hxxp://goodpersonofourcentury[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/08/2026, 16:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://goodpersonofourcentury.com
Sample260802-vg7vcada27

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4760	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301635630841598"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{70648E8F-CA00-4C1C-823F-08B0DDAC0717}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4780	msedge.exe
4780	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe
2496	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2496 wrote to memory of 1884	2496	msedge.exe	88
PID 2496 wrote to memory of 4760	2496	msedge.exe	89
PID 2496 wrote to memory of 4324	2496	msedge.exe	90
PID 2496 wrote to memory of 4324	2496	msedge.exe	90
PID 2496 wrote to memory of 4324	2496	msedge.exe	90
PID 2496 wrote to memory of 2560	2496	msedge.exe	91
PID 2496 wrote to memory of 2560	2496	msedge.exe	91
PID 2496 wrote to memory of 1712	2496	msedge.exe	93
PID 2496 wrote to memory of 4088	2496	msedge.exe	94
PID 2496 wrote to memory of 1712	2496	msedge.exe	93
PID 2496 wrote to memory of 1712	2496	msedge.exe	93
PID 2496 wrote to memory of 4088	2496	msedge.exe	94
PID 2496 wrote to memory of 4088	2496	msedge.exe	94
PID 2496 wrote to memory of 1424	2496	msedge.exe	95
PID 2496 wrote to memory of 1424	2496	msedge.exe	95
PID 2496 wrote to memory of 1424	2496	msedge.exe	95
PID 2496 wrote to memory of 2216	2496	msedge.exe	96
PID 2496 wrote to memory of 2216	2496	msedge.exe	96
PID 2496 wrote to memory of 2216	2496	msedge.exe	96
PID 2496 wrote to memory of 2492	2496	msedge.exe	99
PID 2496 wrote to memory of 1696	2496	msedge.exe	100
PID 2496 wrote to memory of 2492	2496	msedge.exe	99
PID 2496 wrote to memory of 1696	2496	msedge.exe	100
PID 2496 wrote to memory of 2208	2496	msedge.exe	102
PID 2496 wrote to memory of 948	2496	msedge.exe	106
PID 2496 wrote to memory of 4036	2496	msedge.exe	107
PID 2496 wrote to memory of 4840	2496	msedge.exe	108
PID 2496 wrote to memory of 4100	2496	msedge.exe	112
PID 2496 wrote to memory of 4100	2496	msedge.exe	112
PID 2496 wrote to memory of 2612	2496	msedge.exe	114
PID 2496 wrote to memory of 2612	2496	msedge.exe	114
PID 2496 wrote to memory of 4780	2496	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://goodpersonofourcentury.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fffd1b6c188,0x7fffd1b6c194,0x7fffd1b6c1a0
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,17673311303903555184,925481113155635453,524288 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,16242881946319164794,5322399464569413223,262144 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,15827398618050105549,3029209336824923357,524288 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:8
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,12915392332212871753,7483404362711139047,2097152 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,5699879548461290332,16283018147116160685,2097152 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,15459131359930787901,5326202966208160359,2097152 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,10269713191436696158,9957034344707447280,2097152 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:2
