hxxp://google[.]com

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 00:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample260930-affz1swtb1

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3060	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{D4DC6FCA-80EA-4044-BE95-5FB5F932408D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5480	msedge.exe
5480	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 4608 wrote to memory of 3824	4608	msedge.exe	87
PID 4608 wrote to memory of 3060	4608	msedge.exe	88
PID 4608 wrote to memory of 5012	4608	msedge.exe	89
PID 4608 wrote to memory of 5012	4608	msedge.exe	89
PID 4608 wrote to memory of 5012	4608	msedge.exe	89
PID 4608 wrote to memory of 2468	4608	msedge.exe	90
PID 4608 wrote to memory of 2468	4608	msedge.exe	90
PID 4608 wrote to memory of 2500	4608	msedge.exe	92
PID 4608 wrote to memory of 2500	4608	msedge.exe	92
PID 4608 wrote to memory of 2500	4608	msedge.exe	92
PID 4608 wrote to memory of 1812	4608	msedge.exe	91
PID 4608 wrote to memory of 1812	4608	msedge.exe	91
PID 4608 wrote to memory of 1812	4608	msedge.exe	91
PID 4608 wrote to memory of 536	4608	msedge.exe	96
PID 4608 wrote to memory of 536	4608	msedge.exe	96
PID 4608 wrote to memory of 536	4608	msedge.exe	96
PID 4608 wrote to memory of 4880	4608	msedge.exe	100
PID 4608 wrote to memory of 4768	4608	msedge.exe	101
PID 4608 wrote to memory of 4880	4608	msedge.exe	100
PID 4608 wrote to memory of 4768	4608	msedge.exe	101
PID 4608 wrote to memory of 4796	4608	msedge.exe	104
PID 4608 wrote to memory of 4448	4608	msedge.exe	113
PID 4608 wrote to memory of 5316	4608	msedge.exe	114
PID 4608 wrote to memory of 1916	4608	msedge.exe	115
PID 4608 wrote to memory of 892	4608	msedge.exe	125
PID 4608 wrote to memory of 892	4608	msedge.exe	125
PID 4608 wrote to memory of 5480	4608	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffff76dc188,0x7ffff76dc194,0x7ffff76dc1a0
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,10245112211453139826,17799081097015102308,524288 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,9232871429708574997,11963235863905989286,262144 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,8818887199678897925,13118723221554930535,524288 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:8
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,8265764690927944751,735890137660136050,2097152 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,9096319606159442756,5653866036805470791,2097152 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4960,i,11297432922970502663,495322276118649394,2097152 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:1
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,17143094100720057612,8580585864338531855,524288 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,1779406492176418194,16023987163256536076,524288 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,16428487376116187812,11091217001699227494,524288 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,16428487376116187812,11091217001699227494,524288 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,13532971808739458254,9290173643175773799,524288 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,5035612880750381483,4273766304233404730,524288 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,3314684046809999197,10316205763686721653,524288 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,14252459027178245410,620420078180864134,524288 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5656,i,10259730389404025994,12428261582767868354,262144 --field-trial-handle=2336,i,4658129761315517332,12502323584447459946,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5480

