hxxps://boletin[.]energetica21[.]com/c/rgyp4xj/9dikjids/avkvkavrnls

Analysis

user interaction
yes
max time kernel
148s
max time network
140s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/08/2026, 04:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://boletin.energetica21.com/c/rgyp4xj/9dikjids/avkvkavrnls
Sample260815-eynj2adg97

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2944	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312412737096642"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1636999435-3883760687-346127294-1000\{A99BA710-2CAE-4726-8E7B-3B5110E59F22}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4012	msedge.exe
4012	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 1944 wrote to memory of 2400	1944	msedge.exe	80
PID 1944 wrote to memory of 2944	1944	msedge.exe	81
PID 1944 wrote to memory of 2924	1944	msedge.exe	82
PID 1944 wrote to memory of 2924	1944	msedge.exe	82
PID 1944 wrote to memory of 2924	1944	msedge.exe	82
PID 1944 wrote to memory of 2816	1944	msedge.exe	83
PID 1944 wrote to memory of 2816	1944	msedge.exe	83
PID 1944 wrote to memory of 4820	1944	msedge.exe	84
PID 1944 wrote to memory of 4820	1944	msedge.exe	84
PID 1944 wrote to memory of 4820	1944	msedge.exe	84
PID 1944 wrote to memory of 4336	1944	msedge.exe	85
PID 1944 wrote to memory of 4336	1944	msedge.exe	85
PID 1944 wrote to memory of 4336	1944	msedge.exe	85
PID 1944 wrote to memory of 4192	1944	msedge.exe	87
PID 1944 wrote to memory of 4192	1944	msedge.exe	87
PID 1944 wrote to memory of 4192	1944	msedge.exe	87
PID 1944 wrote to memory of 760	1944	msedge.exe	88
PID 1944 wrote to memory of 376	1944	msedge.exe	89
PID 1944 wrote to memory of 4080	1944	msedge.exe	90
PID 1944 wrote to memory of 760	1944	msedge.exe	88
PID 1944 wrote to memory of 760	1944	msedge.exe	88
PID 1944 wrote to memory of 376	1944	msedge.exe	89
PID 1944 wrote to memory of 376	1944	msedge.exe	89
PID 1944 wrote to memory of 4080	1944	msedge.exe	90
PID 1944 wrote to memory of 4080	1944	msedge.exe	90
PID 1944 wrote to memory of 3124	1944	msedge.exe	93
PID 1944 wrote to memory of 4072	1944	msedge.exe	94
PID 1944 wrote to memory of 3124	1944	msedge.exe	93
PID 1944 wrote to memory of 4072	1944	msedge.exe	94
PID 1944 wrote to memory of 3436	1944	msedge.exe	95
PID 1944 wrote to memory of 2172	1944	msedge.exe	97
PID 3436 wrote to memory of 4012	3436	msedge.exe	98
PID 1944 wrote to memory of 5088	1944	msedge.exe	99
PID 1944 wrote to memory of 2448	1944	msedge.exe	100
PID 1944 wrote to memory of 2264	1944	msedge.exe	101
PID 1944 wrote to memory of 2168	1944	msedge.exe	102
PID 1944 wrote to memory of 2168	1944	msedge.exe	102
PID 1944 wrote to memory of 4012	1944	msedge.exe	104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://boletin.energetica21.com/c/rgyp4xj/9dikjids/avkvkavrnls
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x260,0x7ff8a575c188,0x7ff8a575c194,0x7ff8a575c1a0
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,6877876061366910931,17782582765520128219,524288 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,11089974973872669042,1774071218300337512,262144 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=2024 /prefetch:2
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,8151505226590578285,17790278314845470219,524288 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=1904 /prefetch:13
