95220ffa37774f542a7d474b8f3447392c93b6c9abe736321312d8c0bda650b9

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/07/2026, 03:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
yB8fVaFg.html
Size 4KB
Sample260723-dntgvsff96
SHA256 95220ffa37774f542a7d474b8f3447392c93b6c9abe736321312d8c0bda650b9
MD5 033eab09928ae854c5d0cbef7558c2cb
SHA1 9524b3f19738f9841b9e5d18daa782d621ee0688
SHA512 db0e133835ba5d8338baea1cf50cd2789d81b8f731a7d286ef339332cd105de6ffae6c6d2a2c8cb9545b43c94b2347284a2df9854b194a2bb92b58d1bc495f99
SSDEEP 48:4qIFKeiE7Wgn4YdPYdwOsVA0Xn/k8OAZelCEG+rA9PDi/v3qBZOQA:fI14YFY9sVA0Xn/k8zZOG+U1wx
TLSH
T17B81861F0814BC28E1F1B215A653304AD3A6753BE6CA5C60D687292E55E6FD1E3FB0E3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1104	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292498160868856"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{4D6D6268-92B4-416E-AA74-6C45025749F8}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1616	msedge.exe
1616	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1924 wrote to memory of 1848	1924	msedge.exe	87
PID 1924 wrote to memory of 1104	1924	msedge.exe	88
PID 1924 wrote to memory of 2372	1924	msedge.exe	89
PID 1924 wrote to memory of 2372	1924	msedge.exe	89
PID 1924 wrote to memory of 2372	1924	msedge.exe	89
PID 1924 wrote to memory of 2852	1924	msedge.exe	90
PID 1924 wrote to memory of 2852	1924	msedge.exe	90
PID 1924 wrote to memory of 3332	1924	msedge.exe	91
PID 1924 wrote to memory of 3332	1924	msedge.exe	91
PID 1924 wrote to memory of 3332	1924	msedge.exe	91
PID 1924 wrote to memory of 4380	1924	msedge.exe	92
PID 1924 wrote to memory of 4380	1924	msedge.exe	92
PID 1924 wrote to memory of 4380	1924	msedge.exe	92
PID 1924 wrote to memory of 212	1924	msedge.exe	94
PID 1924 wrote to memory of 212	1924	msedge.exe	94
PID 1924 wrote to memory of 2608	1924	msedge.exe	95
PID 1924 wrote to memory of 212	1924	msedge.exe	94
PID 1924 wrote to memory of 2608	1924	msedge.exe	95
PID 1924 wrote to memory of 2608	1924	msedge.exe	95
PID 1924 wrote to memory of 4904	1924	msedge.exe	99
PID 1924 wrote to memory of 1312	1924	msedge.exe	100
PID 1924 wrote to memory of 4904	1924	msedge.exe	99
PID 1924 wrote to memory of 1312	1924	msedge.exe	100
PID 1924 wrote to memory of 4908	1924	msedge.exe	102
PID 1924 wrote to memory of 3820	1924	msedge.exe	114
PID 1924 wrote to memory of 2304	1924	msedge.exe	115
PID 1924 wrote to memory of 2152	1924	msedge.exe	116
PID 1924 wrote to memory of 856	1924	msedge.exe	118
PID 1924 wrote to memory of 856	1924	msedge.exe	118
PID 1924 wrote to memory of 1616	1924	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\yB8fVaFg.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffccf63c188,0x7ffccf63c194,0x7ffccf63c1a0
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,4880408775556435137,1021510260281989636,524288 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,14136353594375344068,9688418344422649650,262144 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:2
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,2055580371961035150,4584834153131449834,524288 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,18406544575872654049,9834769522352850700,2097152 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,7437720652401129070,4284769411076578646,2097152 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,12144985155709663487,7474834674204846807,2097152 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:1
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,5373475062159380469,3613507315190141343,2097152 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:2
