af0d7e87488c2ac99c1e26b66b8981dfdf16cbdb1fda3c6848e3464bda83eb81

Analysis

max time kernel
149s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/08/2026, 05:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
overlays/modals-net/v5-mb.html
Size 8KB
Sample260812-gnfgsabk21
SHA256 af0d7e87488c2ac99c1e26b66b8981dfdf16cbdb1fda3c6848e3464bda83eb81
MD5 6e6d36ae55ad29f1eb37f11b431f913b
SHA1 2ee85428cf55ad8a2e67b3dd9578f91489a11201
SHA512 ac5a033c97693906bea17cec2d8281c75dbec7c6a982be1488e41b0ca6a2ab23650c935a83729f94faf49e9a0ab43c9b27ba9b65bad4f543f58f13aa4cff46ee
SSDEEP 192:YHv2O33mjoXEhfkiaP1+jfY6wusw9w+wnw6PfiwJqA1/vkGCn7aCAHof5Z1:Yuv2W
TLSH
T12212449A6AF70845651BE8782FB79B5A3254D403C50BCC1E3FDC2388CF859D58AE2B4C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1092	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134309878206092559"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{427A7052-13AC-4F8A-A2F8-A6D3E093302E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5916	msedge.exe
5916	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2536 wrote to memory of 5116	2536	msedge.exe	88
PID 2536 wrote to memory of 4828	2536	msedge.exe	89
PID 2536 wrote to memory of 1092	2536	msedge.exe	90
PID 2536 wrote to memory of 4828	2536	msedge.exe	89
PID 2536 wrote to memory of 4828	2536	msedge.exe	89
PID 2536 wrote to memory of 3192	2536	msedge.exe	91
PID 2536 wrote to memory of 3192	2536	msedge.exe	91
PID 2536 wrote to memory of 1284	2536	msedge.exe	93
PID 2536 wrote to memory of 4764	2536	msedge.exe	94
PID 2536 wrote to memory of 1284	2536	msedge.exe	93
PID 2536 wrote to memory of 1284	2536	msedge.exe	93
PID 2536 wrote to memory of 4764	2536	msedge.exe	94
PID 2536 wrote to memory of 4764	2536	msedge.exe	94
PID 2536 wrote to memory of 1460	2536	msedge.exe	95
PID 2536 wrote to memory of 1460	2536	msedge.exe	95
PID 2536 wrote to memory of 1460	2536	msedge.exe	95
PID 2536 wrote to memory of 5392	2536	msedge.exe	96
PID 2536 wrote to memory of 5392	2536	msedge.exe	96
PID 2536 wrote to memory of 5392	2536	msedge.exe	96
PID 2536 wrote to memory of 3660	2536	msedge.exe	99
PID 2536 wrote to memory of 3660	2536	msedge.exe	99
PID 2536 wrote to memory of 4600	2536	msedge.exe	100
PID 2536 wrote to memory of 4600	2536	msedge.exe	100
PID 2536 wrote to memory of 944	2536	msedge.exe	102
PID 2536 wrote to memory of 1948	2536	msedge.exe	106
PID 2536 wrote to memory of 3552	2536	msedge.exe	107
PID 2536 wrote to memory of 5448	2536	msedge.exe	108
PID 2536 wrote to memory of 5740	2536	msedge.exe	109
PID 2536 wrote to memory of 5740	2536	msedge.exe	109
PID 2536 wrote to memory of 5916	2536	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\overlays\modals-net\v5-mb.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffc76f1c188,0x7ffc76f1c194,0x7ffc76f1c1a0
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1520,i,2295550779529177531,15048480581909994339,262144 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1788,i,17697512991400770866,9442925500687756847,524288 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,11798792063531683463,12237602847418782386,524288 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:13
