Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    25/09/2026, 19:09

General

  • Target
    TIGER_Funding_Radar_v2.2.86_Windows/TIGER_Funding_Radar_v2.2.86_DIAGNOSTIC.exe
  • Size 13.6MB
  • Sample260925-xtsmasvx6j
  • SHA256 4cb5d5b3a2cf74125de87f88a0352729acf70beb43c1cde1c3836e282acce953
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Drops file in Windows directory 9 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Modifies system certificate store 2 TTPs 13 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 45 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TIGER_Funding_Radar_v2.2.86_Windows\TIGER_Funding_Radar_v2.2.86_DIAGNOSTIC.exe
    "C:\Users\Admin\AppData\Local\Temp\TIGER_Funding_Radar_v2.2.86_Windows\TIGER_Funding_Radar_v2.2.86_DIAGNOSTIC.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • Modifies system certificate store
    • Suspicious use of WriteProcessMemory
    PID:3320
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://127.0.0.1:8765/
      2⤵
      • Drops file in Windows directory
      • Enumerates system info in registry
      • Modifies registry class
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2080
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x300,0x7ffb0363c188,0x7ffb0363c194,0x7ffb0363c1a0
        3⤵
          PID:3340
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1964,i,7185304691500456863,13755590354820055828,262144 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=2836 /prefetch:2
          3⤵
            PID:3376
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2164,i,3531377286731982274,16030080705363361814,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:11
            3⤵
            • System Time Discovery
            PID:2712
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,12566249490869540007,3103734668818282082,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=3176 /prefetch:13
            3⤵
              PID:1092
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,18312019746313495402,9977330316388664724,2097152 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
              3⤵
                PID:4608
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,11026538217837446821,15997955392651810982,2097152 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
                3⤵
                  PID:3120
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,9313361598610313332,18364495605576122671,2097152 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:9
                  3⤵
                    PID:5996
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,52314580016901684,4183357807022771343,2097152 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:1
                    3⤵
                      PID:5716
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,11209325037882469294,16663563255225348169,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
                      3⤵
                        PID:2720
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,16729361078525441622,3323100880309279860,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
                        3⤵
                          PID:2976
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,4128584048016442101,12830971329081409778,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
                          3⤵
                            PID:3804
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,16535332702105233550,5262060225808959,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:14
                            3⤵
                              PID:4572
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,16535332702105233550,5262060225808959,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:14
                              3⤵
                                PID:4472
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,11099842271764979936,12990521017680750387,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:14
                                3⤵
                                  PID:3344
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,5742661875992955959,12588711192471595357,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:14
                                  3⤵
                                    PID:624
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1304,i,7694306466720556797,2884917604302530652,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:14
                                    3⤵
                                      PID:2540
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1308,i,18067934175727323965,7100912238153450951,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
                                      3⤵
                                        PID:1184
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1312,i,9493696867328544,243110048024325930,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:14
                                        3⤵
                                          PID:4772
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,893777490015805491,14930249944138104165,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=6716 /prefetch:14
                                          3⤵
                                            PID:5344
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,16946623913754308010,8791060217473512706,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:14
                                            3⤵
                                              PID:932
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,2698631627352351746,11918244192242733905,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:14
                                              3⤵
                                                PID:3396
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,17692706423590779182,5701455009370311402,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:14
                                                3⤵
                                                  PID:900
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6236,i,10896001645550097196,1237905155728904190,262144 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:10
                                                  3⤵
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  PID:3544
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1152,i,16401854038680326728,9241075897077968841,524288 --field-trial-handle=2840,i,5145750945640100373,2550298864905909955,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:14
                                                  3⤵
                                                    PID:4972
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                1⤵
                                                  PID:4692
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                  1⤵
                                                    PID:2368
                                                  • C:\Windows\system32\svchost.exe
                                                    C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                    1⤵
                                                      PID:1224

                                                    Network

                                                          MITRE ATT&CK Enterprise v16

                                                          Replay Monitor

                                                          Loading Replay Monitor...

                                                          Downloads

                                                          settings.dat

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                          • Size 280B
                                                          • SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
                                                          • MD5 SHA1 SHA512 TLSH

                                                          settings.dat

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                          • Size 280B
                                                          • SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
                                                          • MD5 SHA1 SHA512 TLSH

                                                          f_000049

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000049
                                                          • Size 48KB
                                                          • SHA256 ea3a767b15df7dbe3d695ec9c182ca0f15b2ce7750156c6b70276e11c28997f0
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_00004b

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004b
                                                          • Size 23KB
                                                          • SHA256 0a1e718d99c41b22c21f2520ff4f9e883a6b5533856e398d21816ee8eb8185d3
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_00004d

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004d
                                                          • Size 21.9MB
                                                          • SHA256 afdb6f1a0e45b715d0bb9b11772f032c399babd23bfc31fed1c170afc848bdb1
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          the-real-index

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                          • Size 2KB
                                                          • SHA256 8fe09a5bec9843f47ed3cce8c95e9675ed387843a828df006056500874525efb
                                                          • MD5 SHA1 SHA512 TLSH

