hxxp://lumina-womensclub[.]com/controlll/

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/07/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://lumina-womensclub.com/controlll/
Sample260709-pl8pjsbw21

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
736	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280735784873714"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{EE2B87E4-8A9C-4816-99F0-E82D943E4122}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1392	msedge.exe
1392	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4400 wrote to memory of 1984	4400	msedge.exe	84
PID 4400 wrote to memory of 736	4400	msedge.exe	85
PID 4400 wrote to memory of 2384	4400	msedge.exe	86
PID 4400 wrote to memory of 2384	4400	msedge.exe	86
PID 4400 wrote to memory of 2384	4400	msedge.exe	86
PID 4400 wrote to memory of 4560	4400	msedge.exe	87
PID 4400 wrote to memory of 4560	4400	msedge.exe	87
PID 4400 wrote to memory of 5096	4400	msedge.exe	89
PID 4400 wrote to memory of 5096	4400	msedge.exe	89
PID 4400 wrote to memory of 5096	4400	msedge.exe	89
PID 4400 wrote to memory of 3156	4400	msedge.exe	90
PID 4400 wrote to memory of 3156	4400	msedge.exe	90
PID 4400 wrote to memory of 3156	4400	msedge.exe	90
PID 4400 wrote to memory of 3976	4400	msedge.exe	91
PID 4400 wrote to memory of 3976	4400	msedge.exe	91
PID 4400 wrote to memory of 3976	4400	msedge.exe	91
PID 4400 wrote to memory of 756	4400	msedge.exe	92
PID 4400 wrote to memory of 756	4400	msedge.exe	92
PID 4400 wrote to memory of 756	4400	msedge.exe	92
PID 4400 wrote to memory of 620	4400	msedge.exe	95
PID 4400 wrote to memory of 620	4400	msedge.exe	95
PID 4400 wrote to memory of 620	4400	msedge.exe	95
PID 4400 wrote to memory of 64	4400	msedge.exe	97
PID 4400 wrote to memory of 4756	4400	msedge.exe	98
PID 4400 wrote to memory of 64	4400	msedge.exe	97
PID 4400 wrote to memory of 4756	4400	msedge.exe	98
PID 4400 wrote to memory of 1392	4400	msedge.exe	100
PID 4400 wrote to memory of 2824	4400	msedge.exe	109
PID 4400 wrote to memory of 3596	4400	msedge.exe	110
PID 4400 wrote to memory of 4108	4400	msedge.exe	111
PID 4400 wrote to memory of 1320	4400	msedge.exe	122
PID 4400 wrote to memory of 1320	4400	msedge.exe	122
PID 4400 wrote to memory of 1392	4400	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://lumina-womensclub.com/controlll/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff92152c188,0x7ff92152c194,0x7ff92152c1a0
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=1820,i,16545396622727579514,5142064511969729060,524288 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - System Time Discovery
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,634243281733583088,8578987998083447819,262144 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2632,i,3240015933142239309,11381194368067886836,524288 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,8466064814377671860,2128156098498273140,2097152 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,500667184747828674,14992133131609274281,2097152 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,7276185011825746730,7633363361509283741,2097152 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,2941812446706311352,15361645289374235075,2097152 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:2
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5044,i,2376683868231566264,1508461335192527765,2097152 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=3652,i,12027109846846567663,900707752173811891,524288 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:8
  2⤵
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=3664,i,5950194125424813373,2254217090912391962,524288 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5836,i,5351974435025014748,10613511683045923355,524288 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5836,i,5351974435025014748,10613511683045923355,524288 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4536,i,17855469833295741580,8201227402762776362,524288 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4520,i,16371633219058580822,10853029074884160229,524288 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4524,i,2667739229282691449,18429876742388458766,524288 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:8
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5268,i,11707521699794837071,15458225345006003591,524288 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5996,i,6900846644824330097,12936639341335938332,262144 --field-trial-handle=2312,i,467748057747090041,8613529270970876506,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1392

