d311a4f486e2f81d1ffb11b37782d8bc1325b1df96ff21ab3b3de818ae3d5d84

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 23:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mGhYju.html
Size 11KB
Sample260712-2yxt2abx4v
SHA256 d311a4f486e2f81d1ffb11b37782d8bc1325b1df96ff21ab3b3de818ae3d5d84
MD5 c229b9d23420402bdea979bae2d31dde
SHA1 cf5cb6cd0c16a3cd252c792a13907df48fa2f0d4
SHA512 bdabdc88c2c5f8c1b6e4730801ad263d8f0172f9cbc19d80de98acaec7d06218f830366b5c10a63cf589de17ed23dd3b84542ab2183f93fe383f9fa3bd6f6fb8
SSDEEP 192:zMilLhIJhKYX5kerCNRupjQ4vYJkTcOHsU:zNOJhda4s4vYJk4OF
TLSH
T1BF32764A1EF280E701E785A97DF2FD0DAD85864BD219FC4832BC80A90FD7D468DC7995
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1188	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134283708184738008"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2246396966-3025826688-3847171515-1000\{6E385BC3-2C9F-4E3E-8CD4-6ED386CB3308}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe
5152	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5152 wrote to memory of 4644	5152	msedge.exe	88
PID 5152 wrote to memory of 4764	5152	msedge.exe	89
PID 5152 wrote to memory of 1188	5152	msedge.exe	90
PID 5152 wrote to memory of 4764	5152	msedge.exe	89
PID 5152 wrote to memory of 4764	5152	msedge.exe	89
PID 5152 wrote to memory of 4516	5152	msedge.exe	91
PID 5152 wrote to memory of 4516	5152	msedge.exe	91
PID 5152 wrote to memory of 1152	5152	msedge.exe	92
PID 5152 wrote to memory of 1152	5152	msedge.exe	92
PID 5152 wrote to memory of 4816	5152	msedge.exe	93
PID 5152 wrote to memory of 1152	5152	msedge.exe	92
PID 5152 wrote to memory of 4816	5152	msedge.exe	93
PID 5152 wrote to memory of 4816	5152	msedge.exe	93
PID 5152 wrote to memory of 704	5152	msedge.exe	96
PID 5152 wrote to memory of 704	5152	msedge.exe	96
PID 5152 wrote to memory of 704	5152	msedge.exe	96
PID 5152 wrote to memory of 2868	5152	msedge.exe	95
PID 5152 wrote to memory of 2868	5152	msedge.exe	95
PID 5152 wrote to memory of 2868	5152	msedge.exe	95
PID 5152 wrote to memory of 1540	5152	msedge.exe	98
PID 5152 wrote to memory of 2920	5152	msedge.exe	99
PID 5152 wrote to memory of 1540	5152	msedge.exe	98
PID 5152 wrote to memory of 2920	5152	msedge.exe	99
PID 5152 wrote to memory of 5548	5152	msedge.exe	101
PID 5152 wrote to memory of 4328	5152	msedge.exe	105
PID 5152 wrote to memory of 5016	5152	msedge.exe	106
PID 5152 wrote to memory of 5540	5152	msedge.exe	107
PID 5152 wrote to memory of 4584	5152	msedge.exe	108
PID 5152 wrote to memory of 4584	5152	msedge.exe	108
PID 5152 wrote to memory of 4412	5152	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\mGhYju.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffb793bc188,0x7ffb793bc194,0x7ffb793bc1a0
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,8969765116979864463,7129572199191951819,262144 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,18072113584558744626,13153038491289902138,524288 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,17741032793106206636,16036498178108322439,524288 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:13
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3636,i,15401197947994112962,9381437397104034863,2097152 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,13232646929633064200,9739273655948704791,2097152 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,9621408913326134225,12029386021433458943,2097152 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=1552 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,16986666358900720283,5462480419584010154,2097152 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:9
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,13336295342537219295,7045426290925258929,524288 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,14662253281489262417,2204114774585574020,524288 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,8023076655995034176,1778293471964214777,524288 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,8023076655995034176,1778293471964214777,524288 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:5548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,4638927920476405381,13965841046389627457,524288 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:14
