bde496608
SHA1 e4590cf0b35c102b1f1c84de44e2473f5c214be5
SHA512 a04cef2702e3c8e832c93801218fe81f1c995f0e1a86ce28e117476ce314ddf9467ba646b2b5be5677652b0aa4edc333bf6dd842808d0c53de07f176e4f7e782
SSDEEP 192:sxZFR9WM/fZs+xIdpr1HW6+WNwJ3/YgoMMJIg5XJ:sxZFSM/fZs+6xHbW/Cjr
TLSH
T12622B7516E28A97B8CC7D20DBB25FF53E6F9503295D01E48AAFC961C04E6BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e275156fdf6d3cce89598e47ca533df38b77ead3dbec9a0ed3a5f3906becbbb2
MD5 a3b143cc385928816c5fa98229e094f2
SHA1 5857b1a64ab8519c1caba3ae5983dee9591e9289
SHA512 1489cbfb3c688db591444b4046d4472a1abbc6f36af6810eb9bced28e64e2c7e8a2bc01c7a773d2e1816d77b1c6b011f6cfce6cfe4ccb42fc36b7303250f563c
SSDEEP 768:O3ichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzJroCShG:O3ichfPWvPZplu1jan+LKgzithG
TLSH
T1C8C2FA3B640CCB7E4FC01A9DDD5A6F9B7E9802C7AA588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2b4770c26301f74b9358f3f465f36891638ec1366856ad6dffafb0e88175f508
MD5 372c5900cfbdddd7e7c75e9bd8be0486
SHA1 09f8df360e163112b5946d447ef080b4f36ce1a8
SHA512 600adf4f67ce7e679ce966197a8b7c2013c7c2abfd7704997408a104107a8a006581cff03a9f04f95e8fcac82c55df76312a41e22239b5b3b113ea65cccb8217
SSDEEP 48:K0CNQ8CgARbcrMISURK9Y1iRxaBYDUAyyLJ4FZDHb0bni/ISx0K9x1b0xZkYijLD:KQNqKu0CC+oKDCsbGKkAu+z
TLSH
T11A91F05135B7030038BE285984B09B6E664231F77159EB2EBFA841D74D6FE081DFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59b721.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59b721.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 429475699440e971343998b78497bd1b5d93d1852e32be804277bc1d9227be7b
MD5 fe896afd7b570b993c83dbc9d7e6b568
SHA1 a66fea4006d3c64ad0da53aaa84b4a6e7f646357
SHA512 9529c65f23a74550056dc57df646824d730abf8c10e29fc19f5e239320087203d8915c5f09b0fc4031ea698a4097174569c07d907a72edfed4e121ca7085cbce
SSDEEP 384:6ZcIhsNxA+b5yEU/BGYX5EXLEs9XlaYo7frutgOIwZOyKfoG:4hILUJGYuXLEs9ETruXsbN
TLSH
T169828D329CB8ACBB5CEB9145B58B76135FF89027DBC57B9484FD1B1C01DA2A4130B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 b0bec87d755a272e3f58e527d30bab650fb0891ba494156b1d2cdbb0dd178d79
MD5 4d53f093b9a2b3d48b4cc470669c9b84
SHA1 2452fef9eea8c8c3e8c274091aa1fbe71fdc7cb3
SHA512 2d2fd72d3dff5d2367e2f6a916b21261b937568bb94dd3d133b4821d40346b30fa95310d7662074d4b3ec532c8ed6759e6cab4b85bdfa48bc4e657c16f3d45e2
SSDEEP 384:SiFiZcI5zsND8TUNTUlIlf+b5yXU/BGYX5EXLEs9XlaYo7fXutgOIwZOyKfoG:ZFQ5SwgegUJGYuXLEs9ETXuXsbN
TLSH
T172C22BF248E7987ADCAE5743A77E2D034EBCD017B685A650B3D8461CCC961BFC30A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6e980dbc952d170dac9fe633bf3de903e23eb8e50b1e47e9231a2a79419894d5
MD5 97b05ad15a45a853850d6b36e898b51b
SHA1 c2c54c8aab285af4ca8ae891c5a0ed56b5b4efd2
SHA512 542c4f0151dd1599a863adf69ad9db203829b645d57538f832b3d337f4b4434ac6bb01fbd282edbc23daf3894c3f02e6e79bcd3505f63b63bb6346a09c1d2824
SSDEEP 192:LJONV6DphmqQmiUyhWq8wGYX59ezWCLEsXkk73bU6:lONV6193RwGYX5EXLEs/LU6
TLSH
T1CF02FB35A878BCBB9DE36D45B58B26139FE4212FAA906F44D6E81B1D00D768C1307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 556b0ab23025260bdfd8ca985673fb71c96f06b4ebca3d47507ce0ed2a4fc966
MD5 51f3f0a0f2f770a4d38d547b50ddae83
SHA1 50484a47cd4223ffab3060d9226f203aa82fc284
SHA512 fdbbd90c6016d9e53f6d478409b00fbb25cbd036b5fba7a3ba58e30d790933fb2ec19578fc0564bc5c47a2e70d3971f0e5c5719945739eb60886b46fc2e5c2a4
SSDEEP 384:lZcIhsNxf+b5yEU/BGYX5EXLEs9XlaYo7frutgOIwZOyKfoG:dhdLUJGYuXLEs9ETruXsbN
TLSH
T167828E329CB8AC7B5CEB9144B58B76135FF89027DBC56F9484FD5B1C01DA2A4130B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9d62b07e71ad225ad5f9df89ceef7f842dd89f48cd0c1728ead45dc552e7d39d
MD5 0a9e9c169fa3daeda69232a6b06b1c12
SHA1 9d541012ebb4f7a6fe37be111fc4eedb084b6618
SHA512 c9ff08bf8cd15535d88f356af73bd8f24b9488e130d168eb266d92e4fc78e9adfff3049520ada9283992a6d701af842cb269604fdaf9a7e8a15c1f96d6143bbe
SSDEEP 192:LJONM6DphNqQmiUypWG2wGYX59ezWCLEs9XlaPwo7f9kIIDq5HU6:lONM61+BdwGYX5EXLEs9XlaYo7fGuU6
TLSH
T1A0121935A8B8BC6B5DD36594B48B39139FE4522BEB847F84C5EC1A1C01DF29C130B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67cc2299-abaa-4f44-8118-3395f39831e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\67cc2299-abaa-4f44-8118-3395f39831e9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e94349161ad66f2b670141d8be591f552b2993f8cd02d107d3873f44246b8bca
MD5 75ac547a5ea2582a642db10001abd897
SHA1 a004c135db97667cf4e0a7ad4a2fbe9798013903
SHA512 af529e82e970dc02c6b09b4726d0eea5d007cae20c90164309f0460a7e9b1a555db0d76c90f1e87cfcfa69327bc2ef0afeaa89b2117eff58f36e339888f95f41
TLSH
T1A9412699B6E91148B3B36F56AFF6A82E487F7D732E06D09D10010D4E0A22A40C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download