ab970332b51d349e2cda197970ee8ff9cf2257eddd03ae8344476a449c48a149

Analysis

max time kernel
148s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 02:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MyApplication/build/reports/configuration-cache/45y3ggaa8goqeans9ceg873jb/atu5d2ky3dfkl74sz7j6cgfk8/.html
Size 213KB
Sample261102-daqh2sss2p
SHA256 ab970332b51d349e2cda197970ee8ff9cf2257eddd03ae8344476a449c48a149
MD5 b6e968da6e059c7d1b34c024f2f406c8
SHA1 da407320114ddb87543d769b910afd7ab5f52930
SHA512 73c5a140dab41afeb82e101b0cf733ad72329352f35559ac41d9efc21f12f8e9fe1fc4fc03796a0e129a59c3bff56c615869430013ad65c2d6954413de60f0d3
SSDEEP 1536:NzpnlZkXtaiIEBk4hVO4+W1DaeThXqCLJDHZUuksvRuCUY:kakDO4+w5TllLJDHyuksvRJL
TLSH
T19024638A63D6B199228EE461846F2587B1BA01CE84AC8058F725DFCD7FD531C4273EBD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3932	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{F4679AD4-658D-4FCC-BC26-828CABF80BB1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1132	msedge.exe
1132	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2808 wrote to memory of 2596	2808	msedge.exe	83
PID 2808 wrote to memory of 3932	2808	msedge.exe	84
PID 2808 wrote to memory of 2196	2808	msedge.exe	85
PID 2808 wrote to memory of 3308	2808	msedge.exe	86
PID 2808 wrote to memory of 2196	2808	msedge.exe	85
PID 2808 wrote to memory of 2196	2808	msedge.exe	85
PID 2808 wrote to memory of 3308	2808	msedge.exe	86
PID 2808 wrote to memory of 2656	2808	msedge.exe	87
PID 2808 wrote to memory of 1116	2808	msedge.exe	88
PID 2808 wrote to memory of 2656	2808	msedge.exe	87
PID 2808 wrote to memory of 2656	2808	msedge.exe	87
PID 2808 wrote to memory of 1116	2808	msedge.exe	88
PID 2808 wrote to memory of 1116	2808	msedge.exe	88
PID 2808 wrote to memory of 4288	2808	msedge.exe	90
PID 2808 wrote to memory of 1832	2808	msedge.exe	91
PID 2808 wrote to memory of 4288	2808	msedge.exe	90
PID 2808 wrote to memory of 4288	2808	msedge.exe	90
PID 2808 wrote to memory of 1832	2808	msedge.exe	91
PID 2808 wrote to memory of 1832	2808	msedge.exe	91
PID 2808 wrote to memory of 3496	2808	msedge.exe	95
PID 2808 wrote to memory of 3496	2808	msedge.exe	95
PID 2808 wrote to memory of 1792	2808	msedge.exe	96
PID 2808 wrote to memory of 1792	2808	msedge.exe	96
PID 2808 wrote to memory of 3108	2808	msedge.exe	100
PID 2808 wrote to memory of 2544	2808	msedge.exe	107
PID 2808 wrote to memory of 2784	2808	msedge.exe	108
PID 2808 wrote to memory of 2080	2808	msedge.exe	109
PID 2808 wrote to memory of 532	2808	msedge.exe	111
PID 2808 wrote to memory of 532	2808	msedge.exe	111
PID 2808 wrote to memory of 1132	2808	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\MyApplication\build\reports\configuration-cache\45y3ggaa8goqeans9ceg873jb\atu5d2ky3dfkl74sz7j6cgfk8\.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ff9f6afc188,0x7ff9f6afc194,0x7ff9f6afc1a0
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,13700992241206122860,14878042192588698155,524288 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1844,i,3056865906443181733,6858844256078109265,262144 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2404,i,18346220453064674250,15850472024264971224,524288 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:8
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,17509986429748203593,13592074691064062453,2097152 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,8071286836111462997,3784414177275807773,2097152 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,15091106251508689670,12624891421607620820,2097152 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,7823619433841644573,3606383271250851776,2097152 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:2
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,13062134383945543967,14314197237675257777,524288 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,14227325991740207222,13556611448402354370,524288 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,16531798629931223198,2088823600154347063,524288 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,16531798629931223198,2088823600154347063,524288 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,16415872707235754168,2746429891138109177,524288 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:8
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,13077842431081271979,13328618688550949976,524288 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:8
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3428,i,15329483593041215493,10055985932453781217,524288 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:8
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3436,i,5831510452408664466,10191653803907280018,524288 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,13024919373891361908,15190978510129944122,262144 --field-trial-handle=2320,i,3459503053112577413,15714484850521362457,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1132

