6716708767919dd8f2c57293522ee11ba78d91c4757e9eee7d2097e13bea1a0f

Analysis

max time kernel
148s
max time network
156s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 05:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AI vs Fortnite-chatgeyoptimization/imgui-master/examples/example_android_opengl3/android/build/repor.html
Size 133KB
Sample260805-gbedysbj2t
SHA256 6716708767919dd8f2c57293522ee11ba78d91c4757e9eee7d2097e13bea1a0f
MD5 cbea1eb4068cbc9f5c8891b6c46c4730
SHA1 8f5ca5114178f7af1409fb19bdd5e5fe2c3f6074
SHA512 2836ab69d3d7ce4f93abfe914ae8f6074b86aa884fe4bc63426e14b6d5730e2a59c95c3d2f7adf92f06f6ff19c9270f18f66fec5f5f38c4acb5d5f645a9d6ec8
SSDEEP 1536:NzpnlZkX87ZT+psFUB2EAeRB56HtrjqXK+/szG0wWA:J7ZTf2B1A+56HtrjiF/sE
TLSH
T1D8D3638C76E2F0E59357A0B0017F008BF33E9996889D9468F159E0D93EA916D9173FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3176	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303821491829926"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{9BC26ACD-360B-49EE-AB68-49247815F5CB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5776	msedge.exe
5776	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe
4276	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4276 wrote to memory of 3944	4276	msedge.exe	89
PID 4276 wrote to memory of 4196	4276	msedge.exe	90
PID 4276 wrote to memory of 3176	4276	msedge.exe	91
PID 4276 wrote to memory of 4196	4276	msedge.exe	90
PID 4276 wrote to memory of 4196	4276	msedge.exe	90
PID 4276 wrote to memory of 2552	4276	msedge.exe	93
PID 4276 wrote to memory of 2552	4276	msedge.exe	93
PID 4276 wrote to memory of 4640	4276	msedge.exe	94
PID 4276 wrote to memory of 4640	4276	msedge.exe	94
PID 4276 wrote to memory of 4640	4276	msedge.exe	94
PID 4276 wrote to memory of 3144	4276	msedge.exe	95
PID 4276 wrote to memory of 3144	4276	msedge.exe	95
PID 4276 wrote to memory of 3144	4276	msedge.exe	95
PID 4276 wrote to memory of 2272	4276	msedge.exe	96
PID 4276 wrote to memory of 2272	4276	msedge.exe	96
PID 4276 wrote to memory of 2272	4276	msedge.exe	96
PID 4276 wrote to memory of 4080	4276	msedge.exe	97
PID 4276 wrote to memory of 4080	4276	msedge.exe	97
PID 4276 wrote to memory of 4080	4276	msedge.exe	97
PID 4276 wrote to memory of 4708	4276	msedge.exe	99
PID 4276 wrote to memory of 4708	4276	msedge.exe	99
PID 4276 wrote to memory of 2484	4276	msedge.exe	100
PID 4276 wrote to memory of 2484	4276	msedge.exe	100
PID 4276 wrote to memory of 5732	4276	msedge.exe	103
PID 4276 wrote to memory of 2520	4276	msedge.exe	106
PID 4276 wrote to memory of 5796	4276	msedge.exe	107
PID 4276 wrote to memory of 2708	4276	msedge.exe	108
PID 4276 wrote to memory of 5828	4276	msedge.exe	109
PID 4276 wrote to memory of 5828	4276	msedge.exe	109
PID 4276 wrote to memory of 5776	4276	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\AI vs Fortnite-chatgeyoptimization\imgui-master\examples\example_android_opengl3\android\build\repor.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x290,0x7ffeed6dc188,0x7ffeed6dc194,0x7ffeed6dc1a0
