5329c183187632015847090405d2007ce8578a6f90545eb4b38373a4a68d0f17

Resubmissions

16/07/2026, 22:40

260716-2lwffafv2k

16/07/2026, 22:39

260716-2lcckaft7r3

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/07/2026, 22:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
@Alpine_kaizen.html
Size 747KB
Sample260716-2lcckaft7r
SHA256 5329c183187632015847090405d2007ce8578a6f90545eb4b38373a4a68d0f17
MD5 2ae6058dc2a5136902c8e37c4e9f4fbc
SHA1 dc39646ed327274a07adcc52ba438a8dd5a2cbd1
SHA512 75fdde35f3996a8d11e49fb1ca37f19df6b23b4c67b836cda07eba64e05fef734fdefd0e76a9363352efea49063183ee856c9d086c6bc69c4f7d287ff6303b06
SSDEEP 12288:GbBpaypadpaypadpahpaEpa6paLpalpaTpakpaUgq7h5lScPw5FHskkCgG48TWif:GbTgAh5lScPw5FHskkCgG48TWi70QQhW
TLSH
T194F43E54086868B298A7A547DEB5FF7E9CE407394BC9D9AEBCB7D39C01DC6000DEE412
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5568	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134287151974094712"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1079202589-886135813-2527035092-1000\{CA584023-C77D-4A9F-8077-8C36D901F5F5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6068	msedge.exe
6068	msedge.exe

Suspicious behavior: LoadsDriver 9 IoCs

pid
4
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe
2096	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 2096 wrote to memory of 4428	2096	msedge.exe	89
PID 2096 wrote to memory of 4140	2096	msedge.exe	90
PID 2096 wrote to memory of 5568	2096	msedge.exe	91
PID 2096 wrote to memory of 4140	2096	msedge.exe	90
PID 2096 wrote to memory of 4140	2096	msedge.exe	90
PID 2096 wrote to memory of 5516	2096	msedge.exe	92
PID 2096 wrote to memory of 5516	2096	msedge.exe	92
PID 2096 wrote to memory of 5656	2096	msedge.exe	93
PID 2096 wrote to memory of 5656	2096	msedge.exe	93
PID 2096 wrote to memory of 5656	2096	msedge.exe	93
PID 2096 wrote to memory of 4336	2096	msedge.exe	94
PID 2096 wrote to memory of 4336	2096	msedge.exe	94
PID 2096 wrote to memory of 4336	2096	msedge.exe	94
PID 2096 wrote to memory of 6048	2096	msedge.exe	96
PID 2096 wrote to memory of 6048	2096	msedge.exe	96
PID 2096 wrote to memory of 6048	2096	msedge.exe	96
PID 2096 wrote to memory of 4364	2096	msedge.exe	97
PID 2096 wrote to memory of 4364	2096	msedge.exe	97
PID 2096 wrote to memory of 4364	2096	msedge.exe	97
PID 2096 wrote to memory of 2188	2096	msedge.exe	99
PID 2096 wrote to memory of 2188	2096	msedge.exe	99
PID 2096 wrote to memory of 3816	2096	msedge.exe	100
PID 2096 wrote to memory of 3816	2096	msedge.exe	100
PID 2096 wrote to memory of 2780	2096	msedge.exe	102
PID 2096 wrote to memory of 4408	2096	msedge.exe	105
PID 2096 wrote to memory of 4408	2096	msedge.exe	105
PID 2096 wrote to memory of 4408	2096	msedge.exe	105
PID 2096 wrote to memory of 928	2096	msedge.exe	107
PID 2096 wrote to memory of 3936	2096	msedge.exe	108
PID 2096 wrote to memory of 3348	2096	msedge.exe	109
PID 2096 wrote to memory of 5408	2096	msedge.exe	110
PID 2096 wrote to memory of 5408	2096	msedge.exe	110
PID 2096 wrote to memory of 6068	2096	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\@Alpine_kaizen.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffc1c5bc188,0x7ffc1c5bc194,0x7ffc1c5bc1a0
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,4234583353775682453,14884874946203135435,262144 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:2
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,9611567011686237340,13860230042433665482,524288 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=2776 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1408,i,1323253690833168787,2070939524292611487,524288 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:13
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,8467774760625217139,14632496816037274520,2097152 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3548,i,7087071251520756919,2327660828120642719,2097152 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,7356800652292680115,8807265901256777168,2097152 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:1
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,9283086180383889071,7973701954193036812,2097152 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:9
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,12810598272065258476,17085846446501232225,524288 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,16648829828703152589,9873128189258073277,524288 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,10895716728825998737,9771786451627193291,524288 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,10895716728825998737,9771786451627193291,524288 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5108,i,15261677459389576008,16551892826770553337,2097152 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6804,i,17944195988777683598,918364044833805531,524288 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:14
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6788,i,556009049869272178,3850573020759238496,524288 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:14
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6780,i,1036575593116072728,8283341298445205779,524288 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:14
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,10484801190216533350,17901324625714920203,524288 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
  2⤵
  PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=808,i,3823493111295677194,16882202858153257484,262144 --field-trial-handle=2724,i,6361865023597332383,7697294809175830061,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6068

