47680c70408a4756bbb30ab8223e96a01ae7e4eedc9fe55a06ccb8d6d0da20bc

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 12:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Assets/Widgets/LearnMoreIconExperiment/index.html
Size 40KB
Sample260804-pjdrdszfld
SHA256 47680c70408a4756bbb30ab8223e96a01ae7e4eedc9fe55a06ccb8d6d0da20bc
MD5 417f17685eb367924720c964d069a0e5
SHA1 48075848294502343d39bd6c0ddefa1884573e5c
SHA512 bd874d0ef319877233a58803bebce3ef882b265400062009a96d695c9842cf01eec531d70304fa7de9c21f84aa0d4e09a9039e893e5c82c87e5831e425e79b1b
SSDEEP 384:k1PxHReDNChl5NG/4exBRn367E5z0EW5MGlmRNBv4KSPiH:v2l5Bq64CEKM8bO
TLSH
T1B6030AD8A1C448F5817393E4CF13A045FB1A60B7BF808598717C97865FF18D199ABED8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4892	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303198812970985"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{C3DF18AD-F72E-4009-821D-6EE91CCD0249}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4348	msedge.exe
4348	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 5096	2300	msedge.exe	87
PID 2300 wrote to memory of 4892	2300	msedge.exe	89
PID 2300 wrote to memory of 3088	2300	msedge.exe	90
PID 2300 wrote to memory of 3088	2300	msedge.exe	90
PID 2300 wrote to memory of 3088	2300	msedge.exe	90
PID 2300 wrote to memory of 720	2300	msedge.exe	91
PID 2300 wrote to memory of 720	2300	msedge.exe	91
PID 2300 wrote to memory of 1952	2300	msedge.exe	92
PID 2300 wrote to memory of 4524	2300	msedge.exe	93
PID 2300 wrote to memory of 1952	2300	msedge.exe	92
PID 2300 wrote to memory of 1952	2300	msedge.exe	92
PID 2300 wrote to memory of 4524	2300	msedge.exe	93
PID 2300 wrote to memory of 4524	2300	msedge.exe	93
PID 2300 wrote to memory of 2636	2300	msedge.exe	94
PID 2300 wrote to memory of 2636	2300	msedge.exe	94
PID 2300 wrote to memory of 3204	2300	msedge.exe	95
PID 2300 wrote to memory of 2636	2300	msedge.exe	94
PID 2300 wrote to memory of 3204	2300	msedge.exe	95
PID 2300 wrote to memory of 3204	2300	msedge.exe	95
PID 2300 wrote to memory of 696	2300	msedge.exe	98
PID 2300 wrote to memory of 696	2300	msedge.exe	98
PID 2300 wrote to memory of 2004	2300	msedge.exe	99
PID 2300 wrote to memory of 2004	2300	msedge.exe	99
PID 2300 wrote to memory of 3672	2300	msedge.exe	102
PID 2300 wrote to memory of 3152	2300	msedge.exe	108
PID 2300 wrote to memory of 1940	2300	msedge.exe	109
PID 2300 wrote to memory of 4604	2300	msedge.exe	110
PID 2300 wrote to memory of 4364	2300	msedge.exe	115
PID 2300 wrote to memory of 4364	2300	msedge.exe	115
PID 2300 wrote to memory of 2448	2300	msedge.exe	116
PID 2300 wrote to memory of 2448	2300	msedge.exe	116
PID 2300 wrote to memory of 4348	2300	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Assets\Widgets\LearnMoreIconExperiment\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffc639ac188,0x7ffc639ac194,0x7ffc639ac1a0
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,17293167266418211914,9475790056133745375,524288 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,2087663571073309781,4949151790021411909,262144 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,2422183536191750653,14805842455011372502,524288 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=2700 /prefetch:8
