bbba50cc90f731616d0d52f9857aeebe465d8e28ba9b106da22f39d40ed3357d

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 12:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Assets/Widgets/HoliIcon/index.html
Size 26KB
Sample260804-pjdrdszfld
SHA256 bbba50cc90f731616d0d52f9857aeebe465d8e28ba9b106da22f39d40ed3357d
MD5 dc5560122de6dd2c27aa59ff7d5df2f8
SHA1 c91db779a66d955becaf1609762020f9756ba2c4
SHA512 2e32a5f375896f63c7cb2f5cc2b17bfb6a9fdd21c0ef276fc9acda4adbe19646c175c16fb8ee4d8ad834271d7804137d76fe23b2d2c8cf293f455c42ae6689d6
SSDEEP 384:4x/xXyLZzDyPJo13T74S/XNoQbLi3ZMaxZjb81/MPNe0inaksW:0xCLZv1n9aQbuTb8ckpnaksW
TLSH
T183C2D7F992D121D46033E368EF635148FF6A20BBAB4147497A8CE7906FB6045C9C7ED8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4052	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303199179419796"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{492CBDC2-6217-42CB-BB08-1AAFCBB7CA9D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1208	msedge.exe
1208	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe
3012	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 3012 wrote to memory of 4988	3012	msedge.exe	85
PID 3012 wrote to memory of 4052	3012	msedge.exe	86
PID 3012 wrote to memory of 5508	3012	msedge.exe	87
PID 3012 wrote to memory of 5508	3012	msedge.exe	87
PID 3012 wrote to memory of 5508	3012	msedge.exe	87
PID 3012 wrote to memory of 5232	3012	msedge.exe	89
PID 3012 wrote to memory of 5232	3012	msedge.exe	89
PID 3012 wrote to memory of 2856	3012	msedge.exe	90
PID 3012 wrote to memory of 2856	3012	msedge.exe	90
PID 3012 wrote to memory of 2856	3012	msedge.exe	90
PID 3012 wrote to memory of 4576	3012	msedge.exe	91
PID 3012 wrote to memory of 4576	3012	msedge.exe	91
PID 3012 wrote to memory of 4576	3012	msedge.exe	91
PID 3012 wrote to memory of 5084	3012	msedge.exe	92
PID 3012 wrote to memory of 5084	3012	msedge.exe	92
PID 3012 wrote to memory of 5084	3012	msedge.exe	92
PID 3012 wrote to memory of 1596	3012	msedge.exe	93
PID 3012 wrote to memory of 1596	3012	msedge.exe	93
PID 3012 wrote to memory of 1596	3012	msedge.exe	93
PID 3012 wrote to memory of 4088	3012	msedge.exe	97
PID 3012 wrote to memory of 3120	3012	msedge.exe	98
PID 3012 wrote to memory of 4088	3012	msedge.exe	97
PID 3012 wrote to memory of 3120	3012	msedge.exe	98
PID 3012 wrote to memory of 5380	3012	msedge.exe	101
PID 3012 wrote to memory of 4504	3012	msedge.exe	105
PID 3012 wrote to memory of 5548	3012	msedge.exe	106
PID 3012 wrote to memory of 4132	3012	msedge.exe	107
PID 3012 wrote to memory of 1980	3012	msedge.exe	114
PID 3012 wrote to memory of 1980	3012	msedge.exe	114
PID 3012 wrote to memory of 676	3012	msedge.exe	115
PID 3012 wrote to memory of 676	3012	msedge.exe	115
PID 3012 wrote to memory of 5652	3012	msedge.exe	117
PID 3012 wrote to memory of 5652	3012	msedge.exe	117
PID 3012 wrote to memory of 1208	3012	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Assets\Widgets\HoliIcon\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff4709c188,0x7fff4709c194,0x7fff4709c1a0
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,18385745797070913772,15437257947569783320,524288 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,4395117150169249975,13707560828670095252,262144 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:2
