hxxp://google[.]com

Analysis

max time kernel
899s
max time network
735s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample260912-pbbxtsbd22

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4500	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337849721219271"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{621569AE-8767-4993-85DB-4F16E7DB3FDB}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
220	msedge.exe
220	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of WriteProcessMemory 45 IoCs

description	pid	Process	procid_target
PID 4412 wrote to memory of 3024	4412	msedge.exe	84
PID 4412 wrote to memory of 4500	4412	msedge.exe	85
PID 4412 wrote to memory of 3884	4412	msedge.exe	86
PID 4412 wrote to memory of 3884	4412	msedge.exe	86
PID 4412 wrote to memory of 3884	4412	msedge.exe	86
PID 4412 wrote to memory of 1144	4412	msedge.exe	87
PID 4412 wrote to memory of 1144	4412	msedge.exe	87
PID 4412 wrote to memory of 2108	4412	msedge.exe	88
PID 4412 wrote to memory of 3352	4412	msedge.exe	89
PID 4412 wrote to memory of 2108	4412	msedge.exe	88
PID 4412 wrote to memory of 2108	4412	msedge.exe	88
PID 4412 wrote to memory of 3352	4412	msedge.exe	89
PID 4412 wrote to memory of 3352	4412	msedge.exe	89
PID 4412 wrote to memory of 2976	4412	msedge.exe	91
PID 4412 wrote to memory of 4920	4412	msedge.exe	92
PID 4412 wrote to memory of 2976	4412	msedge.exe	91
PID 4412 wrote to memory of 2976	4412	msedge.exe	91
PID 4412 wrote to memory of 4920	4412	msedge.exe	92
PID 4412 wrote to memory of 4920	4412	msedge.exe	92
PID 4412 wrote to memory of 2964	4412	msedge.exe	96
PID 4412 wrote to memory of 2964	4412	msedge.exe	96
PID 4412 wrote to memory of 2964	4412	msedge.exe	96
PID 4412 wrote to memory of 2404	4412	msedge.exe	97
PID 4412 wrote to memory of 2484	4412	msedge.exe	98
PID 4412 wrote to memory of 2404	4412	msedge.exe	97
PID 4412 wrote to memory of 2484	4412	msedge.exe	98
PID 4412 wrote to memory of 3080	4412	msedge.exe	100
PID 4412 wrote to memory of 4512	4412	msedge.exe	105
PID 4412 wrote to memory of 1412	4412	msedge.exe	106
PID 4412 wrote to memory of 1056	4412	msedge.exe	107
PID 4412 wrote to memory of 3164	4412	msedge.exe	108
PID 4412 wrote to memory of 3164	4412	msedge.exe	108
PID 4412 wrote to memory of 220	4412	msedge.exe	109
PID 4412 wrote to memory of 4684	4412	msedge.exe	110
PID 4412 wrote to memory of 5084	4412	msedge.exe	111
PID 4412 wrote to memory of 4684	4412	msedge.exe	110
PID 4412 wrote to memory of 5084	4412	msedge.exe	111
PID 4412 wrote to memory of 3352	4412	msedge.exe	112
PID 4412 wrote to memory of 3352	4412	msedge.exe	112
PID 4412 wrote to memory of 4132	4412	msedge.exe	113
PID 4412 wrote to memory of 4132	4412	msedge.exe	113
PID 4412 wrote to memory of 4072	4412	msedge.exe	114
PID 4412 wrote to memory of 4072	4412	msedge.exe	114
PID 4412 wrote to memory of 3712	4412	msedge.exe	115
PID 4412 wrote to memory of 3712	4412	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffabe77c188,0x7ffabe77c194,0x7ffabe77c1a0
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,1000727949572837219,1780573307754190548,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,8507704412579414374,10692867971601045202,262144 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,5542165751649787225,7499450076479085443,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,17006186584536580278,7924402031920439892,2097152 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,9168021215325224962,13934963883314727014,2097152 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,5777501255516508614,11755488143913912703,2097152 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,8454034248050553964,12323193017846208087,2097152 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5044,i,1610901742624671149,17048956911557232821,2097152 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,9146631458053533073,7341284640257688317,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,4522573059250590758,14397452142977967029,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,5964944289351618802,14466932327883982334,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,5964944289351618802,14466932327883982334,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,14616226283071446089,1526994874079339727,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3500,i,14632988571019930978,6413573184780922367,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,3926926325525490216,12775641514642328388,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,2345268081824824794,3396199214626973234,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5964,i,3271032546618137041,8977413977218089851,262144 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,146117256264846244,2353602676661539925,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,1381041112986538818,11154436405235158799,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6216,i,12015324335184000372,17886978312290258344,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:8
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3780,i,7924714640212257712,3297684442281156019,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,4248930696090871080,14628991729723744202,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,11349580184670803840,17328313033676160634,524288 --field-trial-handle=2252,i,11700414735524835004,13681016941829225147,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:8
  2⤵
  PID:3712