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,15279144472328074892,15360466490003536495,2097152 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,12823783634451656728,6437163810806242523,2097152 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,9178039556899141717,2024696672603900426,2097152 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,14656189561966408253,16017258136659911814,2097152 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:9
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,14514005719788309517,17258812881483710022,524288 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,9376026559723051441,6002023704001187234,524288 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,8869972458006877859,14875117696222137496,524288 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,8869972458006877859,14875117696222137496,524288 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6508,i,15499358845904486561,16567009838772828382,524288 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:14
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6520,i,11688831366089299342,8429463858374320492,524288 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:14
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6496,i,14847804898162500287,18306271415264875933,524288 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:14
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5608,i,5530102390167833265,5074202032065907493,524288 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:14
  2⤵
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=812,i,16409115184529959389,17107059837879335372,262144 --field-trial-handle=2280,i,8905232891181496325,3375508766842529928,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5916

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2764

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1884

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2768

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 5645db44909337b20900c484753b16d9236b1762e803b3eeeb3af5082eda137f
MD5 30a1c79abe19421757ec434db8520d65
SHA1 b2d1cae2480676d66abdb96b28e2298c83bfe27c
SHA512 6e691dfebbf930b3a5d394766c49f97be6abf3e0bd97348065813e1817b26865e12c32078012afbac3db5a753a85b362cfbd1491f4c2ae1e60fd763d8adfb701
TLSH
T1A76191A12B6519F0EB6445BA96E19889BAF0C5E50F0BFE117406AC30C93AF243FD3123
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 496ccb685ed6ff970e8ec9ed1fe38289a2aa55dbe80a6a1f013f8609a1a3a6f9
MD5 a9149c8648405a4b061fb3c47487db0c
SHA1 046a7a23987615d7f26dc8aa0ee7145a27a26345
SHA512 aee411b7850a3bb2b652130e822a0d9d4eb6f7aa943f03a9960d577c18989253e368bae2cb97342462b0e054ae54d79128bb45ef8eeb44b0bfadbb95a6b116ee
TLSH
T1AB61A2A12B6518F0EB6444BA96E05889BAF0C5E40F0BFE1174066C30D93AF243FD3123
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d42d35346a990274e45daff1b6707c69b6be5c61ca80f6919bb7f3c6871bdeff
MD5 f07fef0b898e173a74c393ae6fc06974
