hxxp://[hxxps://sites[.]google[.]com/view/9876rtdygfhjti76tydfufioe09490/home](hxxps://www[.]google[.]com/search?q=hxxps://sites[.]google[.]com/view/9876rtdygfhjti76tydfufioe09490/home)

Analysis

user interaction
yes
max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/09/2026, 15:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://[https://sites.google.com/view/9876rtdygfhjti76tydfufioe09490/home](https://www.google.com/search?q=https://sites.google.com/view/9876rtdygfhjti76tydfufioe09490/home)
Sample260908-tbjd5aej71

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4040	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333563887051377"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{BB8A29F3-6AC7-4E6D-8BD7-70CB97550FD9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2364	msedge.exe
2364	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 412 wrote to memory of 3464	412	msedge.exe	86
PID 412 wrote to memory of 4040	412	msedge.exe	87
PID 412 wrote to memory of 4000	412	msedge.exe	88
PID 412 wrote to memory of 4000	412	msedge.exe	88
PID 412 wrote to memory of 4000	412	msedge.exe	88
PID 412 wrote to memory of 1404	412	msedge.exe	89
PID 412 wrote to memory of 1404	412	msedge.exe	89
PID 412 wrote to memory of 2772	412	msedge.exe	90
PID 412 wrote to memory of 2772	412	msedge.exe	90
PID 412 wrote to memory of 2772	412	msedge.exe	90
PID 412 wrote to memory of 2744	412	msedge.exe	91
PID 412 wrote to memory of 2744	412	msedge.exe	91
PID 412 wrote to memory of 2744	412	msedge.exe	91
PID 412 wrote to memory of 4244	412	msedge.exe	93
PID 412 wrote to memory of 4368	412	msedge.exe	94
PID 412 wrote to memory of 4244	412	msedge.exe	93
PID 412 wrote to memory of 4244	412	msedge.exe	93
PID 412 wrote to memory of 4368	412	msedge.exe	94
PID 412 wrote to memory of 4368	412	msedge.exe	94
PID 412 wrote to memory of 2228	412	msedge.exe	98
PID 412 wrote to memory of 4652	412	msedge.exe	99
PID 412 wrote to memory of 2228	412	msedge.exe	98
PID 412 wrote to memory of 4652	412	msedge.exe	99
PID 412 wrote to memory of 3112	412	msedge.exe	101
PID 412 wrote to memory of 2796	412	msedge.exe	110
PID 412 wrote to memory of 8	412	msedge.exe	111
PID 412 wrote to memory of 5020	412	msedge.exe	112
PID 412 wrote to memory of 3168	412	msedge.exe	118
PID 412 wrote to memory of 3168	412	msedge.exe	118
PID 412 wrote to memory of 2364	412	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://[https://sites.google.com/view/9876rtdygfhjti76tydfufioe09490/home](https://www.google.com/search?q=https://sites.google.com/view/9876rtdygfhjti76tydfufioe09490/home)
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff6b8ec188,0x7fff6b8ec194,0x7fff6b8ec1a0
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,16270732764577378776,14987404096706361207,524288 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,8718224845120849121,16455695617316220241,262144 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,15299995333587126054,3837044757247311776,524288 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:8