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,508398292454341988,1818989622742452803,262144 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,13702811973856355893,18308825398231555843,524288 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,16803765462170189630,8674389099767839128,524288 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:13
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,7856539047722737357,10842316683313307696,2097152 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,12692611953217608708,8837827983897844160,2097152 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,5365843176723087049,16455032286433087446,2097152 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:9
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,3763895665198185148,10122991550726713811,2097152 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,11339382257661331774,4260092921993879253,524288 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,8110011721430879262,15676898045059542695,524288 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:14
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,8869120678652110457,4438448911107192365,524288 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,8869120678652110457,4438448911107192365,524288 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:5732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,1951417599330321073,14515366187036775385,524288 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:14
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,5368692724302978477,15486633863306399907,524288 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:14
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,6098422703134770317,12167573118697202342,524288 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,8017328692343652191,12295285150864473655,524288 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5244,i,12744939887438787517,2917134672245882480,262144 --field-trial-handle=2252,i,847614478568271945,1374969110431123076,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5776

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5576

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2584

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 12104dd3c2fda03eed8e9fe97d1c8c331237df73b825255f2c8a4424f9eee8fc
MD5 0272cacbbb6ed8ce74e6c664a085e187
SHA1 e18e3d395cae9ca66345f804f048f752074420a7
SHA512 d7df299a22bf1ed1d6757011261fcc585bb9aee7db699aa7f37cf58e7bd5302ee7ae45218f61624dc842a99548b44160f0e1bd6af1382db157a77eea1ddef3c1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7e:fwUQC5VwBIiElEd2K57P7e
TLSH
T175B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 c9cfa27f91d49227ffe14c6c73e33e128ab30bc339a4ea4bc3e91f31d2d1b3ec
MD5 edaaebe0f81e6c57905d99f9b32a80de
SHA1 195e62d26995abf3cfa23af7bf68237786d77ed2
SHA512 6f50eda9ff0cce6bfd4fde1c3095cb2c7aa8535875b3d8aee94a181ce4b8eebdb39c0f8233e8a45126ba2d0360af4fc0000a326f05dd9879c962da407eddde4d
TLSH
T1C35161ADAB2B3ED9C3314BF9A1E1488837F7D349241F9ED25180F3724AC270150621B1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e7e5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59e7e5.TMP