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,13080675529537644844,17082377228105100981,524288 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,4075704992396637475,6676854316239457124,524288 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,18243708565161093612,6849370282725917430,524288 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,18243708565161093612,6849370282725917430,524288 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3472,i,13815632931431386982,10865412344298011251,524288 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,9401860355550654369,1896638292003464818,524288 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,3427146839830107611,15319197050407758727,524288 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6404,i,11505644322546004752,17206012003145412300,524288 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,13349641749846308374,4183401048709970951,524288 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,3546779406045993525,6327562891808255484,262144 --field-trial-handle=2340,i,2996867997359021007,17120745079394022523,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4780

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2656

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 958db781e5f86632fb89e0013d3183d53faf82bd2a771f6357a17fc232dc1ee3
MD5 ec6d26554998cb6592905b1e5a0022c2
SHA1 f4e5ee8708c206ff9f6bd6773de7fac4b257fabd
SHA512 e5a72ed1a11a433ac74cc84ed798d3030940a72abb94ec53bdc556f830f5fb0ab85c55eae98c49450cb108754d5674d4e642d91b19c87e8acc28a61ac8a7c067
TLSH
T1F65150180692649EE730D231C0E01B03BE36C5F9897B8E380290E9BFD7277E79B6901C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a69b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a69b.TMP
Size 2KB
SHA256 5065ac86d1a3d54fb08c42b9da2c6abea204835378a4cdde418502603585d168
MD5 345def6c5d08f10aa1890bd804d50e8d
SHA1 62897380e382da8bd0b596fcbc809a87ce2f149f
SHA512 e5d72e6534e9e291629ac324468c837e593c1aa536366beb7da03ee28eb4e8bc5361b2cde4a6e1446eb15fc86a1807bcfa65df0641ef879dc98cae42c5901a44
TLSH
T1A7513D180652649EE731D231C4E01B13BE36C5F989BB8E390290E9BF97277E79B6905C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 1e7cfd498c0a77b9d0b3f1c693cec8e45c7a0d780497da1c413e16a24f6ee238
MD5 c3b5fbb9b177baff94c507ad49d71207
SHA1 200a4faec57b09f272a879bc1310077ba13d84d6
SHA512 26fca1aa7eda5b4df6e622624524592975bde65e591bf6e75f661e2aac0be621f0df717e10dbfa09d9fd96f112a4c59355ece61bfc657eb947b885cf626db30b
TLSH
T1BC117AB3C7D5C56E891116F0AA24AE2BCE2D0A16421C7C69C9D4FF6B93E3075E00295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 76146c31a11e656daa985ac7580d36206d9dcb0aabdb9abea62860c81a1563f1
MD5 2f7cf1ba64859bc04b900fe28d93347e
SHA1 aa2856a0bac4f2e96c5150067a9c743eadee1882
SHA512 a4d59b352e08de31dd3b0d0068cbb7e17906977eea9293c21587a4f2378a7690ba223abc4eb4929f187f7098174e47fcd1b528d512fce96ac0570db5a876fe23
SSDEEP 192:sxZMRzyM/jK1Ml8MkqH/fTskd3RpzKIdpiW4HkG6+WNCWb6k/Yw1g65tIgrJ:sxZMBMqH/fTs03RtDAH85//9
TLSH
T1E152F911AB34AD77CCDBD209FA51BB53D6F5557292940E48A9FCDA1C04E6BEC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b382f76bdbbefcbef5f7e4dc3c91bf690a9283244b32bf544e23ff2766f7f3e7
MD5 a04acae2f6de239378129c1ccc0450df
SHA1 e143f336b881b1784ca8a8432e7caa7665b33fd0
SHA512 b74f5ba17d2fb747017d17225cc3d35283e82e726a7c9df5f3b53675905f943f90a4d774be31420a7c2a6a1f658f771273d65067e33c1eecd9e4a1a01f0dd143
SSDEEP 192:sxZMRzyM/jK1Ml8UQVkqH/fTsHd3LpzKIdp4W4HkG6+WNCWb6k/Yw1AvktIg5SJ:sxZMBqeqH/fTs93LtDuH85/rg
TLSH
T17152F815AA34AD77DCDBD209F951BB53D6F5547292900E48A9FCEA1C00F6BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d25e6d76023c9fbeb77ac7240d1cb532ffab2e180a5311676b3bb075530b951a
MD5 853e36f6f0555dd64184b9f5fe34c631
SHA1 f24c72e1f2dea3d2e3841615a21fd77b21016f5b
SHA512 77494f47c64824cd22ffd884079d14918f3d841403d203c38661d8047560c34322e58504349975f60adb72908616c7027ec5c252acf01a5d8a5fec08a8704776
SSDEEP 768:HA4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dorohXc+ag:HA4jeXmWvmKLEu1jacPLZQdTq6
