hxxps://storage[.]googleapis[.]com/cdn[.]atomik[.]vip/releases/etreparents[.]com/_next/data/2[.]0[.]0-serverless/famille-monoparentale-une-experience-difficile-mais-merveilleuse[.]json

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/08/2026, 13:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://storage.googleapis.com/cdn.atomik.vip/releases/etreparents.com/_next/data/2.0.0-serverless/famille-monoparentale-une-experience-difficile-mais-merveilleuse.json
Sample260824-qmtsfstyew

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2064	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134320514030283847"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{DB4DE3DB-DA26-48DD-94C5-E8D0697D2337}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3868	msedge.exe
3868	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe
4788	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4788 wrote to memory of 5088	4788	msedge.exe	85
PID 4788 wrote to memory of 2064	4788	msedge.exe	86
PID 4788 wrote to memory of 2264	4788	msedge.exe	87
PID 4788 wrote to memory of 3944	4788	msedge.exe	88
PID 4788 wrote to memory of 2264	4788	msedge.exe	87
PID 4788 wrote to memory of 2264	4788	msedge.exe	87
PID 4788 wrote to memory of 3944	4788	msedge.exe	88
PID 4788 wrote to memory of 1644	4788	msedge.exe	90
PID 4788 wrote to memory of 1644	4788	msedge.exe	90
PID 4788 wrote to memory of 1644	4788	msedge.exe	90
PID 4788 wrote to memory of 3080	4788	msedge.exe	91
PID 4788 wrote to memory of 3080	4788	msedge.exe	91
PID 4788 wrote to memory of 3080	4788	msedge.exe	91
PID 4788 wrote to memory of 708	4788	msedge.exe	92
PID 4788 wrote to memory of 708	4788	msedge.exe	92
PID 4788 wrote to memory of 708	4788	msedge.exe	92
PID 4788 wrote to memory of 4088	4788	msedge.exe	93
PID 4788 wrote to memory of 4088	4788	msedge.exe	93
PID 4788 wrote to memory of 4088	4788	msedge.exe	93
PID 4788 wrote to memory of 2876	4788	msedge.exe	97
PID 4788 wrote to memory of 1440	4788	msedge.exe	98
PID 4788 wrote to memory of 2876	4788	msedge.exe	97
PID 4788 wrote to memory of 1440	4788	msedge.exe	98
PID 4788 wrote to memory of 836	4788	msedge.exe	100
PID 4788 wrote to memory of 3900	4788	msedge.exe	112
PID 4788 wrote to memory of 3468	4788	msedge.exe	113
PID 4788 wrote to memory of 1120	4788	msedge.exe	114
PID 4788 wrote to memory of 3512	4788	msedge.exe	116
PID 4788 wrote to memory of 3512	4788	msedge.exe	116
PID 4788 wrote to memory of 1592	4788	msedge.exe	117
PID 4788 wrote to memory of 1592	4788	msedge.exe	117
PID 4788 wrote to memory of 3868	4788	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://storage.googleapis.com/cdn.atomik.vip/releases/etreparents.com/_next/data/2.0.0-serverless/famille-monoparentale-une-experience-difficile-mais-merveilleuse.json
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff81d97c188,0x7ff81d97c194,0x7ff81d97c1a0
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,11024528019695990815,5258019004217338656,524288 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=2828 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,17626719720124592248,10185558036729557678,262144 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:2
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,9951527754154303915,13508783802024854393,524288 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=2820 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,14861566943472273648,18277541118728492372,2097152 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,447650412691620372,17099833927509668836,2097152 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,16849683431867831058,6507279302341125186,2097152 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,13249783699644842759,5595180117112200783,2097152 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,18044527916697319034,6029489525062066831,524288 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,6457594883267045120,16582710067340862253,524288 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,13527422956506779110,10163218846545036929,524288 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,13527422956506779110,10163218846545036929,524288 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,11461578593886611702,11753805590589204344,524288 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,18422874279378379265,6528473866766066998,524288 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4188,i,11019170852305821488,4434687496108385304,524288 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,4598429450145889014,7939250750231511855,524288 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:8
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,11921788890657275587,16297998333293703096,524288 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=764 /prefetch:8
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,18160543020103152389,4128605602339362467,262144 --field-trial-handle=2896,i,847441251243336302,15956589147856084431,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3868