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4820

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5044

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2d6015222f1312f2737e561f5cb789cba16ddda90131d3af679ca4d112ce8de9
MD5 c1a7f665f2c508cc6aaf2ab720e9bbac
SHA1 f10047340073ccfd0dfa0a1ac50f19824703c6c6
SHA512 3b4b2c7997cc3a8e382662b8ab84779147222db6dcf3b614fe3750efba14aade687800978cd24780f580eacb766daa34fe0e560c30dde1f463983613dda767cb
TLSH
T188D092693B904E08C5C4207228E0A6A6A2604A31B82E024840A2B23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0c59160a51f6f3c09faaf3593a45b43a14b1da3961c2cccaed8346e6543c20e0
MD5 a2b289a93fce671046a365170f24567f
SHA1 d545bd953aab467815db42a92fd1d54047d5e6af
SHA512 ce7bb8aa1a40366ad652feb8233f60cd807014cb9e8ca999c2c1931eeb40a4afa1dc2c94c60d58639e2cece8c73d3a46da7a30c651ca6da0834f57b890bd2572
TLSH
T1CFD092653BA04E08C5C4207628E1A6A6A2504A31642E024841A2F23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 fdfa33e2e7387c454f7e671fa4112401c601ceb62b1313eb6950966d6f0e509b
MD5 3d723dfe5dca02b4a83937310cd6c3f9
SHA1 42d7aa07e7c35d6017d70b49cef00ecd60eb9779
SHA512 681cf2dad44264815d2ec62866f3560b1eb279015058b7bfa035b5cc678c6e71224990403e64c195a67e10f0e795493c9a345f968deeb5314511f7d4121af229
TLSH
T10031D9E7536F0AC2EF7CA2B352D0649B3330A4A9C70BBF90D08DE27A95423485237065
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5967a9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5967a9.TMP
Size 1KB
SHA256 eab48992556b38d6b09b7df20b95beeaaae39b78d5a6623ee9ea117e0734667d
MD5 1f3d943c529a15046714d5b9f6d96583
SHA1 99dc6f18921ce99dc16a46ff896456bc7f8d7707
SHA512 db2e34c08753b70c4e0f45e4f0ca1e77bbb6b3c5fd04a05984bd2742e6e9ef52b8056ddc6487d9104c0da3844c33d90e1fc9e863759d9edba447bd922df26450
TLSH
T1E431FBE7536F1AC2EF7CA2B352E0649B3330A4A9C70BBF91908DD27B95423485277065
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 fa5a13d98d59139852c53384dccc8b4d30ad2458732b59d65f3552b3da59cdc9
MD5 1763042b60c862416bdae53f4b794059
SHA1 3197ddbd48bfcfd8c495323b7f588d0700169189
SHA512 30405961b9ebe058a294c5478103140bb9df33dc10c85cf32ec7624ac525b083e5b5349f34cf9779b6760c2596702e90e1b0c91d20c8def2c55da50551bbf4f0
SSDEEP 48:YALlNjIOhjYngc2g2FgjcYsJURsJMfoKsJJ9gmgCCAspGsdzEsUCKsLXLsmAdzsE:DWOeAtXuVu9iZB/zQE9ATaSAOwA5p
TLSH
T1F991ADB7C3D8867E980156F49B247E2ACE1D095A42283C66CCE8BF5B67E2471D10159F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a5f77fcd03612f85c40b47ecc2730a9f6eb6615a1830a88a27c30d248f9a04ab
