7f2b926375b1f5d8a7dc8a03672fdbb0d576bee836c087c0537f6d4092432298

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
application/views/admin/view_forget_password.html
Size 3KB
Sample260730-pg1hdaxcjc
SHA256 7f2b926375b1f5d8a7dc8a03672fdbb0d576bee836c087c0537f6d4092432298
MD5 b9085173f00a1058d917d59b01ba495d
SHA1 73a3bc39169a21431593ec7eb4aed989d6920ef0
SHA512 f64fb993613350b3a15f5feefa1195dd4fb3f3abaa322fcc5cf09ae293ecfae14af20c8b9595de5c405c786ea51bbd45a424af68a016fa53e3a512fa16cac3ec
TLSH
T1CC81580A3D05CA5F010D9AE6603595CDB0EBE4197729CE2854BB05F70EA07DA3C1FEA3
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4256	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298875754480416"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{E34461EF-3567-4C54-B643-E29AB2CAC2A4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4304	msedge.exe
4304	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1996 wrote to memory of 4888	1996	msedge.exe	89
PID 1996 wrote to memory of 4256	1996	msedge.exe	90
PID 1996 wrote to memory of 712	1996	msedge.exe	91
PID 1996 wrote to memory of 712	1996	msedge.exe	91
PID 1996 wrote to memory of 2744	1996	msedge.exe	92
PID 1996 wrote to memory of 2744	1996	msedge.exe	92
PID 1996 wrote to memory of 2744	1996	msedge.exe	92
PID 1996 wrote to memory of 688	1996	msedge.exe	94
PID 1996 wrote to memory of 688	1996	msedge.exe	94
PID 1996 wrote to memory of 688	1996	msedge.exe	94
PID 1996 wrote to memory of 1076	1996	msedge.exe	95
PID 1996 wrote to memory of 1076	1996	msedge.exe	95
PID 1996 wrote to memory of 1076	1996	msedge.exe	95
PID 1996 wrote to memory of 3044	1996	msedge.exe	96
PID 1996 wrote to memory of 3044	1996	msedge.exe	96
PID 1996 wrote to memory of 3044	1996	msedge.exe	96
PID 1996 wrote to memory of 3744	1996	msedge.exe	97
PID 1996 wrote to memory of 3744	1996	msedge.exe	97
PID 1996 wrote to memory of 3744	1996	msedge.exe	97
PID 1996 wrote to memory of 3880	1996	msedge.exe	99
PID 1996 wrote to memory of 3880	1996	msedge.exe	99
PID 1996 wrote to memory of 2448	1996	msedge.exe	100
PID 1996 wrote to memory of 2448	1996	msedge.exe	100
PID 1996 wrote to memory of 1832	1996	msedge.exe	102
PID 1996 wrote to memory of 5792	1996	msedge.exe	106
PID 1996 wrote to memory of 5732	1996	msedge.exe	107
PID 1996 wrote to memory of 4124	1996	msedge.exe	108
PID 1996 wrote to memory of 2680	1996	msedge.exe	109
PID 1996 wrote to memory of 2680	1996	msedge.exe	109
PID 1996 wrote to memory of 3496	1996	msedge.exe	110
PID 1996 wrote to memory of 3496	1996	msedge.exe	110
PID 1996 wrote to memory of 4304	1996	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\application\views\admin\view_forget_password.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ff9d267c188,0x7ff9d267c194,0x7ff9d267c1a0
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,12067895799975319972,15163514301625845294,524288 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2412,i,3840295739396148803,14587513667938454844,524288 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:13
  2⤵
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,7226396376477882860,16230437533420214616,262144 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3672,i,810460642722242306,2937160346175491643,2097152 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3680,i,18185280637155122195,18407474350962819395,2097152 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:1
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4384,i,11671833091984206499,1834448482815773587,2097152 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4420,i,14142020232184494083,5468149565069113204,2097152 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:9
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3452,i,775617032902447060,2981432436147353836,524288 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3472,i,18341901862213789265,14700767688025316632,524288 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,13012908147552751990,5514236347266524729,524288 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:5176