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4160

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3164

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 bd58533f92ef53e73c57fae2991b3720084b2be2f14a5dca29019f68aa13f724
MD5 f225bae8d37c54bc76b32fb1d59b3b51
SHA1 033bce7044b91f6971b86392e00b5bae181fb85c
SHA512 75e7835a634bce683b854050019ca91f455cf8bb0be01d65280e3d76d4829d4489b4b5834f4c21b30ef205dc76fe0c0c8c6d18712f8c7ad6ac2572b807659865
TLSH
T164E07D8C06CCC6AEA38068875178670DC2B1370ED3CCAF8E5F59C4D4B10A650B6C6691
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 75375ea9326fd7b740673c626bf06abcc772a3501da3b7745f0c93cf52395120
MD5 fd70ff9fc901bd94b9d640ed3d146a31
SHA1 1c0938ad05ef9abaff0f0aa4892f2e60731ecb2c
SHA512 a31dc89d19e5788f537a43730abb215092ce27af55175bf09266c2250532da86532d3b2850ea86df9fedf1b7e529c45b73aa60a14bfbf59c1bc19a951bc2fa45
TLSH
T118E026850BCAC2EFF340648B417E9B0C82A13B9A9BCCEE0E174084C4B486240E2F76A1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1466e1c54acb6d09e63b67f12c02b76a2bf9f11284e6c22414f83e6f88eb9249
MD5 8d3a75fa1e919df694c9e144a4a84077
SHA1 0b535302299bf5faf2c3daebcdb3b358457f56fe
SHA512 5befe169e6b31a17f3fcce3f1e0302f571eecda00c6d71814f4fa42808c9a8c569560a62460630c716683440855336980b93c3d13ae5d6b447c18cd203367813
TLSH
T10461A4B4BF8482A9F798A17D9DCA02873E30498558B37FCD11EBCD79F40A31E1155E44
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59407a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59407a.TMP
Size 3KB
SHA256 5040c9a1096500ddde99ae6be159bb2f1439507d826a4feef26f9598ae61a489
MD5 187164dce3fd2271ff8c5a0f36fe1e7d
SHA1 c0bef4a4ace3d20265089bd5262eb8c6e3879767
SHA512 28059d6a1d151d1a2c40b4b2a6aa1f21c3d2b94a8c1eeb2e6ff1af76b9173388c0765e32a7febc132009c2917bf770aed388b1338b6ae5a5f87bd256585945c3
TLSH
T1665192B4BF8481A9F798627C9DCA02473E34998558B77FCD11EBCD7AF80A71E1124E44
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 5a7ad0bdb6001ff7dc8e2ad2df9d0c4583be8f23282d3f07085013c4f969f567
MD5 3b11706023feb214e96a0640a4cd7e31
SHA1 67ac74380ef0a2b75346c0f85e9b306d17a49395
SHA512 7450d8252232458c1de808c4125c1d91845f9ac88264036905eaa4358b109fe3c43de293bee46f8329662151dfcd4aa996a8a58533de4d037a0475c380228197
TLSH
T1025177B783A5822DC90156F09B15AF2FCE2D0624432C387A89D4BE67D3E2432E115B6E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1bae214be467fe21b7367fdfad069b59e2bb54aedc7dffb64bd716c2261f5ba4
MD5 96dd8b0da774a8be8e4ae39ba6517b02
SHA1 284d7272a657c6386bac5fdf09f7936a720aacce
SHA512 ef1edeccc746c3e6e35c2dead88656060366b3b6bb76e3b7979784ab89cfe5fb2db06fee2d06b3840facc5e6f29d7621f68c12266ea53f0273f12b91e284355f
TLSH
T1B251ABB7C3D9C62DC80116F49729AF1ECE1D0A24432C3D6AC9D8AE5B93E2471E11565F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c58ebd0d402d9d236641e67293df50c4e05a5e582d8412394025ad662133efb3