MD5 c7bd3bcbf818f6fbfd190bd39eeec107
SHA1 d50e640210b3afdcc15ddcf003dea2857f4c4f94
SHA512 9da5def4c87f1ecbdc8309fe1c416128d1fd0825cd2aaa2f6a23b7dba520617ccf1a63368c7b72f4cba8aba6c98ab2ce388ae5cb77ba92758c679ff97980ab62
SSDEEP 192:sxRhR0bj/fXsGRHFSaDzoA8p4k/g6+WNIYbtZ6cGaIgIJ:sxRhAj/fXsGRlSayF/5IK6Ss
TLSH
T12D32A6166A28A93B5CCBD21DFB56BF53D6F95033A1D41E48B7FC960C04EAADD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 0cbd733dfa8cde384d66f033b337a5a3de96ffbe89386e0505e478291089b46f
MD5 c1063b0af0c84aa84246b2a27a18b22b
SHA1 bf526bab7c5bce77d4276ff301304df32d41859f
SHA512 ffafd8189ad06b732215664a50c9873dcae43ce5a36dc9855418665722fc0dfc32732928fd24b9e113a78d27b83cf7f1a191120c4a95083fbde26ede8660f52b
SSDEEP 192:sxRqR0bj/fXsA4HFSaezoA8p4k/g6+WNIYbZZ6cGaIgDRoJ:sxRqAj/fXsA4lSaDF/5Is6SG
TLSH
T18C42B6566928A93B5CCBD21DBB567F53E6F95033A1D41E08B7FC860C04EBADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c1e79cc8b329abcf34a1a33b4db17e318ed3529bb077a8309d2bb39a4b581118
MD5 941d598b266b5837bc659ba506dea425
SHA1 67c5e30875e1b88d1ff1217701d0ceffa138c973
SHA512 32b9c80554a5a7384ec7a7b63f0dba7d5aeff6fd383c523e59ffc2fcc13ef491933197c1b442ab7eb8c00598276b4dd37c62a45c8127386fcbc1de8d9384118a
SSDEEP 192:sxRWR0bj/fXsARHFSaDzoA8p4k/g6+WNIYbtZ6cGaIgDRyJ:sxRWAj/fXsARlSayF/5IK6Sc
TLSH
T15932B6166A28A97B5CCBD21DFB56BF53D6F91033A1D01E48B7FC960C04EA6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 10f14b6fd3e151e3ada3cc850b969d7e9274082b6e51d5423c91ddb3e51d1b9a
MD5 89a3c8ab54395e8b7a6d43df52675259
SHA1 7a359f70c211d69e1bb1d165c20ac61bed95b995
SHA512 cd900ace341c109b73abbef3ed4e8876dad009fbde3de8d88a2f786173e32aca12f739a1d22d4e4c66a7a5432a90e80eb45bf81824a2afe14017726c0ff8be0e
SSDEEP 384:Flp1pABfCtgisFfq4KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnz98ERFjroAob:Fb1pAtWgikfq48F1+UoAYDCx9Tuqh0Vx
TLSH
T196B2DB3B204DCB7E5F800A9DEC19AFD76D9802C796988D8447FE994C02C77FA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\2c01e677-cbeb-4090-9734-0d5075c75ac8\index-dir\the-real-index
Size 1KB
SHA256 b5a5c538e90e970d4fc488c2c6a400999d950d452632e87c9cc4eb85cd33d28d
MD5 ad3bf37fe52a42180e10859f39fe9a63
SHA1 437b4e94ea84c1288e9882d5afff9bc49d572d12
SHA512 239b022b7afaeba8b3cfd3cf0ead5cae18f05efdeef15433f25151ba0ee410f504c12508e232b1406f61a531e3580f907fdd604a9e00f6afc601b4ed97512a86
TLSH
