hxxp://google[.]com

Analysis

geolocation tags

asiadelhiinindia
user interaction
yes
max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 15:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample260930-tfamsawsfx

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3520	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{7AE4C64D-2FA4-4310-8598-5A54528703AB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4324 wrote to memory of 2832	4324	msedge.exe	89
PID 4324 wrote to memory of 3520	4324	msedge.exe	90
PID 4324 wrote to memory of 4104	4324	msedge.exe	91
PID 4324 wrote to memory of 1048	4324	msedge.exe	92
PID 4324 wrote to memory of 4104	4324	msedge.exe	91
PID 4324 wrote to memory of 4104	4324	msedge.exe	91
PID 4324 wrote to memory of 1048	4324	msedge.exe	92
PID 4324 wrote to memory of 2548	4324	msedge.exe	94
PID 4324 wrote to memory of 2548	4324	msedge.exe	94
PID 4324 wrote to memory of 2548	4324	msedge.exe	94
PID 4324 wrote to memory of 3924	4324	msedge.exe	95
PID 4324 wrote to memory of 3924	4324	msedge.exe	95
PID 4324 wrote to memory of 3924	4324	msedge.exe	95
PID 4324 wrote to memory of 4836	4324	msedge.exe	96
PID 4324 wrote to memory of 2044	4324	msedge.exe	97
PID 4324 wrote to memory of 4836	4324	msedge.exe	96
PID 4324 wrote to memory of 4836	4324	msedge.exe	96
PID 4324 wrote to memory of 2044	4324	msedge.exe	97
PID 4324 wrote to memory of 2044	4324	msedge.exe	97
PID 4324 wrote to memory of 4328	4324	msedge.exe	99
PID 4324 wrote to memory of 4328	4324	msedge.exe	99
PID 4324 wrote to memory of 4328	4324	msedge.exe	99
PID 4324 wrote to memory of 4044	4324	msedge.exe	100
PID 4324 wrote to memory of 4044	4324	msedge.exe	100
PID 4324 wrote to memory of 4956	4324	msedge.exe	101
PID 4324 wrote to memory of 4956	4324	msedge.exe	101
PID 4324 wrote to memory of 4128	4324	msedge.exe	103
PID 4324 wrote to memory of 4520	4324	msedge.exe	107
PID 4324 wrote to memory of 888	4324	msedge.exe	108
PID 4324 wrote to memory of 2264	4324	msedge.exe	109
PID 4324 wrote to memory of 4040	4324	msedge.exe	110
PID 4324 wrote to memory of 4040	4324	msedge.exe	110
PID 4324 wrote to memory of 4680	4324	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffbf49ac188,0x7ffbf49ac194,0x7ffbf49ac1a0
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,9862558517710202475,5642536912684631914,524288 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,16648783299307664471,9541333413692490854,262144 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,18177885803359805308,5227610941004805739,524288 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:13
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3668,i,15757251126135613247,815353321217740974,2097152 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3636,i,13917343192466335313,6099979678261568604,2097152 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,17064709608384255283,7821583262974026832,2097152 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:9
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,12147338378487502448,11712382298204072848,2097152 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3768,i,4904012048111486970,1306686456180069953,2097152 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,696238622038704923,8890398089967695516,524288 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:14
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3824,i,2895234156898759025,16261321225030052618,524288 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=3928 /prefetch:14
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,4526290617238720560,14660062329692509667,524288 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,4526290617238720560,14660062329692509667,524288 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,2328870198888754316,6639351962881731848,524288 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:14
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,18347261231707277624,14486513475447278315,524288 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:14
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,2355466519317717279,12731427463034971447,524288 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:14
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,7471441858024115404,3673742627449315554,524288 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:14
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5516,i,7494932290149040123,12740559646586683568,262144 --field-trial-handle=2248,i,12690547828021656732,18145408183947712513,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4680

