272a5e4d204297d0c1edee1212cb966a641a1eb615b004179d40b5fc41d2b6df

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/08/2026, 18:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
donkey-game-mask-12-tails-included-party-accessory-1-count-1pkg.html
Size 703B
Sample260805-wzerysdp21
SHA256 272a5e4d204297d0c1edee1212cb966a641a1eb615b004179d40b5fc41d2b6df
MD5 1df59c9d8ac185ac48974b4af5925181
SHA1 1944a18af1a584a6e917f9f60880f574200cdb84
SHA512 bc57ed159eeda7e6d7e0b4ee471cfa69a078b75316899bdf193de6b0ef10b4dee46cea86a9d535c899dcdc99ba8253f342c880eb9ab3473face7d460d5298a57
TLSH
T12C01F4DE8F16D3037533D538E7AC7654A33B219F9244D04AC1290D9F52782A3A1979DF
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2004	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134304277195621262"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{B7BF5408-74B5-40A3-923D-A3E2ADB39593}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
376	msedge.exe
376	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4060 wrote to memory of 3224	4060	msedge.exe	86
PID 4060 wrote to memory of 2004	4060	msedge.exe	87
PID 4060 wrote to memory of 2536	4060	msedge.exe	88
PID 4060 wrote to memory of 2536	4060	msedge.exe	88
PID 4060 wrote to memory of 2536	4060	msedge.exe	88
PID 4060 wrote to memory of 1472	4060	msedge.exe	90
PID 4060 wrote to memory of 1472	4060	msedge.exe	90
PID 4060 wrote to memory of 1888	4060	msedge.exe	91
PID 4060 wrote to memory of 1888	4060	msedge.exe	91
PID 4060 wrote to memory of 1888	4060	msedge.exe	91
PID 4060 wrote to memory of 1484	4060	msedge.exe	92
PID 4060 wrote to memory of 1484	4060	msedge.exe	92
PID 4060 wrote to memory of 1484	4060	msedge.exe	92
PID 4060 wrote to memory of 4804	4060	msedge.exe	93
PID 4060 wrote to memory of 4804	4060	msedge.exe	93
PID 4060 wrote to memory of 4804	4060	msedge.exe	93
PID 4060 wrote to memory of 1584	4060	msedge.exe	94
PID 4060 wrote to memory of 1584	4060	msedge.exe	94
PID 4060 wrote to memory of 1584	4060	msedge.exe	94
PID 4060 wrote to memory of 452	4060	msedge.exe	98
PID 4060 wrote to memory of 452	4060	msedge.exe	98
PID 4060 wrote to memory of 4388	4060	msedge.exe	99
PID 4060 wrote to memory of 4388	4060	msedge.exe	99
PID 4060 wrote to memory of 2616	4060	msedge.exe	101
PID 4060 wrote to memory of 4688	4060	msedge.exe	112
PID 4060 wrote to memory of 2072	4060	msedge.exe	113
PID 4060 wrote to memory of 1828	4060	msedge.exe	114
PID 4060 wrote to memory of 3264	4060	msedge.exe	116
PID 4060 wrote to memory of 3264	4060	msedge.exe	116
PID 4060 wrote to memory of 376	4060	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\donkey-game-mask-12-tails-included-party-accessory-1-count-1pkg.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9c026c188,0x7ff9c026c194,0x7ff9c026c1a0
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,1148756302679780926,3187891292103302724,524288 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,14584104980651583319,8168882633251382144,262144 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,8947149239876849274,13572198589627966513,524288 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:8
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,9905550049730342112,8390165959414175159,2097152 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,16432424834044067757,16794668994841729057,2097152 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,2656944376523959329,8376367146886768317,2097152 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,6145385715200336456,16293517355256344098,2097152 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,11883734315960408863,5595738181821524642,524288 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,10755830334667470905,11602898595813464490,524288 