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2664,i,18104912436789246120,13707017360531285922,524288 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,14971206563537608327,10620051745245965104,2097152 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,10545667693454410866,16845611748315228221,2097152 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,10554749599182034472,14279131085903325391,2097152 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,15246805548146844792,12922185646751219733,2097152 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,1200413412281687376,1322195734010551017,524288 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:8
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,4632821253522960518,14596315741911324558,524288 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,18139639560007795952,1590358716075946392,524288 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,18139639560007795952,1590358716075946392,524288 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:5380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3420,i,10051031186810757133,8503747923560569988,524288 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,4463203673087487503,6535521465572859168,524288 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
  2⤵
  PID:5548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,13280117435113626524,14884339294934648580,524288 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2160,i,17299706313130600814,5575377068112259506,524288 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,15083659320150218636,3177378097617151278,524288 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:8
  2⤵
  PID:676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,7923539450937186708,6810997738737609320,524288 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=764 /prefetch:8
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5844,i,12392197732480118868,15355320549446734251,262144 --field-trial-handle=2396,i,6693696834902399265,15386245595832627797,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1208

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4720

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 33B
SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
MD5 f27314dd366903bbc6141eae524b0fde
SHA1 4714d4a11c53cf4258c3a0246b98e5f5a01fbc12
SHA512 07a0d529d9458de5e46385f2a9d77e0987567ba908b53ddb1f83d40d99a72e6b2e3586b9f79c2264a83422c4e7fc6559cac029a6f969f793f7407212bb3ecd51
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 146B
SHA256 56006ecb36a97a74196829617c429900798ac3feee3ba9208ffe279fce6f51b9
MD5 d69496ba5e1c633da0475a4f163cc84f
SHA1 335b6b5574ce2b1c7dabe5a65ca366b77850af5a
SHA512 54e599abb483a94df20c2d20fc91a60f6548b99bc7be44c230ef622428e112881fa81f8187fcd7ee4ca608d3c22e3f5422f3001586b1cb8c730ccbd1122c18c4
TLSH
T1F0C02BC404D5C2ABB304F88B2274530D87C0320F9EC4ED8F1300E4843041484A593964
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 cdb77dc5dc7ab865159dc03c98d176a318fdd31d1c11d361f401054e924a35da
MD5 54ccd54ae4e5e7582638f1d8dee6cec3
SHA1 123bae276bd9a85e96c20ba12e3cd6f6ace78c46
