4b74a7d1d2299dbf4c1960b84ca8872d5031a7c91545cda6e89858402f67f466

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/06/2026, 04:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download_4b1cb39e-71c5-41ec-acb3-9c35e5559989.html
Size 11KB
Sample260624-e8slqsh19n
SHA256 4b74a7d1d2299dbf4c1960b84ca8872d5031a7c91545cda6e89858402f67f466
MD5 a140c402079a345674827ba8030c93fc
SHA1 ccbd4f63e520d1efe873156f1887e2ea125d72ea
SHA512 1b79b5bf8d348036ac0bd577db7511f3a324f25d52ceb041da4ef642c283781b912bdd03cb340386e51a8ebc877a679ddd4d63021dfc374c3e1c9a762a225b73
SSDEEP 192:vRkNI7gF/I/yd2JkhBmZwZ5/0OcYAEhi+YR39GqtZ4MGLgj/3bf4t0UfPH9Hcnvx:vRkNI7gF/I/yd2JkhBmZwZ6xY/X8YLKr
TLSH
T1D432947394F2142B5162C1D51933B34EBBE2E453DA4A591073BE46CE0FC6DEBDA2720A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1088	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134267494271516257"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3226024100-3888324339-2736661264-1000\{F8252DA0-0332-48F3-BFD3-4A85ECDA9AA8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1952	msedge.exe
1952	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3552 wrote to memory of 2092	3552	msedge.exe	88
PID 3552 wrote to memory of 2812	3552	msedge.exe	89
PID 3552 wrote to memory of 1088	3552	msedge.exe	90
PID 3552 wrote to memory of 2812	3552	msedge.exe	89
PID 3552 wrote to memory of 2812	3552	msedge.exe	89
PID 3552 wrote to memory of 3380	3552	msedge.exe	91
PID 3552 wrote to memory of 3380	3552	msedge.exe	91
PID 3552 wrote to memory of 1812	3552	msedge.exe	93
PID 3552 wrote to memory of 1812	3552	msedge.exe	93
PID 3552 wrote to memory of 1812	3552	msedge.exe	93
PID 3552 wrote to memory of 2648	3552	msedge.exe	94
PID 3552 wrote to memory of 2648	3552	msedge.exe	94
PID 3552 wrote to memory of 2648	3552	msedge.exe	94
PID 3552 wrote to memory of 3360	3552	msedge.exe	95
PID 3552 wrote to memory of 3360	3552	msedge.exe	95
PID 3552 wrote to memory of 3360	3552	msedge.exe	95
PID 3552 wrote to memory of 4576	3552	msedge.exe	96
PID 3552 wrote to memory of 4576	3552	msedge.exe	96
PID 3552 wrote to memory of 4576	3552	msedge.exe	96
PID 3552 wrote to memory of 4864	3552	msedge.exe	98
PID 3552 wrote to memory of 3636	3552	msedge.exe	99
PID 3552 wrote to memory of 4864	3552	msedge.exe	98
PID 3552 wrote to memory of 3636	3552	msedge.exe	99
PID 3552 wrote to memory of 6116	3552	msedge.exe	101
PID 3552 wrote to memory of 1920	3552	msedge.exe	105
PID 3552 wrote to memory of 2548	3552	msedge.exe	106
PID 3552 wrote to memory of 4108	3552	msedge.exe	107
PID 3552 wrote to memory of 3696	3552	msedge.exe	108
PID 3552 wrote to memory of 3696	3552	msedge.exe	108
PID 3552 wrote to memory of 1952	3552	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download_4b1cb39e-71c5-41ec-acb3-9c35e5559989.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2dc,0x7ffa06e8c188,0x7ffa06e8c194,0x7ffa06e8c1a0
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,4138952131466916884,4348610541404593589,262144 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,6218121214470947450,1237594972623682645,524288 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2384,i,4743606324898992495,1668451569808400854,524288 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:13
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,459171596144898266,14790901492973502799,2097152 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3676,i,17445196331422644636,16643220349868795003,2097152 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,7553719713609871946,4360582722752145107,2097152 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,11869042854992367369,17303543693636279110,2097152 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:9
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,2926261011238005246,9816649733909452147,524288 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=3824 /prefetch:14
