7c76017b6092041e426d46c34d310b16259f97c1d9f5f98b8c5dd5a0563c4ffe

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 00:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
the-choicer-voicer.html
Size 597B
Sample260727-ant7lsfj5x
SHA256 7c76017b6092041e426d46c34d310b16259f97c1d9f5f98b8c5dd5a0563c4ffe
MD5 f1a8078d1f20c6225eb7d2bd73116112
SHA1 158ef6e69ce7264872255c2bf6fc82331ed1ae41
SHA512 c914ba569f839626cea7ec9c30ef7812e4c25bb6b2b182ac3a2e6c3ba050769729940eb5c521b1dec884a6630bb688d818747a1b23444bdd1efa15212e61b337
TLSH
T1BDF00CBB43189428AE324B70BE8236CC46887707A10489583AFB3022C8F4A06E4A3348
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5584	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134295853259579380"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{04A62119-8450-4341-94F4-213C9C787DF7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2844	msedge.exe
2844	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 920 wrote to memory of 3344	920	msedge.exe	89
PID 920 wrote to memory of 2800	920	msedge.exe	90
PID 920 wrote to memory of 5584	920	msedge.exe	91
PID 920 wrote to memory of 2500	920	msedge.exe	92
PID 920 wrote to memory of 2800	920	msedge.exe	90
PID 920 wrote to memory of 2800	920	msedge.exe	90
PID 920 wrote to memory of 2500	920	msedge.exe	92
PID 920 wrote to memory of 2032	920	msedge.exe	93
PID 920 wrote to memory of 2032	920	msedge.exe	93
PID 920 wrote to memory of 2032	920	msedge.exe	93
PID 920 wrote to memory of 4780	920	msedge.exe	94
PID 920 wrote to memory of 4780	920	msedge.exe	94
PID 920 wrote to memory of 4780	920	msedge.exe	94
PID 920 wrote to memory of 4824	920	msedge.exe	96
PID 920 wrote to memory of 4824	920	msedge.exe	96
PID 920 wrote to memory of 4824	920	msedge.exe	96
PID 920 wrote to memory of 3516	920	msedge.exe	97
PID 920 wrote to memory of 3516	920	msedge.exe	97
PID 920 wrote to memory of 3516	920	msedge.exe	97
PID 920 wrote to memory of 5588	920	msedge.exe	98
PID 920 wrote to memory of 5588	920	msedge.exe	98
PID 920 wrote to memory of 5588	920	msedge.exe	98
PID 920 wrote to memory of 4460	920	msedge.exe	100
PID 920 wrote to memory of 4460	920	msedge.exe	100
PID 920 wrote to memory of 4460	920	msedge.exe	100
PID 920 wrote to memory of 1352	920	msedge.exe	101
PID 920 wrote to memory of 1352	920	msedge.exe	101
PID 920 wrote to memory of 468	920	msedge.exe	102
PID 920 wrote to memory of 468	920	msedge.exe	102
PID 920 wrote to memory of 5008	920	msedge.exe	103
PID 920 wrote to memory of 5008	920	msedge.exe	103
PID 920 wrote to memory of 2284	920	msedge.exe	105
PID 920 wrote to memory of 5712	920	msedge.exe	109
PID 920 wrote to memory of 1380	920	msedge.exe	110
PID 920 wrote to memory of 2016	920	msedge.exe	111
PID 920 wrote to memory of 6032	920	msedge.exe	112
PID 920 wrote to memory of 6032	920	msedge.exe	112
PID 920 wrote to memory of 2844	920	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\the-choicer-voicer.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x268,0x26c,0x270,0x264,0x290,0x7fff1f77c188,0x7fff1f77c194,0x7fff1f77c1a0
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,5536704308367838510,6632079852710854376,262144 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:2
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1744,i,9086321282920986170,11843777000299856967,524288 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,10377006656896794511,738397026325475273,524288 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=3252 /prefetch:13
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3616,i,12074034926581285739,3127093561239874006,2097152 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,8393256640268089432,7678969106542801359,2097152 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4344,i,9689533365777610880,14381796201064827239,2097152 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4416,i,619986913360617280,18330925216168155267,2097152 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:9
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3540,i,11277139100767411246,15970185688373902406,2097152 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5528,i,17134955371788491045,639616277350386350,2097152 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,7833429538059134396,12256247644625129959,524288 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:12
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,4194778497464063814,14783741670797376780,524288 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,4733314540298241712,4830348428858306766,524288 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6428,i,16262049615929535907,5967446844812923357,524288 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:14
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6428,i,16262049615929535907,5967446844812923357,524288 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:14
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,11471178661599343945,15749816979868693411,524288 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:14
  2⤵
  PID:5712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,5125137054258214887,1849120780084997812,524288 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=608 /prefetch:14
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,12928911107079364322,4894543672155499263,524288 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:14
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,7111780828975335587,7184340123434667136,524288 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:14
  2⤵
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6316,i,13065464746754765539,2450539080426689847,262144 --field-trial-handle=2396,i,4348164412395648270,7684500374150580147,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2844