MD5 095762c19ed5d207456a7d3c708ed99d
SHA1 2455b5a12cec7301ad3efd9a9bfe5bb82fe2745e
SHA512 7625ac0a23edb3c7119fcb5a6c036aa4061cd3a60e8d9bfd93c668dff08310b633cf783e41bc4ba1829ab90d0cc0631cae2331d20f8392cc923c919322087b39
SSDEEP 192:sxZuRCWx/fEszqIdpqxyHW6+WNrGi/YgPeDFkIgrJ:sxZurx/fEszjVHbV/n9
TLSH
T11522A7526E38A97B8CD7D20DBB15BF13D6FA503291941E48AAFC861C05F7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e127dd60ffa69747dd057c32e719514805069e7fd839fa7b21a95d614ae227d4
MD5 7a0a1525a9894dfa3c674fc5066d59eb
SHA1 7e0a3f9d0c9526bae61c40f876f0f5b7af99995a
SHA512 913db6942b504f37ada1402387ef7d1976777a188f990a640a3a0316c571329ec91ed81f790fef3c91ce512aa391010ace04c7e2aa1fa78d6738aebf117df695
SSDEEP 192:sxZuRCWx/fEsPqIdpqxyHW6+WNrGi/Yg6eDFkIg53J:sxZurx/fEsPjVHbV/wX
TLSH
T1F322B8526E38A97B8CD7E20DBB15BF13E6F9503291951E48A6FCC61C05F7ACD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b1717c79a188d52be8956169411a95ab38a850e10b276d5139dc5c6875363d87
MD5 ccb9eac3b7733fc38a9597a2bd5de879
SHA1 07abd73295bd26ffd930e599f7c71b0d582c9082
SHA512 fde506b8cb2f49e1d6ec478032d29828d91597be68cfa06f0260263b45ec339d821f77aa07dae8c7fcdee74ed9e7853f3c2a972ccb855fca0f382209e3db5fde
SSDEEP 192:sxZuRCWx/fEsPqIdpoxyHW6+WNrGi/YgSeDFkIg53J:sxZurx/fEsPj3HbV/UX
TLSH
T11522B8526D38697B8CD7E21DBB15BF13E6F9503291941E48A6FCC61C05F7ADD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 24KB
SHA256 bbe57c8b3d6521fa79056ba0e25fdaf4fd449410dab4913363b8c341c13f38b4
MD5 a5ce37104be3dba66945f86886de4dd8
SHA1 3bde600d6664f406d7caeb6182023caebed7b037
SHA512 4a5fc1cfe813e96b4622fb92f0e852b2a6419e52acbf13333aa5ddb953f1d24f96d6739369e15657809cc5465e9e71d503b676d227d269f8e3c062482fba9fe7
SSDEEP 384:sxZurx/fEsz66s8qMpRiYnazAW8pZS15posJWeT+Zj3HbV/NX:s2rx/fL4Mnc7WeT+ZDHbpB
TLSH
T12BB20705A924C83B8EC39D18653D7E33E9EC405222C5DEDE1AECCA1C01AE1FDAB47857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 215da3f54cb5a983bdceee782e19fce61e384acb8b77dbb1b5e5adaf2113b741
MD5 56f549e639bb2373ad5f3cc78b474c11
SHA1 30dd41b4594d66354c2c22d4e5c3e534b4a939b4
SHA512 1878118d03ecd9f5fa235f56888f22c6d49a42e21bd200e1a7f1956a26c40237c5e91f4e75ed11fed716b8ea56363527793fb55fc5cc0859bc5fc2d9966c5f5b
SSDEEP 192:sxZuRCWx/fEsdqIdpqxyHW6+WNrGi/YgPeDFkIg5dJ:sxZurx/fEsdjVHbV/nx
TLSH
T11622C8526E38A97B8CD7D20DBB15BF13D6FA503291941E48AAFC861C05F7ADD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 694e6d6079633847ed96eaeb7957781be1b9f79c83899758fef3d4dd2f76c02a
MD5 8de3f8a6a422f77c783753b7073c1847
SHA1 fbc32ca86f1a46b511f5bce9f7b16b44a1d7a9cc
SHA512 239a84d6cdd6c87983c13a236afc8d1cfba5eaeaa1946ebeded4da7dc7e6662c07087e343f8c072b7182e9aeeec9bcce1226ea990ee9eaf6c9326c8d6cb0c3a5
SSDEEP 768:vEichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzEroLyc:vEichfPWvPZplu1jan+LKgzPOc
TLSH