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,14058383963641747285,2035895927618939733,2097152 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,6186154693152107707,15159949079146494456,2097152 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,2886156414555614066,10072231396636516851,2097152 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,13063894784229998138,4086012981815609080,2097152 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:9
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4308,i,12880728755437507220,12918077391444345741,2097152 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4304,i,18136274224112067897,17434327729805780256,2097152 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:9
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,10573420795103924937,9913358194929666567,524288 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,8296710229822386414,13271444410259939717,524288 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,810148427503263640,10943730970542367532,524288 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3436
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1140
    3⤵
    PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,240313745752223069,7377875377493635418,524288 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,240313745752223069,7377875377493635418,524288 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,3002935034690684206,4737503187523886794,524288 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:14
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,7619163793450205506,4299701794359471695,524288 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:14
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,17231198958204873245,15012463743107412075,524288 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:14
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4748,i,4382531193380176171,11247901670976885803,524288 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:14
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6112,i,5295160856047484824,15080465909764962840,262144 --field-trial-handle=2044,i,2928962593932731201,11091192173710721800,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4012

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3392

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9a8007805e866030ddef8c0bffd6eec19b553c477bee180584b20c9c94621d55
MD5 f5400134b7975827b28654b3dcb1bdd6
SHA1 7e8ece0707d714e927405149f6d79c09a5c4d741
SHA512 1a774a2d3347b177b206cdb44ef3d8dfa5dc050dc320a393142991f46902ad3f68a035ce5a4ceb798b1663a69be306b2e14c094ed33e586d5db67c58a873f12f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7x:fwUQC5VwBIiElEd2K57P7x
TLSH
T190B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5116dd98c2b23ba5b09db7653ab553aa29b175fa64b8b9ed64ecd21beb5831c6
MD5 5ed835b9bd8886391af7b9dc575ac02b
SHA1 9a588837530f2096248ee7dee8596bb8d3c7d137
SHA512 44cb5053e3ad196ed2b5bd8cb0f51f9c889b22c1847f07a8819b2cb32d6fd93484e30687191edae9487bff46d6c4b744ba3b7a37f2b5644f920fa810083ed0e9
TLSH
T11CD012663B0E7045EB1542719453C344166D606615629713B1B8955C88A55D452851C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e8c11bffd04a845e6747271563ae4a847b510ffe734f41902fbd4b2f062eee45
MD5 9391bc4c1d157f197ee937c50a0513b1
SHA1 6876d0c906cc67e359c85730e312ab21c9022e9f
SHA512 c7624f44a5f0344859c2b10351ec030d8b7ee6532d0895f59ad3dc1f0d843ba0c30c603b9732abcbfe351222d8c06f2d73e0f439168f1a1b2222c8fd3f566136
TLSH
T10ED012663B0E7045EB1542719453C344166D606615629612B1B8955C98A55D452851C3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3342dab623d378fbd7e332faee5782edeb2999bff1fd35671a236d28b3f7aff5
MD5 84a7128841bb08b68c1244a05792d0e9
SHA1 def062692d60d10d8bfb76cf8cf7377e6ae55ec1