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4448

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2f67a665126f0d437497b394b50cc87ce72773b6abd85385bb78adf0ad326302
MD5 a98f4348736e1c7c5e70799864c15774
SHA1 fa2e3725e970aab935f77d155b649177f50be7d6
SHA512 c1dd68c743d45af6f713c7d8fade4a675abe4d224e86b956c5aaf959ccda0a92b9824b0e784a0ee9992843bfc2a7a73f85267479d6e5ffa0aa5827760492419d
TLSH
T19ED02B20B6A87654E006343C0114428C31CE5570140BB400809413A40FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 2b8d47db647e1ac8a5bb4518b76554de6b5fb7f1e6d0080e3304295a9490dd7e
MD5 ae449f6d2c3c6c302a3d032aa1781329
SHA1 d6ea24f4c47f312aa7b0e35e41301ec8fff81d60
SHA512 34611d809a6de82aa8e5c00e64f1ce0ad99ac5cd3ccaff394740042f883c44754e612a0ab61d1f851065704353d2eefe474d3560f0000e7ecf3414624f3628d8
TLSH
T11CF0F9A5C821AC7B18FD0B2960A40746E750136B2641AC5B3B3E811C8FB053B454682C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 58ec48d228f5262f22e371199c31d28b823a09bf49c06efcfae35dd8f97ba7bc
MD5 5fce333398fdf98b79445d683a66f6ce
SHA1 bde99ce62d61d2fbe6f4bc452fab80743b2ccf05
SHA512 b94ea785b5c8c1b7b738ae2f57965195355523c7963dd7d1397781b93ef861c1d381464d5dcf3575f431992ed9ce967116e77b386650b531cf685756f4356a73
TLSH
T13071FC4EDA718037FFA8B47181EE028B35BD46CA9ABBFE5340A8FD7D1C023217158194
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595913.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595913.TMP
Size 3KB
SHA256 77cc49f5c09004fcdcc2adedb35b3b736aaf22f92b657acf1eeec197a0eac679
MD5 8d7bc96b3a09b9f63c1e1b246b54a270
SHA1 e2e9b009968972b7e33aaf6b89f975f41b5ab375
SHA512 aee3b198223b4cfcbc644f410f418555ade9f429a0ae1db9fc685b70982ccef7ccad8ffa04f9cb741958d88b877425a9b3a4711f6e68e94b70510856d5dbf5bc
TLSH
T18F61EA8EDE714036FBA8743181ED068B35BC56CA9ABBEE538068FD7D4C023653119244
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 dfc08d89ab2526b94f68e8c0cbdf258b029922ed674b0e75c2b18e36574454c9
MD5 2e65ae5fd7f73a2ee8e8daf34d8cfd5f
SHA1 7f1bf078ea52aa36d65c725d2f4fe57fcaca5f55
SHA512 1b89af8cf9d7f45a822034f60448bf90db142b60577ddfcfb08d2610a17dcb9195b3423b6b63e82730ff98450c7951716c38669ca4d594736e7d21a0f04ec09b
SSDEEP 48:YALlgyDPNHOhGNhzHhDhvhOhesfRs+fo7gmzs1rsLzEsRu0EsOcs4Bs0FsqCKsqd:D1BOwNR5hUPFau2ztu0aMjxtNwQ
TLSH
T145918AB7C3E8812DC91156F49715AE1FCE2D0618432C3C6AC8D8AF5B93E2471E25575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 1e5541c155d730e34ca07c72c636495932ab56e3ba4ba44bcef6b71d1bf4b11f
MD5 f7dba4bb66c0fa174893c764c2e48849
SHA1 521a8a5a00918e3479eb4e8ec7d9e7e1ff8359f6
SHA512 64a83183f2f5292cc7ba6295a5caae47bad02ccd0f2395c3d3fa10f7f01e9c086bb988ac2a54a78ed953a62ef4051affe9df97bf15ec6a7602c9666c4684b979
SSDEEP 192:sxZLRTkV/f6s9xQZLo8TzodpodxHW6+WNrmd/YoKRSHFfIg5btLJ:sxZLiV/f6sTOLIYHbc/sSdVtd
TLSH
T18A42E7556D78697B4CC7D209FA15BF53E3FA103291D51E88AAFC8A2C14E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9640aa36625a98e8b733ef1aa1ef1b584748bb5d29c9b78c89e222eb36703fe8
MD5 0bd218a19e75e7897cefebe797e1b8a0
SHA1 5df32ff17430980c204f012856bda5326159e222
SHA512 1a945e32fd9e6a1fe0687a9bab9c43d8a5e4e7ec94916fea42312a928a2e1f9e98d6e672fb8e6f802a805e9c27bdbdf060a75b424bc73b0f8fe37d1070e434d6
SSDEEP 192:sxZLRTkV/f6sbXaQZLo8TzodpodxHW6+WNrmd/YoaRSHFfIgjtLJ:sxZLiV/f6sOOLIYHbc/wSdjtd
TLSH
T18D42D8566D78697B4CC7D609FA15BF53E3FA103291D51E88AAFC8A2C14E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d9899d193f3b446fcea06edb183b15e1a94615a4a6d91bd6a8b1df67411767f4
MD5 6c2c88d0db5482c7a2cf1a26294d2e2d
SHA1 0d2a858b38ad64a9b1ef081ac7e9983320af70b1
SHA512 c6aa16fa22e56dce6031f48d3835e2fdf010ac5bb6f9de8809016fa873c9e69b6216deb34666b2efed56326b880277dc5ab60acee01ad690095ca43dadfff866
