hxxp://google[.]com

Analysis

user interaction
yes
max time kernel
141s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 12:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample260722-pfqlsaef69

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3180	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291962095956600"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{D0EBB268-54A0-467E-AA2A-28E8A755B316}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2740	msedge.exe
2740	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 896 wrote to memory of 1584	896	msedge.exe	84
PID 896 wrote to memory of 4112	896	msedge.exe	86
PID 896 wrote to memory of 3180	896	msedge.exe	87
PID 896 wrote to memory of 4112	896	msedge.exe	86
PID 896 wrote to memory of 4112	896	msedge.exe	86
PID 896 wrote to memory of 4324	896	msedge.exe	88
PID 896 wrote to memory of 4324	896	msedge.exe	88
PID 896 wrote to memory of 4160	896	msedge.exe	89
PID 896 wrote to memory of 4160	896	msedge.exe	89
PID 896 wrote to memory of 4160	896	msedge.exe	89
PID 896 wrote to memory of 4164	896	msedge.exe	90
PID 896 wrote to memory of 4164	896	msedge.exe	90
PID 896 wrote to memory of 4164	896	msedge.exe	90
PID 896 wrote to memory of 1784	896	msedge.exe	91
PID 896 wrote to memory of 1784	896	msedge.exe	91
PID 896 wrote to memory of 1784	896	msedge.exe	91
PID 896 wrote to memory of 2892	896	msedge.exe	92
PID 896 wrote to memory of 2892	896	msedge.exe	92
PID 896 wrote to memory of 2892	896	msedge.exe	92
PID 896 wrote to memory of 980	896	msedge.exe	95
PID 896 wrote to memory of 980	896	msedge.exe	95
PID 896 wrote to memory of 980	896	msedge.exe	95
PID 896 wrote to memory of 3704	896	msedge.exe	97
PID 896 wrote to memory of 3304	896	msedge.exe	98
PID 896 wrote to memory of 3704	896	msedge.exe	97
PID 896 wrote to memory of 3304	896	msedge.exe	98
PID 896 wrote to memory of 4172	896	msedge.exe	101
PID 896 wrote to memory of 724	896	msedge.exe	104
PID 896 wrote to memory of 4120	896	msedge.exe	105
PID 896 wrote to memory of 116	896	msedge.exe	106
PID 896 wrote to memory of 1316	896	msedge.exe	107
PID 896 wrote to memory of 1316	896	msedge.exe	107
PID 896 wrote to memory of 2444	896	msedge.exe	109
PID 896 wrote to memory of 2444	896	msedge.exe	109
PID 896 wrote to memory of 2444	896	msedge.exe	109
PID 896 wrote to memory of 2740	896	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b8,0x7ff8bba5c188,0x7ff8bba5c194,0x7ff8bba5c1a0
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,499726676983244054,216733285684288332,262144 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=2880 /prefetch:2
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,3007167000740476100,15574721552434511518,524288 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,7349170623357044833,16364319964355322230,524288 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=3004 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,43060625580992125,8223781940351246838,2097152 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,12026045591987515990,17247481416696502576,2097152 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4112,i,1346613105729026825,5815815908768723453,2097152 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4136,i,8459411735062805132,265872044500244349,2097152 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:2
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4980,i,17890905294016886704,4279226397919425266,2097152 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3544,i,10806250635166926423,8890395116924051225,524288 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3408,i,2305115146539942737,7278936433411251370,524288 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,3038179944807377628,16366560504904132139,524288 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,3038179944807377628,16366560504904132139,524288 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,2506746683718879621,6993157955499387071,524288 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
  2⤵
  PID:724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,1587664772511690076,2537903486138290494,524288 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,8875161414008303511,13332260439123558153,524288 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,8345744322484593169,9324734434636783323,524288 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=4432,i,2434601649875705858,17003985810743645459,2097152 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=712,i,1977815247712705287,9261806811804985299,262144 --field-trial-handle=2884,i,6368425167610869230,17826069326635167337,262144 --variations-seed-version --mojo-platform-channel-handle=716 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2740