T1A4C2FA3B644CCB7E4FC01A9DDD5A6F977EA802C7AA588D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e224deac-434e-4633-bdfb-da3a59c15d46\index-dir\the-real-index
Size 552B
SHA256 f79fbf5f1a27ad61f81393b6044f219f60df8aef8a1243fb7abaabf35aff2f8f
MD5 bd6bd108a9369b3283127cbb0524b663
SHA1 59f55cb9831f3ac2df44c73e8ceb50c4c66a1feb
SHA512 dcd5a60f5052b0f84e3425d9bf1a6e63c4a7e62962bc059f9aeb9ff7093fc738069420a03f75536dab9d5c750f6f8ec18c5f1e9fea09ff37c16ee71347889f57
TLSH
T1E8F0F19FDF23565EFC684330207C75A97AF007CC53516D0B70EC801BAC573889E81294
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d6a65.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e224deac-434e-4633-bdfb-da3a59c15d46\index-dir\the-real-index~RFe5d6a65.TMP
Size 552B
SHA256 2b44c0c4e88356c4ca2ca6b713b85e69eee971472c1f933250fdd98f5d880cf8
MD5 6e2f30d2146b5c7ff9fe20f7e0efb173
SHA1 de0efd29d8ec7661cc38173d306a58762404ac2e
SHA512 063a42d21e164c710d5c362efa92ecf6785372f69226e5f4dd721f4cc4c8715606814acb0c63468c99a38eb3e1141de7688545f016a72a872cffbaf9d1934666
TLSH
T1B6F0F18445134786F8040231A57D725961B150089310390FB1E94026CC427849D42BF0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 93a53d1fb07a5bb26b800e7df76eefc028b053f68195974f04e10d4f15d325bc
MD5 fade7f197f8063e26d6b5a63a5b737de
SHA1 12d00b9628fa8bc961c9dc7b8b8ac2183aea260a
SHA512 e3ee9467b58103a3e5e0b380371c83184f8f88a987910e275e977db1ed060578a8b5ddd8d6c9b140607e02ff15345457e7f51a01d52c428b90d1ac04985ed337
TLSH
T1BCE020B73FD72854ECDF83D61031C8A54105B964C544ED4F606F95C7A2B1755385AC26
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 b6487ec0131c7c2106786a6571228f4d9432a3530f6cf4c5a8b1c5b873a892e7
MD5 a37c6c9b25f38c46f11f5230ac92675f
SHA1 5435665ca014120e913e06d72260c298a9d05a94
SHA512 7c165d6b2fe171d204fcd9663ff5c37431b656baf94cbab633959cbbabf48c2eaf033371d9e9a05ca12876613412d2af683cf27a4699f9ef0abd9ffdd704d652
TLSH
T159A0025DA9C01812ED18627021D255417B729D102F1193038995E14888B61508115079
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f35d94bb1de3017c6b87246303211bda44f4275360214d06ab9c8f5e97972ba6
MD5 2a23a056873c9409ee947b151d83f9da
SHA1 42a51c7685ef3f5b51ea6e9b0393df841fe3dcc6
SHA512 b3cb39f55847e0571a9336b7d74cf8eec7a7e9d94d170423eb1b2fe4aa92674e07f9c6f74790c53c830ded5be5adfbe44086044ab1e2a20e45c76251512b5971
SSDEEP 48:K0CNQ8CgARbcrMISURK9Y1iRxaBYDUAyyLJ4FZDHb0bni/ISx0K9x1b0xZkYijrP:KQNqKu0CC+oKDCMRCKiQiWz
TLSH
T1C0911252317B030038FE244994A59BAA464231B73119EB2F7FA986D6CD6FE051EFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 17de76d0f1ac0881b1caff8504a40d5d43dab1c0b8818745de280d686546d986
MD5 f10b0dacf2deccbcd8b6fb58c5e98e91
SHA1 265b1f0b63b9576d05305073683d63a77569cf4e
SHA512 a05004c15f0f650033e1f2690d23c6ef00179d9b2fe5496c5f9f3dab17d1485390b169555c74551046008b53d8fcaa08b7ec923a865260279844bbc780077cfb