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,4127681350626362515,8941940181178806563,524288 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,4127681350626362515,8941940181178806563,524288 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,3618679716600046526,17935712778776626440,524288 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,199964788980657770,18225952874784354353,524288 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,1383439697763207043,16371398457793302086,524288 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,16386953926788858847,4866949324885679480,524288 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:8
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6128,i,13299128022079934420,5080507995771351120,262144 --field-trial-handle=2348,i,12328184257643218413,4582229195700315860,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:376

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2088b5f5825504c959e4897183e16bbe196c8388dfb26cfabb1c6422722cf5fe
MD5 e6b8bf732c673b970e27d64cdf74a033
SHA1 faecfbd8260c0d6589195e83d2184cfb72b47c6d
SHA512 f320b2e97ed369d28b978e3cbde14e0c0f8e156fbbdb2a5b1435fc0750323255791cdd301a1b86c576c6aac641bc6d006108c6e16ee703c6bfa54d62d0d6301a
TLSH
T12F71E83C026243B7D36E01F193CD720D353282FAFBE32E8980976A7B5922761C259BC4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 1348c22e1219af7414d52850597801826cfc99c1296b26fb03ad9ba427a36bde
MD5 a12dceb7dff6cd596c3178e85d4f6996
SHA1 c0f871b4168e0a6d13aa51f13ee56036be3ff2a6
SHA512 fa1276ae5d3866c3234e58eb9f3f93b0bf194d1e31e04ec594ec935b6c3b38f7722658ad39068ef0aea3f339d8735e6bb83b39404eece2438f8771cd815e2fab
TLSH
T13511BDF3C7D5856E890156F05A24AE2BCE2D0A06421C7C1985D4FF2B93F3475E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2039459134627da7408201dc44c98f10e578803d5486dfa8d18c2d0a418deb3d
MD5 206509f8d4bc4519345fb81cf835df0e
SHA1 6604c93552e68e806154b27f2ed67e0c2f5d0e2c
SHA512 69284467375c02d59591940275c87e0eaffd0a81dc5a95f2b23a902418fe20d805fed1ccef2285f7f7d3bea3b87262af343d94a2ecf09f5311d1a5118aab44d7
SSDEEP 192:sxZ2RFky/fBsAz43Idpd2HW6+WNGYzQy3tIgrJ:sxZ2Ey/fBsAzjgHbGM9
TLSH
T17122C8526E28A87B8CCBD209BB15BF13E6F9503291941E58F6FC951C04E7ADE220790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 324c5570465677fb96d32d482a3049ea58e6bae90714c53da8e54d7edefc0179
MD5 6e486381824e163af59a29239b885662
SHA1 39ee5068da6b025ce65bb3fa4a1869047c3359de
SHA512 16ecbf73076a6b7276791cd8a1848e549f30af08667875abfd99004606f9cc1ffed59b0560cdcdac61108223789c2e12c46ca5df4faf419767c24ec357e983a4
SSDEEP 192:sxZ2RFky/fBslC43Idpd2HW6+WNGYzoTW3tIg5EJ:sxZ2Ey/fBslCjgHbGcy
TLSH
T16722C9517E28A97B8CCBD209BB15BF13E7F9503291941E58B6FC961C05E7ACE220790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a244919e088b4fec810923df2b3052861e991c6843e8012efce4e83e0a5d045a
MD5 5d6a36d6b23a675be5b0cb48172ad86a
SHA1 e193c2d8de646afdba8cfbdebd69efa7a5b51160
SHA512 e4d508cb85d44659d4dd90c0ace61fb8cfb6eb9151c19df96986e72963eb9d4e3ad79bd8ab7bd4f484a0d664bb245576d9a3bfc293392df4daaf0d3029c1fe5a
SSDEEP 192:sxZ2RFky/fBslz43Idpd2HW6+WNGYzQy3tIg5uJ:sxZ2Ey/fBslzjgHbGMI
TLSH
T1A022C8527E38A87B8CCBD219BB15BF13D6F9503291941E58A6FC951C05E7ACE220790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a7055c71a030e853df439485e9348014ce987c6b6ffc5b6db347fa7c0115b96f
MD5 5af65f787f0afcb74b3e24958d8422a9
SHA1 8343d0f875eb14427de8ec5a719d2e6a2d3bf50c
SHA512 6a97c18b1ee373eb9cba47d11908b7f3751794b57250eab0e9909261c83ec1bce72c1eab233c02107ca99628bba1dc2667ef1fe458b026f01f05e35a3fd849d6
SSDEEP 768:e4k7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBProySYZ:e4k7u70WvqiEau1jai5LA3BcAZ
TLSH