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,8426888980448056138,16305875056618100463,2097152 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,16029755028714835491,333385671500122631,2097152 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,1173894839782549787,18299891239094997629,2097152 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,16007406214151990285,15725758120834294618,2097152 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,5964855778275404812,10148642584290962047,524288 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,10037209065784008143,5459326095129886757,524288 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,4874125891046253082,12568517956213136186,524288 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,4874125891046253082,12568517956213136186,524288 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3480,i,15095600634232978554,4545195521998954606,524288 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,873457017498605036,2850996414760316337,524288 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,13553482238221857185,1805553815307089087,524288 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3012,i,15199970141357009374,2498841697877039699,524288 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6200,i,13400446482733959375,17407708032050498835,262144 --field-trial-handle=2412,i,3199733311112733567,8712436443502096640,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2364

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 ae53e618032c667892ed21a0d220c217b0a8d7911b3dee86b08e6a49f9b5961f
MD5 f9f19468189111f8249d81621e4a102d
SHA1 fa68cce6f26f82bf96fb875ff427a4ef9e9673b2
SHA512 d53cb2328cd19d1ba8512d1ff3633af39c02eed400e5983853154f5b66c3341ed3d1103439b7c80316b2363de07a7530588d76f9e262920e057331d68d3f3bb7
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7h:fwUQC5VwBIiElEd2K57P7h
TLSH
T18DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 df16d3b283af89a7d2c313cd5b8c284195472650c44a52405d6d1e33a3029de7
MD5 e5914c935b6630c2e1f69d822ef9b3ba
SHA1 15edea4c14619bd8108bd47b88b2abe920eb6cf2
SHA512 bf4367ef630b7217936aaebba7500ab68bb91349b682c75242a227277888af35ff7878b0e6886db89fa529863714fb3a6882a1bfcfdadd902b873b5614312385
SSDEEP 48:kCpR0nCg8XSMxIQU56r94Mt9bCulHCLqEdOWrapftXMC1Pl5eo6ZLWBTX0VMeWd:tGnCxXSwxymCuMqxttXMCVWL1wkVMeG
TLSH
T13FC186B84AD249E8FF5B0333E781C84A362085E7F42E1EEB1694D43C1E673E9815B126
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58f6de.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f6de.TMP
Size 3KB
SHA256 bd3bb935dc2d2e88b2a53e766bf9cbeb80baefaaad5ef567b477b0770078641e
MD5 b40ea8556634dc973b168ca79e1fdea4
SHA1 fa55532b5bcc2e4af59bbbd81ff48ba050e7d3de
SHA512 64aceb13d7da7c7db1158ba1cd1f3c3ced127f443fedbc32d4da1eb545e9ddf13f90a30b93e7e7960635f17a71ca1d4d46f6d3b2987dc26ccab340cab7b5a803
TLSH
T1217192350A534268E7570332EBC2C41A727186EAFA3F5DED24D0587C4D0B3F1826A563
