4b74a7d1d2299dbf4c1960b84ca8872d5031a7c91545cda6e89858402f67f466

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/07/2026, 05:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download_b4672a48-3ec7-4c1e-a927-52b5b3f75065.html
Size 11KB
Sample260708-gaey4act4k
SHA256 4b74a7d1d2299dbf4c1960b84ca8872d5031a7c91545cda6e89858402f67f466
MD5 a140c402079a345674827ba8030c93fc
SHA1 ccbd4f63e520d1efe873156f1887e2ea125d72ea
SHA512 1b79b5bf8d348036ac0bd577db7511f3a324f25d52ceb041da4ef642c283781b912bdd03cb340386e51a8ebc877a679ddd4d63021dfc374c3e1c9a762a225b73
SSDEEP 192:vRkNI7gF/I/yd2JkhBmZwZ5/0OcYAEhi+YR39GqtZ4MGLgj/3bf4t0UfPH9Hcnvx:vRkNI7gF/I/yd2JkhBmZwZ6xY/X8YLKr
TLSH
T1D432947394F2142B5162C1D51933B34EBBE2E453DA4A591073BE46CE0FC6DEBDA2720A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4012	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134279625569983217"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3437697693-2283162250-3003737219-1000\{00B1845C-9C63-409A-9DB8-467BF407AAEB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2228	msedge.exe
2228	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe
5536	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5536 wrote to memory of 3872	5536	msedge.exe	88
PID 5536 wrote to memory of 2672	5536	msedge.exe	89
PID 5536 wrote to memory of 4012	5536	msedge.exe	90
PID 5536 wrote to memory of 2672	5536	msedge.exe	89
PID 5536 wrote to memory of 2672	5536	msedge.exe	89
PID 5536 wrote to memory of 4436	5536	msedge.exe	91
PID 5536 wrote to memory of 4436	5536	msedge.exe	91
PID 5536 wrote to memory of 3912	5536	msedge.exe	93
PID 5536 wrote to memory of 3912	5536	msedge.exe	93
PID 5536 wrote to memory of 3912	5536	msedge.exe	93
PID 5536 wrote to memory of 1584	5536	msedge.exe	94
PID 5536 wrote to memory of 1584	5536	msedge.exe	94
PID 5536 wrote to memory of 1584	5536	msedge.exe	94
PID 5536 wrote to memory of 3296	5536	msedge.exe	95
PID 5536 wrote to memory of 3296	5536	msedge.exe	95
PID 5536 wrote to memory of 3296	5536	msedge.exe	95
PID 5536 wrote to memory of 2940	5536	msedge.exe	96
PID 5536 wrote to memory of 2940	5536	msedge.exe	96
PID 5536 wrote to memory of 2940	5536	msedge.exe	96
PID 5536 wrote to memory of 1384	5536	msedge.exe	98
PID 5536 wrote to memory of 1384	5536	msedge.exe	98
PID 5536 wrote to memory of 2392	5536	msedge.exe	99
PID 5536 wrote to memory of 2392	5536	msedge.exe	99
PID 5536 wrote to memory of 2844	5536	msedge.exe	101
PID 5536 wrote to memory of 5820	5536	msedge.exe	105
PID 5536 wrote to memory of 5496	5536	msedge.exe	106
PID 5536 wrote to memory of 5160	5536	msedge.exe	107
PID 5536 wrote to memory of 5992	5536	msedge.exe	108
PID 5536 wrote to memory of 5992	5536	msedge.exe	108
PID 5536 wrote to memory of 2228	5536	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download_b4672a48-3ec7-4c1e-a927-52b5b3f75065.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffe1a6ac188,0x7ffe1a6ac194,0x7ffe1a6ac1a0