                                                          the-real-index~RFe5a328b.TMP

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a328b.TMP
                                                          • Size 2KB
                                                          • SHA256 d6ec157e28fb420f8f7a55853d20aef9687b48439b3868f79ee35e1ad753d17a
                                                          • MD5 SHA1 SHA512 TLSH

                                                          the-real-index

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
                                                          • Size 96B
                                                          • SHA256 d31433db26f8e8585e6b53f741ddec879c36b9456ce31ab5db064f5894620244
                                                          • MD5 SHA1 SHA512 TLSH

                                                          SiteList-Enterprise.json

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                          • Size 2B
                                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                          • MD5 SHA1 SHA512

                                                          Edge Profile.ico

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                          • Size 70KB
                                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Network Persistent State

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                          • Size 2KB
                                                          • SHA256 ae7ed594ebbab5c01f4d3e4f740432e3f62585dac7ab6a1e6cc585d8f57dabdc
                                                          • MD5 SHA1 SHA512 TLSH

                                                          SCT Auditing Pending Reports

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                          • Size 2B
                                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                          • MD5 SHA1 SHA512

                                                          Sdch Dictionaries

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                          • Size 40B
                                                          • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                          • MD5 SHA1 SHA512

                                                          Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                          • Size 12KB
                                                          • SHA256 3033f4c33466ec5da4c04d133b7549fb28622c268163027de052c1c820af71f4
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                          • Size 11KB
                                                          • SHA256 519ecce688fa528aec36235698366d1b0c50771f8d0603c3ddb06a942c707fec
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                          • Size 11KB
                                                          • SHA256 9b75e217398badae2a77c72e612018a2be934922e1fdfbc66116e9c738930b03
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Secure Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                          • Size 27KB
                                                          • SHA256 451da92ec22a453ec605656cd2fac660c8adeb7712685ef0d1f5bc301f5c0cb6
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          ec514834-609e-4b19-83ae-7d2cd2fec190.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ec514834-609e-4b19-83ae-7d2cd2fec190.tmp
                                                          • Size 22KB
                                                          • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                          • Size 33KB
                                                          • SHA256 633d74703bdb13e97877a3dee1e5433bbab62667ebd1ce20c1043768eb0bd31a
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                          • Size 37KB
                                                          • SHA256 bf131a940ea46d962b7d05772415a00949076414a4ad33ecfdce5c93249e56cb
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                          • Size 33KB
                                                          • SHA256 28f897fbc3cc9da3d984656276ea34736fdbdbdba074305e34a9a4f873871d5c
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                          • Size 37KB
                                                          • SHA256 07c1c3bd4d37364cb398f387e0a0bfb1d50c3b3e43bff962c19440fb96bd1864
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                          • Size 38KB
                                                          • SHA256 20f373f02b880c7ec0f5ff9d59399799771ec3137dcfa4d569a44a600fdab583
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          metadata.json

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                          • Size 132B
                                                          • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                          • MD5 SHA1 SHA512 TLSH

                                                          metadata.json

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                          • Size 252B
                                                          • SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
                                                          • MD5 SHA1 SHA512 TLSH

                                                          metadata.json

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                          • Size 492B
                                                          • SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
                                                          • MD5 SHA1 SHA512 TLSH

                                                          metadata.json

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                          • Size 372B
                                                          • SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
                                                          • MD5 SHA1 SHA512 TLSH

                                                          f20b9d45-8935-47e6-b644-a91ce3a0b73c.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f20b9d45-8935-47e6-b644-a91ce3a0b73c.tmp
                                                          • Size 13B
                                                          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                          • MD5 SHA1 SHA512

                                                          installed.json

                                                          • Path C:\Users\Admin\AppData\Local\Temp\TIGER_Funding_Radar_v2.2.86_Windows\TIGER_Funding_Radar_v2.2.86_DIAGNOSTIC_data\ai\tiger-minilm-l6-v2-int8-1\installed.json
                                                          • Size 272B
                                                          • SHA256 fbd060fc6dfa9518772c007ab455725a6c7f88f47fdf2de5f9c47a904397e707
                                                          • MD5 SHA1 SHA512 TLSH

                                                          ort-wasm-simd-threaded.wasm

                                                          • Path C:\Users\Admin\AppData\Local\Temp\TIGER_Funding_Radar_v2.2.86_Windows\TIGER_Funding_Radar_v2.2.86_DIAGNOSTIC_data\ai\tiger-minilm-l6-v2-int8-1\ort-wasm-simd-threaded.wasm
                                                          • Size 12.9MB
                                                          • SHA256 d1ab1b94b16a65b29d710d0b587b29e7bed336827577623913479b8afe8113e6
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          vocab.txt

                                                          • Path C:\Users\Admin\AppData\Local\Temp\TIGER_Funding_Radar_v2.2.86_Windows\TIGER_Funding_Radar_v2.2.86_DIAGNOSTIC_data\ai\tiger-minilm-l6-v2-int8-1\vocab.txt
                                                          • Size 226KB
                                                          • SHA256 07eced375cec144d27c900241f3e339478dec958f92fddbc551f295c992038a3
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          content_new.js

                                                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2080_2103931210\CRX_INSTALL\content_new.js
                                                          • Size 10KB
                                                          • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH