hxxp://Google[.]com

Analysis

user interaction
yes
max time kernel
929s
max time network
735s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/09/2026, 15:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://Google.com
Sample260924-spvtmsxtds

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2480	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134347367746337905"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{596C5614-61CD-47B8-B7A1-B40DF8857D44}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe
3940	msedge.exe

Suspicious use of WriteProcessMemory 45 IoCs

description	pid	Process	procid_target
PID 3940 wrote to memory of 368	3940	msedge.exe	87
PID 3940 wrote to memory of 2480	3940	msedge.exe	89
PID 3940 wrote to memory of 816	3940	msedge.exe	90
PID 3940 wrote to memory of 816	3940	msedge.exe	90
PID 3940 wrote to memory of 816	3940	msedge.exe	90
PID 3940 wrote to memory of 5012	3940	msedge.exe	91
PID 3940 wrote to memory of 5012	3940	msedge.exe	91
PID 3940 wrote to memory of 2908	3940	msedge.exe	92
PID 3940 wrote to memory of 2908	3940	msedge.exe	92
PID 3940 wrote to memory of 2856	3940	msedge.exe	93
PID 3940 wrote to memory of 2908	3940	msedge.exe	92
PID 3940 wrote to memory of 2856	3940	msedge.exe	93
PID 3940 wrote to memory of 2856	3940	msedge.exe	93
PID 3940 wrote to memory of 3360	3940	msedge.exe	94
PID 3940 wrote to memory of 3360	3940	msedge.exe	94
PID 3940 wrote to memory of 3360	3940	msedge.exe	94
PID 3940 wrote to memory of 5032	3940	msedge.exe	95
PID 3940 wrote to memory of 5032	3940	msedge.exe	95
PID 3940 wrote to memory of 5032	3940	msedge.exe	95
PID 3940 wrote to memory of 2448	3940	msedge.exe	98
PID 3940 wrote to memory of 2448	3940	msedge.exe	98
PID 3940 wrote to memory of 2448	3940	msedge.exe	98
PID 3940 wrote to memory of 768	3940	msedge.exe	101
PID 3940 wrote to memory of 768	3940	msedge.exe	101
PID 3940 wrote to memory of 4120	3940	msedge.exe	100
PID 3940 wrote to memory of 4120	3940	msedge.exe	100
PID 3940 wrote to memory of 4932	3940	msedge.exe	103
PID 3940 wrote to memory of 2484	3940	msedge.exe	115
PID 3940 wrote to memory of 3448	3940	msedge.exe	116
PID 3940 wrote to memory of 1336	3940	msedge.exe	117
PID 3940 wrote to memory of 4048	3940	msedge.exe	126
PID 3940 wrote to memory of 4048	3940	msedge.exe	126
PID 3940 wrote to memory of 3404	3940	msedge.exe	130
PID 3940 wrote to memory of 440	3940	msedge.exe	131
PID 3940 wrote to memory of 440	3940	msedge.exe	131
PID 3940 wrote to memory of 4500	3940	msedge.exe	132
PID 3940 wrote to memory of 4500	3940	msedge.exe	132
PID 3940 wrote to memory of 640	3940	msedge.exe	133
PID 3940 wrote to memory of 640	3940	msedge.exe	133
PID 3940 wrote to memory of 2672	3940	msedge.exe	136
PID 3940 wrote to memory of 2672	3940	msedge.exe	136
PID 3940 wrote to memory of 4228	3940	msedge.exe	137
PID 3940 wrote to memory of 4228	3940	msedge.exe	137
PID 3940 wrote to memory of 1288	3940	msedge.exe	146
PID 3940 wrote to memory of 1288	3940	msedge.exe	146

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://Google.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x23c,0x240,0x238,0x260,0x7ff9bd0cc188,0x7ff9bd0cc194,0x7ff9bd0cc1a0
  2⤵