SHA512 7aa0015c6fff006be80564f8fb79e9831673e43cbc9d112368e160b2801f0f2171c6183e5f4d05994e68961e92e10afe5c1b9334e1ea0133111e585603e9c400
TLSH
T1CE711B1601990B0AF3F11B32B3D1A61331778F5A4A9B1E15DEE84CBE3E17342C8D9D00
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b5af.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b5af.TMP
Size 3KB
SHA256 a41341d29cdd66e31c0d1ef0d558553986922f80db12cccd7b03e23776e0c3c5
MD5 976497f0f8308927f81d2bd200acc723
SHA1 b033273f4f8b18611e4e3a4f6c3333f8a094c6c5
SHA512 d3441ec8b22877b2f9ccc90a3069cac30f295bf5546037bfc1c20d8565f46d1c77850dfccec75a8b35f4dce0ca8e9f06f45e827ae49878db101272796b6b34a9
TLSH
T17661F71A05990B19F3F21732B3D1A61330774F4A4A8B2E55DCC848BF3E1B712C8E9D44
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f963a56966551c86297ea06cc271c5ba1e5dd3a08abe093657acefe95363ab73
MD5 0580f774eb52da7070e6778eac61f6d8
SHA1 466a3118824b164f32c80f201bac6f4cda042f67
SHA512 d78e59c46b69d845a142b92c4546e4ef648ce91f366d61825fc2cb0001677b49778ae8271dcc2088813d9b80914ae90075e10dd09d316af0b2c20e97c565fa15
TLSH
T10D518FF783E58A7D8A0526F8A7246E2BCE1D0A19432C7D59C9D4AE2BA3E24A0D10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 21f17ed2176fb41cefcc5aac97512aed5ad1cebd15fdb56c6cee98c8702088b7
MD5 69d832640a07ee14d4fe4808a5c8d8b2
SHA1 88936140ad59d1511acd485d3854b5ba93711666
SHA512 67f0a0eeb2be50e39bd95b40eece0be9977a29ce41fe3099b4c5c6550afc897e8514c9a86ce24d9a090029727ee2c9fd2300e53cd70bc164106927ae1f959c4b
SSDEEP 192:sxZSqRAyM/jK1Ml8UQWFX/fOsL/k8JIdp5W/W6+WNNkTQ/Y0stGvlCIg5eHJ:sxZSqCqkX/fOszkXQ/bp/5SE
TLSH
T14C52D8566A346977CCDBE20AF941BF53D6F5547291900E44AEFC8E1C00E6BDD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4dfa64fcbdbdf32c6247693011d1045bb6148d3be10107f227fa2b639fdb3c93
MD5 7fcc8695b45eb5cfc1526081c3a2fa7b
SHA1 679ef6411be76f95813342a337244c2507d4dc54
SHA512 3b66fb62d915d735c06e7e03152009715c82f11db5114e998b51dc70d13d7d09e048769332cb5ebab0214553e4bd5b90576364e59bf22c5ba19c74b97716060b
SSDEEP 192:sxZSqRAyM/jK1Ml8MFX/fOsk/s8JIdpPW/W6+WNNkTQ/Y0sSDvlCIg/HJ:sxZSqqdX/fOsOsXu/bp/54R
TLSH
T13A52F9526A34697BCCDBD309F905BF53D6F9557292900E44AEFC8A1C00E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 508c483f88a9e955fbd76bbeca3651ccccbce85a937f20b54dc53d8b2d2e9a06
MD5 831aa3ad84f0e517ae323aa9ba846fad
SHA1 4264524158218eb10deee5902bc7bff99469604b
SHA512 2b6665864ab798b5351ea1db5f1b9edb220a591cf6aa3dcd353ee928c36a50a67ae6e0353039aab8611da942d1cb0be20cea07a4055fa3b26ac2f780ee1741bb
SSDEEP 192:sxZSqRAyM/jK1Ml8MFX/fOsL/k8JIdpPW/W6+WNNkTQ/Y0sLdvlCIg5eHJ:sxZSqCdX/fOszkXu/bp/5fE
TLSH
T18A52E8566A34697BCCDBE209B941BF53D6F5557292900E44AEFCCE1C00E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 4f1ce2e551f8b1fe861aa034ea9a38787bc4de93dbcd0e0ff07d1c37083dba6b
MD5 e856e6bfbf029fa48c45ecaec1af62de
SHA1 a5f0415c118fdee9fd9bc6db6a2f101e728a4c4f
SHA512 d342edc5ce773870bb9a4d26dfa3e835deed0c3f8222a2b9b5f8b60c7429d9b15f24a0a535fe7ce38403b3bf4b24bc0dbc2e1905ec34828e5ebd1e9820cf464f
SSDEEP 768:BA/Xh8dF27kWRmwcQDw8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3mjLl/k601QyroKL:BA/Xh8dF27kWRmwcQDwu1jaKmjLpkD1f
TLSH
T1B6E21A3F280CC77F4F844E6DEC26AF966EE801CBA6584D5447FA494C03C67EB511A49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2318dc35c84e537fff9d10a7bf9599e56efab72fcad2bca14fb58568a60dc0e3
MD5 8d45bd213cae970a8470989eb60b37ee
SHA1 464c543efdea1d832bc8174b7d4b32e5013ce2f2
SHA512 b077f716d68595de011e82d0a021af214c0da0e62344aa14853b68e0a875879e6cf4cc27d844afdd5010fe77283714e3f03bcafdcdb1e7f0fdfbab9dba87f34f
SSDEEP 96:KwB+K6Iim5CKaoSay0KPa8hOhHhchghOh6:EpFhPXhOhHhchghOh6
TLSH