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1452

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 8ebaad4b85987dc36ffd98fdb1d7cc176de2b840219c8561e01224983f02c8f2
MD5 da4d5635ab90edcb0cf313e422ef958b
SHA1 664bc50e38375cf67254f15630206bb3f2043c8d
SHA512 bad425401dc2e0429fe47c6d040fd3bb7a51163792fd5fcadb55ed0c847a08337483b6d268ec58dd4bd6f1c043cbf0008c1d904663cc35b4cd9d49d7067b9ed8
TLSH
T10071616DCD521B51EBB01332EDD20A9275B18CE4AA1F5F6110BC5BFC2911B29FD3B806
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 813c2560f3b4552b6fc9f889bbc91d91c6f64265e9496a7a47f6558c8129fa0a
MD5 68921b7b39922a06a2d0cf7876602fb7
SHA1 0d8d32e4b2387aa97a1a35d76e395894f30a685c
SHA512 51d201ecee9cd32ea60f5c7ecac0a060b3289b9bb47d10301da30e49d8908b04ceb1eaf4e949997784fca91c8a9f31f334aa9c4c1e140bf26a55fbd9baf746d5
SSDEEP 96:kNLUo7QNdle4z8H0l2MS5PltXjRli761frdUSKjU6l4c7Z5yma74/SHGMLy1glgT:OUoolxfl+l3liIOlgekYltlR8xlQ
TLSH
T17C81326DCD524B90DBB00332ECD109A279754CD4FA0F4E6920B8AAFC2945774FD7AC06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 643c64b55837e6d32a672d29d5b10070f7980ae2a146e3fa02ec1e64d605883f
MD5 eabe22a3a09252fcf99c0f94ed951699
SHA1 2e247d46dfa06349eacc022a072615932a624ceb
SHA512 2d355d9bc377d40e9c851001c6b947e30c9be02485dce6273150c225fb4f38f09eb9b376d8a0dd5e073157df231a742fdd69c917f251b57f984ac533af3b11a2
SSDEEP 96:DVNuOLjVSEWwdGe40WzW6MFTV3kmwvIIpE:DDdLjMEWwdf4vK6MFTV3kmiIIpE
TLSH
T11EB17AB7C3D9C52D891126F4AB15AF1FCE1D0A1842283C26C8D9BF6B93E2871E21565E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 e19f1e8027734d0295ae124bc44c1f5a9908d29594489f620da9ec37c84c0e52
MD5 e4143d8a4c3bda78d089d2592e25256f
SHA1 f88ff146db62734402c998a8a1f10ac2f2b1be86
SHA512 ac343d5d339d35ceaeacd70904160cfc3ad509be1bfbd9ec6cbbd192edffcb48ed654447c32a86f83495f8312c013fd40a7541736781f341c187abc52f14ea77
SSDEEP 192:DDdLjMEWwdsZuJVJtri3K6MBV3k3aP5GaIUI/+vJfPmNPq3x:DDdLjMEWwdsZWVJtri3K6MBV3k3axGaJ
TLSH
T11FE19EF7C3D8C52D891126F4AB15AF1FCE1E0A18422C3D2688D9BF57D3E2871E21565E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 8a20e4d40964d382cf9dd6889c6ff4b9165bc4d7ffd4c7c2006713b76ed0e081
MD5 e91b25196f0081ebffd0b383c47852ed
SHA1 51d513bbce1c5b0c92cd3ec912be805a88efc3be
SHA512 09381f5b36d608e310472cf900f4c8dd497c8db2ec8cf7bae8123478e5287f99e8e4640f27da6dc16dbf7be009a7e8c3043927a59f1a7d7d5c0e2241298950bd
SSDEEP 192:sxZqRIyM/jK1Ml8Mkq/flsoUqLIdpq6CHW6+WNrGj/YHDHGXIgrJ:sxZqOMq/flsTqUcHb4/f9
TLSH
T1E852E8166A349977CCDBD309BA55BF53D6F54472E2900E44A9FCCA0C04E6AED230782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a6b4edb08dfeea20a2874aa13e418de56b43f34bbdcff4bfdea0106fe336c81b