TLSH
T1E8D20A3B280CCF7E4F844E5CED26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 c6c6e501364b9d130dc1c82899379f1193d0e11d4ef85f17164f3941da0285d8
MD5 0b72e93887abebe699d1ee9e169cc1c2
SHA1 0123f524a2fb5d971c979e76654abcc3b9843927
SHA512 cb7b3e1e42b3be9402c83d300ff563cd814faee2a4b731b0e2e585d1e735b326be29eb0261f3fcd55b0911e04e4a6b95b8ee4fdc354d0ae6db530dfe92a58d92
SSDEEP 96:KYBdTRxx89ssmlxKe4mzxibDUlxSWpKKCw1k4KR2qSqIKrCJwF8AH:Wvdxjfn
TLSH
T193B1E15A30BF02163D7D2509A2A4D7274F4176A37015E42BBB6940B20DA7E354CFCDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594210.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594210.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0a53d732a4b2ea366546af67490e5f26443946910b1aa0e3a99ac439d20faa45
MD5 6b7843660669f1d13f2648c21854e917
SHA1 994df8cdc728ea307c5f2e06f11a82da694008cf
SHA512 3e57dff70ef2843b799a6de9496ececaf8e798e9295ee93e5e8201cbbfa4505cb8dee065809eb8a7d6d00c9a3929a71c9e9043fb3ab6afdabe7bf27f5f6ef0bd
SSDEEP 192:EONg6hZ0QmiUy0Cpc/+jVqO1Qz5wOZpeT9U6:EONg6oWpu+MOeK2peBU6
TLSH
T1B902E83968686C778EE2AE45F48737235FE4117BE9956F84D6E82F1D00C769C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 443b924e17ababf53a29546b5cd652826958be744de4a9586aaf2fa77a011b96
MD5 7b0a6a013c37d66700a5441e1b134b2f
SHA1 1453d6751d656511443102528e8109f4cd626a5f
SHA512 aed66247e8bc611a7f258eb2e14a3c14f7077c4b107f39730a9055f8f3b455d7878ceafd0e08885fdcac069f83ca46cbe113721995bef6ae8ce29bbe881d5bf4
SSDEEP 384:wZcIhsNDL0fM8EqlIf+MOetB+2SFpcnTKwBODNZOCt5U:OhJfMAQhOqBlkpcnewBKZOyU
TLSH
T1AC927C71693CAC775DE6B205F84B22074EF88167E6D46F98E5EDBF1C009A6AC130BC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 61b12122104199ecc8d40115816849ba7e2969d93cf033263ccc7ec9b2809de4
MD5 4713ac4d3385178dbe5edbe5930081c1
SHA1 375692a3d6407fe39fc36700617a004c75f13f61
SHA512 ee8d2ec0c560090e5f44c56c5bc4bf70af95bee958a8de8bcfc3a915d32a31a2f9668782ddb077238f0617010fca2887195e3548401173505bcac17c3488c933
SSDEEP 384:KiFiZcIczsNd8TUNTUlIle0fM8EqqIf+MOetB+2OFpcnTKwBODNZOCt5U:BFQg8wglfMbQhOqBlApcnewBKZOyU
TLSH
T12CD217F258DB9876DDAD9707AB7E2D034EBCC163B5906A54B3D86A1CCC461BFD30A810
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 242c364f8052b1bab1cde6ba3f71bb5b5be55a9238fd22e854e4e2213b2fd0b6
MD5 987d6cc1df1fda617b322bbd36497db5
SHA1 8d62da786839a1fedf1c6550beef7ccce6283c9e
SHA512 ce7737459c4264e3089fa9e5cc81dac4ec8908ca9919d0b67e7ad75448f68ce5d7fdeb7a074069cf6c590ad91087fa46248b0ddb86e57139184e40bacb1f36b6
SSDEEP 384:6ZcIhsNDe0fM8EqlIf+MOetB+2SFpcnTKwBODNZOCt5U:4hgfMAQhOqBlkpcnewBKZOyU
TLSH
T136927B71693CAC775DE6B205F84722074EF88167E6D46F98E5EDBF1C009A6AC230BC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1669ab6e916ec8804f0ff43cfc4809fc8e63eddc5acf1714b2e379b2ac8ab019
MD5 ca272710a3f5f5b2008a87775a671047
SHA1 21d1f58b309b19e96573e1bf0dcf40035842cbd5
SHA512 9d78a32686c73ad2713139447a7d9dd67cf8783a5bf7c151b630e735e0fca9c0da8fcaf6eb4da329957f7be5cabfe36de0cc406555e022c55ba019acc439680e
SSDEEP 192:XONLS6hZJQmiUyjC4c/+jVqO1QtB+2bK5cOqpQqSU6:XON26b74u+MOetB+2p9pcU6
TLSH
T15C12FA356568AC775DE2A655F48736138EE9512BEAC5BFD0E5DC3F1C00CB6AC230B811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2959aabec2bd71053469f0be36a5e1c3cd495adac2aa2f88e9cfce7705f55d1c
MD5 ad2f69ff8a62a82e7610d0ba6d648478
SHA1 3c5e0847595c02f9dc892a56aa452e7c094be1b1
SHA512 d558ecd2d256829a053865cd27fdbd3e4ccc76c6ac7136cd15746baf63bd4a58b7729e1f10321f90477140b67ce8f3581ae96c17d9f5ac3da5741ad5e87b0259
TLSH
T1E6413B58B6EA1108F3B67F56ABF6686D487EB9773F0B945E10010E4E4A22B40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download