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e95b6a2d4b47199176ba08758d913e1f17da6566d2bc50098c4596e16fb3604b
MD5 5ef3bcdaacbbb576dc498012035ad7e4
SHA1 d8b19962aa9871d6056ee61d90e82d30b7843604
SHA512 a9f7d9d74d3e1b9d5b2fe2056572679fa2a715c63232f5af1be90d30588162f91ee8a81d84c457141ff5229aff806a13f6083164c5892630691a8a33d3f0f532
TLSH
T1BF51ABF2C3E6426DDA1196F0AE146F1BCE1D0553436C3D4A85E4AF4B93B28A1E112B8F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 24765c90d093f39e8056cde87d0e1d4c49bf1384474438dd9c55a03c2b100962
MD5 63e93c84cee229afe716e65a3599823e
SHA1 38d93bf32de8a1bf35a112e050bb78a2843d11e4
SHA512 895f68490a4873bd40407d3819121913f7dba5993d8372eee21adb2c21065e859c4ffe22be85c53e8af6e568b003cc3a2be6bf7ea9ac9bd3dcdf4dcea4a19466
SSDEEP 192:sxZqRiyM/jK1Ml8MWO7/fnsx2rbkz/WAbNundpmbtHW6+WNB3FjO/Yz7pJugMIg9:sxZq0uO7/fnsx2GsyHbJBO/y+9
TLSH
T16262E802AA34697BDCD7D209F9157F53D6F82563E6944E48A9FC891C04E2ADD2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 fe0c79a21ab0087c67f469a00a6149ce0a72fd8b1d3a243b9e3319fe67b3a424
MD5 f7a89918a03518f213ea40e10b6cbb86
SHA1 d3fdab530cd2e2ad3b2d38261c1c36901f5e9ec1
SHA512 7134b9a7066c7d572f3beb0fe23dd244675c0abaaf0aad4897c5c7b470e932a2c3af7e04142509c745e894093e4fccf4a3dd0a92b155ed02818b11a19a4be334
SSDEEP 192:sxZqRiyM/jK1Ml8UQSWO7/fnsxBrbkz/WAbNundp4btHW6+WNB3FjO/Yz7WJ1gM/:sxZq0qjO7/fnsxBGsgHbJBO/ye/
TLSH
T1F262D802AA34597BDCE7D219F905BF53E6F8256392944E48A5FCCA1C04F2ADD2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 63e75883dbd760638d71df3c0756a59e2be85bba17476538dad6594018de8718
MD5 87540f845a0cec365e7b17135f5160de
SHA1 f21e6681af91e77e18f241626556532f77fa3e60
SHA512 b3deaa96ab66b6cf630a96ff1f5b6d7a813bea2f2af73c1892264bebd3afe1d8f6b2254f6749a3a68876486fd3fa6224a0da5a712af6526165d2364fcb02ec0a
SSDEEP 768:d8W7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjCroIzivYY:d8W7kf0Wvqidau1jaa5LA3jZYY
TLSH
T188D20A3B684CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB7EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 1KB
SHA256 9e9d1170695a4844cc43e99c82d093921b889d318bef5f84a617f41353f718ee
MD5 6426ee299c3322d8078dd59b6bacee99
SHA1 707b2c3192f4e7a56112ca4f64bdd69c2b1c4c7b
SHA512 e1a146ac9318ba136d1aebba8c4a1b38aebb60b65c27b617cb055c42153f0702321c13229b5a8dc63d002515ecf5c65fe0c5210b82d73d01b832b76f8e077b16
TLSH
T1413151498E40D5AFDDA449F114B760A53370CACC1312A3938C7C62363C6B36A2A5B1EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 3KB
SHA256 cd6d36f99a6ff43d118f063ae93df22d6080888142bb5058937044bf17e424de
MD5 932e660129cc3233f72244f2cc030584
SHA1 dd170919cfe9420518cdbc99362f0ec829633aec
SHA512 4770951c7e56ce78add48ca938e722ef7a8423b6995549f019f6102b5c495164a6d1a1f4dca559a88fe111902a5e1493fa459ba1b9470591a9d6aca509f093f2
TLSH
T1CE51F80E0C070FA7CDAC527104B50851377869CC13582D1BE6FE9234F8C77689DA9B9D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587a0d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index~RFe587a0d.TMP
Size 1KB