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,603841917087241692,17521052413448810982,2097152 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,6788123910030176297,16757082334927448195,2097152 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,12921234181146685192,13794346853600426882,2097152 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,16461956508036193039,10726365086062669831,2097152 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:2
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,5888699260964809565,734363560917808477,524288 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,17395898472679844649,7781710121162838613,524288 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,16042190798403700506,16743542203259673217,524288 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,16042190798403700506,16743542203259673217,524288 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,5243712927141314822,16225140651073561931,524288 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:8
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,17966179193867683101,15512118682943591579,524288 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,13722723135392406192,15518456435352263214,524288 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3100,i,14421230326491916908,16312650619770628958,524288 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=992,i,18320159659047177621,11293873673826615115,524288 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5920,i,303181490900832023,2036321825217696933,262144 --field-trial-handle=2332,i,13452638052811396230,2183792170719786481,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4348

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4960

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d5156df1e2d18c4db8027b01264d3770c36b2d61e2e6ed3bb33fd671b41271b8
MD5 7eeb660a8f7bc8e9916b21a09c995953
SHA1 f4a4e052cc89fe6b1d9b9f3c785cf4e6c30e27ef
SHA512 6f9c3cfa82397c527863a5a2bd2dda440a0293572d106dc16d5ad23dc0788d026302640bb73cfbea9674b3367db09e0e0c4efc294282b257b0933cd31c936a71
TLSH
T198613A7402427282E7E31530D3CA160137B249BDBBDBDE1923B0B87EB536F5A852943B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5911b9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5911b9.TMP
Size 3KB
SHA256 51452531054a7c32a54c2ccfbf12b5a83fcc68f06edc22a82db61f9d7f2ed949
MD5 2a569545f2a415e0c70fa944b74986cb
SHA1 5b38a0cdd73f0a13c43ae1cf0d693d6fc2d877d2
SHA512 c66bca86dc5dcace14139555e05936d32c99ceac5d0ccc437994979c67a181816d922f6f6cab43992e8460e96a61af963a6efa9c323c027f8f44bc6f36a7c1cc
TLSH
T1F3613B7402427281E3E31530D3CA160537B209BDBBDBDD1927B0787D7536F5A851943B
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 10169a5999cbc57292a78dec0aa425f9803ad143ae5ff734b452e8fcd2a7d799
MD5 edb3d69742165dd08e7c1d0602dd9d0f
SHA1 34bfbe92c50e0458a39f5bf8ad920b464223aab1
SHA512 f39ffab66f69da785a9df4dc20a3a420817cc5f4228c468b06680f8fcc3fcf2d4688c693bb89f502d0e48f6f64b936543ad7a9fce07d631dac63e5dbc263f666
TLSH