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f20c86e3d4c29185ae1423778fdf3367a3f8262b906e2089883f77a918906711
MD5 241e9ac3ae4911851f7c539098da09b4
SHA1 5f088bccdb578f1580f403085e87af096822b7fb
SHA512 b3764a4fd3715cca509719f2489c8bd99a35e86c0919a6668b679c68ebe39c58f35512448e8cdcbe996545039147ae94a3434b759f949a07d797873fedb5f173
TLSH
T1B271C834552693EFF7E7027290C12255F6328DEAFE273E411F2375B55E01FA08169389
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe582a09.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe582a09.TMP
Size 3KB
SHA256 3d6917d340794daf737720c48d9ac1ff8b83bb134f24642a2c16f906c3a53e9d
MD5 fe558318c8a9d7794eebedee34388999
SHA1 fc4c058840f6574e7178e80027d431d8dfbdf099
SHA512 cc0582197e7c8f25564b46126ae6b8e04ea06c73e35eab6ba0c7dcf328d3f5a227be01a0f86476a01a2ccb27fe7605c5ccb01c167fa2e2d8209bd76053266cc7
TLSH
T1FE71B634551653DFF7E702B290C12255F6328DEAFE273D412F2375B55E01FA08169398
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 968dd9aad2f66ac21a3fca94bbd79a31e329d5a373de5800c7dcbf0ef7060d81
MD5 8b3c8d5fa4de6aa6810aa367ceca57b7
SHA1 44a7dad1329ed9ccf14a6b67357e9db71ae3084e
SHA512 43885e8a72798188ef3b212897a0fe28d2b942e01975dd0c3eed1ff5df24b79af54e179bf7f4c7c535cf4a4987778320747efd2c260fe9e8ee8cee2960b03661
TLSH
T17641C0B7C7E9865DC8126AF49A18AF1BCE2D0604831C7C1AC9E0EF4BD3D2475E101A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e4dcddcf816c6926e75812fe3e6c831763a76fdf99ab6c4c5d6aae546dcf06da
MD5 8111ede27579d0262552c41febfe0c00
SHA1 6b00710204b9c9d3bff577d20e64e00d5e8ca632
SHA512 a86d45c9a84c7c605c43ce71a6fd88e5e3d1c37b6165ae47499afa1e9b74f2a6fcad1cc0b86f11fda7371fe02cca8ed29452896c6a5a8d8ab2db207c728f9236
SSDEEP 192:sxZMRj/yM/jK1Ml8UQTk//f9sJpAh+GMTIdpqPHW6+WNDGk/YIXbmpIg5JJ:sxZMx7q4//f9s/AhEMgHbV/OB
TLSH
T1F852E9126A349977DCDBD20DF945BF93D6F4447292945D48AAFCCA0C01E6BDD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 990fcad178338a452e1a86eb61bb51f873cd9bf9b8d64b6dedc595fe4c322b98
MD5 ea1446e4c2b08f5ed5370f1de52b64f4
SHA1 bdf87440743950c266f581c29fc545367e8aed35
SHA512 be67ef18cc2f9adf7f1c287748e652587880df278f431d71d8f6f6ffd332ed9670ac6ed9d0d4759fdaf7d71d1202c326d6a48a739b9f6e0303ee8c978dd65dc6
SSDEEP 192:sxZMRj/yM/jK1Ml8Mk//f9s+pAh+GBTIdpUPHW6+WNDGk/YI2YvpIgrJ:sxZMx7M//f9sIAh5MSHbV/L9
TLSH
T14952E8126E349977CCDBD209FA55BF93D6F4447292945D48AAFCCA0C04E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 94dbcc2b6190d0e10ff6daed3f5acf9a0b9684d02bd0a23beafde27b6c54936b
MD5 5d34317b14f18e44d72a81ea7a2b2a16
SHA1 a236e7834eddc81b1474bab260e6dbca78e8b0d5
SHA512 b8d213870e3685459a0000ad80052a92b6fed65590701e654e0aebef0e794bf5cd668fb765a5a4f1012d07037c9da1bc36d27972377c5d3ca1db2de091add590
SSDEEP 768:qwsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9ZroT/Q:qwsqxXlWvJD6Tu1ja54LAs9ST4
TLSH
T13ED21B3B694CCB7E4F840E5DEC266FD76ED801CBA6988D5447FA884C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d8c9e48b016a2bf1338159d03ecfff648bdb7338cd46abe17691b713fd080549
MD5 185ef730edbe9bc539c5e00fc807012c
SHA1 31e91d4616849377a04f154d2e51f209e8bbef58
SHA512 ffaed27c71e8f52083cad92bf90e525b5b10b5149290ed7e6c5071b927f6762c1798b76270f0bebf9fcb8f6b3b8d620569a157bc07ed8013122de7a1323112ac
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTy3JMdIdKegIvyNHIFKMko1+zC+4h:KYbaKYIKvdCKegCeHuKMk0+zC+4h
TLSH
T12291231A357A0212387D2868B266D93B4F413A63701CE46F3F7850664B67E224DFDDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