SHA1 b2d14b291db0e273b8a002531538e9ea265c0695
SHA512 80b91030d4e4c7564fde28a88984d107e504e7c7bbebc1b61fe9c4238d899ec8234baf215d095ad3e5905f66597767bbac50993dbf21e38b6204d8664369f883
TLSH
T19E31BCF783B4857E8A0196F0AA14AE2FCF2C0511431C7C6AC9E4AE2793F3462E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 69f25c468913bde8b3e6bab5e0f7d3e57b94dc6e749e928da2940e82b3b8d154
MD5 085d4c07a13c197f4fd433622e38da0a
SHA1 4d75c48549ad23230897180f6e1f3d0714c90789
SHA512 d0ffad01cfadee585bf33315c36b76742ce3ce0c809de5e888329c43434e535c713b1617a871b0199038fc317e215584617bb8cb1807e6cfd277170266cdc74c
SSDEEP 192:sxRMR4b7/fU+sAPlKCA94/0zoA8p48/g6+WNIYD9m96SzG73IgIJ:sxRMA7/f/sAPlZ8ah/5IkSqs
TLSH
T1ED32B6156928A93B8CCBE21DBB59BF53D6F9503261D01E58A7FC961C04E66DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 530daade2d77e3254f1df7eed703b48375a690e9e6e96717f6882da4287c113d
MD5 56eabc97ff3dad63b5b949e89202c1b1
SHA1 079720e72f6dbdc79045d50744f81149ff171364
SHA512 b1673d80ab9ae8e4bbafce88c8810cd07d07949b14b12df9d633f83994cab4fe9eb1c12f0a060190d7a15439fc22f574ef629e7186ee2c92c17eb28589d8f8b3
SSDEEP 192:sxRPR4b7/fU+syPQKCA94/0zoA8p48/g6+WNIYD9/96SzG73IgDzJ:sxRPA7/f/syPQZ8ah/5IRSqJ
TLSH
T1CA42D7156928AD3B8CCBE21DBB59BF53D2F9503261D01E58A7FCD61C04E76DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 26357e1c80e16b7063fba0a3af1b01785ab3fca534b6ca26c8c94e6dc0af6ee1
MD5 45e127c304e670395a22c8ba2397843d
SHA1 d1fee4f918015c0c64a04f572b377f3a064cabe9
SHA512 ef09dd07c1b26faaaf13bedc183935bc93b4362e0e602ac13f25562a24cecb7936a277c66d176f95df8828e38b223031210cd1602c9b01c35349688345570c77
SSDEEP 192:sxRPR4b7/fU+syPlKCA94/0zoA8p48/g6+WNIYD9m96SzG73IgDdJ:sxRPA7/f/syPlZ8ah/5IkSqb
TLSH
T18032C6156928A93B8CCBE21DFB59BF53D6F9503261D01E58A7FC961C04E76DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 a141698c1aa0721f66d3e60ae07e6daed4c053c4fd65383b1c51e0829c61d4cb
MD5 d552f9d611b15ced384773ef6f95dbb1
SHA1 2b7c202ef8743956bfc436df9d95c30d261f6f16
SHA512 0d8c4e67f2bf8f13cdde15735cc6456280f2e5a568a8561bcc97f86c48438939737e3d03a2197ea7fd27afe89475a9bf751e7eca2530f903bae9d8a92c498cd3
SSDEEP 384:a8YfWRmfCtg/NFfHfKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVOe91bRcaropDH:azfWR0Wg/XfHf8F1+UoAYDCx9Tuqh0Vb
TLSH
T10CB2EA2F200DCB7E5F800AADAD196FD77D9802C797588D5047FE990C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ed0fbca7eb05b5ada28a76dd2ca90808f3bdfe4cfd377a38a8d0641fcfb83f60
MD5 6f8ac9acc1925a0616ce88e1ca8cec90
SHA1 7331d8b5ca9787d16589781c47bfbcd62627bf35
SHA512 225d4d77e1f47ee5b5b53deb82e9b2dc3483ea2060c6a6d745cef43cdbabb96e8833f66c5d204b5fd3451678ffac187c54a62408c59519725c7b28af4dafe3ac
SSDEEP 96:KR2r6WwYY+Wo9lg2+K4Lgk+ce2VUGfHS3eyEkUyW8pBgiyK43gYyciKxQVW0KfqS:C2r6WwYYZo9m22Lgkte2VUGfHS3eyEkA
TLSH
T1FB914351347A43407C3EAA0C947ADD2E828274B2346DA5BB77E901A20F66E234DFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a92eb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a92eb.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 7f17395b81b8a5838e3add607bb69dada48d3503ccf36ab27b166dd7109c2059
MD5 1b17b188cb4c59179621d7fcf79b2926