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3688

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

119531bb-7bc4-4319-a671-b3489a823dc3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\119531bb-7bc4-4319-a671-b3489a823dc3.tmp
Size 18KB
SHA256 5600a9cc0f823035919dc620ee630d45fe3a620797a2a1d9becdc4170c00c8f5
MD5 a5054f9e9fb153dc8b79e05a78d2f0fb
SHA1 a30da3e0e944867b79afcb23814c7d913d795464
SHA512 9a48a96a4ab095dc27efd21e4a38ca0423191dc0f14c2bb64361b3949714ce890cc84dcbbb25a0e568b50e1636279294b8d5ca44aa08163e44373383b0f95087
SSDEEP 384:8QkUSv0sNeri+2/5JAw9BGYX5EzyOi6QN7ajH7vBEpHIIlf:80g/4wfGYuzyO3QN78H75EpHLB
TLSH
T128827D72AC79AD3B1EF29211F14A3A17EFB4905BEAC45B50D5DD6B1C01CA28C334BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ccc320a-f71c-49c9-b7cd-82581a19ec2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1ccc320a-f71c-49c9-b7cd-82581a19ec2a.tmp
Size 8KB
SHA256 c312d05152470fab67ad2c69af1378d55e6febe95a126296508cc53f43ee45ea
MD5 b9efe7278dfd13673ff8de53ddda85b7
SHA1 a9820708fe21c5a9d29e7ed519e148a87dcf3d8c
SHA512 95c3010c3ead599b9cefd000c919c1e4c9eb041300f7216e9d87559f4ebe9cf87714dd497475f2af03b1a3dc9a55cfa6681d73d7b30ffc75f4aa09156d51344d
SSDEEP 192:LJONf6DphmqQmiUygrq8wGYX59ez6CyORMWkk77dyU6:lONf619bRwGYX5EzyOiw7MU6
TLSH
T17302F934ED78BCBB9DE26E45F48737139FE4112BAA942F44D6D82A1C01D764C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3ddf9777-86c8-4c4a-997b-6859b3bab254.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3ddf9777-86c8-4c4a-997b-6859b3bab254.tmp
Size 8KB
SHA256 01eb3b81f63035a776838e61d4209d90499f12006e7c185c9edcf9092effb211
MD5 df023755cfa249b106ecda89c6703755
SHA1 cbe20da6dcab884550bc228f396d82a71c9dcb29
SHA512 9b16ea689381cbf89d7490233d11d42bde032a2030b368cc0e1c3c6ee6eca5c100d3d05fb20619bbd956881b926b225f2d0f8f2b6711089ed959c7cd66d3e90a
SSDEEP 192:PON36Dph6qQmiUyxrOwGYX59ez6CyORM6QvkII7aoq5TU6:PON361tQOwGYX5EzyOi6Q47ajU6
TLSH
T105121932AD78AC7B1DE2A551F48736139FA95127EA847F54D2DC3B1C01DF69C230A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

718d09c7-caa5-4e74-9f1a-93311af0479d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\718d09c7-caa5-4e74-9f1a-93311af0479d.tmp
Size 21KB
SHA256 2db26c911ca091c74cfc157a306f09147e2222c5b10e4d3cfb743cfbd1149628
MD5 28751823514053067558a46f061a2f9f
SHA1 89ae7cf1b5b5e788395ffecf182b52168481110c
SHA512 e3dc9bd672f4eb84079d1ea64a8ae8b124f9644b6c4853fc102d589cfeb2a779b88dc6c5bfd1323c95b5419acbeb1e63335e1f5856b802bc44b1495dda1a8cc9
SSDEEP 384:3iFzQkUSvOzsNu8TUNTUlIlri+2/5JAw9BGYX5EzyOi6QF7ajH7vBEpHIIlf:yFdOfwgg/4wfGYuzyO3QF78H75EpHLB
TLSH
T1EBA25C7398649D3F6EB29B51F14A3613DFB49067DAD4ABA0E6CD6A1C00CB1CC234BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

