hxxp://clinique-saint-jean-languedoc[.]vereinsbekleidung[.]at

Analysis

user interaction
yes
max time kernel
148s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/08/2026, 21:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://clinique-saint-jean-languedoc.vereinsbekleidung.at
Sample260828-1nd4hatela

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1512	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134324272710901780"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{40C0852E-E0C6-448A-B42F-50DBB6735F5C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 2284 wrote to memory of 3768	2284	msedge.exe	86
PID 2284 wrote to memory of 1512	2284	msedge.exe	87
PID 2284 wrote to memory of 3616	2284	msedge.exe	88
PID 2284 wrote to memory of 3616	2284	msedge.exe	88
PID 2284 wrote to memory of 3616	2284	msedge.exe	88
PID 2284 wrote to memory of 4760	2284	msedge.exe	89
PID 2284 wrote to memory of 4760	2284	msedge.exe	89
PID 2284 wrote to memory of 4968	2284	msedge.exe	91
PID 2284 wrote to memory of 4968	2284	msedge.exe	91
PID 2284 wrote to memory of 4968	2284	msedge.exe	91
PID 2284 wrote to memory of 4132	2284	msedge.exe	92
PID 2284 wrote to memory of 4132	2284	msedge.exe	92
PID 2284 wrote to memory of 4132	2284	msedge.exe	92
PID 2284 wrote to memory of 3332	2284	msedge.exe	93
PID 2284 wrote to memory of 4496	2284	msedge.exe	94
PID 2284 wrote to memory of 3332	2284	msedge.exe	93
PID 2284 wrote to memory of 3332	2284	msedge.exe	93
PID 2284 wrote to memory of 4496	2284	msedge.exe	94
PID 2284 wrote to memory of 4496	2284	msedge.exe	94
PID 2284 wrote to memory of 2836	2284	msedge.exe	98
PID 2284 wrote to memory of 2836	2284	msedge.exe	98
PID 2284 wrote to memory of 2836	2284	msedge.exe	98
PID 2284 wrote to memory of 1896	2284	msedge.exe	102
PID 2284 wrote to memory of 2392	2284	msedge.exe	103
PID 2284 wrote to memory of 1896	2284	msedge.exe	102
PID 2284 wrote to memory of 2392	2284	msedge.exe	103
PID 2284 wrote to memory of 4596	2284	msedge.exe	105
PID 2284 wrote to memory of 5460	2284	msedge.exe	118
PID 2284 wrote to memory of 5468	2284	msedge.exe	119
PID 2284 wrote to memory of 5476	2284	msedge.exe	120
PID 2284 wrote to memory of 5628	2284	msedge.exe	121
PID 2284 wrote to memory of 5628	2284	msedge.exe	121
PID 2284 wrote to memory of 6048	2284	msedge.exe	123
PID 2284 wrote to memory of 6048	2284	msedge.exe	123
PID 2284 wrote to memory of 4236	2284	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://clinique-saint-jean-languedoc.vereinsbekleidung.at
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffb81efc188,0x7ffb81efc194,0x7ffb81efc1a0
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,6756420843950984047,16335403485108686884,524288 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,585723316881834837,13557835434288505600,262144 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:2
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,5747417325522855741,1824259549104628396,524288 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,12062249819428806433,5840620619523678963,2097152 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,11952945756987561518,14721559842547005822,2097152 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,14478167014630343421,5285949200473376523,2097152 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,6939837881025841998,13540870090375258782,2097152 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:2
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3664,i,4595105449349660557,8256016319807284895,2097152 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,884400254489886615,5476388259730999441,524288 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,16024939320577140053,7882400482585788602,524288 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,4882148278862860181,12886601926741785894,524288 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,4882148278862860181,12886601926741785894,524288 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,741595406953804769,8167976662391474786,524288 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,17983583656403208742,10563358919572037600,524288 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:8
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,16159651359530750195,9879733646692832328,524288 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,4317639698594814668,11278907262759509154,524288 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=3104 /prefetch:8
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,5900713946765821233,12462414851470938537,524288 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3780,i,1514335329801726179,13718093598157342428,262144 --field-trial-handle=2480,i,12681829657250291207,11935201712205353003,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4236