SHA1 a29d4aa080ade9c87c2a7604eac700fe943f7070
SHA512 60bfa68d41db423183a5526a729e8ddd67189797528918d5feff6935c6dc37a3738277a69f44a7e9d1aa749e27697802157b16bb19935016df5735db02db75b7
SSDEEP 384:cZcIj38NFkeyHozuWZlf8hyEGXX77eI6F+y2rEoajo4cdR8eHhVODjYPNDUMUZsT:Kj36/i03PRrEnjN3Gac1FUUn2Qd
TLSH
T19AF2BF716DB49DB34CFBD382B5863702AEF0966381D80EA49ACDBA0D11975ED530BC36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 c8e250633917c26799ba4ed8ab8f9b6f7a507cb456398163243ff561b68bdc6c
MD5 69151f0108553b9dd50b1fe45f160667
SHA1 e17072942de325731c1c6906dbbf107514cd2756
SHA512 4488060ba1b09d99de502a5e2de3148b34bbdc919c2e113f0e75f5c0cd01694bf617a37a1462e6796e0a55339c16c411d841ffc4e1341615fe7f8bd22c7b6744
SSDEEP 768:3rv+4UNbdw3N/i03PMrEnjN3Gac1FUr2T:3bsbG3XfMQnjMaTyT
TLSH
T10503BE3179689EB38CF7D285B1477A03BEB4465385C50BA0DAC97A0D16DB4EC130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 eb93e4d5125823272eea5b4b0fce3586e041a1beab232a2afff2a022cf7e6267
MD5 b365ea2a3299458a6f74ae47d78f375e
SHA1 42903c4044dc8a2ee2a6538aaefee5fb4c09374c
SHA512 8570400968d3c99965f89d4a77388c0da335ce3d02dd83819bdea4a8a437be61edb284dbcbdb0bf05911753ec912ad96f360b7a214703019390c0576ea9da73d
SSDEEP 384:miFiZcII38Nf8TUNTUlIlkeyHozuWZlf8hyEGXX77eI6Fly2rEoajo4cdR8eHhVd:NFQI38wgj/i03PArEnjN3Gac1FUUn2Qd
TLSH
T1FE03BF725DA499B79CFAD786B6863702EEF08663C4D54AA0A7CCB90C11975EC430BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 438738bb2db816acb948497ca8fd01665c401845a182c8bdbfe97597f7365a66
MD5 4bb325a446802f0153e8319f4cf098c1
SHA1 896ffe47040fb1d942aa450dfb8ae39d82933c74
SHA512 a5f402df22d91ebfdf17da53aa8b221d6be5a64581a018718550fe93008efc167e7dc7bdf3aee95258ff471398724aab7288e6709d70567a1b8431b2e0153405
SSDEEP 384:1ZcIj38NFNeyHozuWZlf8hyEGXX77eI6F+y2rEoajo4cdR8eHhVODjYPNDUMUZsT:Nj3F/i03PRrEnjN3Gac1FUUn2Qd
TLSH
T13CF2BF716DB49DB34CFAD382B5863742AEF0966381D80FA49ACDBA0D11875ED530BC36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b643607d3235819f3127873ce3afba1415c37ea39f3264043a172a60a7a26580
MD5 bc4056c5f62384709e95a13faf01dd75
SHA1 4e572579c45c6a25b4072d408b1c413a5dcb4654
SHA512 0d2a78dcae88c2412703c13d7661f72de4a314511dc0319bb29fffd858544154341348a01395bf9322c1a0392f35fbcacd204d062fde710c3bf95109c5b9f516
SSDEEP 768:rrv+4UNbdS3Pmi03FrEnjN3Gac1ZaeVH1SCz:rbsbg381QnjMaBEH1V
TLSH
T16503CF3269A89EB39CF7E38571877A037EB4525385940BE0C6DD6B0D029B5EC130BD67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 4c801cdd03e36918bf807a4a8968e1b78ffd3f2de88dfb0b872ba2467f5a2944
MD5 8e0de3314ee75983bba1f6eac7ffb3eb
SHA1 a1c63efa934c50d2a1b6a8d8e8ccff3f9c663ed5
SHA512 e83038702119ee8b3ee563a1c8a7b0fa37ba4af9c3e2e9aa79432af3104fbe6239d63e791451fd292f3776958af9e0162b67d69ccc248ef5472843db06af1f4d
SSDEEP 768:2rv+4UNbdS3nRi03PwrEnjN3Gac1oUeVH1SCz:2bsbg3PfwQnjMaUEH1V
TLSH
T18F03BE3169B89EB39CE79785B087BA037EB4425385940BE0C9CD6B0D069B4EC130BD67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e1b1be4-5a22-49e5-be3a-883274b78a75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3e1b1be4-5a22-49e5-be3a-883274b78a75.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download