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,9534052945990887144,15617724100691480243,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,5012331778785731302,14835643030992376920,262144 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2396,i,18189993877120852042,13637715637933463217,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,12486801028756812786,12034558071646897526,2097152 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,9116118513428018212,16801305665656405700,2097152 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,912357499998568896,375719895185208891,2097152 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,739455961815782061,6330245130699154807,2097152 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5052,i,18198491986468179101,1419168885997271358,2097152 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,13617015206368840760,7826399835018898910,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,17558897319693566107,10433201236977400232,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,5545850824846518105,2693300227360693616,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,5545850824846518105,2693300227360693616,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,11531420431659671179,6156831139645240392,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:8
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,6489121156833551492,4615336786329275081,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,13003762533338040077,14063163875174635774,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:8
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2880,i,13554334502886588861,12323077253308361805,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6200,i,3826752434152639225,3727311080571149005,262144 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5628,i,13332956281715639479,2052944954166566905,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3996,i,15211976080860949209,6023082452079737753,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5552,i,12924697520111034618,17580102502689707597,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:8
  2⤵
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,14588159189117425617,6349380322802871614,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6580,i,11246363191671614177,7413934798645473646,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1580,i,18157738337586690775,1036484181236723828,524288 --field-trial-handle=2492,i,1721464527664347886,3890801187496705556,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  PID:1288

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2568

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 25559293c954898f2da344ed5fe3faf3c076ca2a1868befb99178bedacb3d026
MD5 7921e958d547711c39f2211be9d582e9
SHA1 d327f17351a129da59733ef73c24b256addb1b88
SHA512 29c83b34cc319b93140a7156f0e4fd32fca94b626b32f9aa46eb5471603b5bab4338ee0313db91199b04ee0ff93fc3dd5d552299e129f6c1cd750f4211244525
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7E:fwUQC5VwBIiElEd2K57P7E
TLSH
T117B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 ae9b9f33e364fbab242c9296b01053147e93ffabd4325c0210c99a8c1253568d
MD5 c355fe9ec8128a44ebc06f20699f20f8
SHA1 2287a3d8bb8080c72fe66048c0ec2c1b2c967f85
SHA512 470283fd397162478952855893aafc6e6c7fae7950d38712a666cc92279b9510e016265e9245e7f8b8a7b6064fa4631f9e7651edb8b1551f073d2031fbe2cfe3
TLSH
T1E0E0269C49CAD67FF24064C7457EDB4C8280374F92CC6A1A2B04C688B403450B3E27D1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 eb52215af1d91df870c6f916b5323eb86cd3a0a414f344f93f9f6cfb8ea93309
MD5 9670616cb3e2b6cb5039fb97e6033d88
SHA1 6cc06c64747515adc4da78bb3bfd894e3dc604f7
SHA512 9c20ef85fee1c96d8d18222fb594ac2c75a7f74afd0d83d183e40b86f0a782b8a7f7af2d661d66512ce2c3be551ae5c967d6aab7158366d3f36465145d44c96e
TLSH