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3220

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 6af87bdaad0e59cac6aab210e8ed9a692f593a3a0a3bcede59ac09103f57f9fe
MD5 64f1e56db1dd32982d00155063c395dc
SHA1 bb0bfe64edb4f55d17a81d77c1d4f5f6c97131e3
SHA512 1bf6db154ef8833dbfa2275ee12ccc114176408e9bbfa8ccb10bfa602d8cc8c290838e7e6c4273c2da95de43f860f3d8024bd23d387c2326fe7fa66e3aba8cf9
TLSH
T128512281A2D85A54FF9D73398DD915873EF0A97666C39E0294A4CCF76F063D443E4108
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 0d2ecc8d9a896931547384edf4d5ade66ad49de768e8ef0bac5ee445f4f7dced
MD5 d7d09eec6859ab49c8bab45c9b0a79f7
SHA1 4c0622b168f5957b9f04876d88f8a8ec37fa9226
SHA512 2e74fb762a28bc2039f66bb1e6edb1b3268f3122911126808821797605eff52466e19809587eea41b31e47b75492bb72c91848244e3df0540ee299b0eb9513f9
SSDEEP 96:DRNiO8LyWG42ani0FdjhnbBzuu046/DpmwQ:DvhkyWGFaimdjhnbBSu16/DpmT
TLSH
T125A1AEF7C3D8822DD91156F4AB15AF1FCE1E0A18432C3C6AC8D8AE5B93E2871E15175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d50369de6c0229ec245504ee202b1875ee2171a4171bc7f0cb5435a4a6db8b53
MD5 02d9057ce9fd32d2255b3c5679ce04ee
SHA1 e54d2d097ecdb5c8cb50f01b8c1044ccbe6dd491
SHA512 0933cbce45a166a25a74aac934ae7a2965704f93e510f2343e730d80ce810574e90c8fa1b0c1a66774311c4658d75f3ce3fbb0d7d0cc42646f32583f0f57abc9
SSDEEP 192:sxRsRnbT/fstsUjyYhgzoA8pjmf/g6+WN9bj/Y23cDGfIgIJ:sxRslT/fstssbZ8/5x/+Us
TLSH
T15B32C706AD68A93B4CCBD21DFB65BF53D6FD5032A0D05E48A6FC8A1C04E76DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 82734ae0e793f9b4f2bec921bbaba61ad7f3f8142efbdef547ead5fcbc66d90a
MD5 534e5e1d743088276f7f0608064c80da
SHA1 ac239442323c4edebde21a066f384d84deb7c651
SHA512 c3cacf3ba170950ef9646e79ab8ebb38aec87249a444e41faca750f5cdab905cd1a0c63c1c0005950d0a58ca30e0bbae23fc4801aeea8084eefafffc5535ee27
SSDEEP 192:sxRnRnbT/fsts0jyYhgzoA8pjmf/g6+WN9bj/Y2tcDGfIgDhJ:sxRnlT/fstsMbZ8/5x/sUX
TLSH
T12942D806AD68A93B5CCBD20DBB65BF53D2FD5032A0D15E4CA6FC8A1C04E76DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ab6991cb86b1d1b26da7e267a6526b7c87d224b4817518ac9e37f6e6f745039f
MD5 0239bb31ddb8707be674fa67f1cbb201
SHA1 fb888c6bdcc0f4a60d6398d63b7fc33fd91d12aa
SHA512 7aea8d397eed2dfed4b37ef93e81ced8ff649c7e0846958ba2e84bd59005b538d25585099ed18e7c4c1c5aefe31aff155aa02a5f7ae3340d26a4373c268061bd
SSDEEP 192:sxRnRnbT/fstsCjyYhgzoA8pjmf/g6+WN9bj/Y23cDGfIgD/J:sxRnlT/fstsWbZ8/5x/+UN
TLSH
T1FB42C716AD68A93B4CCBD21DFB65BF53D6FD5032A0D15E48A6FC8A1C04E76DD220384B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 89d34af20bae36cd5a698172ef869e4c75806ff91b316a8e3963ef02d38a7d2b
MD5 ede5f4056a9c19f5e20ae99f4815a39f
SHA1 2629d71ef0699ebef74d30fe474ccbacbb6bc8a4
SHA512 62f655b8f33fa76750fe772e90ee451cf64289d7e1618eebdd0bd4da6c2f42ddda39b2089e3a8d9cf0120e1dc238604cf696230e0a59de9e19509a53347fc3f6
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRW2roHrs:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0V0
TLSH
T17CB2EA2F644CCB7E8FD00A9DAC196F977EA802C796588D4047FE984C02C77EA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 01386b51286c719ffb2145980c038846bd0b9a6841a43d147496910d03afd98e
MD5 698d4a2dc53671ab0c57cc352a526019
SHA1 42ab5233dab6a0f4f8991d3f64fca90dba9a4990
SHA512 7d0df76dcfb2a451b4f7afe566275fec8a76844346b291890f8b73f6a34912aac56b8b88e20018745a98f3569b28d710d220bc33db2613d4e27866b390b462cc
TLSH
T16DA0022C96C4495FCC50D3B4969943642B7048646D438307E891E159E8521C4514747A