T190117DB3C7D5956E891116F05A24EE2BCE2D0605421C7C19C5D4FF2BD3E3075E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 251cd500057b4c4c318261e5f7bf394a9d44531f006cfc7cde4aa329b1e1d8f2
MD5 41e099e2a1e1fb5f86c3a8985000d183
SHA1 08fe7322f476744f0bdb3c4a1f248c1ab6ac48a7
SHA512 bf6c04316260fd94922080e2d479d3246c0f48ea73cfd84ac8e10b7c489995c436e5787d20d5765192704d6980c592a30f04f14a3bfab6199209a4c659a5f445
SSDEEP 192:sxZPbR3kW/fBsNUrBIdpdjHW6+WNGYwar0e3Ig5kJ:sxZTaW/fBsN+qZHbGee
TLSH
T13C22B8116E28A97B8CCBE209BB55BF03D6FA507251941E58F6FCD61C05E7ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b7d05d37a2466d519f8fa6263dc97a66a8e016d0545704001e31ae7eb860757c
MD5 fa6998d0489b094624a2250eb6459788
SHA1 e266c15b326b50126885516088c511e4399f4d9e
SHA512 d8934ac90f8ae098acb365f2a418b71cdbe9c3376e4002f7029b5be364566f79a246615a71644699a508a7a5feebcb0e411bdbc1c784bb72c673caeddeedbfe0
SSDEEP 192:sxZPbR3kW/fBsXUuBIdpdjHW6+WNGYwK2e3IgrJ:sxZTaW/fBsXjqZHbGo9
TLSH
T1DE22B7116E38A97B8CCBE219BB25BF03D6FA503191941E58F6FCD61C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d8392bc098616436b03a9fa6a6f78db63fd1fb6dbc49170b8d87fa99f6b0288a
MD5 686dd05e3952bb5bbde65c80eb6030ab
SHA1 ec2e7707c76a01cc4f13dedcf8685fb07f7dfcb3
SHA512 14d6164d7219a877b64aa1b79329d2192b4941bffaa206367339052e1254dde2859e759e9923ad119f4740c9c054fa14e9f3d7c78f0178402c9535bd10acf933
SSDEEP 192:sxZPbR3kW/fBsNUuBIdpdjHW6+WNGYwK2e3Ig5OJ:sxZTaW/fBsNjqZHbGo0
TLSH
T13922B7116E38A97B8CCBE219BB65BF03D6FA503191941E58F6FCD61C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b9a7ccbb7aba33ede57e66cd1e4ad350a189db47408c14d8fdfe663f32256d3b
MD5 62f7e5b551009d400991da36973e5db0
SHA1 d937dae1dec8ff530cab797aa470ed1a156b7e14
SHA512 d13471e881b93239cc5925493e2c00c8cb42b5064aa457837da5fb127c671442fdb8db20d22a0b7103984d25e4e3679cda5d52aedd3a7ece342197a5b5354271
SSDEEP 768:kImjYDmWvmKyE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBPLlrZ+DXrof4ya5:kImjYDmWvmKyEu1jakPLZQDEQr
TLSH
T116C2F93B244CCF7E4FC41A9DDD5A6F973EA802C76A588D4047FA894C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 2KB
SHA256 c1d7a14608b8282f202d681aedc0aefe0cfdaa3f43b5ebe8ac205a71c8eb9f38
MD5 40a8b159e75552e84e668251466d940f
SHA1 c9ed2e4133af50d032e2c87ed2a266b0f5d182fc
SHA512 6d3e10862606b45fac08f9d84ea130112ea350bef80779026493e503cbb8f57386d5100f3d621919cc5d11f6e50be9a344915e442da88e782922afad1f69922b
TLSH
T13B51CD86B1BE42513E7F250C90609956CB47F6A3381CE86EB77995A21FA7E004CF8CCD
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a0040.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a0040.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 d4bf8dd12c71025eac7bb7acd1012f172eaa2480ec3e6d4e6b26504a83c8ad7a
MD5 6575b2ace78826f5162c49e3c15d9df3
SHA1 4f40a53b1f831104f188623372153b7c61d4827c
SHA512 aaa12090e78a3389d7a2f79a96a73688b871543f433c9bf6411ff035136b5ef836c0b9120cf988899d73d93706eed0d7885e68d73e041c81023b1fa2ab0df3e0
SSDEEP 384:wiFiZcITzsNR8TUNTUlIlH1wXAf+W86nX60nF3BeRs9JKgqijUrmhOG0:LFQ3mwgyo3X60F3TjKgqmUChOG0
TLSH
T1BDA26E325868E97B9DEAAA81F49A32138EF45077D6D0BB94F3DC6E0C00565DC130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 e6f3f930f7cd278ea10d8ecd0e1541f329aceb4bf47a86ddc0a68bd9993b5ba9