SHA512 d391706f01a8bc9cb16f531439e22fae4047a9ea9be48038f7c200e07ab96d3ad50df8592d52109e0684ca1fc8b8b1c4ad8d072097497f4201cfe3be7c5a0cea
TLSH
T144613C1836CE007EE7538EB9E1EBD6013FF191B47A0B8E06E6C4F87DA925F314864804
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594e26.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594e26.TMP
Size 3KB
SHA256 31ec1a82e1520b09ffb14873167e46b3900de764b00d0170b42c1ee4c30dfa13
MD5 0251f06bab1defda9a11982c3c5be13c
SHA1 4bf43d52ba22d800956bb148a72308eccef65bd7
SHA512 cc4dae9a1990a3174e059d4b4e5ba7c1e67bb151a6e7b68267d038c88bf638aa4e8ecdb11178aba514a957ac659358ce4dc426f75bd26ca5f97f763c37873c8e
TLSH
T171612B1836CE007DE7538EB9E1EBC2013FF191B47A0B8E42E5C4F87D9925F314864804
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 a48ad9614b520274aeb7280ef549d026e27f98598681bc6f03980a423b2a4974
MD5 a15784d262308c6058379de044a99f94
SHA1 c3ca220048606f51d2cfc26d7e0aa16670960919
SHA512 1f452ef4afb853fc93d58c00b332f97b18e2a3580bfcc47fbd26ebb4d49ffe3e1b2cf8af99360c369f9fa43d20a197d8941eba97b67df2b7d554bd9dff8d507f
TLSH
T1311157B3C3D5856E8A0116F05A24AE2BCE2D0A06421C7C2989D4FF6B93E3075E00299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 7eb94610759414d8b2e7b2b2a17c1285bd9630fdef1f70bc3fd18e408031fa80
MD5 a30aaf96295d32830b6b0889a2b559fd
SHA1 4eb4010ccf65cba576222e3202728377adeb5bd5
SHA512 c874f6add6da3dcc46a12b89b6f6f761d039ae58b0994edd9fd5b8311b429a4d0f2f1335b81ba81aca6e70cc5a0fa2601983bb6335b2a35865b721ca371347c6
SSDEEP 192:sxZqRGk0/f3ssoqIdpdiHW6+WNGYwKpndIgrJ:sxZq70/f3ssojcHbGk9
TLSH
T18322A7126E38A97B4CCAE219BB15BF03D6FA503261941E58FAFC961C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 095b34f7c8c93f6f777ddd883e1755efbb9959fe7328424ba912a24d48b1f6ac
MD5 927e38cde9e4071cb3a4d954a1e29822
SHA1 79953010781b2fe369deb54da1e6b15111921bc3
SHA512 8e0a7bb12c3066a3258128ceaaa173b35d7f268a72b668c574ba9603a3978e16a7e5c185ccf37c891d5de27c936e8039a44aed9e705ecbc8bd61ced08cb048ab
SSDEEP 192:sxZqRGk0/f3s/oqIdpdiHW6+WNGYwKpndIg5ZJ:sxZq70/f3s/ojcHbGkR
TLSH
T16222A7126E38A97B4CCAE219BB15BF03D6FA5071A1911E58FAFC961C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 701a95f9d801091d1b03d9b02478d0263bf47977af26d7d60c0b8f493308d4e4
MD5 c99f928038dc63794559a0888a707c1f
SHA1 fc044ce5d9221d3b50312669006bda245abf57c2
SHA512 b994d1b3a72b03ef7da857c9bc8980e251fc59a15759b395f517be6b34cfb99d9d3a565d046dbfa6088520d949dd960a2904b44baf03761353eeeaffc8c44d84
SSDEEP 192:sxZqRGk0/f3s/7qIdpdiHW6+WNGYweVndIg5DJ:sxZq70/f3s/7jcHbGW3
TLSH
T17E22B8116E28A97B8CCBE219BB15BF03E6F6507261911E58FAFCD61C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 096c9e493d829493368449f992aef3c941eab3e7fdb4beb22187c31c8c99dec3
MD5 d1c5b7f0fcfec41b2150723fdc71c610
SHA1 7822dbaf3cfe10f49a9ed1467eee75ae4d9e68a9
SHA512 d0f0e665bac725b87e0ae4fa652ad85823ded659fbfab07f22e9d6d846eb3a98d2eb3d3851ffd5d3d904b635b393c5ca2d29cefa7e74ad787a6a7c6e220c0a84
SSDEEP 768:ndmjYDmWvmKyE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBPLlrZ+DUrofRZaG:ndmjYDmWvmKyEu1jakPLZQD/ZH
TLSH
T135C2F93B244CCF7E4FC01A9DDC5A6F973EA802C76A588D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 668B
SHA256 61e5aab23638a7fd6a1f9bf4860a3fe1218618bd9fed89f1fff5839226550883
MD5 84a2739670c37498a2c76b8c89d8135d
SHA1 1f9e64f6ea581a7d2c055c9c6e0ebd6d8673443d
