2976f48c80520dd06ad46790e2e818328342a5db9fe68e5caf3e5c4a5a84dc4e

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/07/2026, 16:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
kaguya-sama-love-is-war-the-first-kiss-never-ends-review.html
Size 158KB
Sample260719-tx63baet4j
SHA256 2976f48c80520dd06ad46790e2e818328342a5db9fe68e5caf3e5c4a5a84dc4e
MD5 31358c7746dd21db003b902fad7ac2d6
SHA1 b0a25b043c11afdeafe476ddaa8376346f25ca39
SHA512 8d6d6afb25909e978d00f181c0b176132fbe13962b36b7e08f28725ba17bb5771398ebedc67b3e97b2dc2b4f44dd7693c8e5ddbe6c0aaf6a5fae3e57a6cb1f46
SSDEEP 3072:wvAkpa6rQXwpBzfzCMf9XIjzcdFuM4tQAWU:Aa4ZPdFvIh
TLSH
T119F33B324960362955538295EED2A65D7278C00BF16381ECF9BD8719CFCEEE486337C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5908	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134289520513729837"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2246396966-3025826688-3847171515-1000\{C8400EAC-4B01-440F-ACE8-14D738760626}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2760	msedge.exe
2760	msedge.exe

Suspicious behavior: LoadsDriver 8 IoCs

pid
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4680 wrote to memory of 2884	4680	msedge.exe	88
PID 4680 wrote to memory of 4216	4680	msedge.exe	89
PID 4680 wrote to memory of 5908	4680	msedge.exe	90
PID 4680 wrote to memory of 4216	4680	msedge.exe	89
PID 4680 wrote to memory of 4216	4680	msedge.exe	89
PID 4680 wrote to memory of 3444	4680	msedge.exe	91
PID 4680 wrote to memory of 3444	4680	msedge.exe	91
PID 4680 wrote to memory of 2752	4680	msedge.exe	92
PID 4680 wrote to memory of 2752	4680	msedge.exe	92
PID 4680 wrote to memory of 5676	4680	msedge.exe	93
PID 4680 wrote to memory of 2752	4680	msedge.exe	92
PID 4680 wrote to memory of 5676	4680	msedge.exe	93
PID 4680 wrote to memory of 5676	4680	msedge.exe	93
PID 4680 wrote to memory of 1048	4680	msedge.exe	96
PID 4680 wrote to memory of 944	4680	msedge.exe	95
PID 4680 wrote to memory of 1048	4680	msedge.exe	96
PID 4680 wrote to memory of 1048	4680	msedge.exe	96
PID 4680 wrote to memory of 944	4680	msedge.exe	95
PID 4680 wrote to memory of 944	4680	msedge.exe	95
PID 4680 wrote to memory of 4948	4680	msedge.exe	99
PID 4680 wrote to memory of 3720	4680	msedge.exe	98
PID 4680 wrote to memory of 4948	4680	msedge.exe	99
PID 4680 wrote to memory of 3720	4680	msedge.exe	98
PID 4680 wrote to memory of 628	4680	msedge.exe	101
PID 4680 wrote to memory of 4376	4680	msedge.exe	105
PID 4680 wrote to memory of 4912	4680	msedge.exe	106
PID 4680 wrote to memory of 4176	4680	msedge.exe	107
PID 4680 wrote to memory of 1064	4680	msedge.exe	108
PID 4680 wrote to memory of 1064	4680	msedge.exe	108
PID 4680 wrote to memory of 2760	4680	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\kaguya-sama-love-is-war-the-first-kiss-never-ends-review.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2ac,0x7ffb9e33c188,0x7ffb9e33c194,0x7ffb9e33c1a0
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,2341074550278000303,6937581112976025273,262144 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,2810172022731527866,15582533115283097335,524288 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=3088 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2292,i,18105578853272087809,11199785572561023071,524288 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:13
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,3312505922790046315,3330881126432184996,2097152 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,1612592592482778048,5904018766601379570,2097152 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,15266334458979848021,8216547329046615778,2097152 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:1
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,10627897978857755390,4257100859239829750,2097152 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:9
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,9421744724970513662,2857896248374142667,524288 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3788,i,10775277993300909606,5621959487217758872,524288 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,10631670232081301383,14856027231333404116,524288 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,10631670232081301383,14856027231333404116,524288 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,5802857880380042823,11979960344861630547,524288 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:14
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,448094148067392844,13618114547078944530,524288 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:14
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,18118308578111759350,1438830808648795369,524288 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:14
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,15089786712172634032,9570828597808484276,524288 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:14
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6500,i,8981019218588733722,7525580378589125865,262144 --field-trial-handle=2252,i,13703031731200135422,6954664408348255226,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2760

