91399636cde36681fba75670e8ba50c22f93ee27db8955e03194bfd1cd48ca59

Analysis

max time kernel
149s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/08/2026, 05:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
overlays/modals-net/v5-mc.html
Size 9KB
Sample260812-gnfgsabk21
SHA256 91399636cde36681fba75670e8ba50c22f93ee27db8955e03194bfd1cd48ca59
MD5 d2a827312f71fcf30b2e0d0782a0841b
SHA1 927cecd8a64884c516c18d14f59d192e0338e56c
SHA512 856ee18f420aced9c51011115b21c376020339fbeb20db642b1018a64fb8235a11298fa232dcaf751af1e0dd96fcab247510ab8f4aaf35b55ba2e06beae11b85
SSDEEP 192:YHkLf3AjoXEhfkiaP1QjbJvA/KtErsiy6wsvAjCEpNji7aCAHofkJHY:YEABC
TLSH
T10F12419A9AF708456967D4783FB35B0B26A1D407C50BC8193FDC238C8F8A8D59AF274C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4432	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134309878226813377"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{02A96FAD-5B03-4801-B13B-E6DD26112F17}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1216 wrote to memory of 2260	1216	msedge.exe	90
PID 1216 wrote to memory of 4432	1216	msedge.exe	91
PID 1216 wrote to memory of 2188	1216	msedge.exe	92
PID 1216 wrote to memory of 2188	1216	msedge.exe	92
PID 1216 wrote to memory of 2188	1216	msedge.exe	92
PID 1216 wrote to memory of 5916	1216	msedge.exe	93
PID 1216 wrote to memory of 5916	1216	msedge.exe	93
PID 1216 wrote to memory of 1532	1216	msedge.exe	95
PID 1216 wrote to memory of 2868	1216	msedge.exe	96
PID 1216 wrote to memory of 1532	1216	msedge.exe	95
PID 1216 wrote to memory of 1532	1216	msedge.exe	95
PID 1216 wrote to memory of 2868	1216	msedge.exe	96
PID 1216 wrote to memory of 2868	1216	msedge.exe	96
PID 1216 wrote to memory of 4944	1216	msedge.exe	97
PID 1216 wrote to memory of 4944	1216	msedge.exe	97
PID 1216 wrote to memory of 4944	1216	msedge.exe	97
PID 1216 wrote to memory of 2444	1216	msedge.exe	98
PID 1216 wrote to memory of 2444	1216	msedge.exe	98
PID 1216 wrote to memory of 2444	1216	msedge.exe	98
PID 1216 wrote to memory of 3060	1216	msedge.exe	100
PID 1216 wrote to memory of 984	1216	msedge.exe	101
PID 1216 wrote to memory of 3060	1216	msedge.exe	100
PID 1216 wrote to memory of 984	1216	msedge.exe	101
PID 1216 wrote to memory of 2056	1216	msedge.exe	103
PID 1216 wrote to memory of 5348	1216	msedge.exe	107
PID 1216 wrote to memory of 3576	1216	msedge.exe	108
PID 1216 wrote to memory of 4592	1216	msedge.exe	109
PID 1216 wrote to memory of 5540	1216	msedge.exe	110
PID 1216 wrote to memory of 5540	1216	msedge.exe	110
PID 1216 wrote to memory of 2808	1216	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\overlays\modals-net\v5-mc.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2dc,0x7ff8815cc188,0x7ff8815cc194,0x7ff8815cc1a0
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,6190721038052034942,647485831719784069,524288 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,15715032789614165705,5232317342553343263,262144 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,17695024141853397837,13626164382604271075,524288 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=2828 /prefetch:13
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3628,i,15461006279141211667,11555419961592913429,2097152 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3632,i,14063057569244953057,1686941181556844619,2097152 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4364,i,13046057934733797788,4232461521748902039,2097152 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:1
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,13755037961336326269,4308492736931476902,2097152 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:9
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,5401134491195182271,406337398386501152,524288 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,5229344328642194992,9242849722088068016,524288 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,13977976546267109354,11165783316837609371,524288 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,13977976546267109354,11165783316837609371,524288 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,6895870560433177397,14713393501663115173,524288 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,14154053957843529019,11143675761914552027,524288 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:14
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,14987506269880218555,481309267211083155,524288 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:14
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,11901710342782368245,9572180743746651758,524288 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,9467164189857669326,2661453859382208620,262144 --field-trial-handle=2244,i,11942529066487076584,11254986630247225391,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2808