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,1385500123991844117,9422833211264307851,524288 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,13756558874153210139,8120302045643315750,524288 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,10707607265902270537,10780868325222923068,524288 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,10707607265902270537,10780868325222923068,524288 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4664,i,5189535351430005644,16948928564799639967,524288 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4656,i,4867833789668846901,17738757532513972796,524288 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4632,i,14515995477464132912,12540738838386963778,524288 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,2237489924780737939,16716511853075369692,524288 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6232,i,978163925146208295,188638377848375462,262144 --field-trial-handle=2056,i,3382259437162823690,1640455995036068019,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1616

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3520

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f9d4491c7cdae0b449f0232e607b79fc19318c216237f02e2e386985a210f638
MD5 9ec5720c9b9cc348234a8eb8614962e2
SHA1 c8e376e598487823189def96519bd15e056d6ad2
SHA512 8c102eac1fcb9a2c970df9b8cf8f0470d7f853912fe91deaf8a37b68a535a3716a11d984a76108d0cd5d7b7709bc8c8a80fa76f0b0d0e5a9918c077a1c38d5cd
TLSH
T13F61C6750B10C4ECE79031B098E932927872DDEAF4835E4670735EB1FA05F4189EA1BD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8fa53abf-1437-4980-91df-6db7f57faaf9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8fa53abf-1437-4980-91df-6db7f57faaf9.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 06efed36425f866fde67551d95dcce12de4178eccb6c8026b8502c4c048d81f7
MD5 851f2df3f42b6e0ea17aba2bf8b392dc
SHA1 98175ec29a45ea5ab734a361ef95e13f0e7d9115
SHA512 c4b5aa816fa7872fbe5e8c4330e4e78341b02738233e5c9b2a43831280d6dbe862d4c212e2549a903aacb66a7043e815943f51e91c0b67db4d904a21f4a1d1eb
TLSH
T138115BF3C3D5856E891116F06A24EE2BDE2D0645822C7D1989D4EF2793E3465E10299B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 51f8b0ebf0fb83ffc93ed1ae57dbbd473a4eb9258eaea12e80b468b514243954
MD5 39fe27427e21fa9a94242fa6b01536fb
SHA1 c813d9a40a373bcc31c3d7982489bc8cb222ab0d
SHA512 c360c068b393cea11c9153ed51a7f043c46dc617a987c3e51f3064916e5f01a0b4401cb6af357c828df6bd9aac34fc0facf9b8bf5aea1d31194c7a3c7b31ee23
SSDEEP 192:sxZ7R1kl/fdsF/uVnIdpdrHW6+WNGYvra7j+EIgrJ:sxZ7kl/fdsF/FtHbG/jt9
TLSH
T12822B8566E28A47B8CC7D21DFA15BF43D6FA5036A1901E58FAFC961C04E66DD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1ace0b770aa2c864b4a7297ed07e1a40c6386cb4d4c4717f0cd6c2c5a62aaefd
MD5 ac2b53d4899a4b9803f18083783e917d
SHA1 bfdf8d2b85dcfa05f3d249759ae7f29de197831a
SHA512 8bedf2bf85ea4ededcb8e93fcf72d31ff15b1e8e35e886b93c141a5416a56c320c5705f02b3657df60adfea5d3ab89834829baeeabdcf37741c5165f277c5d1b
SSDEEP 192:sxZ7R1kl/fdsrCuVnIdpdrHW6+WNGYviH+7j+EIg52J:sxZ7kl/fdsrCFtHbGsjts
TLSH
T1CE22A7566E28657B8CC7D20DFA15BF43E6F6503691901E48BAFC970C05E66DD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4b256b58b245cb8294f3f7c9ac1f0929dfb5222b7b3fbd0ca35a87abc88aaf61
MD5 6001caa1b93f53912f220615f3d1755d
SHA1 c7e68bba9d54b760089f7535e55466b7f870af93
SHA512 f16319d14266555b0bd29b0e61200bfc2d85b06d1b537a0babe2631147d65ef3fabfdcb596b68d125fd2aeb7f1ecca1b72b17690feea4afd193c00f4cbe834e6
SSDEEP 192:sxZ7R1kl/fdsr/uVnIdpdrHW6+WNGYvra7j+EIg5UJ:sxZ7kl/fdsr/FtHbG/jt+
TLSH
T1A822A7566E28A47B8CC7D21DFA15BF43D6FA503692901E98BAFC970C05E66DD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b72563aecc06734c86ddd3591df2d36bd26a23220d5d9dfa37ea124d09abe909
MD5 ccf6c7f1bd86f3254dfab5157452ed62
SHA1 eea6b7a7eea270275ce365a11915667053f041d0
SHA512 07885f4200b5e240128644c316b21ad8548abc3f3487eeb5393979d2e455b3d49f72f603f4c75b1477f3a572d06fd29063b88698f8b2a85d024777e4c00abf78
SSDEEP 768:X2ee3rxWvhffn8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4cLly0pb4ro8Rn:X2ee3rxWvhffnu1jatcL88bDK
TLSH
