hxxp://www[.]google[.]com

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 06:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.google.com
Sample260905-hlnwtawsd1

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1988	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134330645846098845"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{9CEC7AE7-C126-42A6-925B-04F07A7D49E0}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4932	msedge.exe
4932	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 556 wrote to memory of 1552	556	msedge.exe	85
PID 556 wrote to memory of 1988	556	msedge.exe	86
PID 556 wrote to memory of 5068	556	msedge.exe	87
PID 556 wrote to memory of 5068	556	msedge.exe	87
PID 556 wrote to memory of 5068	556	msedge.exe	87
PID 556 wrote to memory of 2352	556	msedge.exe	89
PID 556 wrote to memory of 2352	556	msedge.exe	89
PID 556 wrote to memory of 2140	556	msedge.exe	90
PID 556 wrote to memory of 2140	556	msedge.exe	90
PID 556 wrote to memory of 2140	556	msedge.exe	90
PID 556 wrote to memory of 4472	556	msedge.exe	91
PID 556 wrote to memory of 4472	556	msedge.exe	91
PID 556 wrote to memory of 4472	556	msedge.exe	91
PID 556 wrote to memory of 1188	556	msedge.exe	92
PID 556 wrote to memory of 1188	556	msedge.exe	92
PID 556 wrote to memory of 1188	556	msedge.exe	92
PID 556 wrote to memory of 3284	556	msedge.exe	93
PID 556 wrote to memory of 3284	556	msedge.exe	93
PID 556 wrote to memory of 3284	556	msedge.exe	93
PID 556 wrote to memory of 4624	556	msedge.exe	96
PID 556 wrote to memory of 4624	556	msedge.exe	96
PID 556 wrote to memory of 4624	556	msedge.exe	96
PID 556 wrote to memory of 2548	556	msedge.exe	99
PID 556 wrote to memory of 2548	556	msedge.exe	99
PID 556 wrote to memory of 1536	556	msedge.exe	98
PID 556 wrote to memory of 1536	556	msedge.exe	98
PID 556 wrote to memory of 4008	556	msedge.exe	101
PID 556 wrote to memory of 220	556	msedge.exe	110
PID 556 wrote to memory of 4292	556	msedge.exe	111
PID 556 wrote to memory of 1876	556	msedge.exe	112
PID 556 wrote to memory of 4232	556	msedge.exe	114
PID 556 wrote to memory of 4232	556	msedge.exe	114
PID 556 wrote to memory of 1200	556	msedge.exe	115
PID 556 wrote to memory of 1200	556	msedge.exe	115
PID 556 wrote to memory of 4932	556	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.google.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffcf9edc188,0x7ffcf9edc194,0x7ffcf9edc1a0
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,11884150094601405134,9180503089813841415,524288 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,14013362663443542030,11951748993356651547,262144 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2384,i,6249615302080655933,7651091643592895748,524288 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:8
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,7570214625069338213,3596732636756344590,2097152 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,10390437014689961719,3660392831217112739,2097152 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,1075385511475768525,9131267934330953321,2097152 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,15140797813788247495,1775570591392964930,2097152 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:2
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3484,i,3646065834132153577,12975413148503075178,2097152 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,12758822071829544972,247151020252859782,524288 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,17482661322473195307,16308749557053780047,524288 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,17115821242590255384,14913403181355991015,524288 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,17115821242590255384,14913403181355991015,524288 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,15342463608708781001,17013882568609712120,524288 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:8
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4940,i,8013205994892314248,11021224538150536942,524288 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4776,i,6285436174332015421,2111856409005937010,524288 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:8
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2628,i,3543253053887719667,122535550101020557,524288 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:8
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3908,i,14365853320159863786,18027928163027869268,524288 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6268,i,15059160476430601776,10063880573185801371,262144 --field-trial-handle=2320,i,16687296460958136078,191457168828814898,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4932