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2828

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1016

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 68a24fb01711717bac34407f1753e19bdebec8078216e7b0c0bed5be155aae19
MD5 b2889880d04474dac8d9978218dc41c7
SHA1 089110807a26d1ab984f3740415181b55d9945a8
SHA512 a77f161dfbe45e63aa85d8baf4fa53c234f8e1aca3dab9362a0ba7a7ec9c0ab2287867dd616eba78407cdaf55a3a38d32da1b5a7acdbe2c3ff9a314a3a4bedfc
TLSH
T15551AA5A136DBDDDDF21B7F270D01388F2F28846A4673E92C022AF78450BF0621E2193
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 735d71fc51ad0ebca737038249a4e138aa068e103632e2df143beda2ef879a92
MD5 99168ebcb2aa1b803d0c3bb61a88b0c9
SHA1 a3ad355f5f6cca6e27dc76633fd4e8f3c5250ab5
SHA512 3a98cd63475c9cf1d3f559aad6b2722484082922cf7d70dd4638cd4c9fd3b2ad3d948299970bb755f8ad5d4ddae928465afb79787f46793077a0fb91a815c3bc
TLSH
T1B031A0F783B4857E8A0196F0AA14AE1FCE1D0515432C7D6589E4AE2B93F3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 17d70772759de53342c74a9670981adc814f0b319ebddb0c267cd11052d1792c
MD5 5bc31db27315a72dac538c43212a2379
SHA1 dd2cb0f1500285b27fe29f4e0b79e8135dc4e0ab
SHA512 4e3e836c16ae695b8c7fec77a9322f1967d5cdf9804b15acb3a273f38e5e1f4769a3cb858f9022dce03b9f15269ad77c681012646c5140fab56443d2b38a30cc
SSDEEP 192:sxRhRK7bc/f+sKX18bNetszoA8p4yy/g6+WNIYlzZYeZGBIgIJ:sxRh0c/f+sKl8etdk/5IUas
TLSH
T1CB32C7166D28A93B8CC7E21DBE597F53D2F9503261D41E48B7FC9A1C04EBADD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 cd016699370a77bb1d94ff5d0554a790e45680288edceda096699d09de15e9ff
MD5 71123f350b5e22f38b2acebc071da9f8
SHA1 ca898db4cea46c1d31dbe054a6423c5939319ba2
SHA512 4332c805f451067b735fe14b01431025e51f1d0228ea7986df58d7c3415348bc4154cead72b29ac090010a8ba924169dd6ffa5e77c9164d201db6095b171a957
SSDEEP 192:sxRCRK7bc/f+syXA8bNetszoA8p4yy/g6+WNIYlrZMeZGBIgD5J:sxRC0c/f+syw8etdk/5IuaH
TLSH
T15042B7166928AD7B8CC7E21DBE597F53E2F9503261D41E48B7FC9A1C04E7ACD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e025a39794c51b00f9c6872fe4c28f2840c323f32f4fca3cbce4fc0504acdf9a
MD5 9587e25c68e9b6d5e90b56077bc01f63
SHA1 aad23cbabc7b1c26f3a0d0953a67441e7d451c3d
SHA512 e6845f4ced2c6780558497b69e82444dcf39973ab27cabf23c28cf4722634620189070b5345df61d1714609ea0f19091ed4dd700c50acb25a42b657a8cccd788
SSDEEP 192:sxRCRK7bc/f+syX18bNetszoA8p4yy/g6+WNIYlzZYeZGBIgDnJ:sxRC0c/f+syl8etdk/5IUa9
TLSH
T12F42C7166928A93B8CCBD21DBE597F53D2F9503261D41E48B7FC9A1C04E7ADD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 1505c669cd98e7425f3d67bd8c635bb94e6901b68aac81c4e8ed9b7d789d825f
MD5 2a3e32bd6e3bc7507ace848716c9a2b2
SHA1 1a4e9a305b752b7f4b6c1f07309d57cdd9966505
SHA512 0e36729145450e14fa7b9c82c1d184e5a8cb1003824937a91f4a025dfef77ee9ad48a81a7fbb82fe355bcc3172ee53f4c9dacd7e5235765b93289223419c342e
SSDEEP 384:dpCfAo9fCtggCFfJJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV//93VRRQroKMu:dofAoxWgg+fJJ8F1+UoAYDCx9Tuqh0VL
TLSH
T1ACB2C93B600DCB7E8FC04A9DEC19AF977D9802C796989D4047FE994C02C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7f7bf50db77057e4d126b45915b8d84d81edd84e8d5aa7b6553ab4406954163f
MD5 f86854c9f45688a94dbcb9b938e0f648
SHA1 d6a9b44def926b784e69247f1e4ee97eeef034a3
SHA512 8267715bfd7a8704afa1dd7b6b775cc7da1e5d7cc343d3faa1d8af9e4787d06b6adacab344818cadb013015d1152d9cc8d4c191de3a2835144d74dba231030d5
SSDEEP 96:KRFSr/VPTXWbAOgHXK42gZXc9lYrj8Hzc5t7xxNWlqggVNK4sg7NcD7SFYnOKMEm:CFSr/VPTmbAvHN2gZM9lYrj8Hzc5t7xL
TLSH
T172912050387A02403D3FA61CD1E9A92E92C2B863315DA56B7BE901A11B7BF135DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