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,13012908147552751990,5514236347266524729,524288 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,8410112259515152918,16150291977850551230,524288 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:14
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,3844998736087664885,4637969438198187583,524288 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
  2⤵
  PID:5732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4940,i,10550558729429820567,7752924525649134659,524288 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2672,i,11466003815291918198,3342247383288565877,524288 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:14
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,11188635728680339835,12010481771110572808,524288 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:14
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6480,i,8264480861431998251,15426021419843042715,262144 --field-trial-handle=2260,i,7022567604947226094,5995513833047572666,262144 --variations-seed-version --mojo-platform-channel-handle=800 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4304

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4820

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 00381aeb0f7441087e73c78da1b9d6a7dd8afe9c01feb0c17e3912229bad8b2c
MD5 2bf8ae5ac80dae77da1d508ae2a6faaa
SHA1 19db91b990158a9660a4f1857b5c82892dd05749
SHA512 7110bcdde3a7284869926298e8867e443afc5235960e84f9eb097d872abbadb3c0a1b315c21ee8b03d2b84926386adbe7febd30edf30418c5ce40423bd6e1191
TLSH
T14F3182A04B2B0EE1D3DA45F1A0D9ED8D33F7A4E8054B7E72864862B4AC0D3114BD9E00
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e882.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59e882.TMP
Size 1KB
SHA256 3756facea2edd8947cdf9f28ae9444fb41f9e0eb62ff1092c59ff27709be899a
MD5 16dc3d076ffc0b8912f2710fe21a4ef2
SHA1 cb38e300dfc3180dd83884cb0177aff2ea638259
SHA512 dc9c96fd142b8e1d9eb589faa86fb4573e440ffd3620a4f63b4cf6bf4724ac0f18c50ab4c64f7fd1ba6c68e3fa85dfc6f5083d10e47ac0a52f1602c3e04135d6
TLSH
T1E53152A44B2B0EE1D3DA45F1A0D9ED9D33F7A4E8054B7F72864962B4AC0D3125BD9E10
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4a2623e3ba65d5c08e5c443538dfd7e078c0d2f40411c2a1bb045c130ea751dc
MD5 e4af0afd12143b7869f004d38937b1cb
SHA1 ea1abb7c61296a2f9496813130d3bfa7296dda4d
SHA512 8088f2f07abf8fcadd2bf0b369684d433209e932ef5417de3861868f14668576a42f37720756bcc451e19a6dee1868eac9c510618480c077bee2279d4a818fe3
TLSH
T14C41C0F3C7E4857D890156F0AB147E2BCE1D0915832C7C5AC4D4AE1B93E3471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7bcd46cb92ef5565ff693ac49fda2adfca753f839db0d77250565aa31f66c634
MD5 a1f3e3507c83253968cb9f2a71196f0c
SHA1 aae02cb7c5cf7595e9672baf54c289099ab9b839
SHA512 1af386d84b39c5de418448037e90c71dff2abc85b817832edbf80a4151ba55450f4a0386508e5ce439a332fb8a6d455a53cf0b26b7d117b1450b25095e7ade98
SSDEEP 192:sxRIR1bL/ffsnA3AttzoA8p4X/g6+WNIYZFLlt+GlIgDXJ:sxRIzL/ffsnAL+/5ISzn9
TLSH
T1F142A6166A28997B9CCBD21DBB557F53E7F95032E1906E48A6FC870C04E77DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 25b974e656cb9f136ba3075cd90ef16701572461eec89a31ebe17d867362a57e
MD5 9c7a07dece19219ddc60b2f3c33dca86
SHA1 dd78cc84b81158fa24f960945be495dda058a4b7
SHA512 a83acc935445d18189eb3db71d1f67bcb75398f026771bbbe4e09ea39aaab13d8c4bf3349941371c83800a5bed97c765a25c01b591f93885d027cf9209e9b654
SSDEEP 192:sxRIR1bL/ffsng3AttzoA8p4X/g6+WNIYZFLKt+GlIgDBJ:sxRIzL/ffsngL+/5IS2nP
TLSH
T17C32A5166A28997B4CCBD21DBB55BF53D7F95032E1906E48B6FC970C04EA7DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 72b18300be964cbbc039c577700768d34d80454d26bdc2ecba72b360db347eb9
MD5 642b73af325aaa84420c293c0f23d89b
SHA1 fabb5ca21abe4a182cc389e7a5e4c4d5d8f1c2d8
SHA512 716acdcc43c6e2b699bfd53c83a5e3ba7ed2616a76fb5ee47e319d191231d98bd6583f6018208083d9757d8cba9f06d3080ec1c6558a3777eb8d5c083ef40a2d