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 ae53e618032c667892ed21a0d220c217b0a8d7911b3dee86b08e6a49f9b5961f
MD5 f9f19468189111f8249d81621e4a102d
SHA1 fa68cce6f26f82bf96fb875ff427a4ef9e9673b2
SHA512 d53cb2328cd19d1ba8512d1ff3633af39c02eed400e5983853154f5b66c3341ed3d1103439b7c80316b2363de07a7530588d76f9e262920e057331d68d3f3bb7
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7h:fwUQC5VwBIiElEd2K57P7h
TLSH
T18DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e26a6b20479ba29d3aed6a23673543d5d3f4f859853cbc932720ebdd68815f9a
MD5 f8b6c1b732a3e7df51aa7e9fe90adb8a
SHA1 6ac7250d85c3934fe8cc2e42ae3ce427baeff30e
SHA512 516603277440817becd6f8ab524051a42b9303181475e352d54eafa6118bbd7a9dd270582656eb847942fe9d7a1b0bb4272ba4867236dfd32f40e950c2c8d460
TLSH
T1CC61605A03C240FEEB301378D5E00D013571CFBA2ACBBD9452A498FF7D06B634D6952A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b820.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b820.TMP
Size 3KB
SHA256 dcb4e2537f2b643a7a611f7ead26e95c8ffc4780c4fdc117cdb3dc91715cd452
MD5 69e99cb60bd11a595b6c8de918fd7774
SHA1 2d905280036c734d377d67b1bdf36db6d44651cb
SHA512 a87277f7248732d0983297d13138bd269a266ab376d07cf5f4a3e80f3ea4ce8615b8a7f9e300a00023a6898aead42bd9aa8bdb593f6d5a0057b430cc26179db0
TLSH
T1B1614E5A03C240FEEB301378D5E00D013571CBAA2ACBBD9552A598FF7D06B634D6956A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 2fb651b41e22d71818c105a171a9f89f933e4ac707d242c60de73b853d4dd57c
MD5 4533b559e89ad682ed21145ff83060ff
SHA1 ba0092efa0bb99a1b5cb7512263ead947fc16e27
SHA512 4e338ab2f2686ffa74e0303f3543465574713f132b54ea71bfc847bba97f5952c9052d5593336c2a5c28fe042fc0761bb0554e4dcbe42b3d3f63facdb21ef99a
TLSH
T1E811BDF7C3D5856E891117F05A24EE2BCE1D0601422C3D19C5D4EF2BD3E3075E00195B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 6419875b1836a524385b41ac39895bdbdae740eda89593f125e1c91671129729
MD5 81949c8b35ec2ed73c0b87933fd35102
SHA1 672d801db1b915664e0433243e0f69f416bb38d0
SHA512 2de574f22a5ff1787df237e257db3b55044495369b8808a60086113cc71ffc3db02cce85f076874afc998240b1b5a62b4e9905c2b9d19a9e99bdb02db3913a9a
SSDEEP 192:sxZIR6yM/jK1Ml8Mk6/fUsygpIdpU5HW6+WNFNT/YwpACSIgrJ:sxZI4M6/fUsygi4HbT/c9
TLSH
T17D42E9116A34A977CCDBD209FA45BB53D6F9057292900E44AEFCCA1C05E6BED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b259419454fd40af83133981621a0a0e05f8ef4491ab023eb83e6e84786c317c
MD5 48b9b91e4bae65c7f5a3819481924851
SHA1 a178b93974e1ab91520bb1d3ded92596dc9daacf
SHA512 aa3da0a5a30fce3d6afa60590ae0009dfa2f508ac943b3010d0cab98a185ab060ccfecb4c3b348d3056ad9fff09e37df196514c0d741f430ef3649306c2fbfcb
SSDEEP 192:sxZIR6yM/jK1Ml8UQzk6/fUsTgpIdpy5HW6+WNFNT/YwnBCSIg5KJ:sxZI4qY6/fUsTgi6HbT/b8
TLSH
T17A52E8116A34AA77CCDBD219FA45BF53D6F5057292900E44AAFCCA0C05E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 e35322ffef4dde64732421fbf59f4a4d873f2ca3762405f98e87dd4048283889
MD5 9fa0481f66eef4958d2595c302dff05a
SHA1 9decd1dc03b7f3e902dec846bcf14ca6c696b75a
SHA512 87c01decf0edc7085bac48e6a5b8446a00c961bdef72288f1c34d6f09137410052245edbe98f8ec416e37bc52967467064b852f3b16e66103fc63575eb6603ae
SSDEEP 768:jM4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dMroh16cYak:jM4jeXmWvmKLEu1jacPLZQdXJY
TLSH
T1DDD20A3B284CCB7E4F844E5CED26AE976ED801CB6A584D5047FA894C03C77EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 aba26c6f5ca81d1ccfa361209cc181a773c7b40921b8cd0001afe4cd91fb6975
MD5 e71bc6d3a0b1d3edf69a4543577881b9
SHA1 f3cd5402af851752a7ef6d732632fb053e1d7002