Size 2KB
SHA256 33f6d7c7c5fcdc77c6a5445d46d2d99957aecab817e857253bdbc24ae4a5fa3a
MD5 069b089f7a631f05487fee2e45f395f5
SHA1 2557239cc1667148c16bce55de7152ae57173054
SHA512 b5022cc0b54b29d32f1535b26c8c0a591a529a37d202ee2e5631e3d22da85e3a7356850830884d2042e6fb591890bb2de881879edf46d7a85b80d37e4feb959a
TLSH
T11D5161AC6B2B3ED9C3314BF9A1E1498837F7D349241F9ED24080F3724AC270160A21B1
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 82e6c7adb50e34f0f9ce3fae226345282cd798b11f0e797b33827ae93fc67ee8
MD5 c30155bc4252cafb1f3c25b4d60c54f4
SHA1 1def1c445789db0ea121b40199706d95dba55600
SHA512 072024b9119474399580952206aba8e5a322cb4646317912c9801638c27cf5709ec03dab0710510fb8261badee292b73d94e0e8d3798dbceae25318de0fa5efb
TLSH
T15C51AFF7C3E8867D890156F4AB146E2BCE1D0916432C3D6AC8E4AF5BA3F24B1E14159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 bbe896c272c8f7815d28f5b80588b313dda837b6331e0e6bdd4cadfbb367919e
MD5 d034874a4077b6ce0bc37bd22c20e663
SHA1 d716610fc998e50c99c474bdc37225fe9c01f61e
SHA512 3d1a501446b07770e0d43c849f260f86d4f910df9f22529612c572a3170b999cafc7db4f421acb7d217c350f15ceee7676cfb0f9626aede053ce7f94835a23d2
SSDEEP 192:sxRqRWyM/jK1Ml8wbv/fDsQJ8bNayzoA8p4h/g6+WNIYlBXRGpIgIJ:sxRqwlv/fDsQJ8a/s/5IQus
TLSH
T1CE52F9156A64AD7BCCDBD20DFA457F93D6F91173A2901E44AAFCDA0C00E6AED211381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 8baaacb172d6bb9f6ef83bc250ea00e2cb77daff9de66f92a259b55f2ccc07f2
MD5 72f972ef491c490c3d8cb6cbb20c393f
SHA1 0ce19e7f9795203d2b76e2e3b29f67a8485825b0
SHA512 837083cf9dc0331c7cb6992a4a662b6998805225e52ceab19b3a80c23cfbaf83fa3cb7170b3fc444ee9e3b06237e8e99fb1ed63e56d80615b0f6da62899e1b50
SSDEEP 192:sxR9RWyM/jK1Ml8UQrbv/fDsEp8bNayzoA8peh/g6+WNIYlGXRGpIgDaJ:sxR9wqPv/fDsEp8a/6/5I3ua
TLSH
T1A062E815AA646977CCDBD20DFA457F93D6F91173A1901E48AAFCDA0C00E7ADD211381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0fe09fc6e15e15622ed31a4729420e0067fe29069554a74d1e5ad8c5c726e1c2
MD5 2e79a056f15af67e4b5774ac75d961e4
SHA1 e72ef69bd130e58832af1c91afa98b5ee0b7e6a9
SHA512 27c9e1a2af874afc4aa445196ddb25de5664e3bb930ee3a7d8a67c797919665a6471edc0959adc9dd649f341fe0f41b979bbe0d956d772ebc42b8fa85db5f7d5
SSDEEP 192:sxR9RWyM/jK1Ml8wbv/fDsEJ8bNayzoA8p4h/g6+WNIYlBXRGpIgDIJ:sxR9wlv/fDsEJ8a/s/5IQuQ
TLSH
T14862E915AA646D7BCCDBD20DFA457F93D6F91173A2901E44AAFCDA0C00E6AED211381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 662abbc5f26065a3356146fea3ab8bd647619d852657b7d5bec2d4e41ba8852e
MD5 179e7d861f5d18e43ab5093202df755b
SHA1 191196cd576dd197cd565be695f0a60ed2cc2a8b
SHA512 e7f16ffdb83ffa5f35374bd61f70595f78845ef66bfd1a07c6498194a74f29da7e80e612a4d41cb187fb3f1597a41af8427b975b5bece9acd212f59fdc877c25
SSDEEP 768:dhRACxWgg+fAJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVL13f+roPcvs:dhRACxWgg+fAJu1jaulfV0vs
TLSH
T1D5C2FC3F540CCB7E4F844A9DEC29AED76DD802CB96988D5447EE890C03C67EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 893f155d3e26882fb60360bd2344ec44cdbba66f63b15e0443f2a31a6112f36e
MD5 1eefa9fd3d73c26b5e8dc92423d2fecc
SHA1 24ab48a258c175b8d79fbc8f0f32c5d57d0d6998