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6084

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1556

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08a3eccff4cd9b05162ffe0d083662ea8cd60457899147f42dbbf95a0a97d97e
MD5 394c25b8b347a39d61b9cf28babb5c77
SHA1 c7334bcf8642ac580d30cf31659724fe1ab323c9
SHA512 8e5c09dada01bf020bbf53884d65940c521dc62e17d9ce99fe6c571edde4b95c7c7716f2eda97b70568b2cbac8823e7afed5a9bac7be39d1acc6fc95c23a4b1c
TLSH
T1F6D0C038762962C2C92725B2CC3063007330007030B587425071440C8E3489667CF3C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 168dc438fa355b9b84e416f9d4caca14da218ad190d72da09fe489277625815d
MD5 39064a84dfec9bbd8c4b789b6d7a7c62
SHA1 5d817a4df5ed7bd1eac0c4bc0464a76007ad0c46
SHA512 3a4f32a1ad3eb6c391e6d11f4f6ba07c4d21cc935ddd8fd93306857b9e0cfda06c39786a872cae88f394320921a63296ad4df0e61334710db192febec2f48618
TLSH
T1B5D0C034763961C2C92725B2CC3163007320007030B587425171840C8E3489667CF3C3
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1f9a712eb2f284e2688192c441156c34cd4847c06330432ce7f601d48fbc98ef
MD5 e1d8817ac27a17e63c58e65c3bc18c7a
SHA1 06fdf9136f42a36ebcf4008ee54e42e4223d495c
SHA512 9d7f5ad8ee46748fc9d485b00df38c50c871290352aa44eb13385b3a156ebf8ea56fb99d3a27268833d5c4a295e46bc079c636ec4ff392b642eaa6cd6df6b5e3
TLSH
T1E461D894032E4EE3FB658671D0E150DEF2F488C4939B2E2D1DF0E6B8A48EF756447525
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a36d0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a36d0.TMP
Size 3KB
SHA256 cef7d66c27684a4c13b7c4c8990a1782184c1974497bccc5bfdf5d68d8acd15e
MD5 161228c085ca46361091424c74838550
SHA1 fe30d9ab8ad22bbfb862616509b9d6314fb2e0ce
SHA512 dbe1d37628458371d371432be66f4ccae147ebd965bce07eb7e429786524d5e0065b67bd626438fdca34983e9930b44fa4839aca832b37f6451683b193fdf934
TLSH
T16D61D894032E4DE3FB658671D0E150DEF2F488C4939B2E2D0DF1D678A48EF356447025
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