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3900

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 2bc7f3a4024d9673a2f7a098d546fe1f592a8aa0477eb259121fe80954c2f99d
MD5 403039b77d88ae3c8e79a108e60c95e6
SHA1 478b6a90cbd5967be9b36c911b5a2135e0b7199c
SHA512 fbec8c6863e6042041cea05b5efa69ca53b0340f3bee0900ef55602e442dca5b20c736b16589ad755fc44c45bb2c920ed0e29957fb7ab74fe05e101f104c82fb
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7I:fwUQC5VwBIiElEd2K57P7I
TLSH
T1EEB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 343f040ff2f0d3083695055e0312e25155fb98ca04d82155f059cd8224855c23
MD5 989da44f0df435a3a369ee6bd7af467a
SHA1 ffd48e983a7dbcd908d250e010b56e4cbdf1031a
SHA512 275f52d8a8290f3beb9d9fcd43c28a695ad3bd596f89b946231123a52170185c9752fd3dc9b8e586b24f202c54570992b4ac92cf108f538a393bc78c0eaa8987
TLSH
T1637160F431111B7EF3300271ABEE0221B538BAD9F4477FAA1064A836590DBED7C2842B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5867ec.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5867ec.TMP
Size 3KB
SHA256 84729bb1dc2323ef5cc4018bad8d59b96260ad5514f7249abb677d925270c126
MD5 8163c51ea7f541fb979ce50bd8e0270e
SHA1 2d6b2eba4b12d3bb379599ec4961f7f3a1785c66
SHA512 ee4417734e9db909d300e330ed6cf5019cdbde09f2daf35e1b017467a95944468c2e2c74f45b8ac74f9d077a9b73e73d099268d47caf9f0eddf15c766a46fd95
TLSH
T1CB7160F431111B7DF3300271ABEE0225B938BAD9F4477FAA1064A836590DBED7C2802B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3e11614b6e62d6d9c7424453eafe3245441b2e7024cf1447302cdc79096d73fd
MD5 03f4fe5f89704ddcf4d2b2416023f494
SHA1 a04def3ed9b05bc2b69ec2d479fe23bc72970e40
SHA512 4aab49e52107864e97cd51870fa5ef8ab8f153dff841f5c21b0e8605f5c76d2c22487f6dc31c871cc92468004e3f2c7e159599557b8f0321e602fc0b3ff96c27
TLSH
T1E831CEE3C6D9CA6ECD014AF09B14BE17CE2C0A50422D3C5689D4FF5B93E2072E1125AF
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e042e9cbeb8f070ae73632ce1e05db179a9eb17ee2d5215b1a9e2d7e92bd81a9
MD5 53b83bc702ff4d61884d9dd28f1c8146
SHA1 6753f3b5b008a14a816035e4cc0a9aef41b0905a
SHA512 8bd4c207a4acfbd79eb9470aa09500cc6a339e901863f5f2226fe709550a95f9f081e314cbd7945065ad3581b6e9ce73da77fe97ca85e8c99323af7d79465d80
SSDEEP 192:sxZDR/yM/jK1Ml8Mky/f+sbt5FKV4Idp/0HW6+WN5CDB/Yvu3VUcSIgrJ:sxZDRMy/f+sbvF48Hb5s/NUP9
TLSH
T14252E8126A346A7BCCDBD209F955BF53D6F50572A2910E44AEFCCA1C04E6AED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 53f665845ea8b577793a4ca33d569d6ba73259f2a67c94b0e111d2a6c7f17484
MD5 eb2932fbc67e3eb32204710a54d319a7
SHA1 111963422409b03ecee1e2766e1e16d5f1d9a54e
SHA512 325786a9d5d712478e04194520a71a6d519f9239422356d6877f325793663240191e637a66648aff62e832071d530b524a5eef8421025441371d0cc3d5376583
SSDEEP 192:sxZDR/yM/jK1Ml8UQoky/f+sdk5FKV4IdpF0HW6+WN5CDB/Yv86TUcSIg5wJ:sxZDRqLy/f+sdsF4+Hb5s/sUPq
TLSH
T14352D7126A345A77CCDBD20DF945BF53D6F50472A2910E44AAFCCA1C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 dfd1f113c30fb1e08f51bde0c85bf8f80dfe1d38c25798190c674cc106d07ba6
MD5 c0f10e653a5d1200fe310e9db6e2b0d0
SHA1 b56cef43c2b1cf52b50a614e7eba018395c73f54
SHA512 ae4200829818d32dabb4fe78cdbbc75bc868bea81211e5ace3a253724e2b75833677b05702ffa46111d439dcdc96ce8c4148d3a0da290ae34449084129816535
SSDEEP 768:3rseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppUroi3:3rseJ3xWvhfynu1jaVcL88p/y
TLSH
T19DD20B2B280CCB7E4F844E6DEC266F966EE801CB57984D5487EA884C03C76EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 df1ee9f4f3b2aa11d4d46a2869d1fe527e7dce07342325a938d7c4b6e2b718ea
MD5 967c213b4e2ea3b952e5b63de3f25203
SHA1 2169f5de32aa43c7b211947ca0b9ea6926277c6a