MD5 665e90aa83647a753e5e52ca982dbcf2
SHA1 4d6a593903cbb5a70c3b434dd5009ff8f4bafb28
SHA512 a02a74e403e7622fedaa0564c93f63f39d2b890af5d0210458727465446082dc4b0e2d3daf5fecbbb5040227c426bb74baa3ec174c6dcfddef2e3fb7f425c12d
SSDEEP 384:wFiZcITzsNe8TUNTUlIlH1wXAf+W86nX6GF3BeRs9JKgqijUrmhOG0:wFQ3zwgyo3X643TjKgqmUChOG0
TLSH
T14FA26D324464D97B9DEABA81F89A32138EF45077DAD0BB94F2EC6E1C00565DC130BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 e731b1090829a6734c9e1dbe43af40a2e66dc954845a8781d4ca1710f64622f4
MD5 4afbfba49d0f650f23731cedd855a199
SHA1 05695f7a6f90b062521732eaa70a88dd5ef4c436
SHA512 55249c79f99fc883fc2c2ca835fb041aa43bee71a01e804324d30870535c62c9d2e1bb4ab814bc72e5ade97e255630c61c82d7fc3638c6703d6cd9521655d2e9
SSDEEP 384:qZcIhsNOW1wXAf+W86nX6SF3BeRs9JKgqijUrmhOG0:Ih5o3X6k3TjKgqmUChOG0
TLSH
T13D927D315838BC7799E6B581F48A36134FF89067EBC47F94E2EC7F1C009A5AC131A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 c61f0a96a455605274ad94659cd5d88fa803e2a88361407dead6c565ad58c10a
MD5 a82b1bdb34902ed45540fd1af664a042
SHA1 2879193720161bba1f029915a2ac791ea1063d97
SHA512 1d1d32dc9da2fe60774c63c98a22ecbfdfedc6b5b2df5cc31e2dcef2083e7966ca14579b3a9ba12a509aac41ad41e215d9d49747aa31de4970f9db2e1654e35a
SSDEEP 384:RZcIhsNOH1wXAf+W86nX6SF3BeRs9JKgqijUrmhOG0:5hmo3X6k3TjKgqmUChOG0
TLSH
T17F927D315838BC3799E6B581F48636134FF89067EBC46F94E2ECBF1D009A5AC131A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3ad0b6045c990c5c3d0d0f669750cdf6779160a2c4988f02ac03e7e6ea9d9b65
MD5 c198b8d1d43e8b80ee8263497f315500
SHA1 9f036f5968fc27ca8efe22b431f594253e250998
SHA512 a0956f7756e8c289659c627fd9466c0f22256695c65a0adf465e5657b89a71570a17df67f2c04dd6fdb5108e6f31de79b937fc2e59f00caa9f32cdc1728cfdb3
SSDEEP 192:hONv6hZQQmiUyrfgc/+jV8jzorxonX6I5cOqtqCU6:hONv6M6gu+W86nX6T93U6
TLSH
T11312FB356868BC675DD27595F48731138EE85227EE85BF80E6EC2B1C00DE6AC230AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f7dac35f-faa9-4d61-bba8-258d1e12fd33.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f7dac35f-faa9-4d61-bba8-258d1e12fd33.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f7dfcfad-66ff-4fd2-8986-c01bc781ad06.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f7dfcfad-66ff-4fd2-8986-c01bc781ad06.tmp
Size 8KB
SHA256 d0cb2c3a6b24fd9b771acc86628e3614d9ba9aaf0f2a016ea9d5665a836900cf
MD5 4e05268a900498cd38079857af23c6a6
SHA1 53c2d80ab30c6523fc2ed4cff5875a0ecee1284f
SHA512 9745cbb9fbaeea990bc5523cd5b1db793045697777dc3dbbb14400adc491beebdb0d3508d89cdc410a45353bcb370a9c60b4e68425e46a5791f4ee9a3a4318bc
SSDEEP 192:EONz6hZ0QmiUyrfpc/+jV8jzorxoE5wOZ2tU6:EONz6ogpu+W8672WU6
TLSH
T10902C93568787C778EF26E45F48727139FE4117BEA956B84E6F81B1C00D769C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b4e8dc6cf35553b00d86901d4d61cbf68e91bf007b955fb8c9cf06f2317481ae
MD5 bb057314e29a8aea62220290ada32f70
SHA1 7be07b4b9deaddff9580398039172f9fbf29924d
SHA512 fcabbfdef10cd77b21e9c1ae2bb0a48aaee72208f45220fa277d27192e54625d8f5a1f64010a5759f81cde494d99fc41c3cb978d08dcb489a81f81850d3a6a2d
TLSH
T191415D99A6F90148B3B76F5AAFF795AD487A78732F06C45D00110D4F0A23740C871B37
MD5 SHA1 SHA512 TLSH

Submit Download