SHA256 2c90eeb384009c45430190047eae9a51b7cc7128c6519f22242e25dd3ea75bab
MD5 45c193911ed2ac9e3f2f29b451e9aafe
SHA1 329f72221d3459bf57d9c0ccc2b0e74a144be8c4
SHA512 6674d738c619fdde0bea481b23a3135d8a6cd5e516dfa687f0fe25ad21849a4b52b7e171dd2e2d82be0744db4d6eb8a49aba0b6a753e0b04a416dcab68dde145
TLSH
T18C31938A8A418A1FE8D844B20992A4B83379D94053227383947C62397C753BE1E5F0D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dc577b94-5e5d-41ae-97a8-afa364edec75\index-dir\the-real-index
Size 72B
SHA256 2657bbceaf1f7bf2b021d1f59146ab285b0dc4d6f8fd012175551bc9704f9381
MD5 db723472f279ef22ba2842eef13d60a0
SHA1 7940ca826afec8cc6ae22fa6e135d25d26971ee8
SHA512 e46298cb35583dec7fc7106edafa4380f86497a4692d698b4a909151b64eaeccd815215ff0d9199e0d925e172fb225c05f39a34fb57e4a50c517b769dd591a18
TLSH
T152A0025402C400A1C00616B22F9702823711CDB58705370745AC4244DD585554D8225E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dc577b94-5e5d-41ae-97a8-afa364edec75\index-dir\the-real-index
Size 72B
SHA256 69e325884c98a8a1f930e26fb1a808c8e915e318be4b292017371e877d1414b1
MD5 2b2b7d8b985bbffadeac8ba520111097
SHA1 5385e739ed9edd98bcacc256c9ea1672fea8ed33
SHA512 aa78332e38db75e0acb98353f29d916589200fa2b4ec269b38a3066cf2fdb8d22159b5b369f9085a4e220fafdbcc1fe68ad81950783492362d4260515d326556
TLSH
T1F8A002609B801415D412D2F52B5313421304C9942140130758D10045CDA04808DC100C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 e1a9fdde6e09ce390e49dbcefb7aed1784f7739fb671fe28586d5f97aafa21e7
MD5 439c01c18bd4e05cb2ea2ade51528044
SHA1 0e1d2d0083012c2657fda02ad71cd3af3ad6a019
SHA512 38132fe0de661dd4480f8d825cdcc82aef9fd79019b60b09fe65e97320ba8ef753d90a555019c157ab0818d687f1eb1148adf1eccb8eef103bd4098761c0f20f
TLSH
T1CEA00251D95482C2D01202F8A8FA0394632188A847092219A4FDD9948C5214445D7354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d2eb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58d2eb.TMP
Size 48B
SHA256 e543ff0fe71dc03f36fccdd1a22e16fdace64114664cbd143d605b6a9a635633
MD5 9c9270ce665ee8de80f5617b7ed3ac35
SHA1 2adb6f57894da9a04e7415fa28f1fd7cb62781a7
SHA512 675717a071911b34578d2e96b79494c7a64d8baaa43a1f3bbc7656fdca99634bc2b609c7499393a665be15b2455fcc0284326339419726db0f7e7b904e8f47b7
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 826573ced2d28edc8bbd877589c669ea9fa1b23dce2b731e08ca2a79bf7bedad
MD5 53c71d04d8a7ec0b44cc0832869f7cb9
SHA1 ebb389034e282f621d06fb71fbe2a8b7fcbdc509
SHA512 536d9a98762e60f3f5cba82eeab967fc39368c1ff3cbadf919aa8dd76f9db29a88e4fca46efe9906a22660449e688d3938091fa98f05b98abc09243afe834c3e
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTbEIfKFmc3yZ8ILK9KclPIpKm:KIbCKcbEQKFmeK8gK9KuPOKm
TLSH
T1CF918986763B160138BD3C48A395D6364F42355338ACA86F7FB500622D66F124EFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9aa2ecbc-14b6-40d3-97fb-9cf0145a2475.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9aa2ecbc-14b6-40d3-97fb-9cf0145a2475.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 7ff3eeb631e41a77bb74ae9f861dc0d50b0f2440fef9f928a9856a3ff8d043d1