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,17467982695021476997,373139993605061121,262144 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,843293085536386732,7657907671892791713,524288 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,11323461273244372382,9404807735256179246,524288 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:13
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,6005855169228541224,6320344748272909982,2097152 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,11778578317143981467,15032414373838315203,2097152 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,15021182533164781051,12037427219803541839,2097152 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:9
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,4211786769287129438,15838947200127240957,2097152 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,12576335432852560661,6571614138616129385,524288 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,6908122473906346124,87678628774907366,524288 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=3908 /prefetch:14
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,5306575628014045581,5593842825870989663,524288 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:14
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,5306575628014045581,5593842825870989663,524288 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:14
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,10770922961191647216,3820548804086851993,524288 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:14
  2⤵
  PID:5820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,3551959302909557149,15392060865115655325,524288 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:14
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,13686306410340988080,7248288870732480058,524288 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:14
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5648,i,364808127379676012,7757948260705102365,524288 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:14
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5520,i,12968900512198011858,10056450031713904528,262144 --field-trial-handle=2156,i,10133243392788281537,1453887863759952370,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2228

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2032

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2880

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3b373b285262d249dbcb9a3049cb52ea4237fe0652081e7e8fc809216bf0741c
MD5 d654bc36905ca65fa089ed6415e1c5a5
SHA1 32d7e4997a7ad3c5350ef0dea5604fb990fb1c21
SHA512 b3861ef455d1d571b80f1b2c3f4170907ac4ef2bccdff0e11f8d8be2450c0e927dd70ff2e49f8dd530aa5a889e7a5d1a3bb70bb176dc5b1cac4c1a3139df7931
TLSH
T188D09265BB555A48D982B631B4B4935DA224C6E9A40486284050FA798EA26820A6B8AE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5985c09ea5aba349ed09b6fbc8eb9de203d87b937b3d15e178f9c8ddcbff5fc4
MD5 e9a5ff2b0bd541088cbaf6dbd9eb6cfa
SHA1 60e6975adef4a868df5a5d6f9fb782231278bcf5
SHA512 e573c63ce0ec4d161da9da1b14857404f5c1f5af8b80f751885854997c605c94192d043d14e48d5f6bfbcb5acfd0c3f0babe2845bc5a88fcfea7fe29c0156ca2
TLSH
T1CFD02220BB200808C882B230B0B0830CA220C2E8800082280000FA388EA22820A2B8AE