MD5 a66b72e932b35fab9ceaa2d5e49846a1
SHA1 3e43ea5ef1db4c49f168aa205aae130eae09c7c2
SHA512 5c947ade980d05e6f9ebbf54ed7e18e77ab2c8e9cbf3b35521f383b6dbd12ca09bdfa0a9b04344c679a7503081e0a0eec95bc4a62440df3de20fb65b2f7ddec1
SSDEEP 192:sxZqRIyM/jK1Ml8UQmkq/flsTUaSIdpoWUHW6+WNrWcXYHw2HXIg5TJ:sxZqOqNq/flsIabkHbJXCT
TLSH
T11E52C716AA349977DCDBD209B645BF53D6F54472E2901E44AAFCCA0C04E7AED230782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 5b6533cdc5ad55f9586f034672d6811131c03ee85c5125de6779bc5f0bda194b
MD5 2e54c3e29f5f08c8f1c0b19a4e151ccf
SHA1 7a2574e6665a89b3afe36be5356599a6783767d1
SHA512 d1d5103db9b216b376d3aee860b66222e55abfe12a0f26356222ef48365ce31074977de2ed21a3c9a2e99efff24e822f05d038f80cf1f3bc67905c63fa29063b
SSDEEP 768:W1UZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RlroVY0f:W1UZYTMWvg0Pou1ja7eLZmRedf
TLSH
T175D20B2F280CCB7E4F844E5DEC2A6F963DD801CB9A584D5447EA894C02C77EB512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de90a414f5482a23_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\de90a414f5482a23_0
Size 194KB
SHA256 857891133cfb505ab5bc8274cdab7fe289cce375ca58365f4ddf3258939276f0
MD5 8f18d48f6b4d5545ffbb547be0b5c1a3
SHA1 757bf21b7ccbaa4534198594041e1e872471646c
SHA512 40627529d75ddeb6a5f0d990c0cc2f824497df87b57d2e25ecf4a43cb6793abf5d17a91ebb6cc02ff770149844af0a2bd12bc11df1249c38f8b28db65e47a410
SSDEEP 3072:xegF1cJu9zByRIZa8vj0QbJI1lXrZ1lThh:xegF1cc9zByRIZa8HlI93h
TLSH
T194146B316300F43BA9139E61A27F7F4E3C35A16BDD0686FCA1E4E870AEE6CB60515758
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 cd967a18d447045cebd646402b6c20be7e87ec83f581fdd2c985dd5eab57dcd7
MD5 8667ad31fdb77aa2f1baa98aa3b80ba2
SHA1 65356100f2a3c8c0a800241777f7efdf69ec94e3
SHA512 db37ee21dfc612d26dc4bb9d3bbe14bdab1848783508d9d126906435eb8136ac1dcda557250a3d0f1c113fdabc0c938ce6c645ac8119ecc771251ec2f97f7546
TLSH
T15FB01204C1406D23E90072F727CE002422001D20530547473CE641F4DD2754C7125C41
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 e435aeb42c52700668ead629610511524cf3975165ad924b8e27b7b520ab0a9e
MD5 474761a0ce83e13604029477aa1e3e93
SHA1 87a587857109795c4707916fee9ad4a236c24243
SHA512 ef7aab399d8f0016747a1051fd099bfe9ad482803cc708c0c0e54248e38dd2c2c80a75222f9e9d60281f56da771d83b210dacaf88767b5336d7cc82f819637f8
SSDEEP 96:KA1eK2AseUKXqlmd+KuARvmK0UyiQAKliZ:EWE1r9n2
TLSH
T1C5D1D51671BA13113C7D2A0C86B59B668E42B563702DA52B7FED00B54E26E209FFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