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 73489396c389d146ff53798924d061e01eeb29509e04dae9b3bfd17d7c40d8f5
MD5 f1fcc187e95dfebe05433ce2dee326e2
SHA1 0d9d17afa814e52e58bd84ecec1cb10e2681dc13
SHA512 cf0ccedb4dd5211681819e42091023f8e874249f08fe80f16450d48dbc1f449e951ce6268b1e61764b75443a9ba051f7a9fef0e78c39fbd46c131ac8bb9e9a9a
SSDEEP 48:KYhIBK6sExymEbA0+Cmk2CdPId8kKYBgGksU0r9+7FI5KOssryM:KYhOK6s42l6KGkRFiKOs6D
TLSH
T19991F702367A4641387E291981B9C76F464332727018EA7B7FBC50B29E67E081DFDCD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c09a2533-0031-4ec6-9001-72bfe12806e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c09a2533-0031-4ec6-9001-72bfe12806e7.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a611d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a611d.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 0394fb643f313674f2b0418dd2e562a6222a48e5b7d0e6096b16f0333d3c2f3b
MD5 12f88baa593a63f63059b01be65d00d3
SHA1 d967555acfce86b429c09f91f433525c93adb2b0
SHA512 841d1543fce5d0ebf1761d28f4f12802598906925e8e558063514941c45953f7595eb15e1eaf196e24c2c72400dc901db830c41d167e5c4b976bd5bea081aff0
SSDEEP 768:B/UxvxjgC+r3Q3xgm1KGUbcDmGA5b65Q92RQMPbQoR73:UZj3+r3jbEAF65dQDod3
TLSH
T11303CF32ECA4AD735CB5628036567356AFF84523D0C996A40DE96F0D06C76DE430BC5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6515ca7ade7847a67de41cd169ddd7fe24fc70c6ba746151b485e2bb55d711aa
MD5 a24defb6dc8516d32f42db623831ff46
SHA1 0462a0ca13c49902ea50d93568477aa00747e7d6
SHA512 8c412b8840d50b1c03074e7a8c9d877acf93e19e84b10cc83a64b300ca50909f944a7976d2e6c00c2f54224e196f87ebbb92b81cd1a8add26217921b0e90179a
SSDEEP 768:xO309xgm1KGUbmDmGA5b65Q92RQMPbQgjJUw74Hs:xO3DbeAF65dQDglb7Is
TLSH
T17CF2CF72DCA0EDB35CB566813A8672056FF98123E5CC968059E96F0E019799D432BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b0e17444e103291ddd25c3e0dccf0b83096501ac7918c8b8bb6a7bfcbb02c87c
MD5 310dd45fb46bdb12c91be39cda27344a
SHA1 2a1b27fe6c5bf140b74d3863d1bb1e0cbd8410e8
SHA512 d535390a0a583402a48b95f6a6d41e858e0c1e62152bd5804605c95a60427518c48d1136e7e9f3937278135ab01212bdebec9663cf054f9991cd2a0d462109b3
SSDEEP 768:AO3x9xgm1KGUbmDmGA5b65Q92RQMPbQgjJUw74Hs:AO3wbeAF65dQDglb7Is
TLSH
T1A5F2CF72DCA4DDB35CB566813A8672157FF98123E5CC86C059E86F0E0197A9D432BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 a5919fa3874dfeac06a5d5eb4d3f115b80223b41d4618ce69ea3a39df19efd05
MD5 937fc13b8a56df001739a66454547890
SHA1 4cf516ce12e7b65c51ee327154bfff61b5fe26f5
SHA512 316e75e2da0ec414274e624980d4ee8de1a94f27cf95a6914a5a31287ac9944d2f0185aea14806359c277e7759725d18e5146d543d2650b926418e27044454bd
SSDEEP 768:6FQR3fwgx8xgm1KGUjDmGA5b65Q92RQMPbQgjJUw74Hs:hR3xFAF65dQDglb7Is
TLSH
T10F1369F288D389B7D86D57832B7D2E05AEBDC163B488918077D8690DCC825BFC31AC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 0c5ecc7a1d9f097f6a5ade5f36c5f6b5bf98d8905664e91858dce3f681d3e016
MD5 23bc6759f49b5b5f81f85060ffe1c781
SHA1 73e3f0bcbaa0d1490500397e2ee3bc5644e75d0f
SHA512 847a9b6ecd309484f0f6d0b880ddbac2118c035aa4ab95a45af26e9014302d3c45cb87d9de2263351ca1e71dfe365f0f3d6966ca7e1c811ed29bc92f72363d22
SSDEEP 768:U/UxvxjgC+B3Gwz2gm1KEtDmGA5b65Q92RQMPbzFj0O:BZj3+B3hM3AF65dQ8FQO
TLSH
T1A603CF36EC94AEB39CF56280374BB35AAFF94463D1C952E049F96E1D06C768C430B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

582a44d8-a8fd-4938-90ad-e317907aa424.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\582a44d8-a8fd-4938-90ad-e317907aa424.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download