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6397479b6bbf96c1eda071e435c77e1343da2dffcefedf21205cc91699783d94
MD5 8458cd3257683b45be841bf9f4d18568
SHA1 11514e4f011fbddabd41cff8557f62998c67b90e
SHA512 5b77343a0f4c26755b3e938479240985ca235f400e904ba9fcf8c9422cbe379b841ccd18f5af1cd3bbee335896a4f233d1db04f42e04f096115ebe55b888096a
TLSH
T19861F85C0BB60BE2CF3ECCFB59EE848D35794E756D4FDB090490A2706426644A71A1D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a3a9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a3a9.TMP
Size 3KB
SHA256 4bdff78f3ec72c46299984a145dc6eada68f36e30c12998ad1054febea1e1559
MD5 33a0b156e234bee66864a790cf226e18
SHA1 e043d2df9305976c92794d903b16fdd36451966e
SHA512 fc3c821046921b5b51c5d272755b14e9a4a32663972a022b0cc439f1b988b52f993d2d03bf8ac95e9064a158345c3d349a505c9e85ad4b286b3f9a40516553e3
TLSH
T1C061095C0BB60BE2CF3ECCFB59ED848E35794E756E4FDB090490A2706426644E7191DC
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5708a38b-a1e8-4095-8c25-0a87e6ae2acc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5708a38b-a1e8-4095-8c25-0a87e6ae2acc.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 aa80125114fa16bc545e2a98f87e66ea471d8379d77111e405f815be6fe196a8
MD5 e5650ec5f194bfca2c15ff9d3967c14c
SHA1 96d91a1ad7e9fb0ef79ca9ef881dbd8cd8ed4663
SHA512 b301a5f8cc6ec46961aedd59e91aca88b67c070f357438b6f9616b78f722963440a05c0be20e8dcc8dc4e2749a211859ae5590318353e53a5a879400dff15190
TLSH
T17B41CBF3C3E8867E890156F4AB146E1BCE1D0915832C7D5A89E4AE1BA3E2471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 40a0d5b37217d199b215eab9516a5e7dfed536eb2a789b8ea38334c343fbeb44
MD5 04ecd79592953bd6e5ec843d7fecbd9d
SHA1 f35bd11e087a3e3a49bcb53175219dfea47477ac
SHA512 9c8111f220d18a2057fccf00d68a1ff417589a9e7e60e8de0125946bb65cc13a24d4564b7043118676b00ef38f7c61441909d0adf7f12cc20401457b7d0a385b
SSDEEP 192:sxRdSRJyM/jK1Ml8wbQ/f2svH5/utPAzoA8p4S/g6+WNIYmn2XG8HIgDFJ:sxRdStlQ/f2svZmtP5v/5IWD
TLSH
T1C152C7066624997BCCDBD209FA557F53D6F81573A2901E44AAFCCB0C05E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b8e8d55fae05f36c07e12106f782244b6e5a68cab6a953d3c52c10cd3ea185d9
MD5 c3a5ecdae566ae2c8c3f66547a8ba232
SHA1 35f7cfc9c5da92c3d86368b7638023abeebfa4ef
SHA512 6b83b6d4c6d008cdbd554983c93f4912eabc077e3f14b696a0cc27c4a906280d6176a0a7d25e9b9443ec4bcdaaf3a020834c43cf7646ec521c89196822f618f7
SSDEEP 192:sxRdZRJyM/jK1Ml8wbQ/f2sdH5/utPAzoA8p4S/g6+WNIYmn2XG8HIgIJ:sxRdZtlQ/f2sdZmtP5v/5IWs
TLSH
T13F52C7056628997BCCDBD209FA557F53D6F81573A2901E44AAFCCB0C05E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 e9563d32ee15f773baefd4567d56a303388755748225777a9e5e56aac472bda0
MD5 417b279a8ee935916b3fc46f1f6adf41
SHA1 8c3fc46fd8f98f47f8b24f6acc733f63a113c8f3
SHA512 749ee426a6b2be4d053bc1e1ccee383500312a3f9f0376aeb010c76a758b2ad8be8ee483b7a6e87161cb2f94a53bb7ef53ca8363803fb98d6edb13f5a7ffab0a
SSDEEP 192:sxRdSRJyM/jK1Ml8UQg4bQ/f2svHd/utPAzoA8peS/g6+WNIYmnhHXG8HIgDLJ:sxRdStqBQ/f2sv9mtP5J/5I3B
TLSH
T18162B616A6289977CCDBD209FA517F53D6F81472A2901E44AAFCCB0C05E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 3e43c440967a395246735a88b0af14603e9b3a3ba370dc1bf92400e16beded76