06421ebd-5b8f-4dc2-aefb-479bdc87681d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\06421ebd-5b8f-4dc2-aefb-479bdc87681d.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 9868e0e31eb049d3bdb5f96c2a9c468cc9c838e13726b89e3768b05e2aceb743
MD5 b961a47f46a889a657dc7e5424ebca28
SHA1 12e1709acb8d492fc2ba3fd3cee548299b38bb71
SHA512 6aef87a807d444ba893b9205971cfb42d1b4ddc1f9f8c99d864312fb206d3ac4d3ac05154d3b6923edf48d1e23cb7f4fde7618a6cc104ad03b13ae6ff7aede77
TLSH
T18571BDF7C3E48A7E891156F0AB246E1BCE1D0516832C3C5A88F4AF1B63F24B1E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 17a99d9c8ecc0afe56af813f42a628ebb37f854832b68295910f2ad55610768c
MD5 764021805724edeb06d16a321ff8542e
SHA1 0c590caf62bc5d1bb9e17216e2dee856d3785fb9
SHA512 038d36f92c74d915c22a99726e148cbcd1ce6dcef9d222700e5ff46d2112563d550a8e361236756491f32e3305ff5fb0e1c07d07fbcc86b61ca96b34932f43c4
SSDEEP 192:sxRKRUyM/jK1Ml8wbY/f1sMp5M/zIzoA8p4c/g6+WNIYZ7PKs0GmIgIJ:sxRKilY/f1sMpe7Rl/5I6Os
TLSH
T1B352DA166A34593BDCCBD21DFA557F93D6F91463E2901E44AAFC9A0C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2ee4402d89ee1e707b9aeae8c2acf7746d1244d6af9da036c9cf346841ffc7af
MD5 02fc6fa9c9596d2aebe757e14f0c30e0
SHA1 bb6a6a3e8aa7ac2750589e1427df3f11c4c4d499
SHA512 10f582658c525bbc06392faafd6a01cd15243334b15004f62da52c8e95dc535fa521193dc98116c8dc8ef36c9a97aa289edd462642f8ada4715c6a35a879c9fa
SSDEEP 192:sxRRRUyM/jK1Ml8wbY/f1sPIRp5M/zIzoA8p4c/g6+WNIYZ7PKs0GmIgDxJ:sxRRilY/f1swRpe7Rl/5I6OX
TLSH
T1A952DA166A34593BDCCBD21DFA557F93D6F91463E2901E44AAFC9A0C00E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 98db096836ef2443415add389e5cd54d0dfd6bf2d361f1673d0fdc58025d6ea9
MD5 a609d8fc033300a831c5e4d322dae8a1
SHA1 80d451b2a89344ae9efad44adb1687b5ddef6528
SHA512 531586e0f2429efe9d6e715c5f41d09244ed97c2570dc3389a7deaf403d81a758addf32478f10152f2f5d970bdb467040f9eb04d8f84ad4ca08f3927564937e5
SSDEEP 192:sxRRRUyM/jK1Ml8wbY/f1sPIRpzDM/zIzoA8p4c/g6+WNIYZ7P0s0GmIgDHJ:sxRRKlY/f1swRp87Rl/5IuOV
TLSH
T19D62C9166A34593BDCCBD21DFA517F93D6F95463A2901E44AAFC9A0C00E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ed395531487349a5d93ad0fd3b56cda3f158024a9ba970f2478a4e1375b1df44
MD5 2a1b70bee4c764c4ba23a41a6750a4b3
SHA1 11cc29c25b9c6d3838071e70191a83840eb70f91
SHA512 cbe1208cfecff7208ff656fa3cddaf8e61775c933e9d8249de12bbb23a73a374032593d617a86caeeae16aaa2451a3b49f66b145feb6e16325868df7d9c72089
SSDEEP 192:sxRRRUyM/jK1Ml8UQtbY/f1sPIRpzDM/zIzoA8pec/g6+WNIYZ7P0s0GmIgDHJ:sxRRKqVY/f1swRp87Rf/5IuOV
TLSH
T12462C916A934593BDCCBD21DF6517F93D6F95463A2901E44AAFC9B0C00E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8f67fa13ae5e86a514a375db67ef7827b01065894d57752699dd1b1fe122985e
MD5 04f2f3b2d609754e6d909b5c6b9dfbec
SHA1 17503f527221c8b1ff75dba36f9cd450b604928f
SHA512 85b6b0d935375afa4c850f39502100d3898f4ef480111a556ea940ec367e25ff991cedefc54597a4dddc69724fbc99d2811876a135c81416d7bbe8d99957a4cf
SSDEEP 768:kfISEvWgd5fWb8F1+UoAYDCx9Tuqh0VfUC9xbog/OVMSV2YroHh0w++r:kfISEvWgd5fWbu1jaBU2jHh0whr
TLSH
T1DCC20B2B644CC77E4F804E9CEC25AED6ADD802CB97988D5447FA890C03C77EB512A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 2956a6117dd0df17b36507ff8b17567a98d6beb35b56f7b8259ca43a7763d1d2
MD5 ab9bcc71f7dc9d3cf2077ac220665765
SHA1 721912b353fe7560c9dd80f2d28049a8b39b4bc4
SHA512 61d93d5d44b59e426af5e291b926cb664ed5a3cc27cdc1c085fa528bde7db54e0c7b1c57b5e2449ef654776c28da4ce817405cee66bc823c4c5e11dc5043d2b3
TLSH
T1A5A0025172500496C23403B3A28B91843311AE541103830278F488869A76240D54140A
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d6d90bfe242cabe1317e588d7ac23e6014602ca122832a220798440c1e7264e1
MD5 00383e1926dbe7aaa2f99796bb0b8c7f
SHA1 c93ff06cda3084c4afc4b789e22171bec19d8f4f
SHA512 7a042d1896a9429a99613955f26f4925d2673ef8aa90b99b8b74cde386cfc25ee85f92cb1a26d08692ef9bf3ec849cfa46a0712ce12e56217cf9c9406391148c
SSDEEP 24:KSitLEitHitWitIPitNSitmitGitx1itaitBDitsI4itSitxKXitOhPitoitx1RQ:KsSIfKjCsLyhIIHK1WsVJIZKykcqye
TLSH
T1BF91FB9570BB460038BD294C91B88667D6C2B073305DA96B7BE821B54F2BE035DFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