214561b9-8754-4c33-b94c-0eb0bdec6091.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\214561b9-8754-4c33-b94c-0eb0bdec6091.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 06c22be30ec64a10fdfeb794e840bbd60ef2909aaf6f3febc88a34a2893ba2d1
MD5 4d34d1ade7f0399eb1692dbdb193174c
SHA1 e5bc8c5d641fd929767784cf36719bd8798822ad
SHA512 45dfcf745685bcaaf26e43e91c489a1ee613275895382e0c2f09ea0164c8c31fdb6419027ad1c039bbcfc1b1ae3bda48485155f406b7131374d8915c7630c9e4
SSDEEP 384:GiF1tNn/s3n9SgzsNo8TUNTUlIldiKL6czX5od+2d6/Id+2CLH5Scjmwql:tF1j+9P5wgkUOv3lCLH51jOl
TLSH
T116C21BF248D79836D9AE5747B77E2E024EBCC0A3F5806A80F7985A0CCC961BFC306915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 af14665f9ed741b10bf6f697a568918fe01d8eeaf3ccd8f6cb62d8440b1ebbc4
MD5 594eda10963e73d311071a1533c4679d
SHA1 83a9387dda74495f82beaa4416d6b13b2e7f1b39
SHA512 34c244158e5ec33cacfdc9ecfc40e6362eb5bbc1950a4b3fadc3a60126cafa715f03cf0fd777cd7428c046c04cc050537876f567209a88adeaccece27b1687b9
SSDEEP 192:yONI61VWQmiUyyTgGX5Obd+j1+FdgX/t/admh3PXU6:yONI6WrgGX5od+2d6/waXU6
TLSH
T14B02B73568687CBB8EF2BD49F48777135FA42067EA952B84DAEC1B1C009769C2346837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e9c4e750197f3595fe31e2b6277868279bdfc56cab3467d3efa864fe14e6bb63
MD5 87f3a7ec1c509cff333a81dae77c362f
SHA1 a83cbddb56d960453f2f727ab7299d4e1a8de75f
SHA512 25fce45e452647ef841632535658ade4ab2a5cc5bb300e9fb943b1bdcd163ea2ec0c5d8cfb1065828f36100ac7d34bf29e18f677ccad70cb6b374fe8fa5b466b
SSDEEP 192:0ONl761hWQmiUyFTMGX5Obd+j1+FdgX/oxFd+2CL3jJdmaQqFU6:0ONx62iMGX5od+2d6/Id+2CLV5U6
TLSH
T1651219326468AC679EE2B545F48736134FA45167EF897FC0D5EC2B1C01EB6AC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 3cc754ecb704c08033adc46ac0bef6dec5e4ad677a949dccefcd4d6fe48aa5f3
MD5 12a8a6f631a051fefb5524c007b57a21
SHA1 8d4590902ce081977644123e82ecba588ef91929
SHA512 65f8eccc6fd77ca69a60383681686668c59f0fcc4011faa21db3792cf609913c4912ea58eef3766a0c624d53dd34984a24fa9f937da6ea9c8b0c0716c62ac098
SSDEEP 384:ytNn/s3n9SfsN4qiKLyczX5od+2d6/Id+2CLH5Scjmwql:yj+9UvUOv3lCLH51jOl
TLSH
T10A927D366869AC669AE2E546F44B36138FB851B3CBC42F84C9EC6F0C01D66BC1317D39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 dbb230524982dc06863eeefafc7104a90620c047d27e462c1e981eb16155a374
MD5 cbba5be4803531d29550214f85690073
SHA1 4e3cd64d1ff539daaf20c3308fe53311185d14a5
SHA512 e85a776f98d08034716a5750b2fddaa81eddbadda7024e99b45f13d657aec839be1072a751c4e8a0b542d0b9d3dd0128242ad29e814ba0bfc116e8761dbea7d5
SSDEEP 384:GiFKtNn/s3n9Sg6sNL8TUNTUlIlhiKq6czX5od+2d6/Id+2CLT5Scjmwql:tFKj+9OgwgRUOv3lCLT51jOl
TLSH
T176C21BF258D79836D9AE9747B77E2E024EBCC0A3F5805A80F7985A0CCD961BFC306915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 9aebffb90d53267db7cb15dbdaabd2ace46fa8238c6efc74b7c4af4a74811af9
MD5 b63ff867308cabd5cc94b71cea66627f
SHA1 195b338a81217fef1e7a8fbedb4ab3afa390b311
SHA512 b7a75856e517dfbae0f870c28d002a3f128d5f75990cfbde601247b4e1c3f418da07b69c6d4474a3a74381ba8a004cf52ae12ff90d2b5d428628e459d5adda5e
SSDEEP 384:stNn/s3n9SfsN4diKLyczX5od+2d6/Id+2CLH5Scjmwql:sj+9UyUOv3lCLH51jOl
TLSH
T1DD927D366869AC669AE2E546F44B36138FB851B3CBC52F84C9EC6F0C01D66BC1317D39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4e348d80-3363-4e00-a705-bc107cbfec84.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4e348d80-3363-4e00-a705-bc107cbfec84.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ad1f9cefa7d206f43e9a554fa0a189bf5ea9006066b81988769c8a62d482d34b
MD5 967d1d1e5bc88af314387f0b64db72a5
SHA1 14f08edc02b5a120445476202cab0304bf8655b2
SHA512 efa1c510035bef14326e456abcf904654093c5a307e365819747ad77808ba0525c96828243d44837cdcb72f86e5bb1bd4a99ba43a6242bf1cc5d3e5344df1f43
TLSH
T1EB41E658A6E91148B3B76F566BF6A86E887EBC362E46C15E10110E4F0626A00CCB1737
MD5 SHA1 SHA512 TLSH

Submit Download