hxxps://google[.]com/

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 00:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://google.com/
Sample260722-a6dmkshb47

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1428	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291549613568014"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{513C8640-1E48-4698-968E-31DE955D6A9F}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3604	msedge.exe
3604	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 3540 wrote to memory of 1052	3540	msedge.exe	85
PID 3540 wrote to memory of 2640	3540	msedge.exe	87
PID 3540 wrote to memory of 1428	3540	msedge.exe	88
PID 3540 wrote to memory of 2640	3540	msedge.exe	87
PID 3540 wrote to memory of 2640	3540	msedge.exe	87
PID 3540 wrote to memory of 4960	3540	msedge.exe	89
PID 3540 wrote to memory of 4960	3540	msedge.exe	89
PID 3540 wrote to memory of 2740	3540	msedge.exe	91
PID 3540 wrote to memory of 2740	3540	msedge.exe	91
PID 3540 wrote to memory of 2740	3540	msedge.exe	91
PID 3540 wrote to memory of 5116	3540	msedge.exe	90
PID 3540 wrote to memory of 5116	3540	msedge.exe	90
PID 3540 wrote to memory of 5116	3540	msedge.exe	90
PID 3540 wrote to memory of 4132	3540	msedge.exe	92
PID 3540 wrote to memory of 4524	3540	msedge.exe	93
PID 3540 wrote to memory of 4132	3540	msedge.exe	92
PID 3540 wrote to memory of 4132	3540	msedge.exe	92
PID 3540 wrote to memory of 4524	3540	msedge.exe	93
PID 3540 wrote to memory of 4524	3540	msedge.exe	93
PID 3540 wrote to memory of 3776	3540	msedge.exe	97
PID 3540 wrote to memory of 3776	3540	msedge.exe	97
PID 3540 wrote to memory of 3776	3540	msedge.exe	97
PID 3540 wrote to memory of 4304	3540	msedge.exe	98
PID 3540 wrote to memory of 4304	3540	msedge.exe	98
PID 3540 wrote to memory of 4640	3540	msedge.exe	99
PID 3540 wrote to memory of 4640	3540	msedge.exe	99
PID 3540 wrote to memory of 3416	3540	msedge.exe	101
PID 3540 wrote to memory of 1712	3540	msedge.exe	110
PID 3540 wrote to memory of 1160	3540	msedge.exe	111
PID 3540 wrote to memory of 1540	3540	msedge.exe	112
PID 3540 wrote to memory of 740	3540	msedge.exe	114
PID 3540 wrote to memory of 740	3540	msedge.exe	114
PID 3540 wrote to memory of 4760	3540	msedge.exe	115
PID 3540 wrote to memory of 4760	3540	msedge.exe	115
PID 3540 wrote to memory of 3604	3540	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://google.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffd6931c188,0x7ffd6931c194,0x7ffd6931c1a0
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,393489014187506093,1996142199716261059,262144 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,3970975248879714844,8409583190379256601,524288 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,4128739915754223049,13308336786241195762,524288 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,13680495707490637258,11932560764203549471,2097152 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,17263616335084509650,17992165959393977285,2097152 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,11188427663278003369,9254572519198265337,2097152 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,4058686850853310363,16462668757110753118,2097152 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5032,i,4797396025891599339,11658809637129335351,2097152 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,5110330299161876176,8524507513050850481,524288 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3988,i,16019601102456610074,16431204387220676349,524288 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:8
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,18030753669242081000,10610051439136478198,524288 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,18030753669242081000,10610051439136478198,524288 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6448,i,8375539431189662697,8396907180498731501,524288 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=3968 /prefetch:8