T112918A1231BA36413D7E380C87ABC7670A42B1633599A47B7BA940B15E67E234CFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb449788-4bf6-413a-9edf-678945f6b2ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eb449788-4bf6-413a-9edf-678945f6b2ab.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5934e1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5934e1.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 9f05b494cbffb47cc609cf6334cce03fc1d021d347b1824efa5b46d1a2787557
MD5 794b491fc6a4ccc22a910637f398225d
SHA1 15f7b4b9365942534d4ca6c91abc791285ee2660
SHA512 0f529fea0563f2808321186b71fb2701d2267c0bf302ce4ce4ad3d5c7e7d6624f55edb17d6eed1e150b692fab5e81b85869e45e7c6ad08062fb9f38ef19a5d53
SSDEEP 192:ucc8NK0ZQh0Sh6H3iPJQmiU1mPgl4r/rUH5mG+DwV+21kcRqYDU8:k8NxZa0bXiPD6r/E5r+kV+27pDU8
TLSH
T15B42193568B8AC7B4DA3A641B44736139FA4516BDBC92F94D6EC4F1C05EF2AC230B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 17ef5234af73fcf9d6dd9d35e5a878973ee2608aeaadc30a381eba4b1b9c7358
MD5 dad9c534c18f920887343db504451d72
SHA1 79b670ca74d2733f26679d720a12fee454e66be2
SHA512 1c6666e30c95031d8660a1b7c34edeec5a3dce84bd4c85be13ae02188e6ca1afe05b798c8d56eebe0f81058b657506dc548243567b47a9d792ef58bec4bf5332
SSDEEP 384:NZcIq8NxtBa0bXiPD6r/E5r+kV+27pDOOPrXLpe8C/0t0:VqqsZQ/Ed1l7FOi9PZt0
TLSH
T137928F7168B86C6B5DE7EA42F44637178EF85067F7C81B8495EC9B1C05EE1A81307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 6da66b15a48547457de58d0413c46401799934e6e844aaaf749185c4ef8ce8f7
MD5 04b6f2100e151b1f6957cc6ddc968bcb
SHA1 51e443cf6caa164a7dc4fe87ac8dbbb020a3fc1b
SHA512 034c26dd15abcb1ae1f6210b2d08f2053d835a63ac437632446136d67fc7076cd46ce7215fd2f552308f1dd3575015f9d51559c9068a5bd2b3218e8d7fc38d64
SSDEEP 384:UUiFiZcI18ND8TUNTUlIltBa0bXiPy6r/E5r+kV+2IpDOOPrXLpe8C/0t0:UvFQ1GwgXs0Q/Ed1lIFOi9PZt0
TLSH
T14ED21AF158D7987AD9AE9B43A77D2E038EBCC067F6845654B3D84A0CCD9A1BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b466b9b6c05582cf8a6a8359f167896d7866602005789e88ae6a5ac9ed89a0cb
MD5 d7a0b1b5a179e1bbce037664d074f23f
SHA1 2c3b30320cea27f560397b2a30ff9b0b23e9bd43
SHA512 3073983c7377873ccb0fab3b6dbca5c8955e7c4d8a14b4ebd90af21d911dd40b70d86c35b03f078c8ab80c1242679f000b19ffd5131a54373a4000dcc7b95a2b
SSDEEP 192:1GNr6t6H3BQmiUyAHBHh2Qq/rUH5mG+DgD9MqaU6:1GNr6MXfjb2Qq/E5r+zBU6
TLSH
T10902DA3878B8BCBB8EA39E41B48777235F95216FA6955F84D9E81B1C01DB29C1346823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1f9e8b9588ddb7b2b08df96a71b13c94396c9c82bf7acb375db872e22ab212fc
MD5 4f4d43062841d8cfb2b9d60f9aa1af7f
SHA1 f1874d3c85bf7495ecc05529604c2a57763cdeae
SHA512 5923b43ee25c3d4fe8033e3895b00d601444d20872966f1d9d63d6bf986193a857b8ffeafb830241ab2d1037ddf4b11b4982a2c0cabc4737fa993e9bd539b8ea
SSDEEP 192:wGNGB6t6H3IQmiUyr0h2mq/rUH5mG+DwV+24/9nRqYDU6:wGNU6MXo32mq/E5r+kV+24pDU6
TLSH
T1B712193568B8BC7F4D93A941B48736138E94126BDBC96F95D5EC1F1C05EF29C230A922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 1687a36bbe01993be12b042c4990ee57c8e2bef3a646565afc4acc2b503ad52c
MD5 7b67e7f1fbca897e5b5a3c7a6f4246cd
SHA1 e0d81382a366e9877a21c69826db34ec04822a61
SHA512 c97bc28b51075a199b9f5c3b67b85cd6faeb5624f64b9b690d2d6b5eed5f1a5e40fd958ce3a51c812abeac1952b5963dcb63036b7b2f7e2119217b648f96922d
SSDEEP 192:uRc8NK0KQh0Sh6H3iPJQmiU1mPgl4r/rUH5mG+DwV+21kcRqYDU8:X8NxKa0bXiPD6r/E5r+kV+27pDU8
TLSH
T1D0422A7568B8AC7B4DA3E641B40736139FA4506BDBC92F94D6EC4F1C05EF2AC230B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8a9ccaf-544a-4747-8566-6b841f08afcd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b8a9ccaf-544a-4747-8566-6b841f08afcd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download