T16DE0D8D8C9C6D22E520468DB55BC570CC1C03B0F92C86E95BF00C844B5424406AC2DD5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 e462ce4db39e7a3e15cf184847aecba5b58bba0b21a5bb09598f9f8719c191be
MD5 750581a295ec124e58f979c806b7b2f5
SHA1 aa216ea20c8e0de5a3d4199c8bd2c50644a0b314
SHA512 581d2acb18f013656c487fa463622042e3ce30196b5e6250b6965600463201d5528f756de1308d29e3e2e8d6c021f869cd2a26d3328f60744ca25ee16eddca8b
TLSH
T1B7E026C858EEC23FA65864D7C17C570CD3803B0F92CC6B9AA70CC48EB602040A3C2ED1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a0261fb0f1ffbf269022073312413cbf8f9f2eb235cebf61719a55363c386c19
MD5 b8697e27d0fa1d35eb73e98f89620c72
SHA1 bd082917fb3fffbc5c9d3b8fcecf1ba40f144c70
SHA512 1d57db6bc2a103c785dce9abde5e06d72ba554dbface8cc0da25c16c796c65ec2713e3daea889d6a31e6d456354ba12146caefb9ccfdbe41435a38160616042d
TLSH
T103719581649240BDD79823B07DDD1CE7B53C6AB956A37D00C19BE43DBB4A3B412172C4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d8e6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d8e6.TMP
Size 3KB
SHA256 50a8f77a7a56cf6a73ea525066bd2fb90d3b8da826d7de99f5341b96c3b7bf28
MD5 44cd124ce67694da92987fa913d0038f
SHA1 6fdfdcc6344836da3b54e38fbe6928d6bc974f6c
SHA512 433fcbb191a79dd11872730c627679912256d13ffd9e9d8a6b7a3aba203e678f83ce45ffdca0962b3101556f5f4390ddab9fa058ab08272c1aab554e9f1e3397
TLSH
T1136182C1689240BDD79803B0BDED2CEBB53C5AB966A37D10C59BE43DBB4A3B412072C4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 56c6699add633c5702ce91d9910a7ade9b4adadf0b92d097590c2ae0faeef14a
MD5 2cce44b9b03f568986028dfb5cc339af
SHA1 e9c2f43545784593489fc3cd62c708bbaec693f6
SHA512 c3949e673289f200e0b13c34eb2d6528c02817210067d600685725612a04759a0c418d694f2de64f3f4d6dacea2d3f248b24e498159cacbdf15aa25ab7b9f01d
TLSH
T1355178FB83A5821DC91196F49B15EF2FCE2D0214432C387A89D4BE67D3E2432E11676E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 98c28ff78dad32b8098472b181d26f63f35dc84f3c73a251b7bdf612918476e8
MD5 c6d1b2db278190ca8b026840bcac9682
SHA1 01fac1da4bce6b0f119da1040fdeaa80a6191fcf
SHA512 bdd553db854840b57c38837c3486fa1c6737c3a458a9e27186db1dcf588475a160258b239bd51358c53f9b4f8081895d2f6e42471330c34dd5790a65115cabe8
TLSH
T184718AB7C3D9892DC90156F49715AF2ECF2D1A18432C3D2AC8D8AF5BD3E2431E11A65E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2baa4238562c137953b1311e3a8d1ed3d1252923e488be57ef1a120d2fa91400
MD5 4cb559c6091b661af3cb9f68d6cc695d
SHA1 658fb8f0fbc60091878594b9ac6faa59897c8ebe
SHA512 9b77ccd22792b08666eedc229996c1a97f7d44db2510e989a04b35734b17391f20d55a38fa6c3815cea34ca2a7961762671944f76ef527db592c91144d0938bb
SSDEEP 192:sxZsR5Ww/f1shMIdpqzAHW6+WNrFC/Y3CuzIgrJ:sxZsuw/f1shVdHb4/e9
TLSH
T15722D8126E38A97B8CD7D21DBA65BF53E6F9403291D41E48AAFCC61C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 90b8b4eb7817417b37dcdecaa431a032c6f1d94c6804685c0f7e1565faa5c324
MD5 533b8fb67e887e623f8a3850fe57727e
SHA1 0dfff1b2163426347352bfbe9f157b6bb7ed7504
SHA512 fada3a671beca5d2bd5ad7802fbefe0e3124773fc18851eaa900ab93b1d0af1c589a94d6822162a3978b626a256765b964e4c6abf1155ab55c3cee48658ffcb7
SSDEEP 192:sxZsR5Ww/f1sRMIdpozAHW6+WNrFC/Y36uzIg5OJ:sxZsuw/f1sRVjHb4/s8
TLSH
T1D322D8166E38A97B8CD7E219BA15BF53E6F9403251D41E48A6FCC61C05E76CE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 24KB
SHA256 58fa697a38b76e3c8a642f053ff682a106a273aaa69b11ea1085664334503f5b
MD5 0ca35db849f3a09a00cb513f65cd1ad1
SHA1 6def02cd896b1d5e075a6493806ba7d71bedf71d
SHA512 c3c1f66902bfd1757521f03ee219ecfc3b9a7849152ad45e904ccc44e577f60004346d7044f3234da7fa0e4fbc95434adfdc7b4ebd1370caeae273b4097613c2
SSDEEP 384:sxZsuw/f1sz66s8qMpRiYnazAW8pZS15posJWeT+nVjHb4/A8:skuw/fY4Mnc7WeT+npHbqd
TLSH