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6600,i,8775343571358617166,15386410898160507994,524288 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:14
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,14970441604001226132,7349519016174945673,524288 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,5758112311050106180,17044540413655680685,524288 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:14
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5600,i,4784049367739244040,16337435532210722311,262144 --field-trial-handle=2284,i,15135835123227457933,15018621059821425510,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4412

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 67b546fed422708faf33930b82ff4826bc323bc64f67af30b02bb9e565fa27ee
MD5 04925ec9b8ab191e010732cba0eeefe1
SHA1 a6847bd1b4e86ab3cf9f2a8e109e78b04f51204d
SHA512 25e65b33281d8c58aaf4bad265d912d01bcadd9284dc1ce818ccc1dcf59200f57de5e8d8f4ce5ef6da06c777b54dd4dbee7a3aad7a16da9542538e92104e9c68
TLSH
T1C7D0C0343948E288C9832172DCA033117320007074B147054031B41CCE2049323DF5CF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 719f844e62c5a3916fba05dc2f32d02dadec54c424efb41ba161d1fca59227ae
MD5 e633a9ff8da83df3b4dca0ad6f30e5d9
SHA1 610df135117504b2857ee3cc03a5ac9797b10333
SHA512 56404607616c88e3d1268893aa0c748db1db04fe698a8f5d214c6a2a533823ff606c3f2a3f007d08bc16bd8838597597f9fdcfe0f631495c1928104ff11d002f
TLSH
T16BD0C0303948E188C9832172DCA033117310007020B147054031F42CCE2049323DF5CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 feda780264690fa7d2170f3f25a0f3545cb6024680d6209ce0eaa06523b7aafc
MD5 2266bbd91ac5e733c91568541e10a4ec
SHA1 d9760ae82265e6df8ed1c22e72f2984f24077bd4
SHA512 dadb61508a4f554960efe3206b740820ba991e57fe0866995112c324113dd9e0a7996f8aa4d761940df42cc5c0eba5e3a3e78a17a59475237bdad6388333e265
TLSH
T15651C5A8836DCAEFCB2850B524E2C1C436F4C419460FAEFE47702C7079D27486B2CC68
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59864d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59864d.TMP
Size 3KB
SHA256 d68c21efdde9c67961cd9ed3c48941d4bf14073dae18b0ef9512a849a5088789
MD5 9369a8c1f08ed14df297d0eef5a1a583
SHA1 fa820d2bc02eb84a8b31ff941fae371f9f8fe0d4
SHA512 ff1a8ff9d6b241ee9eece34430a74bc02943d6f4c02c12d41aa55ae57df8ddbd29c85d8b55f1b6b8ad98633c820136c7dc18af09617f9256b690bbfcdfb7105f
TLSH
T19951B4A8836DCAEFCB6850B124E2C1C436F4C419460FAEFE47701C707AD27086B2CC68
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5ce549aa-7910-4a28-ae48-39d96dde80d0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5ce549aa-7910-4a28-ae48-39d96dde80d0.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a025206c13d6a71cee296eaabbbd198527f265651e9d1215814fae5a00f1206d
MD5 66ab7147a62338c85aa69f1178d7827b
SHA1 09807eca25e2d28a10ad5f46dfea44f942e1358d
SHA512 0bd60d81bdfa8e3fd3c41dcc1ec60c12ee4c92e80890ded3115206c3043823c34cead0e54b3d477ea642737bbdc0fc559fcfb8beabb93a0699290002d2336797
TLSH
T184419DF3C3E4896E8A1196F4AB187E1BCE1D0915832C3D5AC9E4AE1BA3F3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6926b9ee7b18e3f1c133b2249f22d44f19abe8921911c32dbf98c31d33e626fc
MD5 827266239630b7ca196189c95f336445
SHA1 59717c980556aef5ff5c4be2e5b587ba046957a1
SHA512 2f598d6bf8a95dde8c5429f9093c0ab1141a84d89f27cd626f97cdb4236e8e9f6bf18bb0d14b9ef1c3efed23b907c2af608fc2f02ff06901fc2ff26376f306ff
SSDEEP 192:sxRvRcyM/jK1Ml8wbs/fVsLLQf/TlzoA8p4i/g6+WNIYZ7PKsQGOIgIJ:sxRvyls/fVsLUfLIL/5I6qs
TLSH
T1C852B9156634597BDCCBD20DFA55BF93D6F85563A2901E48AAFCCA0C00E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3640e354899b9412a1f7c02d62bc1233acbb4044a74cb8c8b5eaed34963421bf
MD5 e2ccd0b7f1f2c265a1926ea010d82591
SHA1 c1a2236811e416f35d1b15fd5387ca442faefed3
SHA512 585668167324e296eaed6eea8c977401561d85bd581b59438b6896a74400b583a3b15691947572a9e20863f3b42aedc5d9a6b8d7b9d93a46701bf96c6a4cb1d2