SHA512 1228e78a4ca2d57a7b89606f512a710b56283e10f7834d258850d6445401544f41b6646dfab2f2dacd72ebdead70e88958d330025327c4391e3677753180970e
SSDEEP 24:KdxwLfxwyxwRxwIaxwNdxwBxwhxwx4xwlxwB+xwsIjxwdxwxKixwOhaxwzxwx1EI:KYHIhKggkXyBcIHK5W8Ty95I5KSEcyz
TLSH
T17B913106347B02023C7D294CA6A196364E4631E335ACB4EF7FF900A51E66E214EFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59047b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59047b.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 d5fab49524e10e94e9b2447ecdcc1719ea4c3b151ec321425cc7fa91ad28ec4d
MD5 dddae80b723bbf4a6a478f7c21c47ba6
SHA1 dd9b5dab057318f7a4f489eba1bf63bc2d442bca
SHA512 fc403591943b3e2780154fa3b73faa8fb43a6c12fb24c82b8798972d2891d5ca6297bdac813257afd306b90565622e3440b0576de4baf73849ceaae053219d41
SSDEEP 384:zfiFiZcIosNHy+8TUNTUlIl0loCqc7Q7ViYaXXldLKoJrTMNpq:+FQoH+wgRcYzallhTMNpq
TLSH
T1EBB2F7F258D7893AE9AEA743E77D2E078EBCC067B5805650B3985A1CCC9617FD30AC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8e51d4b3c7efff4a0a8a8fb2ff456806b919e906fae79f3120cf7a243126e463
MD5 72034ada062dd804a293b1ba62a1261e
SHA1 4a87f2aa1fbd764e29b1ee8693aa126d77508a31
SHA512 005c44c4900a6984307a3d6222ef15f79a1c1c716441ab64bee86b20d776fd4318ab397eab8fe0f30729289f98400a2d1c05ed9d30455726ec92db1d8d53ed01
SSDEEP 192:lON76vMtPQmiUy2jThTFp+FdLXKV847PFU/u:lON76UtRBTOdLK1NU/u
TLSH
T146020835AC786C7B9AA3BD86F48A27171FE421BFE5D11B54EAE82F1C00D765C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 854bc9fd8f258ba786af6845dfee58408e87c689732e96ded7fac0920955ce62
MD5 0f9379deaa0150e4fc22897ba87b1c7f
SHA1 67425d160ae3c9b50e08bfe4098cf0c57134be49
SHA512 597920c5cc3516c4be5b8f966951f27774d7c340657f8e29030a30ffdc953732654a12e6f20a83613ab35aea361ef1d10fb000d667ac1d2e688c90c28eb94767
SSDEEP 384:rMZcIhsNHyu0loCqc7Q7ViYKXXldLKoJr1MNpq:WhHqcYzKllh1MNpq
TLSH
T111627D716CB49C3BA9A3F141F48A36079FF4906BE6C45B54E5FD6F1C00D9668130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 86452cb60f25cbcc32df84e4af405cec4115a5ffeed51d508eeedef21313a2be
MD5 1bc513cba9ffdca3d01b9daa5c39f686
SHA1 bc68f40c34f88fc13ef977fe340ff815bde1316c
SHA512 6a95c51bb725f20169d2c0eb1cbf1a49a935d1d08b7540fe9d66690b2d82a689e92281c25c82b36b0b9a96aa3d572bc60bf58301f00959d249260adc03c7f5f6
SSDEEP 192:XFONTy76vMw7PQmiUy4TjXlhTFp+FdLXKxzSJri80I7qfNU/u:XFONTy76Uw7RrHXlOdLKoJrLMNU/u
TLSH
T170121C32ACA49C2BAD93F581F48B36175EF0916BDAC56B50FAEC3F1C01DA65C130AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 1b8ba9478ebd58804ce7ff39d14ab3850a214f54ab5ab9137bb5e6e9f33c1d7c
MD5 fed603ca88aa1a43bba354de5dd7cb18
SHA1 00e330d2b5acd25fd6288c072e10f24486168041
SHA512 a606f1b4732c67e66c8bfe887d8ef0e6f3d5217f35f53ec2956f2f2cafd6cabe16844d81dc73ff727586f45cdda65f178f0c0bfb974c48d00fa4ce781d58e4da
SSDEEP 384:QMZcIhsNHyuRloCqc7Q7ViYKXXldLKoJr1MNpq:LhHzcYzKllh1MNpq
TLSH
T156627D726CB89C3BA9A3F141F48A36078FF4906BE6C45B94E5FD6F1C00D9668130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba99bfde-3961-4eab-aac3-72a2cb05e635.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ba99bfde-3961-4eab-aac3-72a2cb05e635.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3e1d70b67cce82064d07987bcb16facd084c14b990a701729b520f8b9631572f
MD5 cd57e35c99d3384fdb83738953d9ff7e
SHA1 92cd05847e55810f5178ceb574accbf7da61b364
SHA512 6240765f27a8de89342b3e444e317b1d3898e9bae68345eb84647f0bfb5dd7c8630011697c069ff67e4189c6b46a4542f183c6ca11db99287aba45082e9ed62d
TLSH
T1A941295DB6EA1148B3B75E5A5BF7986D447B78372E0AD55E10010E0F0A62B40CD61B3B
MD5 SHA1 SHA512 TLSH

Submit Download