SHA512 2f2a65f572f7bd732fa8d38a226faa66422709759229e27c86de51bc0d6bffb59e936e75f9e08718f7d02e3302d1b718048c5bb839be124fd13a596dffec5785
SSDEEP 48:K8mIfKji0vyWmTKGQ44+GItlInm+KYLA0+suu1FkxoIrKtC8Ty1z:K8mQKjiWe9eKmwVoAKtCSmz
TLSH
T1DC91150570BF52022C3E2A0D9594962ABAC1B1A33578A42B7FAC04B60D67F518FFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e963f288-00d9-48e5-87d0-dedeb9ed87ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e963f288-00d9-48e5-87d0-dedeb9ed87ea.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b6d3e8e44843c3cbe11e366ef5290f0fb31d82009b0a4f1ae69eba0219e3c0e2
MD5 91daa63f100cc5e9368575a767d289fb
SHA1 c4b1f0a71f3e93f0a5c52c4f5725fb0903f03afe
SHA512 a7a9fd7f3bbd84a08a27dfb4aea7f8272ec81799080a01b00ca44dc8aa91c58894d446dbf3e2a285aac667877622c01ba0b2485216290f3eca39633daa29e985
SSDEEP 384:KZcIhsN6h6OL17f+g8GYZX4+2fAFe8l0X1puLj9Qxom:oh7rU4l2e8lsyLJQxZ
TLSH
T1BF827E315978AC7B55E2E641F58B36134FF88123DAC86B84E5EC6F1D04DA6A9130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 b814b21efd32b3371e53fdee0b8dfe5758c6bd7aa342495423731345e3e8b1fa
MD5 229a515b73cdcd1946089a0110a89613
SHA1 496706c820f035e587c9c599a55def732a017f8d
SHA512 9e909755aeec3e1c99cfa853194b835213a1167714b4ef458c2804a0e7761d0c2239dee96811b82ed7d8687b7a286736fa16c4a0563bea603d701cfd37d70376
SSDEEP 384:NiFiZcICsNC8TUNTUlIls6OL17f+g8GYZX4+2fuFe8l0X1puLj9Qxom:EFQCvwgyrU4lYe8lsyLJQxZ
TLSH
T1C8A25D335968D97FA9F6AB41F54B32138FF84123D9D8AA94F6DC6F1C009A5D8130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 27fca6115a6d79f66416b14c70888a6e5d58e3f25bf76f35df0abdc0386bd9b0
MD5 10e317e90be8c8cec7e2acaf456ff5c0
SHA1 e5b1f9928961160060424f3e8697538839fd4bd7
SHA512 06e0511eabb5a44db4a76c3fba3d50b45ec3003e3aeed6bd5037161b7c9dfa32ada689dce4cd86a8b42de168001165f5f812a1696b40113b0ba8d0b9cd9f8c29
SSDEEP 192:EONl6hZ0QmiUy1vpc/+jVWjzorGYW5wOZeBlnU6:EONl6oKpu+g8GYV2ennU6
TLSH
T17602DB35A8786C779DE2AE46F48737235FE4112BAE956F84DAE81F1C00C775C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a56f7752bd9a87c88db0274566b19ba3081b1030136374d0e311e3ef4bd89b14
MD5 aee6fcd6bcc660c4315c889f9d114ecb
SHA1 fcb1004e202e405736f75e09161950e8b5422825
SHA512 7df1897ac4bfc46729682186043a80ca67b522c0edeb51d73b74f766844beed15f4f1e5add97a4b0429b645a657f1740e89bc5e21fcb05bb0f23ce258218c214
SSDEEP 384:eZcIhsN6s6OL17f+g8GYZX4+2fAFe8l0X1puLj9Qxom:chirU4l2e8lsyLJQxZ
TLSH
T1A9827E315978AC7B55E2E641F58B36134FF881239ACC6B84E5ECAF1D04DA6A9130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bc32ade1a778ddeabc3ce4ba7577246a2b52197924c0579f785b819cdb0def33
MD5 c58e2765caf4234ad89c177a36f3763e
SHA1 54e47a13e326d3a217329bbff934ba9a9c34088e
SHA512 caf1b940acb3f1f690a5b733386a9ebe7cda092c559a831bff7dfd8319b2f22c90dae8fdf0cc8ea5abd423127c63b2ecb1839737fec0783ccc74e377da5face3
SSDEEP 192:rOND6hZeQmiUylvZc/+jVWjzorGYZX4+2fh5cOqe3qTlU6:rOND6OQZu+g8GYZX4+2fk9e8lU6
TLSH
T12212F935A868AC275DD2A651F08732235EE55217EEC97F94E6EC1F1C00DF6AC234EC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91e13eb9-2224-4a27-84ee-73dce9f84ca3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\91e13eb9-2224-4a27-84ee-73dce9f84ca3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cb6335ca6032a9663de75d511119253bd5e1cc798914e9bf34112a366bd6a75f
MD5 7e59c3cf9ffa3c69f4987444ad51f7e5
SHA1 f4abb46b9362fc1d5b6bbcfae843a2e769fd909d
SHA512 a3966575594a82172e1fd55ef2936343578e8fe161517aaf149fae60dab5729a44c317e8f858f062f3c642bd483d9e8650d9a554e56c8ca380bb83ddff416c63
TLSH
T113411858A6E91118B3B76E5AABF6B86D487FB9372F06949D10110E4F0A23B00D8A1737
MD5 SHA1 SHA512 TLSH

Submit Download