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,12595402926072215928,16407421196911598421,524288 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:14
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,18168615087975816247,10657558173688046557,524288 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,18168615087975816247,10657558173688046557,524288 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,8967550514603196828,15627517074753762655,524288 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:14
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,7894030819527672884,15292820763013331044,524288 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,6183012691206078763,13940168042288448139,524288 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,13575972605604850825,5834120395609527157,524288 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:14
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3848,i,10911824452336995050,16727002778328376675,262144 --field-trial-handle=2332,i,4189099974119035473,5191822815359792311,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1952

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4260

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 25e3094666b1652de0c19f09d2c5a36315ff1f2b6bf4618230987e4527d887d6
MD5 6c5c69ea7db1f14597429c11acb086da
SHA1 20d287e42d0eef2300c162f279f6c1a5bef2e00b
SHA512 4670a8f1b1ff14ef0094b5f0e97add9f3a5efcd9cbac0df76bfa0fcb59e20e8d2587834ddc7e3c72278d6925836d06584fd79fb3286a9e087f9322e2b6f4b220
TLSH
T11BD080753F467511D54514F0B414926153378C5339C2D50A7135C01EAD604D0E3C55F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ca5d57edbd599d2f326c973f9ea78899a33bc93603d04f5c5fc3060bb6069335
MD5 b40813b6d7a845a0e75e73df45573d20
SHA1 065e9256016c1ff5d12e5f09a43522ff134705ed
SHA512 04620591f96093c5be9d4fb65f9b83ca4d994ab596d5bba483af6363751c3afe0d9d550d0a079f304e51196ff781189761c77ec1ccc9ade982cc5d24efdfac3e
TLSH
T197D080713F567511D54514F4B414926153378C5335C2D50A7135C01EAD604D0E3C55E7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b967e4481b1e3c77c643d05e9d00b0d17a5aa1d8b9bc3ca9886c2bced07cd5ec
MD5 0a9252c03041f45333f20a3545ca814a
SHA1 bcc188663478f990239dbfc34d84499f8d80f008
SHA512 e0347e6f35e1ac6e33d540524ca2dab68c1c71b0c632970972338f766b2b93ad13d45e6491d8e20ddbfa8196bdd1706a24deacd3b97081ce6199997315e7c7f8
TLSH
T1AD713CE880690961FB2AE7B562F014B973F8C85151D7EE1348A4907BEED9F07738E48D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590891.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590891.TMP
Size 3KB
SHA256 0bf88851f80a0ea97eb61a1ce19009a736a338b25d45bf8a38d737083d782fd3
MD5 742b5d95f77e64c62abf84583dd955b1
SHA1 09a58ce0f93aee3d32918afd03507151aa109386
SHA512 e86c7e2a39af09beed99e54589340647a0edacfc8888197f8e02443cac18cc5a944d11790bc0a483e7054d683d05afd32f304ce798d9a0946145d73f37d88380
TLSH
T1E3713DE880690961FB2AE7B562F014B973F8C85151D7EE1348A4907BEED5F07738E48D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3252b5c90a242c701d3b5b98cda50cc59681e7dc6d32a9658e660ba888c61fde
MD5 c5c36edfdbae6e2e6ae94a4ea6b2f4fb
SHA1 e465ff20d8be2efc5bdea067fdc57abf3db52455
SHA512 8100a398cfc79bfdf0f46480eab41c9825c7e3d57a8e22f411250b9293f1bf8f33191c0edb426abd9c7aab4b732346cdd20721c35a3abebd4b6f1720d8204a6b
TLSH
T1B941ACF7C2E8866D890156F4BF146E2BCE2D0915832C3D5AC8E4AF1F93E2871E24094F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 799aa932dec6cd9a6926e4b2aafc5b222687d6fa4ba294071308f2684aa115c8
MD5 ace9ad72de60c9a0b569ebd43c41d0ac
SHA1 a9a9475029dc08b539d1457ad611a60291b287a0
SHA512 baed9dbd9f052a3c0cbaf0a9d75515702890732f71e489b4820522cdf1daafa09c3f4aaa05651aaf50c0d0b59b77dabab8158088ada436f0602b131e85397356
SSDEEP 192:sxRQRcyM/jK1Ml8wFR/f9sQsNkU9ozoA8p4q/g6+WNIYZjaGLIgIJ:sxRQqbR/f9sQs7fX/5Iws
TLSH
T15152D9166A289937CCDBD21DFA557F53D6F91533E2941E44AAFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ecfe3b89509d33315f40449f10c2bab447a9ded02e57604ba4b489d27fdda98b
MD5 0945f7732b715b1ac8b17339098cda3e
SHA1 db11081b27c4ce63403445493a60e30d5bd18e0b