MD5 2b9313f681cb2a46d6c0aeb4d5970ce7
SHA1 4bdda7bf7fac649a03f7b0abbf217a2d1a9837ed
SHA512 4cd3f2552c33d3cb67453fb70fcbb93d86b8eb05a364e37312ddffada21b9f7e7ab109a5a36e4744078247369c2c2b7ed8c83e1d7ef9f8c2464e4f9e220bb044
SSDEEP 384:hiFiZcIPsNy8TUNTUlIliKT1bbBDiPdlhCEJr0LxuvzxV+MhdpkAob:IFQP3wg0E1M7h0L4184pkAU
TLSH
T1A0A27D725CA49D7BADBAA641F94636038EF49177DAC4EB90F3DC9F1C01D7298130AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bf81e60b631e532ae7ce942870d1710f72826fd40df1d37a8eaf67222caaa6df
MD5 0e1695ea562867053bea336c8cb8dbb7
SHA1 3d1bbc0e844ee5eb5c94c920e3c899ae2b834a72
SHA512 4d81d3cd4004c263eb583c65806a6120fb54b4640b905c270808e466fba47ac2e120478c472f07577ef418641594b3d0d27ef4729e40bf681e6b0f6a01cf7f30
SSDEEP 192:MONB64BAQmiUyQ1ZW5GBPKDv+FdGEIaDxrU6:MONB6eATXWAdlxBU6
TLSH
T16502F938AC786C7B9EA2AE45F48637175FD8113BE6D45F44E6E85B1C00D764C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5b726787ecb92ab6e18904563ff21c9418885066d041314f7c56b75922bc9284
MD5 7233ba5f6c6bb0f718a237e6fba0116e
SHA1 f62969b018abe3659984bee86560ebca2191c6e4
SHA512 842f1e357d15c17b9af5f0670676478cc619392c8fc2a92050d863ee86880bce92a620b2bf1dc2b823eec5214eadda64ae901eb302b5de14968aa4078d9e7f28
SSDEEP 192:lONj64B2QmiUyJZ+5GBPKDv+FdGE1VFC1SJreWwrqwU6:lONj6eSe+AdlhCEJrcLU6
TLSH
T180120B359CB4AC2B5E92B551F48736135EA4523BEAC57F80F6EC6B1C01EB69C2306C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 bb9fb2a2a233062a8b6f2bc5ec6b3b8541ff6ad8d876fd871a857bf43ad48ba7
MD5 203f1605b849d777e383158d0a2830db
SHA1 36cf98523b8dfd717a078d4a34adb5fe5b00ccaf
SHA512 d4945e12513b794efc51085dbc58db492c89db1759dfecb767280d7a87dde3ed48629d86e3569d3582c91071e1abc1ecf2085c52422f3d11481b7e041ff623c3
SSDEEP 384:LZcIhsNq/KT1bbBDiPdlhCEJrHLxuvzxV+MhdpkAob:Th9E1M7hHL4184pkAU
TLSH
T16D828E705CB56D6669BAB142F84737034EF8A137E7C8AF40E6ECAF1D01D63551316C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1a9cd0bbf5e54d3af7d8e87e83ac9d65c0beb56fc76cb605a2cb7c42d19ba2a5
MD5 7cfd54bed08347f759a6af586855d932
SHA1 36282f3cc654fd12fffa07f32ce4737be7abbd61
SHA512 ba06cac3867d0727fd869346f91f601b40faa183ed999771d89bc2b5a5a4a3861e1e16ee3fceb0dc17947d77ba47520874b86e8f195cf0c2964cfdc21ca6d7a3
SSDEEP 384:NZcIhsNqiKT1bbBDiPdlhCEJrHLxuvzxV+MhdpkAob:VhME1M7hHL4184pkAU
TLSH
T1C0827E706C756D6669BAB142F84737034EF8A137E7C8AF40E6ECAF1D01D63552316C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6985dca7-29f3-44e1-86a7-7e2fac5b18c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6985dca7-29f3-44e1-86a7-7e2fac5b18c8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 07369fadca712b7737ecc0159d9bcb3cc771a85ce6f09fd12a7f69a7945a2924
MD5 36d3b9b4ef899f2696aba4f0342f82ff
SHA1 bb45cfcd49252290eacbf045bdca39d35a78483e
SHA512 dcbc099fe1e2576e712e08e9600891b49bdd22145fb1a4a8828aba5c5f9a59b65f5491cfebd0bf14176fc4724f619b47d8651e9957a3cd18adb974487eddb889
TLSH
T17D411658B6ED1108B3B36F5A9BF6656E487E7D732F06C45E00110E4F4676A40CC61737
MD5 SHA1 SHA512 TLSH

Submit Download