SSDEEP 192:sxR4RcyM/jK1Ml8wbs/fVsg4LQf/TlzoA8p4i/g6+WNIYZ7PKsQGOIgDeJ:sxR4yls/fVsXUfLIL/5I6qG
TLSH
T17452C9056A34597BDCCBD20DFA51BF93D6F85563A2901E48AAFCDA0C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ccaf82f619860ed0fa52d41d0b3ff55d23fae9ad7bef3935679c54689a19062d
MD5 31d26b2cc458e59827ff48567f4aa666
SHA1 6fa48518955629f20bf94e6ed461685998a04c64
SHA512 b71f7e938ac616856f5c8e34113e2554e4f9972bb32b0e2c6e2fefd4676866eb9b2d90ff76d5006dc388f455fb058d21ad8b8e439bc556dd27f3101127d46941
SSDEEP 192:sxR4RcyM/jK1Ml8UQJIbs/fVsg4LQG/TlzoA8pei/g6+WNIYZ7P+sQGOIgDkJ:sxR4yqJGs/fVsXUGLIJ/5I4qU
TLSH
T15462A81666245977DCCBD20DFA51BF93D6F85563A2901E48AAFCDB0C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 80a2596d0c7feb088ad5dc7e834eb34c89521bf5862c66f8d913e98ddbc0020c
MD5 405e0e3faafed674fbe39854af97c52b
SHA1 3c995db100113f037077255ae636f1d203317acd
SHA512 cc12883c5792b12b0efed2f9a9eb87732cd8be88821913d176f69b19ebf094896f3f65afc227cfb05d38255ed0a79a1b0ff1c1b21a340548b09ead90f76c2cd6
SSDEEP 768:kfISEvWgd5fWb8F1+UoAYDCx9Tuqh0VfUC9xbog/OVMSV2MroHh0wx+p:kfISEvWgd5fWbu1jaBU2XHh0wMp
TLSH
T11EC20C2B640CC77F4F804D9DEC25AED6ADD802CB97988D5447EA890C03C77EB522A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 adcc401e4fc396e2ce13170f13129d107769c9fa59d4c0b8dce10281b244e9cf
MD5 d9e1d4885ab8cabdf24952df983427cb
SHA1 887c0b27ef15cc667c7612e66d2a51e241b81758
SHA512 258059ac1e94ee8c884c6ca19a4ffb93e8a964650de6fca781e2a30c8806b298fb7836c83244cb65ac0d97b1cbce2baed70d23eda6e7632a6bc1126d24b793d9
SSDEEP 24:KSi5EiBiBiFPiqSininiu1i3ieDi1I4iliuKXi9hPi7iu1Ri9i+Sri05idJiVivh:KolIBKmU8ry1+lINKOA43yFVIVKewAA
TLSH
T10991FF51B53A025138BE2A1C97658A17D7C274B33168B93F7BEC10664B2BF125DFC4CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

96ce4ea6-bb04-4dc1-b656-cad06ee4421d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\96ce4ea6-bb04-4dc1-b656-cad06ee4421d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 510a4195f23921de9a2d6c6046f59b76f8e79a2e02dd828621302c1352653bbc
MD5 7a95dd04d4ef7e5cdabb945f18a4c880
SHA1 ec03e520014350953d2afc8f440fef7b7a81f725
SHA512 8de4e08c72e8d5e0be13c235e3ed66adbd495297e3f539498a16ba6333a84c95a794cd1056adead9fd4d8162a2a3310af129abb48c2d9d2d8bba84111fbf8bbb
SSDEEP 768:Cj+9g35pqqylAam6aQMGdjWca4Ghf9+7B:x9g3wfmaME6p+d
TLSH
T149D29E316C689C775CA696D5F22B3687BEF091A385C85E84C9DCAF0D03D729E2307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 8e6e1a0ae6b40bd1af87da4f80efdeb5e36ba627e53f695e46e6d008f9b14284
MD5 acd2807a99dd22a0bed2bb6f23fba407
SHA1 4a1619994fa8ad7b4f9b0813e8f37b07cb2511cd
SHA512 da77e9bc196c212f6bc92e92bd3860d445da1a49bbf628491f681aab59efb488e413b7b0a60e930db0822c90c05c34ea6c1ad65dce51045ef283ab72f0409d15
SSDEEP 768:yj+9g3JpqqylAam6aQMGdjWca4Ghf9+7B:B9g3gfmaME6p+d
TLSH
T155D2AE3168689C775CA696D5F22B3687BEF091A384C85E84C9DCAF0D03D729E230791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 9ddb20cb968a1b0a44354072828d3d372cc3f03405ef488a1f75be321b705fb3
MD5 009589866f3fee40ef486f53ed138a2b
SHA1 950721e5cd416da717ba7aa94b61ef3e99518262
SHA512 a2952c25e1c9fb1f24bc87e28ebbb69ddf29da4db0ce4683da1d609763147e3df363e55b2138e92ec56c5ba5771d5dc0fa9b7c4a4c164044efbd2cb44c675c61
SSDEEP 768:8F1j+9G3rwg1pqqTAam6aQMGdjWca4Ghf9+7B:x9G3VmaME6p+d
TLSH
T1B7E28E325C98C977ACA69BD5F62B3643EEF041A3C4C49E94D6DCAE0D02D719D2307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 a00b0aded874ba427b9e9d9cff5420fad2fca6337cc77eda26e92eb9f1e4dbb1
MD5 0a75a28c7f1a38353db7a4defd121cbc
SHA1 d62a1fd7f69ddfeffa90f4f562a024c81cc18524
SHA512 3d9b0f1a196ef5c1c64fceb9004828713cce0cea56d447f66658564a5a01ecd182dfb260f0c9dffa9f6420e04cbabc3636279f56b0dbfb19df74470d723df87f
SSDEEP 768:/rv+4UNbdq3O2qiAAam6aQMGdjWca4GhfBFPeU/:/bsbc3pKmaME6p9H
TLSH
T1FAF2BE31A87C99739DB79A99F21B6B87BEF021A384D40E84C9D85B0D439748E3307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d9e407d-9482-45ee-8993-12164da22165.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4d9e407d-9482-45ee-8993-12164da22165.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download