T173C2FA2F640CCB7E4FC01AADDC5A6F976FA802C7A7548D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6f46014d014683508feec54112dbdd1bbb06d810df85589946022e1860b29160
MD5 f080df270752db1c3d3633a302c3971a
SHA1 681880932f15c345dbeca372aad6813353014dcb
SHA512 b3fbc08712c7cb51848b7ddd6277e276a06cb55a3c9e7e18f396b95372bb0f5165ca8e9549ad33ea29f03546d7705631a9c4e0d689f4cfaa66a5efaed2b540b5
SSDEEP 48:KYHIhKggkXyFrI1KAUonyhziHD1RFARpETIwbAKjV7dAXrQe09sqluKsUE2SR:KYH+Kggm+ruKAUyyQgKJu2M
TLSH
T1E091D21A747A0202283D3D8CB2A596764F4631937474A9AF7F7804624E66E124FFCDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6846a8f-24b7-4ae4-a51f-19aedef7928a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e6846a8f-24b7-4ae4-a51f-19aedef7928a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 34322ee00066c7e8133f1d3d85d8b126b38cb8d9d7614f6fcb21258023b39bc5
MD5 ab642b2c213ef9087e6dc3a1a015125b
SHA1 7a72b31e266a094ce7c3ca67d8e02743672dba9c
SHA512 e6cc02267c7ed6e4eb82cf9bc8125eebc387612febfc90e36b83f10cc6378977fba15443c7da86780bf3c5fa6282420b8b8b89e71b9b49868a190afcd643511b
SSDEEP 192:u1m+xasuheOwQxMGsNBUcngQ2jncdM7QF3POFQmiU13+id4MTAn+FdLQx6ptFd3e:nZcIhsNBU/znce7Q9Gj7ykdcxMdU1OaN
TLSH
T154625B725C745C37A9E7B186F48A37130FF4902BE7D81B90B5ED6F1C01DA6A8130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 80bc6685fc8e5b0c15bb878ac51065d3f1e1d866da86fca548054276bfed3313
MD5 ee3e50b75fc83798d79d4e9ff849fd50
SHA1 c3dc018b823b033c8ddc01d651147f7aab7a43b5
SHA512 e750d4d00d425efc5a739c54a91f5c4c44ebd34093feeabf599a0c35bb0121827d4b38adb4984e95814796ea6a1fcf5610a36cd07b172c59af0575d8d44eaee6
SSDEEP 384:FiFiZcIzzsNC8TUNTUlIl2znce7Q9Gj7ykdcxMdUbOaN:MFQXTwgosIH5nUbOaN
TLSH
T15D824B734CA4893BADF7AA86F58A36134EF55067DAD4AB90F2DD6F0C00961DC030AC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 1ba8711b97b8c416855cbea1287e438da846d69c4afd9311dd566a8729931e4a
MD5 8b8ebd7f242795e1950f08e3ddb520ba
SHA1 66995840f821cefa9a4058b7ff6017ca5e47c91c
SHA512 ba0513f4b72c61eb81262e4ebf81bc16ba7b6f287575b4566bb2afb7669267d74823db7e5e2cbed304194bbdb6622a77d71fb8c2b509381320bb0849e739ec4b
SSDEEP 192:gONj6vMxPQmiUyplVuhTAn+FdLQx6ptFd3E6f80IMqIU/u:gONj6UxRsu7dcxMdUvOU/u
TLSH
T127122C36AC745C279EA3B586F08B36171FB1916BDAC46B90B6DC2F1C01DA69C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 86c3efae22a9339069a4bf9ab5cb9e88f5797a9f7813d09d04e04738209e062b
MD5 df4ed1bd507006e5cde4410556a8ba01
SHA1 4b80d306dec2287529299c3106f20ddac922bcb2
SHA512 69eb9f673ad7b6dc56a6244cefcd5f2d732e29217848ab02b52a7a73acf42c00ef48a6ef78ac7730692cf5c6c60a410bbbe6a9aeaaa746f1afcf0becb75b23ba
SSDEEP 192:utm+xasuheOwQxMGsNBURngQ2jncdM7QF3POFQmiU13+id4MTAn+FdLQx6ptFd3e:XZcIhsNBU2znce7Q9Gj7ykdcxMdU1OaN
TLSH
T119625B725C745C37A9E7B186F58A37130FF4902BE7D81B90B5ED6F0D01DA6A8130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d0d3635f64059a3b6f3795f9e130f80a1eda7ac2774fee445a34684b9672f533
MD5 cfe95612315079e1466055a101b16297
SHA1 3ff2545f5069a0facc814cf153bddaeaa50c2509
SHA512 0d8e89886fb7aae8aa5ded35b0ac73f5d75c1c0d92f334d916ada40cc4121fef3a721750cf684b9fec947e0abb041a4c76adfc8d70deef64dfaf2c5accf69a3e
SSDEEP 192:lONb6vMtPQmiUyMVThTAn+FdLQx6/847IMU/u:lONb6UtRJT7dcxENU/u
TLSH
T19E02F835AC786C6BEAB3AE46F48A37171FE4516FA9D01B54EAE82F1C00D725C1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9f983be-6bdd-49bb-870e-ec4ff22fc746.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d9f983be-6bdd-49bb-870e-ec4ff22fc746.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0eeff0d803bad4de4b57e94a5a14f5d4918e62c964e5f29b3e97633ba4a13d6f
MD5 e75e6d126a0e8b41ff3cee5be95f3110
SHA1 eac9e7034722d98b3203833b0c1d4e90d827f840
SHA512 4e11bacc8941ed3b3d553f1d8316c6b2c0e4dfa861d5d72910cdd0e7ebc36779dee0f6ac2382421f771e7d72a7bd85cd255bfab2850843cef12c4b1055f7590c
TLSH
T1CE412C58B2FD0148B3B76F5AABF6A46E887B7C772E06D04E10110E4F0663E40D962737
MD5 SHA1 SHA512 TLSH

Submit Download