7a126dcb-7823-48e3-abda-e5ebb364dc6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7a126dcb-7823-48e3-abda-e5ebb364dc6e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 06c1371c0f279e10accab6919df901d06788e2797b08f9ad5335ca8480400998
MD5 ddf83aa9d5be1feb15f0c3365c62eb0b
SHA1 c131e55b7b7415a04fb63a0eb7ab0ab9278da0fd
SHA512 27299f8e898cc813410455332f2bbf1af04b1912f2ddc92785860345fe36e6dfa3390059e04f8a14f48769276bdc148bf855dbd4aefe79a8079069951f9bb720
SSDEEP 384:eZcIq38NopHZ96OyTWGzRfY9bY/h5+FQPlLJQXmIkdP9IimIMWEfMbc+H5ZsRnl9:cq3jZcf1iJmh5+CNHXmTWTbc+H5Un28r
TLSH
T1B5F2D0B0DCA65A33ADFA9781B84B7B556DF8507394C82A48C9DDBB0D118359E031BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 134c48236a3780db2dcf960ec92ccb182900bf8217f772ef50fd395c43d5e527
MD5 b3c824841be5345f3a481ecb69517d60
SHA1 0ecc6cc34e9399a2c91a12125d25d2fae199ebf1
SHA512 26e360f241d051ce530fd59bbb0daf7ed6e434210f76e281cc492cf597ec5e1fd99263448eff8df748ef098b1fcb095534ec8605df077589e1f2079f6050c41a
SSDEEP 768:Hrv+4UNbdZ3aZcX1iJmh5+CNHXmTWTbc+H5MMTX6:Hbsbz3KY7rDeWn1ZH6
TLSH
T15403CF70ECA99E339DFA9684B44B7A577EF801A388C80698C9D97F4D018B59D070BD37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 76918a84e3da75ba2a0f548c4b4441e95b2c195983c67cef834f8a415b2a79e5
MD5 f21428e8ad391772885c29468f2c3b95
SHA1 4ec94ad49f251b3e729a8732c4c710f5c0d2bc3b
SHA512 6c063899b3b497cd31ea1cb403f9897128c162aa8c7a4d54cdf04cc2477d568b421fcc137acb071f2dfa3e9ce071b083ac04fbd6f3aa3828efd8a0d50df7340a
SSDEEP 768:tFQN3/wgDZcf1iJmh5+hNHXmTWTbc+H5Un28r:8N3HW7rseWn1ZU28r
TLSH
T17503CFB2DC959A37ADFA9B81F94B7655ADF400B3C8C86A84DAD9BE0D114319D030BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 603d6dde99b9ed92f930d08e7599146647dc61132228bb548408bca8ee2c8e1c
MD5 e4351dd16890041a067f2ba8923e22be
SHA1 510800ed1f091a80847e229f50e5de1a33762cd6
SHA512 6c19c11b830bdc3a5def9867aec7b28bd7e6455b525c8579418dc9d7f00eeaaddaf6df237fee2989d180c8ba4b2547f1b58a0348fa3ed0378e0666c87bf52566
SSDEEP 384:lZcIq38NoMHZ96OyTWGzRfY9bY/h5+FQPlLJQXmIkdP9IimIMWEfMbc+H5ZsRnl9:dq3aZcf1iJmh5+CNHXmTWTbc+H5Un28r
TLSH
T13BF2D0B0DCA65A336DFA9781B84B7B556DF8007394C82A88C9DDBB0D118359E031BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 c59fa9c1db4d1bb2fdf322de1c3b12c3ca194d318341bbc295b122d94d44c5b3
MD5 5310e8f744c1f782c18ea91b25082a76
SHA1 0053fe59bb245313c8dbf909bdb2cda0c6feaad2
SHA512 a0038a1568a509b111fa28c3357aeaa0e523c0ad1b83a7381c9327171dd79cf8e5b450aab0c854a55ec47eaa5879f63d348c373166c6201b1c0700b75a369ee6
SSDEEP 768:arv+4UNbdM3IsYiJmh5GNHXmTWTbc+/2eVH1SvyZ:absb+3S7r6eWn1eEH1dZ
TLSH
T19A03C0319CA99A37ADF69788748BBA573EF8116389C40B84C8D97F4D428748D170BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 51f31d7cd7544f6fb21750f2b2ac75667a552014acfb5ef2cc100c0bd911fef3
MD5 ba160665c16a60a8af0cbe80119db242
SHA1 400fff4fb2575ce33cfb3be61aa2d175c2b808e4
SHA512 0cd6f018ea9089ca46613eb5b0f690ce939e0d465d327a70964df8f8f785fa54d323091fc27acdfc8da9cf3ba765f45492278766b835dae54d87cf9bf14d4961
SSDEEP 768:6rv+4UNbdM3DeHiJmh5+qNHXmTWTbc+e5eVH1SvyZ:6bsb+3O7rleWn1GEH1dZ
TLSH
T1FF03C0719CA99A37ADE65684B44BBA573EF8116385C80B94C8D97F4D028B48D030FD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

907dbdb5-f106-4c86-9db6-3ece07fedf53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\907dbdb5-f106-4c86-9db6-3ece07fedf53.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download