SHA512 94692d81d8ac66a22adb170c42d9b4f8bfd2619bc6555c248cf44858f43e8a157683485b3057c9c59612b9fe9050446e11ee7660bd31db4095f6d11b03e95c0f
SSDEEP 96:KRlH0lHVlHAlHElH+lHilHmlHkWlHilHvlHPglelGK4lDglclGclWl+l9lMl+lXx:ClUl1lglklelClGl7lClPlYlelOlDglg
TLSH
T139917814367F42803C7E754D85B4882B4283B0A37068A93B7BE816725FA6E025CFFDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

57c30f12-f2aa-4769-a604-26a8c974dc8b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\57c30f12-f2aa-4769-a604-26a8c974dc8b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 f804109200cd30d836c6a95a3b36155c87c9dca6897e2eb16340812beb029c88
MD5 f49b597b9887a7007e91721c8afeb68e
SHA1 fe59bea95a9c65243cc060ad4a01ef8a6a03df4a
SHA512 776178b0d6170bd85e66217c2f31f7c31964068cad3a3375487ede53f439304e55ac9cc61396a5cc238bbd493ecb777f72c4c55679fece90c53e966c2b790687
SSDEEP 768:Mrv+4UNbd03gjADiJjzdNHXmTWTbc+HCeVH1SvBy:Mbsbe3vIzLeWn1iEH1+y
TLSH
T10613CF71DCB99E37ADF69684B44B7A037EF81163C4C80A98C8C96F4D028B49D131BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c235876fe860d85363a5a6cdad1ec878366a5e4bbe40cfef410751b234d6bc8c
MD5 3fbe6cc50af7b731e1ebfa7525dba454
SHA1 2b42af84174b5bbdcdb619179cb9c8023f8e3b88
SHA512 fa3d8483f51c70af010bd3f161ab1f780f80677ed7d4f389e2ac765454ca2d39716be89fc7e355db8a769530918f71da56661684dce034ca83baaa5420e708ba
SSDEEP 768:Az3HjeDiJjzdNHXmTWTbc+HCojKgqmUMhOGT:Az3eIzLeWn1ifgRUM8GT
TLSH
T18EF2BFB09CA69E379CFAA6C4B54A3B066EF51073D4C82E98D5DDAF0E014359D131BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d54a188ef8a1bd3178a925b2280b78ecf10c54ec6ed0b85819133ef2afba5192
MD5 1a1741f3c64b2316388a8b4781b86610
SHA1 d7ca68d7b3a4e3f694f92a04a3abfaa2ce18cf3f
SHA512 0c253bc185c4fe68919544172b287e10a1a1912eee6a43c96447ba0733635ce9d83e946f0bede1ea38e4bae3452f4ff6630e71b2a7ea8a2e2e2d69bd8258502f
SSDEEP 768:oz3wjeDiJjzdNHXmTWTbc+HCojKgqmUMhOGT:oz3tIzLeWn1ifgRUM8GT
TLSH
T14BF2BFB09CA69E339CFAA6C4B54A3B466EF50073D4C82E98C5DDAF0E014359D131BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 7566b5ba6680fb5e3bf3e705163a36c747e2436742ec7d8a35d776d67210f407
MD5 3e191f166f7d6dcbebe3ddcf1967c6a8
SHA1 12a7579fa0caf2594f2efe7bcb74ca7904533d24
SHA512 cc085d9318d20d0721b08f7d29b6b7cd0aa1f5dae8ad89b4ce081e8a6229aef6f04b48fa1034de783e9082a075b15a568d1b3adfd8c1fd2b90712a0a8ce348b6
SSDEEP 768:2FQM3UwgSjeDiJjzSNHXmTWTbc+HCojKgqmUMhOGT:9M3AIz+eWn1ifgRUM8GT
TLSH
T1DC03AE728C95CA3BADFA9BC4F54A3702AEF501B3C4D46AA8D6DDAE0D014349D134BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 070335fcd86e39dcb6b37d5509c92f8fc0cc97db1e28fbb861288fe02ab15b34
MD5 d3b8590c2eec2d4d9c03e33e6078709e
SHA1 12fc91507e1ea5279d952abde46f8bb66543d3d4
SHA512 b4d43a1a42734ea55bf6f4e603bc07bc923e6018ffcf6b44a1543514295bd69ff5732b86f748a6d5f0f48e21af64f90f50fc6327f27c6453489f3abc7f382ae8
SSDEEP 768:arv+4UNbdM3EICiJjznNHXmTWTbc+/WeVH1SvyZ:absb+3QIzxeWn1uEH1dZ
TLSH
T1DD03CF329CB98F37ADF69688744BBA573EF8116385C40B88C8D96F4D429748D170BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c3a3e54e-40b1-4783-886c-613c71520b1a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c3a3e54e-40b1-4783-886c-613c71520b1a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download