T1E7C2E93B740CCB7E4F801E9DED566F973E9802C7A6988D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b259718d7c28656d0aa210733426dc52aad9207cab66e96863b97e95f45f4d2a
MD5 8518a32803599db9a66f64e5c790898e
SHA1 72c9e14324dc5e1bd7e27c8e650c59095a008475
SHA512 49539b774d0820bd9357497f15551108a9c92dd2981e84db6bd484017bb7b74f20e9ea69a5b4601f195ba885afb55b191d618c989db5d320ca6b6d13d8f8b6bd
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYT//I9KA8QCy9dIBKeEMkSNSoSBStSTSbSrS2VSbSuS9b:KIbCKc//iKA83GdaKeE5JGKSgl
TLSH
T1B391115A317F46513C7F2D189256C52A4E4235A33418E4BFBBB811A60FABE211EFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5939e2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5939e2.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 859a62a83dc36e387060725c299b59e3ca9371c05133c000bd67f6c9930ae157
MD5 68001505b278c3446053f05732da7da5
SHA1 3afb9bbf1a6ce6adc051dd558e763ee8a028bbf0
SHA512 dfb76b29c2fe3a8542724abb9b153a2c83f4fe962556a6bfe7a4dfac8b5d395db7735097d63c6e8905ea72d82002268cdc6467e28623042c5184e18b5b1a0bbe
SSDEEP 384:dZcIhsNRAwTbGTtrdPsqCQYBeRs9JKgqijUrhOGF:Fh6U9wQYTjKgqmUrhOGF
TLSH
T18B929D705879A92B9AF2B541F18237074FF48137E7C06F94F2ECEF1C019A698231B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 ebe43d4cb247d779a29eeaebadf5a9cd450469d5cd98da2c86e20f4bf6b144f3
MD5 cc4a1ed97dad9041a455455df7f6b5dc
SHA1 d2225b00c760959c9da1b9ae7cc6b753fb661427
SHA512 7b031a3d2b9478727b7ae7c4da08313d11b1d2567239121d7794d5469044fafbaa3d7f688a12ae741f41411f9836e1906972b321520c393831e6538ca7f2fdbb
SSDEEP 384:HiFiZcIYzsNj8TUNTUlIlhwTbGTtrdPsqHQYBeRs9JKgqijUrhOGF:CFQkywg0U9BQYTjKgqmUrhOGF
TLSH
T151A27D725864D93BEAB6AA80F68636174FF44177DAC0AA54F3DCEE1C01961DC130BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d23a1b1a57297584ce423006d97d5f759b50e447e2b7b1a2e33929bfcf1862f6
MD5 54b270c92970fd823e206642f9d1d200
SHA1 f9065fb9130cde6d069e70ba91fc735ab84c99de
SHA512 a2d1b892c5a0ea32cdcb062336ab3776420e9c196eb559357329efd2fed148f20e8ff6becedf24c5090b54357b22d7fffcf55ff62439ab46c1a1ebc5f278b02b
SSDEEP 192:MONg64BAQmiUyw1fW5GBPK1B+FdGw5caDQxmCU6:MONg6eA35WUdPTQLU6
TLSH
T13F021B386C786C6B9EB2AE45F58737175FE8113BEA846B44EBE85B1C00D765C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 eec0eacb8773ecbfd9a3d4a7bd5495f9b04063f400e2d88c368d09e9ff413f4e
MD5 f115081b4cf3d2ce0750879c5ffb37ea
SHA1 c37dd76a6eac636666e773db8da138e78c27c767
SHA512 4435a8e5b70fa79a86060aa65561e74ec00318c0657eb46af12e187ba7da94bea9b6ce91227810f8cb0b83b807201dc4d140b599113a9e335f1dd264c5be0f14
SSDEEP 384:xZcIhsNRhwTbGTtrdPsqCQYBeRs9JKgqijUrhOGF:ZhHU9wQYTjKgqmUrhOGF
TLSH
T1A1929D705879A92B99F2B541F18237074FF48137EBC06F94B2ECEF1D019A698231BA16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 09047d11f06a9eb52438791b07d90bbf65036153311e847fac295b43ce8882d2
MD5 5f0825ebefffa378d524c9a2addae378
SHA1 7b7a12752e6075ac8b78e8456fe0b36642986127
SHA512 0d7105c9268af5f5d53ae1737e24dc4cc2801950a1eb923f85cb53fee0225b4af7504815d572db6e4ea5a77ba3f0ab52c038d08262543abf3983b0573e016c1c
SSDEEP 192:qON864B5QmiUyzfv5GBPK1B+FdGw5LGPNquWwQ3rqFdU6:qON86eXSvUdPsqsQYU6
TLSH
T1B3121B35AC786C2B9EA26541F08736175FE4423BEAC46F54F6EC6B1C01EF6AC2306416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

61235d1b-82b2-44c4-95ce-ff3f6954416e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\61235d1b-82b2-44c4-95ce-ff3f6954416e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 adf851b81a1ca36f55f0b6a22bac5ce7ddb9a146c7f324973eb591c7cf822533
MD5 a9b0f5ce9b3d2128f7f318a0b32ece3d
SHA1 9d65c62acc49f6719647cbfa4fd74f8552b557ed
SHA512 23280bb3c956fcaf483ea7d10d39a0f4797a7f7a49e1c492615e28e22f6a463526ef1780144b05eb905ed266bf08a70acde545afd27aa41c07625fabd990b2ac
TLSH
T1FC41EC4DB7FA1158B3B77E5AABF6986D487B78372E1AD45E00110E4E0A73B40C861737
MD5 SHA1 SHA512 TLSH

Submit Download