SSDEEP 192:sxZLRTkV/f6s9XaQZLo8TzodpodxHW6+WNrmd/YoaRSHFfIg5btLJ:sxZLiV/f6sAOLIYHbc/wSdVtd
TLSH
T1A042E8566D78697B4CC7D209FA15BF53E3FA103291D51E88AAFC8A2C14E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 00c680d45dbf587121f910d589f3721773dfeffd5499e367d80082cb510720b0
MD5 c6d771416b7b579312c504193e67642c
SHA1 5a6c51f285b11f1bcaf3efc676d069d2a536b41a
SHA512 53d4efb951d3bb7e4029755555fc07c342f342ddbe7bf44d931b8dd11f5b2cc57389f355596f8bc7c75ea8468314dfd282e0c8d46e4d2eab52b6f238c1695f4b
TLSH
T174A0026865D08D27CC111BB1698301D56770481039A686136D91A459AE5328841D68BA
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 aabc234de2a782b2125958ef7f59c572798f4b9b3be748c60b92a90f8b4ac11d
MD5 23a49c962aa5beb8a99b2f6ac5278514
SHA1 90e2a60be2fa9d5258bd3dd88d8b9e412d7fb5a5
SHA512 2f5f10be0df17ea4d0d452fdbb6c6f053b4adc221ba7a5bd37ae9ccd94a12855531598568b984c14e61baf57cac24b77be6143f94b37e8b696a9747d983850ed
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgC:ST/2dXOJhJlpfnpp3tNXVrN3g3Xv
TLSH
T171B2211571BB021039FE391892B68B2E168271733119E66B7FBD04B68E67F085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 65f218ee1fe7ac8dec35aed22c9fd55306e5708d9f18a807a9a9748e998aeb9d
MD5 95992583474de0ea9a9bad4388db5699
SHA1 4ce6b11a36779fe0612f66e8bf984f093fecf0be
SHA512 c861c046a44204d6b7e08d5e988840763f725a170b6141d3fce49f8d6038a3dab0ff17a7490a698cecaf355d2e40746bf1541471e5489c38ce408e60cb99af22
SSDEEP 384:ngiFiZcIb3sNA8TUNTUlI44aKMyYzw2f0BCcD/1XSU1uPimVZh6DKhHDgL/7IzCU:7FQb31wgYPGBCy/1isUimfYGHOU
TLSH
T124C24A32E8A4DABBEDEA4FD9A70A3643DEE44153D9CC9AC4D5D85D1C00E719D130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 feb865f00f5551fc02a4cc8ff058525366f4c13650db2b7fc2c36ec48b4e0d44
MD5 e3cc399b573fe62677a3374ce35f7c41
SHA1 029b976956047edfd31b4e51a9416d02593df44f
SHA512 e6d42c1c8c5eadc96a6b396242086d3dec451ad1f1752009e0da6b4429a29a24bf20d5704542a4e15f5252f1a3fe80c7ed79f64509485b7a40cb60d0e2941bd9
SSDEEP 384:n1iFiZcIb3sNA8TUNTUlI44aKMIYzw2f0BCcD/1XSU1uPimVZh6DKhHDgL/7IzCU:8FQb31wgYlGBCy/1isUimfYGHOU
TLSH
T124C24A32ECA4DABBEDEA4FD9A70A3643DEE44153D9CC9AC4D5D85D1C00A719D130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 7644e0805e67d355d22acb3d630a786bc4c6ab8493f0e0e4737714c685eb1f5a
MD5 4a5d2bae2f88724ff1d041d654960b0f
SHA1 1f2bbd88f93aaaec14565c306ba3f2a4c1798a30
SHA512 e79ac25a3d1f8dd63ea98de9a42b92632cc2c18ef7060de9abf20a91263c3cc9e2b1515f8fd675f91f6aa18625817e3a0e73197effd171703c9197cef393ffbd
SSDEEP 384:n/iFiZcI63sNE8TUNTUlIm2aKMi/4w2f0BCcD/1XSU3FT7O6R2FeoivgL/7IzIou:KFQ63Vwgc4ZBCy/1iyFT7TRXYx
TLSH
T139C25B36ECA4D9ABEDFB8FDAA74A7A03DEE0016395DC85C0D9D85D1D009759D0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 31KB
SHA256 5acff5ee6d9ec33f01d39f90967f94ec836cae81a7c9f6a99fb0d16a939fcb39
MD5 664a62ebbf204b6ec8056be67b81e1a1
SHA1 c9e4a4b678a2da324926342e4422f2f7cacf31e2
SHA512 3464716e2337b8b7ba0a90a01946fbe858c0e69a93a08a28a6dcb4fefdcea8e1911251e5df1761e7f945976b75744c7f2cba51399e19d9d713fb28ca725ab312
SSDEEP 384:n/iFiZcI7h3sNA8TUNTUlI44aKMygzw2f0BCcD/1XSU1uommVZh6DKhHDgL/7IzH:KFQl31wgYzGBCy/1isxmmfYGHOU
TLSH
T195E2B3F298E799B7E8AE4B87A33D2E0299FCC153B5885584B7C41D1CCC961BFC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bd8123b184b42b5bfb356e0fadb301c8e72e6612fbdc8657c570fff20c1e0c8a
MD5 46ac33795404a103c3a0fa1740bd70b1
SHA1 9f334f11d7f9eb7073748b349b29fc5603cc9724
SHA512 b70ad51359a472478f6f527fdc0288d6bdaaff0f36657fa51d4b485a46ae92d9e11477f6dc54bac785f773b4212724131d311976b75daa4705f9da1f0b61b320
TLSH
T17C412D5CAAEE0148B3B76F4AAFF6A46D547F7C772E0AD49D10110E4F0662A40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download