3235bad9-e19d-47db-966a-17a3f1bf8c6b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3235bad9-e19d-47db-966a-17a3f1bf8c6b.tmp
Size 9KB
SHA256 6d46fca92e23cbecf3e7ab11743797806bc098a1a6837335232461c0192b136a
MD5 d47880d6897949f60d55a3be0b7542f2
SHA1 d7b69591c77c9f36138d87c350fab5c0e7b87a74
SHA512 372699c74bf1e2647cf96af6dece272ce5aed8765ae7057869d634b8802eaca4a27fbb1eb900fb7c33a8b3d229dc0fe99f24bbab0861f89c0d9c7f0860e08de1
SSDEEP 192:sxZVRcWr/f4sU5IdpdmHW6+WNGYgdt0eIgrJ:sxZVJr/f4sUSMHbGt9
TLSH
T17522B8126E38B97B9CC7D21DBB15BF53D6F95032A1D01E48AAFC961C04E6ADD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5288afc5-167c-46ee-b3dc-9c05c398791f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5288afc5-167c-46ee-b3dc-9c05c398791f.tmp
Size 10KB
SHA256 5777b84cde4abca403bc77449fdcb8db14a0f46cd25df7d5d0333190bcee25ce
MD5 56e60e6a148c4bc96fc29b8c8a794b1d
SHA1 f94c511aded842553fb2482384ffda62f5db212a
SHA512 947075b0a4f9e704805dfe920b9aa99b882c3ad36ad0ac61dd6c6a49609fdbc9228c4b05475f4593aa5f4d08724c984fcf96c4dabd11f375b5ea0e5bf71856ac
SSDEEP 192:sxZVRcWr/f4sM5IdpdmHW6+WNGYgdt0eIg50J:sxZVJr/f4sMSMHbGte
TLSH
T1C522B7126E38B97B9CC7D21DBB15BF53E6F95032A1901E48A6FC9B1C04E66DD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

65359f6f-1fc3-424f-81cc-e01fa6879050.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\65359f6f-1fc3-424f-81cc-e01fa6879050.tmp
Size 10KB
SHA256 81b7fb6f4cac0c8403fb49bfa289c6f66d50f3988150db99b630cb12da5d4f3a
MD5 471513221136c65ba063e8ee5e1a6b91
SHA1 3c911f00048757fc938b8855e7e91bf88b37d31e
SHA512 048ced330a8e3abffa0911336f612c7e8924ea5e74d5412be2305669d558232d8756beeea10c52135ec8b5f6b8fd690a1a0610ba0f9d286a652ffe9745a35a74
SSDEEP 192:sxZVRcWr/f4sd5IdpHmHW6+WNGYgBUQeIg5WJ:sxZVJr/f4sdSGHbGoM
TLSH
T17122B7126D28A97B9CC7D21DBB15BF53E6F9503291901E48A6FC9B1C05E7ACE224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

78b23a11-c3cc-4c59-96db-3660e367da46.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\78b23a11-c3cc-4c59-96db-3660e367da46.tmp
Size 10KB
SHA256 cb3c98b46638ff500f01d570e8a2127e3c784c2f1ef920368f412a0c4f13ada3
MD5 577e1160971e8a52140a20ffb7c5a70e
SHA1 69fbdfd7efb133e913fa2d936ff5d4bc28f4e6c4
SHA512 d732eeb8e011e03c5c3ab6db0b27c506a80be71cec5c3e8236ef18f30fde6c26d9bac92ce4b5571cd703a504542b7ba19ee8bb5a92c41348bdae96898e5ea1cb
SSDEEP 192:sxZVRcWr/f4sd5IdpdmHW6+WNGYg4H0eIg5WJ:sxZVJr/f4sdSMHbGKM
TLSH
T1A422C7126E28B97B9CC7D21DBB15BF53E6F9503291911E48A6FC9B1C04E7ACD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86352df5-3533-497a-97e9-92bcb30a552e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\86352df5-3533-497a-97e9-92bcb30a552e.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 f46da7b7e41c419b4da56b6379fff63a086186a0000c404fd43744ffca118eff
MD5 8ef228729b1070d9eeef3ccf2f8f20e2
SHA1 75a38d2cf2342e97ce804c968e5623f1a7a75ef4
SHA512 7012c36f2b8c04b6ccc3c4792daf7f8178c449ec3144fbc0f96f50e8e536a96606c35d2329150671d690876e20591e88668236d9145de80add3babb3b14c8292
TLSH
T12B615D814BB088B3FBA451F8C6F498D7BA32838D54839D110AE8F56D5C5732741F720B
MD5 SHA1 SHA512 TLSH

Submit Download

64609f1b-b3b0-4f2b-aea2-da4e56680bb0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\64609f1b-b3b0-4f2b-aea2-da4e56680bb0.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0d733a08-ae9c-41ed-adbe-d7faee7a589b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0d733a08-ae9c-41ed-adbe-d7faee7a589b.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