T16931934CC8846BCEE47051BA198404F257B52D28FC1CC3A182E4B2A534023B45F575FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c7bb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\2c01e677-cbeb-4090-9734-0d5075c75ac8\index-dir\the-real-index~RFe59c7bb.TMP
Size 48B
SHA256 63917e3e7fe130bf7b99bd44306d32cea6ace0f483a9aa22caa3664fa149579d
MD5 e2127716651f004012a82fa2737a58ab
SHA1 4a27c2e9e39dcf702bf42aa29538afa5eb2ea932
SHA512 9242890051cf3fc59cd9218d2048d5d17a8cd5962ee861f7527ec2a1dbd01194cbd04f179ccd74f865165972bcc3c6b86ac7454fcf8818184f6da78233db4d38
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 98B
SHA256 3e85c8ddcff70b3705d93e7c37da4d420b84bebc2981e2828314216938308d0a
MD5 63900e1b8d9304075f92a69593556e46
SHA1 dd1910bdbdbec1efe4117772f4ab0b7ef90748c9
SHA512 f690e9323aa48fc5e629eeaa01380bfbae021614acc15f7f007134b6288bc7fdb49cd0814ade21c8ebfd699ecae2b9728ac16bd560d902105a0f896ddb482611
TLSH
T1E1B0128451522E1B73B8470D120C04135D4FC64094109588F049048218358EA4C8D9FA
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 100B
SHA256 c40a2e3b4e283d4dabbe135b67b855aa57f730a37975f114890695868a74a6e5
MD5 083339ae7792d19c5e0b6f4535ad8868
SHA1 afb742ad6e205381484d382f4f61543d69cf75bd
SHA512 50d6c5a91c03db4db95b11a9e72c7b389a472705aa49985d2603ad16722b856609e506d3092a48732ff64ba01a62cd25d308d3d79cc2f993f750296f6a691a78
TLSH
T1E5B0124055122E1773F8030D120C04131D4FC5449410E588F85904CA15258EA4C8C9FB
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 182B
SHA256 93de2171fae904f919e9901ad60ae8a652a24a7b98ba89299cf21b3bafa37939
MD5 bf95649d533f7ef9aae453ac2eaa72fc
SHA1 cec911a8bddc4365af29fdd50a3376c31b0418c0
SHA512 32e5e6913ec299d5bc12ac0e9353a1dedf0da3df9762e670ea64d81279e30735ba66bf74a90905ddcf87ddec5f08cdc98dda46e122a7ddcb2c40d2390b877a16
TLSH
T146C080C897722D5B73744609A10C04870C6FDE11D8155544F84530C31475657CC4D7B6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59746b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt~RFe59746b.TMP
Size 105B
SHA256 f1f51ea05f20a8756b009dc7c109a210228b6913621fa18e786b4749e41f7ed2
MD5 5af325a6a582b1dd8d801e3fc22c301a
SHA1 0f41f87ec4c10f687fea4ff74ae033e1fd7fe4b4
SHA512 273014e9cd16892fd867d741ea11124d14a7f8ef205e5f74df83aef42dbbf25d3e912dd8273688782f17671cf3d4b3211013f34f3a07b7d869c66cd3f715082a
TLSH
T140B0124051222E1773A5020B520C04431D5FCD519C10D588F04B348224318AB8C8C9FA
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 2KB
SHA256 445f023e307270ded19ff6a62376374435649f52e49b6b5ab8bd15dd3a147312
MD5 e18c139eb142553c58806d62335a9c96