SHA512 3bd6ff0e3d528798f2db259c47e47f370a9ec4bb43524341558d087f232381f5fda27b658457cca7a34020830e09ad7d0a07f28429ca6df4aaa37edd8196eda6
TLSH
T12C019E47B2FD05412E7F750890A48617C682F191785CA8DEFEB4B5615E9AE0009BBC8D
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 313c097340161d237694aa1dd00814687046dd366d710c2de42586299c3de569
MD5 fc0054664fd809f9c282f8621a45b694
SHA1 7859e8e86246bc61dd87f4b76d0d105cfce63f37
SHA512 e26b38aff71e9db068c571110ac9ebad727cda9390a78a5c6ff80a8b3c22df6a981792dc7e004ee7dac529ca2ad434f494e079308f7bad879add4e0bb31c71de
SSDEEP 384:tZcIhsNfl1kQtlf+k82EXH+2TFbBeRs9JKgqijUrmK:1hQZFIHlBbTjKgqmUKK
TLSH
T1EB928D315838AD7799E6B682F44736138FF99057EBC46F94E1EC7F0D008A59C230E926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 79e0f7f5153c18b19c3fdec03829cbd53216c3c521f3b149c4933d3ca12813ae
MD5 870117e5b653e0c516bad1cffa3d247c
SHA1 9208a0fb757b8f614c0b232931764c887e9f1019
SHA512 f784000bf3de253a3fd415377f2fd2a1e98bf311a72ecb2abc67d377ea3843f59c4286348b17aae370d703148478766ecaa57777156188666bc4f5805166a7a3
SSDEEP 384:LiFiZcIBzsNB8TUNTUlIlq1kQtlf+k82EXH+2hFbBeRs9JKgqijUrmK:mFQxYwg4ZFIHl7bTjKgqmUKK
TLSH
T114A27D325868D97BEEE6AB85F54A32138FF55067DAD1AB91F2DCAF0C00475DC130AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ff23b33604c042a99e184d49262a868b24d683a17007527c697df703161ecd58
MD5 bf07dfca991a82d92df2cdad1f9dd9e7
SHA1 0d71680869cb81ec2d3005e564ab147bea76a100
SHA512 44c7752f2e98d1dc11873562531bd77e0ffadb4fad74f5457ac55d571c65c90f9056085a3aae712129788828f7538931fa31e98ce52b0568052771f6ddfc4df3
SSDEEP 192:EONq6hZ0QmiUyBBpc/+jVWjzor2tn5wOZ/RU6:EONq6ospu+k82A2JU6
TLSH
T1B902D93568786C778EE2AE45F48B27235FE5116BE9956F84EAE81F1D00C779C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 0adad2b11d77cdc25d6f02ba74f3dca48550a246174c1a2981d69456a8c0f87c
MD5 3fda44f750e19bbac68e7893caaf331f
SHA1 4e0c12a6ac4a5c1737a6db8b50f787d6b6ebbebe
SHA512 d5866f2c1bcee5871784a0739a22b3df5aa00840ff0417b2e031faad09a4071813d6f56237750d400a1882e2636d1f2d68cfcbc07461cd89c5ed299e11e5132f
SSDEEP 384:bZcIhsNfq1kQtlf+k82EXH+2TFbBeRs9JKgqijUrmK:Dh7ZFIHlBbTjKgqmUKK
TLSH
T112928D315838AD7799E6B686F44736138FF99057AAC46F94E1ECBF0D008A59C230E926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e56876ae8f37ea1528d56dc3fd542f0f17d6bfdae374548414f8bb38d64ee27f
MD5 1ebc4715a6d56a12fc161f8205a6ae6b
SHA1 31c498aae853ce06ee40444fe4ee3dcc87ad6b56
SHA512 87c86a3c9a88c55ba0c907c973562f01b4a3771a63866199e8c3799d98dbb96a821cd3db3154acd67c43f857ecdeab1e9777fbd46580701f6d627374bd78a880
SSDEEP 192:rONi6hZuQmiUyuBXc/+jVWjzor2t+XH+2D5cOq+q/fU6:rONi6OFXu+k82EXH+2+9bU6
TLSH
T136120B366868AC274DD1B655F08732138EE55157EAC97F94E6EC2F1C00CF6AC230B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f31bf35a-46fe-472c-a64f-b0cf6c0d4007.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f31bf35a-46fe-472c-a64f-b0cf6c0d4007.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bca1faf534c659d39f0a01dbaae4e7f7197ee6cee82baf951ffaa8606c99d632
MD5 8f95ae39652e82d22c4828dd607987f3
SHA1 a7803b57f12f5dc46c4e9ce155c5cbb7d9adb7f2
SHA512 a36b32244c1defdc60507fc2c3a913c639b6179e114bc4f9fe259f4a91df8160de9480b1eda74e705934a4ffeec4a8853f3ff103d3c303e0772ca9aec281f328
TLSH
T127412A98A6E91148B3B76F1AABF6682E447FB9772F17845E10110E4E0A23B00C861737
MD5 SHA1 SHA512 TLSH

Submit Download