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1064

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 edcc8ba061856d3ff4167fddab141c3a57d85f9251e54e9dc95d515fcb56235b
MD5 0793ce1580b79e4299d8b0e010473beb
SHA1 055430ef6e1f80b14d71b6f3ee5f257422fab6ed
SHA512 6c025ba3506afd15b5b50c119a4529297bdad05a25c7ecf5ac10dc697a011556e0e3d9c7511e41365b02f1f3887ce9003c1f67626f1b99f631d8f0cc06977546
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P76:fwUQC5VwBIiElEd2K57P76
TLSH
T12EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 2bc8e4a9822d6fcf874e3c1f8e36750b6ebbad902d0b7ddc2e6f9950e8cbfab2
MD5 57129285f18098c3171d9af4aebe78cb
SHA1 3c738de088f9ccd929a237748a2798188d09b5d9
SHA512 4bccc3e81065c76c315b0d291c7ffd168465e5ec4022283ed2bb5e89dd0395a63a0d541ca3a353b09657e90c4452101dd2ae102fcb2c0e27af5666dd64743928
SSDEEP 96:ABQOWkuo4nOxZbT5zPWj1hyT4QQ/Z0J4XMsXk99:ABQOWkuo4OxZXhPWjjyTKKJ4csXS
TLSH
T1D281D93311F3C392DBD2023063D1A07DF9B189EAFD3BDEA5599046366D7874A9704B28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58ad62.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ad62.TMP
Size 3KB
SHA256 829765887cb52c2faa5d3e3883522524973a9b0e0df42802ca52e8861214f2ad
MD5 2960356d5ac652e5a01c535e021af84e
SHA1 b81f77964a46d46d5b15f0f61d4cdb18ed056a56
SHA512 efbfd2e2142d9c0341768e8849a96019eccf72bf7f2f7305a8affcef888f9109ce15d15187a757e6c25fa949d0fc83bd170973ed61e437dee9335614fc60bb0d
TLSH
T19E81933311F3C3A2D7D1423062D2607DF9B589EAFD3BDEA6515009766E38389A715F28
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 d5d6937f0b8dbc3428432f1ffb0a06999a419bb6fb381c05cbb2eeb1cbf35de4
MD5 63a379d935c4de2209a834be5a383a08
SHA1 282586c99ccf59209125158a925e31a5b928d9fc
SHA512 1e8f0173567d3ec06089377eec912ce50dd44ebf9b261d3a96499d0f9567f45261ede880cb77cb23771583e3dabd8be5549bdb1dbdb8589a4becbb53080f1f96
TLSH
T15361A9F3C7D9926DC90116F49B25AF1ECE2D0A24432D3C2AC8D8BE5BA3E2471D11569E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