151da108-096e-474c-98ba-14d6cca48387.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\151da108-096e-474c-98ba-14d6cca48387.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 5b688acc86b2bf17f634f921da78e37c6c05b7ff30934369d06984ce03eae9d2
MD5 7af9790cb55d6fd2d304fc7350dd16af
SHA1 51546ffbdbd184a26c4330d8a76f734612c8909a
SHA512 f50c504ec7ffea7a6be12bf7f7e3d6f051643e8dfda55f728c140cdd9129c02ec30cb8c5115889e8a0fba7b2c0963da369040aeeaac3b6a36f0a668562c139b5
SSDEEP 384:9tNn/s3n9SfsNCNQbvGKVRNmd2OYoDXOObjI9G6w7JLf:9j+9UNYHmRrX29Mtf
TLSH
T10C929D326C395C379EE25459F48B39175FF4807BA7CE3E4496EC9F0D01CA6AC031692A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 bfcbe2c28cad9f9909ef44d2811e48934b1262fa6a13b5a9b6fe84606c7031a0
MD5 d3600da5448f7a8b2a9c93edfe078bd4
SHA1 e96a9a4468d109d8fc09767f6899122d962e9cdc
SHA512 8ee7717d29244ed4ea3a622c996bbc5adfa4cc7faa5e7bd5c5675bf5fbbdf79818a83300ee8f3ed88212453018ec76037e862761a80e9d262301959d2b0180cf
SSDEEP 384:ftNn/s3n9SfsNCEQbvGKVRNmd2OYoDXOObjI9G6w7JLf:fj+9UgYHmRrX29Mtf
TLSH
T192928C326C295C379EE25855F48B39179FF4907BA7CE3E4496EC9F0D01CA6AC031692A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 191b2ff1262bf1b8be7afb3e4b2da50891510810e003193bc26b4d049336b3cf
MD5 79d553bc41ac6d8acfab4e868a0c851d
SHA1 9b393b1ad17f49fce9809344926e9a59b291a7de
SHA512 3441cd8ba5e8d9b2729538b25e158522061cba602e0f196a41f40f92ef4bcd36ea5f97a1ff799f5e04a7328256ab984f0444016876909e15446a3b8fa1fedf63
SSDEEP 384:5iF1tNn/s3n9SJzsNa8TUNTUlIlEQbvpKVRNmd2OYoKXOObjI9G6w7JLf:QF1j+9C3wgjYHmRiX29Mtf
TLSH
T12DC23AF258D7483ADAAE4B57B77E2D074EFCC067B5896A44B3985A0CCC861BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6f637a0f95df8a986ab742f01f244e106d06a6f86067ce4cf23b50d7f58628ea
MD5 55f3b6da5e3999a1cb3ca252ed4a375c
SHA1 ee719f3aa5aeca10edc1b0f48afc21661127950a
SHA512 e854a24757c89deac97a56dbddb26861e60c8fe25fce448587be4d5fa0e5e721d3dd55c95e820db6a23b0cb0a88f500277e2775ee25f4e94cf101d4cd2d6519e
SSDEEP 192:tON06JkRtQmiUy/VW+RN5+Fd107sh3HRHJU6:tON06UrOW+RNmd28dJU6
TLSH
T11802B835AC386CBB9EF26D0AB58B37135FA4116BBA992B84D6E81F0C01D765C1347827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2cfa09aa36cd1edf5689b8b9c0f2ac54847d63ad426449602547e76ed852fbb7
MD5 5490dcb07c4d2cebdfbad500881db3ac
SHA1 acc15dbf3ed3417d153f21e1fff798ee1d72e24d
SHA512 ba04d54266bf468a26bbb2c3d6973369982009cb8f2f69120407b58828d402e75061789e49c13089f1d47cf944a21420292b2ae60744793195de6be6c8de45ae
SSDEEP 192:aONL6JkRPQmiUyzVW+RN5+Fd107ptpefPwoU3VclqCrU6:aONL6URYW+RNmd2OYoLXU6
TLSH
T12812FA366C686C6B5EE26845F48735135FA45127EECD7F8496EC1F0C01DB5AC130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f42ca4e323b7c30f821ca9aed8cc12ddcce0219fb4fb86093aaa1c208a1c9218
MD5 54a5a6a9d8551927975ffe8924a478e1
SHA1 de2e1e1a1acf4a5d083634fe5aee6425b8e9efac
SHA512 0341d428f6ae07493517de3d350f867b99e73967f516c2c2336d5d74e75186b9dacdb3e96a5c61ba87ad4f84ec2489a041dbe9e5536af7f252e634edb64a8168
TLSH
T1AE41F499BBF91118B3777E169BF7686E847B7D232E16C99D00110D4E0A63B40C8A2B33
MD5 SHA1 SHA512 TLSH

Submit Download