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5476

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4312

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 936b3224439c59def47f514b890c0774af6848f3f8394bb42759ce0e10baca19
MD5 e0e1197ee23584c7502c9a9420b66d72
SHA1 95156ea4160a1d7abbbd498bd6b6e05409ea113a
SHA512 1dc16b225175395b3eb0ba12ba59e57e7df9211fe84c5f1ba6d8d20fbebf80d81e06d49d2bc3da74162da8596ffc0fa93e88ddad23a5aba8f88f37eb473e4f68
TLSH
T19D6182A38325CFE9DB1584B331E0488C36F084B933876E12A04BAEB69967F1D32D1133
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596cca.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596cca.TMP
Size 3KB
SHA256 c7ff7065ae9179dc52be200253f7ab30ab32ce1b5f315edafc5bbe1a64d47fd3
MD5 bc5046627645eb23a3b944e94e2ba22c
SHA1 425d38fa53864d5c20098b150414910b34ffa67d
SHA512 d1106fd7364458d39cceed40d5aed93a922bf404fb86d3e6b86b5b9de3f5d1bc3fbd229bbe3722c50296a209266d9fed0ff5ee98dabe6412c6b2f69c1fd72350
TLSH
T1355162A38325CFE9DB1585B371E1588C36F484B923476E13A04BAEB69966F1C72D1133
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

d91b4319-4572-4a67-9cb3-56ef25cf7ff3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d91b4319-4572-4a67-9cb3-56ef25cf7ff3.tmp
Size 3KB
SHA256 20a12e9c47eb1df33b753f8e9d8f57023ca1d6997a85fd3fef77e7fbba8e4228
MD5 4262e0750ccf4f83cc9fe627642e7284
SHA1 3dcc619cad29446e4b6aae062b6f9c2c91347f6b
SHA512 4432024f5b8971f779480303c87a0bbd461c9b335bff675f5f66e7f9b644dc0be8a6715731d72d1dfff144e5a98e68b483747350ad07ffc0a1fb96d8847d19e0
TLSH
T1C761BDB7C7E8867D880156F4AB247E1BCD1D095A432C3D1689F8AF0B63F2871D20255F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1c65caefd9b4687526e5da1ac1e787a6af444565fd58c4c58d36141b1aa07505
MD5 451e701c384a85a24585d0988c912df9
SHA1 584597f9be85030b6be057bd63245a6ba1fc4652
SHA512 29d62686143a77bdd0333fc65af48f1c78548198b28be81a378ac316fd6d9e3b64f71a2e12016c6bbaa8f5bc924ab0a986047a10bb05857d0eae410ff1a6fd99
SSDEEP 192:sxRSkRhbm/fjsOzdYCbUzoA8p4OS/g6+WNIYE93HGx1IgIJ:sxRSkbm/fjsOzdP1DS/5INWs
TLSH
T17432B6166A28993B5CCBD25DFB657F53D6F95032A1942E48FAFC870C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 00f890416cc729669f226a2b669fda552513f55030209d340a755cc6e8fe54b6
MD5 bb5e5af3bc18f5cb211a4e7a4f5cd14b
SHA1 13beeb378570783b424053f1133b363f882ea445
SHA512 c72b36df69d67f17e683310e38d2db6775ddd56def4d2955d3ea24cb14c94461b12eafa9039cfcf66681473a516ffcaf2ac0d65abced564ebc146de643ef0d7f
SSDEEP 192:sxRSrRhbm/fjsUKdYCbUzoA8p4OS/g6+WNIYEn53HGx1IgDyJ:sxRSrbm/fjsUKdP1DS/5ID9Wq
TLSH
T1C732C716A928993B5CCBE21DFB557F53E6F95032A1942E48BBFC870C04EB6DD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 14e40e6d0c016dd3fcbe05d5b68e799f0465b410cea2df51b8ca5d1c608dc61f
MD5 020d1476669a9551b32db9c530e4a250
SHA1 949256a4183c9bf02b713bc4cbfa2b6adf757356
SHA512 191c898043dcc4bd33956e396a29767985bda70886ac3fee5524b7378af3e3fd700ab0bfe4c2a1c338561a683e4b073274a583e76760120bed25c70b238ca24f
SSDEEP 192:sxRSrRhbm/fjsUzdYCbUzoA8p4OS/g6+WNIYE93HGx1IgDQJ:sxRSrbm/fjsUzdP1DS/5INWg
TLSH
T16A32C716AE28993B5CCBD21DFB55BF53D6F95032A1942E48BAFC870C04EB6DD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 59314096ce2f89e99d942f73b67233092cba12e39204eaa859f1e3e8c7105080
MD5 5d60cf0516ad206e98e7234b7fe63f37
SHA1 93572f47b08bd0e4498c9fc6a7cabb6c885724c3
SHA512 264ed013eb4fd9d03291e03e20030095ea8ca1bb71b80697c467237334be0bb4e16dacded043da478783dae74f79ce7108ea8f658541c958b8876e544354edb8
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV8:40Dk6DJQD810DbWgQ6DjfIQDF8F1+Uot
TLSH
T1AFB2DB2F640DCB7F5F804A9DAC196FD76D9802C796988D8047FE990C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5314215ea64b9ba0753a35993eb60d1abf75d8858bd99bc36e73b862484f9765
MD5 d94db9fd6dda2e96b2a4eeee68aa4f14
SHA1 2568c5090c5e6afac4930b4602aff8529e8a7221
SHA512 d5b14cdf681428bcee35e3414ae62c7bdf54a4d535a0aeecc0a37e3b1cf0e90fc7bfc202aa37a8fa176276f26db3aec29db092b191d9f1876a667259b17350d7
SSDEEP 96:KRgRkQiOCYWm7LgYYK49gKYcY4rKQ1HfItpfd9xWJmsgRxK44g/xcnvORg8AKB6M:CgRkQiOCPm7UY89gK3Y4rKQ1HfItpfdR
TLSH
T16991B780717A0340387E750CA1A9E85E92C278A3355CF46B77AA01D99F67E075CFD9DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig~RFe5a0159.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a0159.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

