01a754158a6dcf32e407890c16458e0a5f8ba14c1217cfcad91228b2fbe309d9

Resubmissions

18/07/2026, 04:49

260718-ff33fabz916

18/07/2026, 04:44

260718-fcw5qabz2y6

18/07/2026, 04:37

260718-e8x68abx618

Analysis

max time kernel
149s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 04:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AssetRipper.html
Size 283KB
Sample260718-ff33fabz91
SHA256 01a754158a6dcf32e407890c16458e0a5f8ba14c1217cfcad91228b2fbe309d9
MD5 36b05ac7b812daa01f43f5b673972477
SHA1 e99712a2237e46991efc31ea4d7af16ebbebb681
SHA512 530dcdd0becab45be1c87d90cb95433cc968d2ccabc32f12ec0cb16629df1d5238bc42bffc58d1a682342bd45878d432297aa70ba8a15fc1e21b39ca66a7e2af
SSDEEP 6144:igUPz5xfprwz/VZIdxqdnLhjUsnVm7MeqWQ8Wz09mqdOeJ5PTQYbeHxHA7op9hrf:zUPz5xfprwz/VZIdxqdnLhjUsnVm7Meu
TLSH
T1AE54D670A178617E012F2689F670A718D35BE31BEB9851E4B97F92F497D3C90FA43098
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 6 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
26	camo.githubusercontent.com
27	camo.githubusercontent.com
31	camo.githubusercontent.com
32	camo.githubusercontent.com
33	camo.githubusercontent.com
34	camo.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1716	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288237998166998"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{55390B29-0B63-49B4-B060-7CFA4AFD021F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
264	msedge.exe
264	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe
4536	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4536 wrote to memory of 3268	4536	msedge.exe	88
PID 4536 wrote to memory of 1560	4536	msedge.exe	89
PID 4536 wrote to memory of 1716	4536	msedge.exe	90
PID 4536 wrote to memory of 1560	4536	msedge.exe	89
PID 4536 wrote to memory of 1560	4536	msedge.exe	89
PID 4536 wrote to memory of 4108	4536	msedge.exe	92
PID 4536 wrote to memory of 5868	4536	msedge.exe	94
PID 4536 wrote to memory of 4108	4536	msedge.exe	92
PID 4536 wrote to memory of 5868	4536	msedge.exe	94
PID 4536 wrote to memory of 5868	4536	msedge.exe	94
PID 4536 wrote to memory of 3524	4536	msedge.exe	93
PID 4536 wrote to memory of 3524	4536	msedge.exe	93
PID 4536 wrote to memory of 3524	4536	msedge.exe	93
PID 4536 wrote to memory of 828	4536	msedge.exe	96
PID 4536 wrote to memory of 5068	4536	msedge.exe	95
PID 4536 wrote to memory of 828	4536	msedge.exe	96
PID 4536 wrote to memory of 828	4536	msedge.exe	96
PID 4536 wrote to memory of 5068	4536	msedge.exe	95
PID 4536 wrote to memory of 5068	4536	msedge.exe	95
PID 4536 wrote to memory of 6060	4536	msedge.exe	99
PID 4536 wrote to memory of 6060	4536	msedge.exe	99
PID 4536 wrote to memory of 3820	4536	msedge.exe	100
PID 4536 wrote to memory of 3820	4536	msedge.exe	100
PID 4536 wrote to memory of 4476	4536	msedge.exe	102
PID 4536 wrote to memory of 1324	4536	msedge.exe	107
PID 4536 wrote to memory of 4444	4536	msedge.exe	108
PID 4536 wrote to memory of 1320	4536	msedge.exe	109
PID 4536 wrote to memory of 204	4536	msedge.exe	110
PID 4536 wrote to memory of 204	4536	msedge.exe	110
PID 4536 wrote to memory of 264	4536	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\AssetRipper.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2e4,0x7ffd5f32c188,0x7ffd5f32c194,0x7ffd5f32c1a0
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,7036632590620740331,173077593294749934,262144 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,8595773148334498674,16123075207135391992,524288 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2368,i,18292034628697465998,17062195603083022114,524288 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=3008 /prefetch:13
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3360,i,2016591449479621266,10209845348878755370,2097152 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3356,i,1840318485641874543,657179808136641873,2097152 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,4412247539441358411,9457117049522564511,2097152 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,9113605158544158740,16144610261978121123,2097152 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:9
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,8999286841769335361,745870979569164034,524288 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,7207064272246151029,8432410394550079810,524288 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,9585279113096433113,14530426808136804166,524288 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,9585279113096433113,14530426808136804166,524288 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,11926592157583199414,4392774105007899523,524288 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=4016 /prefetch:14
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,12389376823895912230,17570127194281933,524288 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,14936660288325737812,4073603024425762156,524288 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:14
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3648,i,9909070678077553056,12849357615062304430,524288 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:14
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6484,i,11609155133525982614,977850082882258343,262144 --field-trial-handle=2292,i,4934012392039163854,304594686858901229,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2376