T111B2E705A924C83B9EC3AD18653D7E33E9EC506222C5DEDB1AECCA1C019E1FDAB47457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1db5e56730c5166ea3254250bdd265581f65ee94d1abb97e1d692d9306f7e856
MD5 39f175dc5f82fd33449228d5278ef8f5
SHA1 841c21aeeed1a661af17d02832881266110f1fb4
SHA512 1b1321c4476be06a1f6f3b786c68cd7a10487c52cdef0b0a44ac24e0aa289b0ec48827314c2d8e0f2216c81ca0fea963e81d2ee6ee62ee2b3c32e87f33abff4c
SSDEEP 192:sxZsR5Ww/f1slMIdpqzAHW6+WNrFC/Y3CuzIg5cJ:sxZsuw/f1slVdHb4/eO
TLSH
T1F422E9166E38A97B8CD7D21DBA55BF53E6F9403291D41E88BAFC861C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 747b01ff5220666e5daae8ac1f770f01c3fc3ae66df45a15d078d5d69ccb8576
MD5 2a2913a1ef62c644698eb23b2fed6665
SHA1 71d31363745096b0e71e236c0091b78c50dd113a
SHA512 c1f96104f1397e9672b4ba2515dddd969e59d4f3246b2b0885dad40bee8a3766e28e05c0f9420b8cd2dba61296332353ad1cb78f9b801b8bde205ff8c7d771a6
SSDEEP 192:sxZsR5Ww/f1sRMIdpqzAHW6+WNrFC/Y3puzIg5OJ:sxZsuw/f1sRVdHb4/J8
TLSH
T1E822D8166E38A97B8CD7E219BA55BF53E6F9403251D41E48A6FCCA1C05F76CE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 66053c0c5bbbeaaffd3a73539b083d8b8534a1ccad7255a3b220e31fdf4266b5
MD5 d3976fb3e4637b3b8a2dacbd4c91d912
SHA1 a9c43dd8b222435fc38ef1d59bbf26d14ecd5e12
SHA512 f8227a3377c759ebeab7993d8adce39e8519a10342c0f157c87acacec8b0a03d95f0256855971e3153b2d4424a7a1683364c991d5565b752994140bab3d95851
SSDEEP 768:YI30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ720rolZM9:YI30AbSWvS2l9u1jaLmLZ12f6
TLSH
T16EC2DB3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796548D4047FA984C02C77EA91174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\temp-index
Size 1KB
SHA256 660b31836f4dc66d6651af15cfd4550ac46bf88e3cc336c82a4a17eb2045c083
MD5 594a6121c880f8f9a41f2b51e3a287f9
SHA1 ea52ca35713093776695d1fc1d0f73ebd46c644f
SHA512 a99422bef51f9a0a5fba9eaa2beda854ecd5773456da540265a6afafdd6b3038ea30085590fdcef8fb7624d81e6107215078e80c754eea9940bf93ceece15778
TLSH
T1293196878E425D97ED9451B5203D24457334D1CC13487F0F52FDE136EC93740AD4A468
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d0988.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\the-real-index~RFe5d0988.TMP
Size 1KB
SHA256 209a8be29b0cc64d0c7985d53ec6f81e5366f86cbe874831a4a3e6bec429ce68
MD5 f54477f5d2dcde9b589f6c9047507a03
SHA1 2fcb27853ba7ec41d15d7f0a98fb4e7f2a6032d2
SHA512 111ece9b4a5a28ffcd3a835282c61de21a455c3615abc65de2ae0bcc2438e57fba3b1242fcd2cd372b6f0726a9a60af8e727d3b7a1aff96ead0246121b8a1ce0
TLSH
T17B31755745521B67FC802272086D68973336E5881344374FA3EAE139ECC1B84ADCB9E4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 9010e79bf4f0d64e76ea1643aedba98c42178b01889b28e974e82169b6ec873a
MD5 0cfe31f21c9f753cfff6f9d10eb5a5be
SHA1 f4345eee3d7e97cad9e7ce073622e726070a6c96
SHA512 84dc01275b56dbade61ea8ed215f7ec0da09a8639d618ad34878b1f93b9321e20fd50ddbcb8dcd448a3cf3c14d3966400b6e8152738f447f9e92d35a2f4d14f9
TLSH
T1ABE0C0F36EF71850FCAF83D5247088B141057898DA08FC8F10AAA3C764703113809C10
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 78b9b06768fba1adb40eb6c02b3befe4d569b013800d07c1670e35a3fb11ea67
MD5 33da618ac54c95e1125f4233aa8cd32e
SHA1 978553615b52694b295cba3f1f98fd0d573afc84
SHA512 85fb62077f187b540e6db44347e6d2fa3ee6f75a9729062515a267f5c4e29dd96e602d0e666f29120be6bb54b5e83929d2cc4ba297ee3f62d82471b7265894ad
TLSH
T134A0021955D84C0DCC054A752AC63D5032356D9AAA169397DCD4A0658DD62879603568
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 368d97adaf0f43cd51102fcd4b7071336523b8ca76f9cbdc05660cd2b0fc8bb2
MD5 c173d1a7d944ebdaacb659da0b06c8d4
SHA1 ce6b63e2deba2c3c3cb1e70d3aef6777976eb5e9