e9ab3b29-8cf6-4534-a48b-4e182a7cbc62.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e9ab3b29-8cf6-4534-a48b-4e182a7cbc62.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 18eaecb90bfb2c2ab0237edaa8f37943500699f0c6bf9521a9f2bc39265c4ed8
MD5 8935d2c3c1070633b4b2a0a0d968838f
SHA1 efc31fdadeb226050939ddc8f348303ca1738238
SHA512 26867135aad76bc2599933072a03dce379859afbe8360095c5193c79c7751eba0c95c1779337609a12b4f8aa700ce116f73e1793a57a22e3afc3506fde072a53
SSDEEP 768:sN38cGDTd+Z/+l1tFeX6+qTko0u229a4vsT7b9M6:sN3hzvVTVKa4qb+6
TLSH
T198F2CF32FC658E7788E6D784710735476EB65173C7CC1B8899EDAB0D054B6AC1B0B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 fbdb2d9d9599326688485e702989c9e1cb20b848a775b10c40071d011be4e644
MD5 01f7e5313ce2e3c65a1fb4d53cc7f1c4
SHA1 a099cdca77b9dd086ddfb860e29a1b67ee1f67f8
SHA512 0b7d9a5d69c58a03b13bc5221339ad178912519f736362530dfcf4e37d21ca4a3b99d8675fa73b7833f67fa53f05c46eb531794837811937df135e7a81cdd8f0
SSDEEP 768:Trv+4UNbdq391GDTd+Z/+l1teeX6+qTko0u229a4vsT7A:TbsbQ3zMvVTVKa4qA
TLSH
T11003BE32F8698E778CA69684B10775433E7911A3C7C80B94D9DD6B8D028F1AC2B0B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 21f3b600c3a834209cff01ac8ab963c5de9f081b1584b056dd84c12e17b66a22
MD5 233a82ef571ce86e619a7dbaa454f63d
SHA1 27750a43ac185d350ef8bfadd50d750e88f64ffb
SHA512 cf659fae632c9739777f156299cf0d93a2a2eda2a1c1c32657eaa848ffef729701f6e5ed756cf22a1ac5dbbc14482aefc532723e3924f6cd4bade47863dd41cc
SSDEEP 768:JN3ZcGDTd+Z/+l1tFeX6+qTko0u229a4vsT7b9M6:JN3MzvVTVKa4qb+6
TLSH
T156F2CE32FC658E7788E6D784710735476EB65173C7CC1B8899EDAB0D064B6AC1B0B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 90ffa3a3b0940597c0a15df8fb80ed0677ae569d911f6bbfc73bdf6b81e0c6ea
MD5 74e9ef7a0e17b35cf91964965d46c05b
SHA1 e1820988f3705f76d237151766406828893256a2
SHA512 340611033b2f4209c15e147d8394ba06b06b36de2e61a22ea9c55af141a9119f75cbc804be4d0f3f68885479800af971c8fcf1651ae6f12ac964e34d6db4c9ee
SSDEEP 768:GFQ+3nwgUcGDTd+Z/+l1tBeX6+qTko0u229a4vsT7b9M6:N+3TrvVTVKa4qb+6
TLSH
T10D03C033EC54CA778DEADB84B10B31075EF651B3C7D85B88AADDAA0D015B1AC170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 0bdf98045a56d7545ef58f7346d82564aa07ed749076f2314dc7e4bff4be2724
MD5 ce155e17ba4576c5c4cc694522995b58
SHA1 1db0e2a6082da232efff440b5af480d678e6a76e
SHA512 22d7147487e720265f728ca2978a2ca7de68eb17ea953e9b19091c644ce0a1e0edba92f7f10c18e33cd10b145530d13f7ee869d0b57e6dd61899c1ffb63bfb11
SSDEEP 768:prv+4UNbdG30XNDTd+Z/+keX6+qTko0u229a4vsDNeVH1SdW:pbsbU3DevVTVKa44EH1h
TLSH
T14F03CF32F8698A778CE6D784714B75472EB92163C7C80B90D8ED6F4D025B5AC270BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download