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5996

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 0a346d01303ffd1f7b7fc08c27d8a744aed0193f0e77ced3ec7d8d2739a7a431
MD5 d7db96843af8b711b76d9aeaa1d3a52d
SHA1 f1d492c64c9b95be3a4e892e205904c6c2247a82
SHA512 465d4480e01686d21e8cd2a035a4e3bd53d3d04724786b8ad2d7b91d923e4dd398467c805404188809bf71571826402015072bc253086f354060d62f6c59245e
TLSH
T15B514173336C09D8EB2A857520D296B632F5C35E8707AE4286995CB77906F4052F2C5F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a0a04.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a0a04.TMP
Size 2KB
SHA256 e645e5622d3115733ffa8deb44b476471e9858459a30f75e3a747a7e8e891c50
MD5 e15472cd75f41b9beca6b7fb2864c423
SHA1 b9b1dda496bcdb825c1dc0af20321db8d2e907dc
SHA512 9b91f79428310a062b4f0d28f32c76c4aeea9fc4df21c8fa5f893fd50f0c0122c361b8ab9c4fce28750167a1c1383d08749a127ab84ca14487c4c741e7a8117e
TLSH
T1FC516173332C09D8EB2A847520E2D6B632F5C35E8707AE8282995CB77906F4052F2C5F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 41292589072f6459024bc422fb19e97abee78423b95a9adfc9afe85fb6274a96
MD5 54678af3e3d7c2a9986c24ca45eb2489
SHA1 d95c619ede20975c370a5826d01f9cd96f3aff8e
SHA512 baaf426ca9cc89104ae236d10f49883ea4980cb696360722c40ea88a72649805d15a80be1295c9c3363c591c2bc7dbd674bb16d8fb3316fe5936a09e4c229f0c
TLSH
T1B5519DF783E4867E8A1156F0AB146E1BCE2C0516832C7C5AC9F4AF1BA7F2471D14165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6fcd42b54c8a5e8b7b6e0b1bb8e98da95073833ec4f7c963f6cfd583bd9a2075
MD5 19d0831465b08bf7028429dea4aa9d68
SHA1 21f18e8de50546212c4af27bd8276e673c69683a
SHA512 9c16c30a2830875d09e234403d407e2b46510b154e25a063d849ce300d1fb2fff5a42bfd773b011ed2d1955680d703a6fe33b440cec71f6f08a247116f69edda
SSDEEP 192:sxRamRE7bx/fZskzXKCA94/3zoA8p4F4/g6+WNIYD986S3G7PIgIJ:sxRamyx/fZskzXZ8FL/5ISSas
TLSH
T1ED32C7166928A93B9CCBE21DBB65BF93D6F9503261D01E58E7FC960C04EA6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 366422edcd3fbda678da26706357264b5a59a7bfa3ed1b5b4064f068136f7c15
MD5 2bc101be876ea3863b6254acf1ad1d2b
SHA1 f5a49a877011c4740967f23388f1e1be11b850f2
SHA512 85a3fff6bb60c9a48ac15b342af45bfe20d7ca9d83c27f198209b26f01f8971f0d91687721905e6dc1b76718a0b613d6b30d022fb97a402d954f11358f6dee4d
SSDEEP 192:sxRatRE7bx/fZsdzdKCA94/3zoA8p4F4/g6+WNIYD986S3G7PIgDQJ:sxRatyx/fZsdzdZ8FL/5IOSaY
TLSH
T14E32C7166928A93B9CCBE21DBB65BF53E6F9503261D01E58A7FC970C04EA6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1c51a21246f0fd337cc00210730c5e0bf4c62273a5d8a030b4f5766640d9dde7
MD5 351d354cd7df95836d70168ec3c58754
SHA1 ea114f57cd31d1ee5cd43aafffc611e736ae22fc
SHA512 74412b8ddb7a5329f6ee6e9436a8bd1ab9cb8519aa1e6817f9f3e014d29239717bd737c831f29d9aa2a43c1c08dcf67031621ac09b90486874200572133a536d
SSDEEP 192:sxRatRE7bx/fZsdzXKCA94/3zoA8p4F4/g6+WNIYD986S3G7PIgDqJ:sxRatyx/fZsdzXZ8FL/5ISSaa
TLSH
T1E232C7166928A93B9CCBE21DBB65BF93D6F9503261D01E58E7FC960C04EA7DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 3e640e0b14e65e813ca946974d0c245f0c9471a558e4de3188d3e299eb2959c8
MD5 e559f27c53aa81461bfafc1f54c3bd2e
SHA1 fc66c289de8983af513b9b558fc60995b0cc23fb