fb6199fe-b420-4f9e-9467-aab99520b2b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fb6199fe-b420-4f9e-9467-aab99520b2b4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6770e02cd069447a6ebccb373781feab2344cd3a2ed26aafd84eb10df77bf2cc
MD5 8e5721956a863c612477604a3f037149
SHA1 cbe052961b3f23846d5aeb1afc4591299b7e9081
SHA512 647abdd4ea8fb3c091c24cef6aa8941c900042d277b7018903b23541f394e6df364f12064c376255734db243dd648726b42e234ab4132ad90cac579fc6f0dec5
SSDEEP 192:sxZQRiyM/jK1Ml8MkS/fyXssG1Idpq4EHW6+WNrNC/YIpfQYLIgrJ:sxZQgMS/fUssGGMHbc/vD9
TLSH
T105520B127A34697BCCDBD209F955BF53D6F9047291901E44AAFCCA1C09EAAED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 afc08e830d83683fbae9efe2f7282b910f95fed16965e68093a876a68abadd8b
MD5 3652561f347a6563382f103b0ed2771a
SHA1 965c8f921adea52868d94bc1760bfc7944ed32dd
SHA512 c6e11e14b5216b790764c533ca6796f30face19d1cde22ac85221a46286bc1f20d132932ab71a6ee1af44ecd350c82948341bf0d4807bfa997b1e6a830af300b
SSDEEP 192:sxZQRiyM/jK1Ml8UQUkS/fyXsTS1Idpo4EHW6+WNrNC/YIgyaYLIg5FJ:sxZQgqvS/fUsTSGWHbc/RDB
TLSH
T1DD520A126A34697BDCDBD209F951BF53D6F9047291901E44AAFCCE1C09EBAED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 507d7ae2cfa61059e61f9060f4292f61f5d0a8677281295441f69f384cbdd3c8
MD5 d4b87c10b70597d5e204708b71343885
SHA1 e18e494763b6d44e462031c530b55768fe00b5aa
SHA512 5677dfc9ba8f4bed0d3a16bd9d3f5dfccc790b387588cf2388ab923f77c84d8d76875866574de1eee39b9ba0ac136fdcf8ea47ac427927f143a4ecc605a89473
SSDEEP 768:A6sqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR92ro3XMm:A6sqxXlWvJD6Tu1ja54LAs9N3/
TLSH
T14FD21C3B694CCB7E4F840E6DEC266FD76ED801CB66988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 9ba775c7ac7224cad4319a0d243df80762ecb8fc746c5031191be61b9a326c10
MD5 3c5c27b476e09e7dfae13a633689e5cf
SHA1 52de9ec263fe333ea49771eb0ced5ddc14a8d017
SHA512 a69086a349c940f02afb9adeb4bdf376a2461c6a094c1ed64c53bd8125773a507f8e7f83b38f9e05a6c1f2dc004409d47a391ee72e34505bbc5853aed661e0a3
TLSH
T1D6A0025902D04C41CE41037258C50158AA7268316A678B134EE0F1858C932604502538
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 5f1dfeb2f5d0eb78451e7c02a2f7e4f0def72eff78bb93b5adf5d46c87063698
MD5 fd7e2c6b479682a571e342654c2431f9
SHA1 40cb2acf8047638af7a682682ad617c601def157
SHA512 0b9760408b3f6d1e112ee3c3470226f786eaf305ceab334bbda877bafca038820f73aff18a8f81fdfa4eebb4b7f61b511fd0cdc0a98c648dd86827961fb46ce4
SSDEEP 96:KYbaKYIKOj+Kg8KmFyKecx9OKe4KuBuKK4G:ExJNRfxV/
TLSH
T1BFE1E502723B020139BD295CA2DAAA379E8175633418E4FF7BB950A24D56F214DFDDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d7d700ddc1f83dfa963cc0e5c57327296309aaa321a422ae91f5d355e7121159
MD5 68f8bbe2ff9f6b7bcccac9888ae71b3d
SHA1 db8901bca2dd6d1f290d29bb66771fe3605af7eb
SHA512 8213f719178bbe4fe368582efcb14734985b88913844a6769e1026ab7e8f92db8d0ce5cddd1386ad4ecb30c0bd1b809a0ac5d1303538e9a029b2dcdb8ac336de
SSDEEP 384:SZcIhsNRQnbonhVRNZO5s9/cp7O6R2Feohlxo2:ghkHHZOG9/cp7TRWZ
TLSH
T1F9827F726C345C7B6EF7A045F84736034FF8D067A68A6E80D4DC6F1E06DE998130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 207efa9bf7bc3187c2760836de4a8c0ca47d597be6408c725a3a9769ef3d3212
MD5 ea9be913749415c033dc7dd7a440b322
SHA1 cbea8cfc571c45767f7226f6c62a7017cb7f151d
SHA512 ac4e5017d7c00786f10a46a4f24ee744e41d2074e02d883357b8d4f5e8c36339eb810af3f73967dab826d14f2d4385c757fce1a8fd7e6811410a78b138c3fb14
SSDEEP 384:BFiZcIpsNj8TUNTUlIlxnbo1hVRNZO5s96cp7O6R2Feohlxo2:BFQpmwgoHHZOG96cp7TRWZ
TLSH
T19BC22AF218E7483AE9AE5747A77E2D038EBCC067B5456940B3CC5A1DCD9A5BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6302852f4dc4fcb15072da22b69274bc35f843db2185bf2f303daffa77cf5c91
MD5 f792a7537f8826ff65c7e0807091d194
SHA1 5e32dc8b6b67dd3c43d0531696bc1818dd3181b2
SHA512 75e9d1591b4530697b21979bec564b6d28fd3cddbbdc23a726f4dcab25d0b3d431a051a44fe6abae23a447b8be399188c072150b60d714a979170cffb3bc1382
SSDEEP 96:mqONk0QsjpfHkRQ9865ih/cIPURHl8h4otop5uTDsBsPvvk40KQN0kjOmXdwz1q9:tONc6JkRtQmiUyMgW+RNZOmCMh3uRkU6
TLSH
T1BA02E835BD382CBB9EF26D49B98B27175FA4206BB9952F84DAD81F0C01D765C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 82b0dd44d2fba58311e19166b5436f23418742929b57a086b739f454c7f0e4eb
MD5 184a9d21473b1279c2d01f04a62f25b3
SHA1 516505362c796a92016c25af456058a9b489003f
SHA512 bdd442ed8dea4e91983e8135cb37332dce1e371f9a96584edf6212d1dcc8c3106162a0ad848db8b8dbfdd96fd87a08812339958154c843974e56ecde0a387ac6
SSDEEP 384:3ZcIhsNRxnbonhVRNZO5s9/cp7O6R2Feohlxo2:/hNHHZOG9/cp7TRWZ
TLSH
T144827F726C345C7B6DF7A045F94736034FF8D06BA6896E80D5DCAF1E06DE998130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 be05a0cd37df9eede8159d13a2f8d7484995075e8620a4923d4da5461e21f6a4
MD5 f906892d0708fd3d13a8debe47b0083e
SHA1 f8968e63649489259cd0572419001a4106dc5b2b
SHA512 515158ea428d362715b6f8fb4efc4249468a5bfa8d0def87877dc94dee5842c643f63f8f9e8af8ed922f541308c2dab993ebd7b9742794427ba24dcbe50a975e
SSDEEP 192:rONE6JkREQmiUyggT+RNZOmCJO9+9VcAq23ZU6:rONE6UU+T+RNZO5s9jcpU6
TLSH
T1F7120A3278386C7B5EE26845F48736034EA5512BEA8A7F80D5DC2F1C06DFA9C130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d086df25-157e-46ea-9c35-248978cbedb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d086df25-157e-46ea-9c35-248978cbedb1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1578d1a7cbac0ca4d6fbcb3aa41dd18ec47659401342fae75e8242c541477fba
MD5 3cb0a5e32df314a40376df34c9527e9e
SHA1 f192ab20a5a92e54918a618a5e90d8697b7ae778
SHA512 743ec5309fdbb02767578648d4246d7769f3ab215e183d3e05f829f4ebd5a6e35cf3758467325203ba9f736835f3618c4e82b1b48e77082ff9de782dd1c74e15
TLSH
T17541FC58B6FD1148B3B77F16ABF6A86D447FB9772F06C49D00110E4F0A62A40D962737
MD5 SHA1 SHA512 TLSH

Submit Download