MD5 635551c628351ff39a2ab8ee1a0e28c8
SHA1 1b4146fbcf2486045bf7f5cd736f112b6c26cf40
SHA512 f75a7cb2149935b22637e4130ee7f7083f7a163202e95b02abbd6cb8c6069418241ba9eae1454dbe69784444738cc27ef49c0535c9d8e70b713b66b134e6e3cf
SSDEEP 768:zdWT7oWg0afNy8F1+UoAYDCx9Tuqh0VfUC9xbog/OV6Iu6IroP3mdEhV:zdWT7oWg0afNyu1jaPR6zedq
TLSH
T13EC20B3B644CC77E4F844A9DAC297E876DD801CB9B984E5447FA890C03CB7EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b0c9a3f7625fbeeb827329f7e97138edb69d05a6db88967f7b19abed53e2dae7
MD5 307a6b2b49258fa6d497b4330ab64e92
SHA1 ade0639eb439c4bdfcf97ac8d220dafddc357b9e
SHA512 375f605d67b41983b5e5ecb89cffdc4b38aedafd1c98e0d67422734a69a1a5937ba3bef619360dca97063ccb1a6e9bd13cac7c0b357aaf546e71eb47235d2470
SSDEEP 96:KRpm3zBj3TWH0ig7TK4Kg1Tc5xMv3wHzc5t7xxNWlqggVNK4sg7NcD7SFRklQUuo:Cpm3zBj3CH0j7JKg1A5xMv3wHzc5t7xa
TLSH
T11B915055363B0361293D388880979D6792D270A2B059E42F7FEA02E15F67E028EFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a3f9a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a3f9a.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a2ef55bfc67f3a6ceea425eed9dfd9220a33837fdf6b5d9c6f494cc2922b27fc
MD5 302903b556769a5dfb25130d849326b1
SHA1 c79bdabb794789750453159fdca6d69d50335d30
SHA512 2600ebbce07ed9b6356aca1e31e0eb70a385a75da96e41603d5b14a922bf8b56006a50f528de18422834b30944db2e704933f369df4013f1ed922d261ca13af1
SSDEEP 768:Brv+4UNbdD3g2Dam4x5iFsT0uIi/+ap+Xeq7pVw:BbsbZ3UZiFRqPI57Hw
TLSH
T10403AE32A454CC738DF2DBD9724B7A17BFB8564396C40BD499E92F0D86871AD230B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 7af5ad2d8b4a0618ec62fb7a0fba814c7be64e96f9504928b5013c4e387f0056
MD5 fe97c2fe93e39b29a1e2741eb9e506ba
SHA1 500015a007ad4faaf140f447945ee4fe389d4155
SHA512 f3519f60fcbdf61030ff76f0e424c78a46e9656c9f8cbc1d5a1884c13b942c85f1565c017973ec6e31ea441355d982be2099d5a66c42915aac8167c9bd220522
SSDEEP 768:uj+9t3g4Dam4x5iFsT0uIi/+ap+Xeq7pVMjD:N9t34ZiFRqPI57HE
TLSH
T1EBF2AE32A9918C638DF2C7D9360B3B17EFA4569396C41AC489E86E0E46C72BC1317937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e7280346beab48688aec829e5e5cef58051b90c3fc151618cc26d1dcde835fb8
MD5 52034c22e4fa3a981431ae2eb7377d6d
SHA1 d62f9688132b4ce5bd95e577151fcdcdea48f879
SHA512 6ba4c9bb297da76bc8df60e2e3a0db67df48cc9fbce0c3fbf7af4560a93a9bf7c859b0d70c4897a75411aecd317efbde61f2d4532d61813285a6efb847bcba73
SSDEEP 768:AF1j+9h3xwgb4Dam4x5ipsT0uIi/+ap+Xeq7pVMjD:N9h3hZipRqPI57HE
TLSH
T1A1039D339985CC67DDF6CBD9760B3616EFB452A3C6C01AD49AD96E0D42872EC1307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 9f54fe37c882dbfeb7fb1bd26c1c55e3c0c8b30195016c91f13ff85d14906251
MD5 d16af578f7f867f14351234829ae7790
SHA1 817f1d7fe68c5d1170912fc279c23a229042cf4b
SHA512 0176d7510218da84ee0e210c869c8590bb3c36f9b70ba8f27a3338945cee2a07cecee118d6751720ea440c05a1c223a046b4949ea84085f2a00a5eb55dc80d47
SSDEEP 768:Lrv+4UNbdl3wxam4xEsT0uIi/+ap+Xeq7VLeVH1SVP:LbsbT3vkRqPI571EH1o
TLSH
T10403BF3298988C778CF2D789364B7A177FB8559396840BD0D4E92F0E878B1AD2307977
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download