SHA1 85d7ea31e5e26bfd77b05ab1469a65f133444c0d
SHA512 f933aebebdbf95a4dbe8e49625fd98ff842635bc80e4f7a995c0c49d6ad9ecef24598a48962e728247427e723f87542911ab62475674edcf57a4bef2e6650bb3
TLSH
T17051439472770290787E754890B99D2B9AC1B0A33105FC3A77DA18A74B2BE034CFE4D9
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 dbdc3094b863461cb9161d946f96ef5226921222d5a454530551e7dfc0bfa5db
MD5 9446716694ab6ace6c977d3fc843edc1
SHA1 0d3560a42dad52d85207e34e3b8ac22edc3d78e9
SHA512 8b9980a1d4a073413a13c52f6b9bf939dce2f67f158856c87a33307a6208912caa48c6e6c47dcff3386e5bfc80e8577d9f483ea0b6fe60a47b6601ff98f02c65
SSDEEP 768:Wj+9U3x37SgUBqobGzE8tZu4aWADIidy8Lu1b9MFI:F9U3ltZzaNsuVLCb+6
TLSH
T107F2BF3AFC569E735CBA9294B2873E4BAEF4926386C81D9489DC1F4E05CB5BD4303C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 03218c95615297b1eae36e62586782be7a6355650a6a9bd2df5476a3755b8752
MD5 2fa436f611d95c34fa2a5aaa207f8353
SHA1 2339756d0f9b7986b4a11f1635d2250b2afe13e4
SHA512 8c696dcdd34ee47f16b9f30d911b184572c2ab7040cde8476f622027b9d720f6774ef7df8c361f779d3548821589ea8dc93c2d1b565fd471501319d78462c783
SSDEEP 768:Hj+9J3+37SSUBqobGzEztZu4aWADIidy8Lu1b9MFI:q9J3rtZzaNsuVLCb+6
TLSH
T11FF2BF36FC469E735CBA9294B2473A4BAEF4926386C91D9489DC1F0E05CB5AD5303C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 19aa46e6418c255a2dd731553033045857f962b5c0e58fa1b28d9fd6a622edbe
MD5 be204ba597313358cb6eaae7f410268e
SHA1 3de396dbe2cd324505241bc96f61a38135734ef2
SHA512 565f0df2f404f8a40340cf520ea9ea751dae722e94746f53cb60a12effb7371d7ff4799f3220012ad94d4254a3482598eccb138ee3eeb630a4f468e6e0d3580c
SSDEEP 768:nj+9U3+37SSUBqobGzE8tZu4aWADIidy8Lu1b9MFI:K9U3ktZzaNsuVLCb+6
TLSH
T158F2BF36FC569E739CBA9294B2873E4BAEF4926386C81D9489DC1F4E05CB5BD4303C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 fc5a009d48b31bd2e090a34582ba26dcb870c1f3c09799be816e5185645648e4
MD5 16d7bc82b1c686031e39a547ab7a663e
SHA1 d6539e2c28dd1fde816843eb292bb70755cc9d4d
SHA512 a66efbd49b1b9b9ec6713aee95f636e4f3ade5196c8fa897be71913136d80ede687d779d848e717ebd9990074d2b496d76b8e9e92bd7c5b126bf5a2a041dd969
SSDEEP 768:9rv+4UNbdC3yOtBqobGz9pZu4aWADIidy8LqfeVH1S1C:9bsbw3ApZzaNsuVL0EH1d
TLSH
T19203BF36EC59CA779CF79284B1877A077EF8926386880AD088DD1F4E46DB4AD1307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6e3f330-ac20-4e5a-a393-cd639669f32d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e6e3f330-ac20-4e5a-a393-cd639669f32d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download