SHA512 25390979a7110484133f4365c26796d481f2867ad01301b258ecef693991ccfbccfaa8d0f27a01bda92e2fdd7bb69ad68c7c4fbdbce68a0e94f26efc5f09816a
SSDEEP 48:K06lI064I5bkjUISs5K9Q1K5xipYb8IKyLWRsQO00tbYvAISotK9M1OtxG9Yn4kC:KwhyKSQSmdiK2oh2YKXq6v
TLSH
T11C91431130B746007A7D7A4C86A1872E624236B33055E52BBBBC50F69E6FE141DFEACD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c7da2699-ff33-49f7-a8c8-4a16a38a00e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c7da2699-ff33-49f7-a8c8-4a16a38a00e3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d25cbe63d40f7d6fadffe9220bd2fe998e6b9cea96da1d7318b7fef6987da04d
MD5 aa621ea8b737fc445a4e5081ea36dc7d
SHA1 bab64bfc562ebb64a2e601b42c9c3118379b55a3
SHA512 303746120c68ec7b75ba0b968deeefab26cc9e156fea15bb9651c466076cc7a2d61d6f4a4503e1d403c844f0fb8e36d4c06663d0ad620e5442e7166ad80872b1
SSDEEP 384:mZcIhsNNYwupuALOu9iX5FA+eM5lwTeUCmiEoI:0hXnRaE+5lweKP
TLSH
T177829D7699789C3A68F2E655F4463A039FF98067DBC86F84D8ECA71D02DB594130BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6ac1d0d55cb4bfcc87ebaa92059d7740a84de559620b14184c834bec113aca99
MD5 26055e5975347a8c4ebb9ab1279a24b5
SHA1 2fc5caaf87de13f92e1d82af28f4c5eb6fb99489
SHA512 0a2baaa796e609452cbe3f00865a2b66d173a264e8c70af05e75c0a975b4a9506c211b70b4bc19850543b496f86bfc61514e42cf8c22f13b8e3324091f92be93
SSDEEP 192:LONe6AmwprQmiUyR76siX5FvY+9JiIXU6:LONe6ipd+6siX5FA+qGU6
TLSH
T109020A35AD686C7B89F3AF45B54B3B239FA9117BDA942F84D9E81B1C01D768C1307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c8de32bc30cb5d1a74337a9a1ad8acd0b9c1ab6cb44707f55c02621a1b39bbf6
MD5 8387cd17e930963d2ca93c3d3a5bd811
SHA1 03f3a6c54651748c66eb86c342b462a05ae1479f
SHA512 50a24e0a8b93b90aff10e527cd13ed77f1e15aa93abbf2441f90e1ed3465ec27f73c4667f92d016585c0b0d23a732da2ac008ef214027701d2f68ade8331c2c9
SSDEEP 384:vZcIhsNNlwupuALOu9iX5FA+eM5lwTeUCmiEoI:nhynRaE+5lweKP
TLSH
T11E829D7699789C3A68F2E655F4463A039FF98067DBCC5F84D8ECA71D02DB594130B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d84ace748f1c1713841722284635755269012d492c897b5cfc3167741df9aed1
MD5 913e667750151cca8e72ca7d58c990ff
SHA1 1990d57dbd8185cf72f530f0fcf2d52b4b336644
SHA512 bbaeecaa47cd08c83afe1aab1e54744f3d5f158dcbe27f680166468fd9690c65fa02c999a6677e494802a8fd08d061edc5dae06ab6f91d01fd56af0d9b362083
SSDEEP 192:LON46AmwpyQmiUyv7BsiX5FvY+eMylRU/YU6:LON46ipuCBsiX5FA+eMwlU6
TLSH
T1A8123C36A8786C3F4DE2A551F04736139EA5426BDF886F94D5EC1B1C06DF59C530B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 e4e7155e2297f3a02d8627b5b7b272a55ce387e043dae1abdf56204d5e181110
MD5 310e51d6f9af9f6a137a4b0ea083f197
SHA1 68c88c2674e373cbfd0e75d8dee833871206979f
SHA512 51bae4b184c084e859e43187a7cd94d703a44972144fcdd164e487a4ebbc3d20d63fba079904acb2c7e1e1c8bab4a8c546251c842fc4e72925b366a58dfaecba
SSDEEP 384:1iFiZcI6zsNX8TUNTUlIllwupuAeOu9iX5FA+eMklwTeUCmiEoI:8FQS2wgJaRaE+klweKP
TLSH
T14EC23AF648D7883AE8AD9B47B73D3E038EBDC067B6849944B798561CCD960BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29db9161-fc31-4098-894e-6a350baa7611.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\29db9161-fc31-4098-894e-6a350baa7611.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 761f071255af605a27e5a88dd3f1a6fa664253cb284c2abc737abe5912693a35
MD5 c623c5a0ca6292ce17e720dbc3f19215
SHA1 9c3e76ef8c1415a20b68bd960c754daae474c348
SHA512 2461e680be72d453ce8787953f54f6b9c3e1e67bd34e9f30df00464d72dce997b70d0b264ee21b09129a8def7336da91640eb594d661789576362beb8f3cf13f
TLSH
T103410748B6EA1108B3B76E5A9BF2A86D847FB8772F4BD56D10110D4E0727A40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download