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6432,i,17193436980489717305,7788600111517901615,524288 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:8
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,9912020524295031930,13162386441491331187,524288 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:8
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3536,i,13085262403503285822,4633831915942165176,524288 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6328,i,5777419575786516494,10522730702227210080,524288 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6176,i,1695752696565235946,18406482348044484357,262144 --field-trial-handle=2340,i,3229023000746174469,6511860784568268898,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3604

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9a045fbdae388fc5cbc846b355ceee62163003e0140c3ac7648b4386a2d69d00
MD5 a1b351ccb8f936babec79eba640f9702
SHA1 d9a77263732d791885cab8658e2f5c4e48faa4dc
SHA512 dd4c815e4c57abe2f4c0bcac4889b0570d974b71559f21373d662ab24beabc3e224a73e648aa3998a0536afb78570ffddd1dbdbd8751639d0da807aabf7e2d0f
TLSH
T18371D95D1E56C063EF203231E1C262F574B24D7A8E53FE1AC0C4D8BD680E7E746AAB18
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588671.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588671.TMP
Size 3KB
SHA256 def97af69829b976016d54aa67738e9d021ca3fce4e34d9ad5077d136d0ffd09
MD5 cf546768e8f64c760e9bbbe91283ac2e
SHA1 ef178498b255a9868fa9d1fb014dceea4f569e07
SHA512 68abec2e73337b257da7f11dea7243f44f3513dfade427878b317bb211e1b9836bf51dab5ab64a9bc8361d64ec3b98805ed40010f300b997dd7a607a810befcb
TLSH
T1D361A65D1E46C063EF213230D1D2A2F574724D7A8E53BE0AD0C8D8BD580DBE7469AB18
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 5c13e519638d52f50714e80d79df9b98fa4751c1c800f3435314d20dd1378dd1
MD5 7916582ab4d39b9c2e33c0ed2ceb2c01
SHA1 86b9b95e94cf97eb2ea3cf0d3a77b0e6f7f8a909
SHA512 3c5ed7a0803b328db52201b61c5aaae01dadce724d68c5a0ac2a456e524940c68770bfcd92626e6c7ab836be7353f7165eba014404b449a90b294f3a9d11ffad
TLSH
T1FC7188B7D3D9816D891156F49B15AF2FCE2E0A18432C3C2AC8E8BF5BD3E2831D11565E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 66b6d6cbf625f02f1feb0ebf40ada4e51d6981f6e115bb58707627b6582c5ce1
MD5 a104e24f3ba71abfe3567324560fa954
SHA1 1f27f808fff10508181176c815c6f62ec7df0573
SHA512 2c9d641e0c5310fad9d58e54b5cf978890a2718deb8aadbe24ecf37dc7a35702b1bb65a761845131290e576f07013a7d48b05b19481de4db0824c0c072ce3591
SSDEEP 192:sxZcRZyM/jK1Ml8Mkq/fmsrXTBIdpq20HW6+WNrqf/YH33m+4IgrJ:sxZcPMq/fmsDTqyHbc/rH9
TLSH
T18E52E7166A3499778CDBD20AB942BF53D6F54462E2901E44AAFCCA0C04E6BED230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 974714bf9909c33df909d111800d8d9486c7e3db794ffa242372cf1e96a2e4a3
MD5 de2de101da6fdb7fd51567d1de5c10d1
SHA1 cf8e73c7175cf5145bff8d8b6abb9db8a64618cb
SHA512 e7a2e0d7de6c0da62f338f9efa0678567f50ef42e77bcb6069d6ea3e6b432a3be0150e7f53c8e675679258f12028339ec696173c45d604f707fccca71fcde8ca
SSDEEP 192:sxZcRZyM/jK1Ml8UQEkq/fmsLX/BIdpo20HW6+WNrqf/YHeGA+4Ig5YJ:sxZcPqfq/fmsj/qYHbc/XHG
TLSH
T18352D7166A349A77DCDBD20AB942BF53D6F54472E2941E44A9FCCB0C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 aa5dc460e14cb4cf62b08e2a9c7ae36da91e76c15f61bc71bc9e953c5ca070ed
MD5 7890507ef6c26a97025974f3c829b341
SHA1 042f3ebcbc55d9cd40508b2165f1a8684efaf464
SHA512 ac0c25f9bf7504daf770d6faf3d17a321b8555be87320445f4817ad5b65c0013c0b47ceffc67d103d2b83d1e4076946e3833454eeedef0837143c62e0ce97377
SSDEEP 768:Y7UZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RzroVZ01:Y7UZYTMWvg0Pou1ja7eLZmRAI1
TLSH
T100D20B2F280CCB7E4F844E5DEC266F963DD801CB9A984D5447EA894C03CB7EB512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 af74655e2ede0f8ef0c7e677f0854cdfea5ed49b9478c6bd63be15dfb2d10fbc