SSDEEP 384:3ZcIosN5CMzO95M9jCBGYX5EXLEs9XlaYo7fTH7O6R2Feo4oC:/o7F94sGYuXLEs9ETTH7TRLV
TLSH
T1B5828C7268B8AC3B5CF7A195F44B39139EF8901797C86F84D4EC5B2E00DA698131BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 497f9b8b3c881e6819b79876f9b340939eb085dc4665a64215492f2d2c1620d8
MD5 f7ce654f3203233fcbd17e19be64c9ed
SHA1 cff040f1652a1530ab4bf0a2cc67242db9ad6717
SHA512 24cceea44abf437e48b8cc4b4e8b1456ca938c9eaeabf382a7127f014cf99d1788642bba19b9be1aefd08340550e556584000c87c614c404f550d29814714d60
SSDEEP 384:mFiZcINKsNb8TUNTUlIlCMzO95MkjCBGYX5EXLEs9XlaYo7frH7O6R2Feo4oC:mFQMCwg4F9XsGYuXLEs9ETrH7TRLV
TLSH
T107C219F248E79836D9AE5757A77E2D038EBCC057B5846A50B3D84A1DCC861BFC306D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5a60364cdbbaf4d00c12a91e0452396640486bbfbfbd427f20cff88b63daae09
MD5 c8057c055dd718f30961c8703c3c84fa
SHA1 55dc508b8b0542df2aab6f96c689067693447e8f
SHA512 dfd6084dd6aa3fab93ff69b2de1623b2f5c9b4925a6ad87f10fabaece7f6004830187a46d560ff3c32ee1f2d67c3b6d6c6de083acc8e1001cb4503dd293ca1df
SSDEEP 384:9ZcIosN5FMzO95W9jCBGYX5EXLEs9XlaYo7fTH7O6R2Feo4oC:loGF9asGYuXLEs9ETTH7TRLV
TLSH
T115829D7268B8AC3B1CF7A195F48B3A139EF8901797C86F84D4EC5B1D00DA698131BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 764d6867a3a17b8247727d38c10340fef69dcc8d81dc0c78514a128ab0cbbfbf
MD5 b39d775b1471cde8d3cace41d9f970d0
SHA1 75970deefed4156875e17ef675dd1ecfeb0bfd14
SHA512 b96c8137e484a7ecb5303ac8567df23fab33005a9f88ee934eb93d9e913e1f2b688140280848ec8f2a37b99fa0494057c79706dede325f9b8b903630f3d7aa46
SSDEEP 192:LJONV6DphmqQmiUyUnq8wGYX59ezWCLEsXkk7tbU6:lONV619bRwGYX5EXLEs/JU6
TLSH
T1A802FA39A878BC7B9DE36E45B58B26139FE4112BAA906F84D6EC1A1D00D768C1307D37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1a0811e6a3dafc5b1a2029414583ae2cc4c2cf404c2355295c3a4651b20b7c90
MD5 faa7f0abbfe3ee7b7843053d1c69a4af
SHA1 4c9f8c022ceea5b17b75c559dec8419adda96f6f
SHA512 ac163e750acc9698da28c82b98bf2f65091d63189d1c6d5b144589fb56b3a087ee054703e0ff9d6a2aa8359077e6ba32b6da73bb3e56d438a1495ae9cd21e4a1
SSDEEP 192:LJON06DphmqQmiUyLnewGYX59ezWCLEs9XlaPwo7fBkIIJ/5nU6:lON0615qewGYX5EXLEs9XlaYo7fSHU6
TLSH
T193121835A8B8BC7B5DE36590B48B35239EA4522BEB847F94D5DC1A1C01DF29C130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

255acfec-b1e9-41d9-8e1c-87b128be62da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\255acfec-b1e9-41d9-8e1c-87b128be62da.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2c054cdd16f9de448ae6a8b4d6ff79405321d60bf93c62b2c6e8ee930caecfb6
MD5 4efea7b2d425006a78c1d99bdfd14c29
SHA1 bf00c428ca6cfeec0a6ba1d5119f763635cccaf8
SHA512 acc454871baddcd49f7e86889a5697ad8128b0c33f2a97b16b437b083d2ca92529b54360417b046d675125e064485b621c4021c9b5e5378ebf2437776ddba75a
TLSH
T1F6410658BAE91148B3B7AF1A9BF2A86D447EBC372E0AD59D10110E4F0662A45CC72733
MD5 SHA1 SHA512 TLSH

Submit Download