SHA512 d22af0c6742242c1401fc7b3eb5f27fe72503cbcfa39bc6b14d79dcef510b8e8781d64898c2d6c24fafaa87456c339ee4ea8a62b4b8c742cde7742e5049ae6ed
SSDEEP 192:sxRzRcyM/jK1Ml8wFR/f9sAsNkU9ozoA8p4q/g6+WNIYZjaGLIgDRJ:sxRzqbR/f9sAs7fX/5Iwf
TLSH
T1C352E8166A28997BCCDBD21DF6557F53D6F91533E2940E44AAFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 930de19b45629adeab42a9db00f691a1e1321cb819fc2c4f4ddb6d3a605fed0a
MD5 2f173335be02de53148b291dfd414666
SHA1 6939a26137e1ae70ba164e707c8e297544c83650
SHA512 e69ceafc175b14cb99eb0420db30074a31876bbc1aa34db48d15527ef104d09b5206255a0b1d78377e0abf96d550c2195a3400c6fb97f4b799fd4ee8edac76d3
SSDEEP 192:sxRzRcyM/jK1Ml8UQAFR/f9sAnNkU9ozoA8peq/g6+WNIYZpaGLIgDnJ:sxRzqq2R/f9sAn7fp/5IYN
TLSH
T1A162E816A9289977CCDBD21DF6557F53D6F91533E2940E44AAFCCA0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 0c5bfd32713bc51d3a857d70cc2653beae3a367d985195550b0ece0264c70ee6
MD5 c794708775eb4cc60efa722b9c136f90
SHA1 03b3f4155905a353d3e64bc530e304d3e7998887
SHA512 71324cbb227d37bd413567af8f83c1c06c8dc1de35874dae430da7a160f3eda73cd06542a162925b5f55ced3b6343bba6312b5390af8988b884cedf64852173f
SSDEEP 768:eOEt7IWgKgf168F1+UoAYDCx9Tuqh0VfUC9xbog/OV3EkTqQGro7ov8nZx:eOEt7IWgKgf16u1jaZ/Q988Zx
TLSH
T18FC2FB2B240CC77E4F844E6DAC2A7E976DD801CB9A988D5447EE890C03C77EB521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 97dcb3af755dedd51179a663c9dc17a776d68d350ac7959a27a5c87c97f45431
MD5 cdb4d3b1d668d94bfadb704ac5978e23
SHA1 be79e0cd3b94b238d70d176d492ea1d64f79e867
SHA512 af8b34ee785a8d14b88dab046891750917038f84d1d12b85032cefe1bf50523e6f37db7227a130027b08c5e432e09fb87b1ab6fb717a5072b4593c8da7a4d72e
SSDEEP 48:K0QIDK9S8TyV/IVKUEI5lolxlEl4lmlKlulkelKlflPIflAlkK8lBklOlkQlYl0g:K0QgK9Sy2/WKUETFWKOwiA
TLSH
T1779136443577234428BE3B889290AA7E46427077321BED3B776810E21E6FE110EFE9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59a406.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59a406.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 a67f91f2554b88eeac87f2725b214f53c40310f1cf08a1e896a8c9721605fbb8
MD5 38aa5255435a959ae5e65d6348485f6e
SHA1 39b5a9662a8496d87d862a4d8ead61ba54f78545
SHA512 c1dae4125a3be5586f4faf035a7510808b016395683dd348346beda391731cbfd9b3ebb189f9adfb9a926097538bd269beaed62c9643fc6fb9b7083d83988487
SSDEEP 768:Qj+9X3lsRfPfcOefZhfuRV5R4HTytYYqgHvPwgzn12bfJLv/:v9X3lsZfifLfeWTwJ5ByJLv/
TLSH
T193F2AF32ECA85C671DE2C689B216375B7EE88623D3C42664D9DC4A0D09DBBDD130791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6e75729f345384a14d96c076ace48bd6c79365d5ad4c53baaae58f56f1430f61
MD5 51caa2429a5dd244972c941948d95b10
SHA1 c3878f5138857c2b14f92af3a32fd1099755839a
SHA512 24b271eb203acc44db66db2c7153719cf25b32c7927002bda81b8fa05cbef0734521cdc7e2652fe676f93427795ad24d70ee3403c818d73c136527d8365d10bf
SSDEEP 768:Fj+9X3esQfPfcOefZhfuRV5R4HTytYYqgHvPwgzn12bfJLv/:w9X3esgfifLfeWTwJ5ByJLv/
TLSH
T167F2BF32ECA85C671DE2C689B206375B7EE88723D3C42664D9DC4E0D09DBBDD130791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 0436d8d09e0bc957d819874c71154248ae042f1324bf09a5446bed3e667518ad
MD5 ddacbc563b114b050d33a7cd87a8809d
SHA1 f3977d3c903da711ace4d63a36690ef2b1dc6aae
SHA512 ce56609a393c3bdc2b16a9e32974364114c2ca8de1ee21dbc5465f7346c983da1aef6df621d3f415504d7bbb5a8357e52f8873683cab7ef7b5eedd744eeb2bf0
SSDEEP 768:DF1j+9v3wwgAsRfPfcOefZhfuWV5R4HTytYYqgHvPwgzn12bfJLv/:S9v3XsZfifLfBWTwJ5ByJLv/
TLSH
T17C03AE33DCA8886B6DE2CB89F61A375BAEF48263D2C46660D6DC4E0C05DB6DD1307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2303051bd8e0410120f32e23e3848994838fe0857e262e1db98a914d45bd61a7
MD5 40e21ae9ce2237d8a1cbf5e55fbdb55a
SHA1 91f73382ae423c0534659ee7e73e2c6974ca72db
SHA512 7ae112d1a81650d4d1fce149999f5ab1daefbddacbe61482f2a6bc646e28ceeeadb20ac3c796c381de98d93822fa6f8f220148dd59e59ef7619af02bf7f62c3e
SSDEEP 768:EjaeqD4MlshiLdMma3tuPfcOefZmV5R4HTytYYqgHvPg6yjWtxjTo:EqcjhIdMh3UfifOWTwJryj2y
TLSH
T1EC03CF76ECB858B74CB29685760277A76EB842A3C3C52B64D9CC5A0D059B6CF130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download