SHA512 0b68b08297a3abf438dce9df2a0c12251590e7c703cef216cd9cf64db4e1095d680e63521aaaae76f10a0e41ab548e7431486f1ba14e0d1ee6e54e33e03a0515
SSDEEP 384:a8YfWRmfCtg/NFfHfKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVOe91bRcOropDo:azfWR0Wg/XfHf8F1+UoAYDCx9Tuqh0Vg
TLSH
T18EB2EA2F200DCB7E5F800A9DAD196FD77D9802C79B588D5047FE990C02C77EAA21A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f097c6fd8942e6fea2b6d180092be41cc2026d0aad6b7c65a86312aa0de8f923
MD5 78c8a29664b5c08b700e90e4325947f4
SHA1 ac397e6a583c1eb640091b63ca8b8bd271a8512b
SHA512 cc8af6fcecb5f2ed04dc10837e454edf53cce9d1f91f3f6606ef7941ef14d4f3346f50cc9c8073ec3b31841d0bfa9b90b715e99d8416fb673fbb82b4b90b1335
SSDEEP 96:KREFw0Oy2UWS/fg8UK4Rg2Uc00/uUJHoZs4q26gWeDzgggK41gCgcwgziIxPWKkk:CEFw0Oy2rS/I8oRg2700/uUJHoZs4q2c
TLSH
T1D1911010363A0241787E7A1C81B69D2FD2C1B8A27469A53E7BE911560F67E034DFCACD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 9ff0d82301cd05078a48f0689bd5ab8d49410ecaabf92c79a3492c621521a4ba
MD5 92b7849a44c58cef7b724d3807637270
SHA1 3a448d031e90cfdcd27d7b2271ac64451a8e1df2
SHA512 b5f346be896185b1cf931309a9e3540952fa92171f606cafdce6d0d7fb5fa254419c9dd440633ffcdfb04e1fec0d502b01bbdcbf88cc3b437fecb609f9889399
SSDEEP 384:ttNn/s3n9SW38N+nru5IlmbWZlf8hyEGB5R/fUZy2rEoajo4cdR8eHhVODjYPNDy:tj+9Z33utgi0KrEnjN3Gac1FIb9MC
TLSH
T1BBF2BF357864DEB34CE6D396B1433B42BEE0169786C40E948ADDBB0C06CBAEC5307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 a34dd14728c33522b544c2065f5183640e17301e4dd371d5e3ede84e4ae71a0f
MD5 d8cb2fe46d041b6f170093d11d48515e
SHA1 2878656e3626f25e14645bee73e00076ce29a5eb
SHA512 301a0780285c8f347a35adf9cfa04600be8fe56eaa8468221eaf13631bf981fc0dd4125b585664e540802141936b68c6608e2125e9048adf9cde388b154a2856
SSDEEP 384:btNn/s3n9Sh38N+nru5IlmbWZlf8hyEGB5R/fUAy2rEoajo4cdR8eHhVODjYPNDy:bj+9m33utgi0rrEnjN3Gac1FIb9MC
TLSH
T123F2CF357864DEB38CE6D795B1433A42BEE0569786C40E948ADDBB0C05CBAEC5307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 44af5e3030a22fe1b51782294b402ec1e5056d68c3a63be1d2726aab7e010ced
MD5 4883993f11f910aae0b29d12ddac6c4a
SHA1 1bb43971cdbe41d278d5be83d8f0f805efc4e006
SHA512 233385ea11443ee91c7c9ec0cfe1f5a5cff6806aa5fe2747f81bd8bb8b4f89e54d6e119ad809e2e50ee68948f4ad848a236a3aac35f81b65cfae4f165e52b49c
SSDEEP 768:rrv+4UNbdS3tmi0drEnjN3Gac1ZeeVH1SCz:rbsbg36dQnjMa1EH1V
TLSH
T1A403CF3269A89AB38CEB9385714776037FF4125386940BE4CADD6B0D06DB5DC230B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4ed141d698c0b6ddcaaacb3d0e3e935d96d90ff9c4c9fda8d0d6c406e97a2ae0
MD5 2e9e79597addff3d7454d09b2864f2da
SHA1 83f3b23df8d00e76ca46f76b2a363cfa9a84484b
SHA512 744a5c6f92ff0cd7236502c0abcdec6d8148c64d3d4e996f113024289408dcaeb417dcaf400250801264368d207fd2afbaa971d92734698d6d48a7b5c148d7e8
SSDEEP 384:btNn/s3n9Sh38N+Wru5I/mbWZlf8hyEGB5R/fUAy2rEoajo4cdR8eHhVODjYPNDy:bj+9m3wuHgi0rrEnjN3Gac1FIb9MC
TLSH
T1D8F2BF357964DEB34CEAD795B1433A42AFE0569786C40ED48ADDBB0C06CBAEC5307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8fd704ab-a595-48d8-bb64-05cf2f2e9999.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8fd704ab-a595-48d8-bb64-05cf2f2e9999.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download