277dfb56-9975-4638-a835-2acb885af0e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\277dfb56-9975-4638-a835-2acb885af0e3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 e96a1079e54784bb5c898e4b9a4baeb284b617c0d7936713290e047c2843e3d7
MD5 01484a3d920726b0c905a6ebc1a1ff3e
SHA1 57ea2a49aecd5a163bdfd77cee62d1462536effa
SHA512 e07814ad361cdb2aac05fc743367e6162e2d96b511ab6712d92d71792595e003b824ab7263d4de0d257857df2a2985de406659edb6e61e66a741ac5cb6e6a554
SSDEEP 768:bPj+9T394q3LjLKbAam6aQMGdjWca4Ghf9Jbf:O9T3ONmaME6pJD
TLSH
T1B7D29E316868C9379CA696D9F71B3787BEF0526385C81E84C9DCAF0D06D758E2307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 a73d5e5ccb96691d6718dddf689791d1ef88f0a5a8ef93165d9e51f4326dbfc4
MD5 d73c5c3948a1eff4729543238ceca5f6
SHA1 94628dd994750082b4eff7680d571d1af2c11408
SHA512 c30cabd80ad84d846c3eb2b7fbd6466d06c5d87ad342934fe9dab8660fb67ddfae927e56d0cb97a4b2d8c20c569668dcd89abe39e1228de61681a20e66977afa
SSDEEP 768:DaF1j+9W3AwgC4q3LjLoAam6aQMGdjWca4Ghf9Jbf:z9W30maME6pJD
TLSH
T199E28E325C64C97BADA69AD5F71F3287EEF052A3C8C85D84DADC6E0D029718D1307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 94c1e33a103b58aa751acf0fffbd1fc1901e69745e27947a264a8e6e75665457
MD5 6c8c161dff0a60f2e3b9a9da4ca063e9
SHA1 2c2779f48277544604684f7021874242beaea262
SHA512 8705fc4bfe1564d913f4fb0b4ee737d2b6831f82d0e5c093122c8c8802e9dd9bcfb21fd10a1e420009b7a807d6a2a61af50f4642a0a003bcb2bcfa8ac01b5ab0
SSDEEP 768:2Pj+9T3g4q3LjLKbAam6aQMGdjWca4Ghf9Jbf:V9T3hNmaME6pJD
TLSH
T15DD28D32686889779CA696D9F61B3787BEF0526385C81E84C9DCAF0D02D758E2307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 851c1f9fca18694e5867d0999c16d6f497c7fa0308385072f1e80b38f5c14326
MD5 2dd12024e5c020ac0c8f44e0f7af2a71
SHA1 9f7fe6c10ae66a408982026c76b730e6dfbf7861
SHA512 f7d2697457aebb5239ebecb7ae2ec94b6701cff48c7d5cd17eae955f66bcc05292a22b919354d347cac8d081033fd1527ce26818a31ab31898e04302fc7087e3
SSDEEP 768:/rv+4UNbdq3/9q3LoAAam6aQMGdjWca4GhfBtPeU/:/bsbc3VKmaME6pVH
TLSH
T1EAF2AE31A8689973DDB79A99F21B6787BEF421A385C40E84CDD96B0D43970CE2307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

665a89a2-af20-422c-8e33-88afab40da67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\665a89a2-af20-422c-8e33-88afab40da67.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download