64412e92-0c76-4658-abac-1b08635d3d20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\64412e92-0c76-4658-abac-1b08635d3d20.tmp
Size 1KB
SHA256 7f76a16dcf0318b7f2501ebdb9d2412a8b5eaf42f92d7b6eea8aec0729f78ece
MD5 0f90ec3f2f5a67cb15413058868a1d30
SHA1 d505c7eec208bf150057f408912ff5224044538b
SHA512 fbb2ec232536cfa96842ece04fa7e9bb75211017b8583a8047a19656b1cfac56d88fb044372f79cfe60ac3d03d72b61047c4c6c7297a5acb5d17767a33866e22
TLSH
T14B3180F7C3D586BE890116F09A24AD2BCE1D055A432C7C5689E4EF5BA3F24B1E10165F
MD5 SHA1 SHA512 TLSH

Submit Download

a327f03c-0ebb-499d-b7bf-5c26e34b3e85.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a327f03c-0ebb-499d-b7bf-5c26e34b3e85.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bda8f52ad926b5caba2fdffb48f703b0b05f6bbc3d759af40db56baa8cf21b1f
MD5 8e1602c80a1ad2a33ea7140b30c0d334
SHA1 cf462134f2ca7ec12f2cfd50aa3103b756c4f1c6
SHA512 a67a361e06ee6a636c876fd49d0ef25d66c9713add9ed848c6a85b49ba5c6ed5f8c5fa441732b26ad92a8b185204382d5a8b160ac722df2c2edc4e062dd1a815
SSDEEP 96:KAdOKOY6VAr8QuC+giapzIIgKQ1IWgsYIZ2jsgKN6WN:URVAr8QuC+1ap8IU1IWdYIZ2kDN
TLSH
T19E916010316F068039FEA85951B9C62A464235F63338F57A7FED80E3496EE101DFE9D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed47ec5a-cb78-4978-9db9-0c79ec54bd96.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ed47ec5a-cb78-4978-9db9-0c79ec54bd96.tmp
Size 27KB
SHA256 61588dc80009a4e3ff39531ca33d8366dc39f5a90bfd7fdbd9000d4715ad8385
MD5 2e85c7aacae0568c5d34381c609b82d5
SHA1 30a55422f69402ce325d37a6b16d91464ea68ba8
SHA512 24b4867620f50253ed4bb072d04564a7fda7f1a3f386a2346b854d010a6b50662338bc1c3cce19a7376c9198918ae065e3be8ea848231f9fb8edb4a6022e73e9
SSDEEP 768:KrichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXztronJq:KrichfPWvPZplu1jan+LKgzGJq
TLSH
T196C2EA3B644CCB7E4FC01E9DDD1A6F9A7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f493eea3-5f62-403c-b3cb-8d9cbecb1e7f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f493eea3-5f62-403c-b3cb-8d9cbecb1e7f.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

18d8c136-b9bd-4b87-a561-f151954309fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\18d8c136-b9bd-4b87-a561-f151954309fc.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aedb86a0-f652-4f41-a868-eade02fcf40d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\aedb86a0-f652-4f41-a868-eade02fcf40d.tmp
Size 18KB
SHA256 003f35c523bca34ccd8ff665b68d5c8c17d549abb9af4f7c5d155669441db1c5
MD5 5d322fcb16c8e2348d7ac532e1761ed0
SHA1 c790e40a8d61fa2c8b4c05b77ba4580f0e89a26c
SHA512 475fe6cb7eafa7d57ecf8e8bfbae076e44add3adc98d83145cf0a03f7042840419dc2dd3d64a6952a8f6b1df64bb7bf6fe31b10186e909e69d143dfced107220
SSDEEP 384:aQkUSv0sNeSi+2/5JAw9BGYX5EzyOi6QN7ajH7vBEpHIIlf:C0t/4wfGYuzyO3QN78H75EpHLB
TLSH
T116826D72AC79AD3B1EF29211F14A3A17DFB49057EAC45B90D5DD6B1C01CA28C234BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a6cf1422-4690-48be-aa77-85a841f6999d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a6cf1422-4690-48be-aa77-85a841f6999d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 dd81f4a79fc7b6ad6870a8643fac3432add29d1c20e628b8bb95a209f133f15a
MD5 a136d3ec1ba2761781827d3d84a4badb
SHA1 11bb02faff9767098d8443da1ea744f669756774
SHA512 9786086976cbcc929c1d2be147fd5684d43cbe4d21c3be5c6a93d2ce852df0be73e3990902620d99141978645ce8fb232de965d9a49c2afa98cfcfc8919e62db
TLSH
T16D41F958BAFA1049B3B36F599BF6A86D487FB8771E06D49D00110D4E0A66A40DDB1B33
MD5 SHA1 SHA512 TLSH

Submit Download