MD5 4cf08e66b5ff42740053a274b997659f
SHA1 6573cbb9db62ff1f49185c43befafba1a3818981
SHA512 8e8c7be2a11f3efcde5bc13b96b3f817873f16fae2a3e3bfc0967ec613f9eec0fc655a57bde49ad476ccc01b9272c2e916f3a4d918c352efa8a74fd09d5edd9a
TLSH
T1E6B0026941AE4E23C921977711C795CA3163BC202F0E9F17B799C864EEA7388B69B04D
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 107649c635241f2db8fadc0ee054ffecc87761326d04891b24642cb3c8644923
MD5 4fe2cbbba1c3c939165fccff80dc1520
SHA1 6863b425aec8d0183dd0fe8f786f55ebce03ebee
SHA512 450564f0e776a23b51ce93175743c9c3c89aa6748994276c26fa1a3691322d0e3ef94b117d136321176662fea9a86530c3293bbb4be1b95964adae7ff304fa33
SSDEEP 96:KA1eK2AozWKco+GjaKAQAx4fjxvPxWDGsA7xKI4ARxUJhe7PSiIgKNOuu:E0F9TbzA
TLSH
T162E1E21272BB02033C3D2918A39AD76A0F45B1D37858B46B3BA904B15E6BE345CFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe590277.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe590277.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 4b3ef8c60a27234ad61ccb87ce41e098dfab967fcd447f6484703b34c7b39ef7
MD5 c1aa3e250e8ee10346cc45d031068be2
SHA1 b92f86fee0413d22b80d40313a4f941a1648e6a3
SHA512 09cb809546d9c7c204394ecb67e60dad5a4951e0f1934e4429c356dcde5e2a22b81623e0a2e2c9a5f8d32db1e22c5aab9579680c9993ef894ce7df87110d1890
SSDEEP 384:1tNn/s3n9SfsN4UuR9BjBGJdzX5od+H8ykX5R3ScjmwBP:1j+9UjPBcJVON5R31jlP
TLSH
T13E928E37AD299C675ED2A196F44B37139FA850A396C43F80C5EC6F1C01CA7AC531BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 2b14b039bea37417a496cac88ebde1206b8e5be2c48558df49cade0a634f8484
MD5 e2860cbb26afadabe824ed0bc066b5ad
SHA1 6d8cc3e21d5e73cc488f8d80bbe6704ec6458cef
SHA512 54279ee7375a2322784e074b91779b15c16e1829e764d888131311ed519d309959f45d3d95daba92955b110ec4530d7fe139d7e9974034aceaca5fbdedcff94b
SSDEEP 384:hiF1tNn/s3n9SkzsN58TUNTUlIlNR9BjBGTdzX5od+H8ykXtR3ScjmwBP:IF1j+9LcwgXPBcTVONtR31jlP
TLSH
T1AEC22AF358D78876D99D5747B73E2E128EBCD0A3B5806A40B7985A0CCCC62BFC306915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 84ac96618ac60194b9dc952dd7d0f739dfbc3e6884b0b73747b80ae8ae1036b9
MD5 07d6b5ba94576eeb74472c1c52a909b3
SHA1 fb1d07d0753e757194ec7d9ca43fc468c693610a
SHA512 ab857fa70d441462d7a95fea43855bd67fa3870f4c81a047a2768f2cd02613e277475a0337b4bd720e88435f929d7e77718bab533be87a7531f7f54aade3e718
SSDEEP 192:yONa61VWQmiUy0tgGX5Obd+jTjzoryu/aRd3j+U6:yONa6WDgGX5od+H8y9RZ+U6
TLSH
T14402D935A8686CBB8EE2BE49B44737135FE42067EA942B80D6EC1B1C00D765C2346C77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 1c792bc4a17dbc897579daf756a2cf5945b2bf0038674082c6359a2c6d795574
MD5 528f94da5744941a086779fc3831d176
SHA1 d21107fa4937d49e8c4d026e7defc04b8a46a4c1
SHA512 8cca79f4fe29644b84530e57e497ed9fa8ed4f5dacb6fe2ebd61da31a58434eb722c4f728554401e057663c979a341a339565c95014fecebe885d24454498ced
SSDEEP 384:StNn/s3n9SfsN4UNR9BjBGJdzX5od+H8ykX5R3ScjmwBP:Sj+9UOPBcJVON5R31jlP
TLSH
T176928E37AD299C675ED2A19AF44B37139FA450A3D6C42F80C5EC6F1C01CA7AC531BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6166ee6b42b0d2eee7f41df0a48a5e9bf8a12439beb5e57c60776487d2161b81
MD5 03626313f630459a6851818fa503d105
SHA1 4f8159836d7f001a932b9cfee0f19b5cf1c360c1
SHA512 ae99b5c7e2f3c9a25b74ca5137cea9c764ee6ecdcec959d0957d0db33137bcd6235260fd2e65324251d05134955b7afe1edbd485580ad97014c667ee3689b3a2
SSDEEP 192:QONS61ZWQmiUycQtEZ2GX5Obd+jTjzorykX3JjJRNqiU6:QONS6q9C/GX5od+H8ykX7R3U6
TLSH
T171120A37B428AC6B5ED2B595B48B33135EA55167EB847F80D2EC2B2C01DF65C630AC62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 612983e0afcab80cdf6d7a1eb64143479a21f79d1f14da3f999c45b936ecac48
MD5 0b87e4c63013d040074e7bff5d4726d4
SHA1 edbfc6b1cfab467dbf2885003f0b9a335339b826
SHA512 5c0e2cfdebe636c803561933adf92e5c0ce3ed12bf1a3a2368d062da7814ac9a633de1c666625b8f6e98cbfb9a8a7269f243e67bfc5eee4a74560662b53067ba
TLSH
T1AD413B58B6FA1148B3B36F46ABF2A4AE447ABD372E46D09E10110E4F4963B41CD71B33
MD5 SHA1 SHA512 TLSH

Submit Download