SSDEEP 192:sxR7R1bL/ffsYg3AttzoA8p4X/g6+WNIYZFLKt+GlIgIJ:sxR7zL/ffsYgL+/5IS2ns
TLSH
T1D532A6166A28993B8CCBD21DBA55BF53D7F95032E1906E48B6FC870C14EB7DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 8bf0c626e4c2190f55371615ff98ba444afc09aa2e8b0483087c5ffaa1f1d05c
MD5 1465fe431ea8d14ca3ad68fee7a0aee2
SHA1 a756194884441f56ecc7eb5b18e58d10c2c38081
SHA512 5e6a86e13e98d514e65a5e8a00f83e90dda8908afc7752a14983edcd65a58da15527ee7d9f8c17edb928022835feec7b0fc5963419db829a6ee0fd0ba70071cf
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGqrocm8:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0VI
TLSH
T144B2CA3B640DCB7E5F800AADAC196FD77DA802C7A6588D4047FE994C02C77EA911A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 01882c43ce9ed7b35ac27258e2ef7a52ead2c5622a4dba6fd82f977883bbc747
MD5 59379cf0743d61a2f079bc7919f14225
SHA1 8654d3f0bfc6ef32b2c20b66d22eb50f47094cf5
SHA512 dc46420f02cb067eda45fc0a6f179d972c9135430e080dafacc19a306b9421d3703260914c2bc6318d6f05be801b708daae42ae37759c0aad501c2c6354622d1
SSDEEP 96:KR3gFB31lpWRekgJpK4ggHpcvHG5F8HtaTHd3LfWTI2gPfK4Ogxfc1NAjGcwKhiS:C3gFB31lERe1JDggH2vHG5F8HtaTHd3h
TLSH
T166912411717B0680383E654D8475D51FC6D3B0A23018B92B7BA842A35F6FE039EFE9E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0fbb889e2c5b7f314efc2db5974ed222509ff88150351a57214fcfc343713b62
MD5 81b178176eb72161bace8727c46c137a
SHA1 316d232b1ff6b05594c7450511ca2e5f0fda9ca4
SHA512 54f4afde4c39c41d040bccac65011b5cbfbba9918eb3e4cb3beb3618c00fef656db666c2b0f438d6d85b5895117d95c5ce87f8dcb65e843305286786edcd0bd6
SSDEEP 768:+J3ft+LeSFOUAoX4fouOToPvB2thtA9VAg/b9MYOX:+J3gsnnwthttKb+YOX
TLSH
T115F2D072EC698D73EDD6C394320A32525FF08163D2E41F846ADDA70D0597AAE470BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e9c6ad05fbcf78bb0033e261dfa1c3c5281589493f6c97428b80bebd3ab599e9
MD5 bc15a1eab6700852ec7e74440a931f07
SHA1 1be4d2000edcc8629eb7af3e550e7bc56e708b39
SHA512 2490bf204c956b50529052d29b2b85e2e1f79613c8e07b67966218959457a7a745c6d5260f0b14f68288fa26804e84e93015a56dd184fc8dbcdb1f6e4ac08f57
SSDEEP 768:TJ3+t+LeSFOUAoX4fouOToPvB2thtA9VAg/b9MYOX:TJ3XsnnwthttKb+YOX
TLSH
T140F2D072FC698D73EDD6C394320A32526FF09163D2E41F846AEDA70D0597AAD470BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ea1640abdaf972c4d4e6c6dc2b2fc56e518f5938bf338a2b3dcfc60ebd6132a5
MD5 3784fec528b74dfbfdd7c2060e20aec5
SHA1 f3bb15a46afddca33f89cf0ae7e3b3534e36a1a2
SHA512 d56be4929789e8fd79c5a80d891c6dc609588463a42cbacb43b6c07b3f878840615602005078b5e29fee41ab0546ab248c5b7fbc8c32b3acdd66b4c3a048c06c
SSDEEP 768:q13+t+LeSFOUAWX4fouOToPvB2thtA9VAg/b9MYOX:q13XsnnwthttKb+YOX
TLSH
T1D5F2D072FD698D73EDD6C394320A32526FF08123D2E41F846AEDA70C0597AAD470BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e97d15762a7d622d5f27ebf409e54995ed0daf2b29fbe647cdf372496de18699
MD5 c4b2ff11d41a23a866ab368205cfaca1
SHA1 1c33b8322aff3bdb54dc7adac82d59e23af224c5
SHA512 3a80d66cf0ab7cda5f1cf9611b426d8690866478019d2322b35ddf3aa2fe136b53e19d6a3c09307740b2d65b789f78d4685a59679fe575264889d80634a18c9b
SSDEEP 768:6rv+4UNbdu33t+LeSFOUAoX4fouOToPvB2thtA9VAg/O:6bsbE3YsnnwthttKO
TLSH
T14803BE72E9AD8D73EED6C298710B76433FF0415396C40B849EDD6B4C069BAAE130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a68c724bb00b2e11fcfc83eba45ce3053102ca6f7bd58062ea597154c0934869
MD5 e0021de97b5ab8f58beb8be7d884d0a2
SHA1 d4dc00114600697eeda7bdfb053f60f8ea600c69
SHA512 6c3da7adb3dedd2562f37714ccad4bcfaad714f94041f0e82f15f090c990a8e5eff3c1a5640536e08fac487339f5f4b7556ce169dc066e28fe20b1075bb2cc77
SSDEEP 768:grv+4UNbdH3YL+LeSFOUAReX4fouOToPvB2thtA9VAw3eVH1SlX:gbsbh3tsnnwthttKEH1Y
TLSH
T1E603CF32A8AC8933DDE6D388320B72572FF4915396900FC49DDD1B4D069B9DE470BD66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70c329d3-77c5-45ae-95d7-7eb13d730609.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\70c329d3-77c5-45ae-95d7-7eb13d730609.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download